$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: hKpn4ZDap3yRr9WdPrG3eMcEefGOPqYWGPTLx1sPVqI= Subject key identifier: 41:B6:FF:3C:77:85:32:B2:8A:68:EB:79:F4:FD:8B:2C:50:F9:BE:E3 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 27F073D4CDCA5CCE9835036D071789A0ABDB15FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 0111 Signing time: Tue 28 Oct 2025 02:02:08 +0000 Manifest this update: Tue 28 Oct 2025 01:57:08 +0000 Manifest next update: Fri 31 Oct 2025 07:36:08 +0000 Files and hashes: 1: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 2: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 3: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: Xhyy949sUvbIfPiJcgZULEEElBFzdmPkCU2Hl5dluPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 07:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f0:73:d4:cd:ca:5c:ce:98:35:03:6d:07:17:89:a0:ab:db:15:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Oct 28 01:57:08 2025 GMT Not After : Oct 31 07:36:08 2025 GMT Subject: CN=41B6FF3C778532B28A68EB79F4FD8B2C50F9BEE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c2:5f:04:bc:cc:47:16:bb:b0:ca:4b:71:08: 76:3a:fb:bc:e8:74:1e:04:9d:03:98:be:f2:3e:c2: 54:20:66:f5:ce:2e:8b:b9:3f:c3:75:cf:1a:e7:0f: 34:f2:65:28:a5:01:37:23:35:a1:47:08:b1:34:6f: 00:7f:0c:82:33:b6:23:45:a8:f6:7a:ab:b5:8e:c0: 0f:41:45:b0:94:9e:a8:9b:dd:ec:f1:68:c1:4b:a5: 02:46:96:ce:9a:e9:ed:77:60:7f:16:fb:4f:c9:3e: a2:a5:83:df:5c:9c:60:4b:a6:b8:f2:e3:2d:0e:25: ff:cd:a4:b7:f1:97:19:96:a4:d4:9e:c4:8e:aa:ea: a0:0b:7e:bc:d4:34:ae:95:c1:9a:ee:0b:f4:ec:26: e2:e7:18:08:33:09:34:64:7a:87:0e:7a:85:c8:24: 12:89:49:7d:0e:a8:5f:f0:90:29:c5:fc:f9:5e:74: bf:97:d8:0e:23:83:0e:11:bd:89:f6:a3:d8:55:e9: 1a:d9:fd:20:45:1e:d7:f2:59:91:10:59:bb:65:47: 47:3a:d8:03:52:f6:99:44:9e:76:cc:8e:c7:68:f1: 37:db:13:0f:59:a6:8b:09:7a:ff:98:f5:4f:bd:32: b6:66:66:d0:5c:bc:a5:f4:1a:de:e3:ba:ea:4a:b3: d1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B6:FF:3C:77:85:32:B2:8A:68:EB:79:F4:FD:8B:2C:50:F9:BE:E3 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:7b:5c:9b:11:57:ac:9f:ce:89:cc:e0:c8:c0:40:53:31:f7: 80:48:0b:34:d1:e8:10:fe:17:77:b1:c3:a9:84:b4:8b:8b:56: 21:6d:15:ef:a9:10:17:12:e8:c3:09:a1:26:e0:50:66:8e:83: 13:85:6e:3d:e4:44:fd:5d:5d:e2:ce:37:08:66:6f:63:17:e1: 90:fb:3a:d0:66:7d:d1:5c:ce:19:45:d0:0e:41:74:14:d9:83: 0d:7e:03:81:07:8e:5b:af:f6:e5:59:59:18:62:1e:2f:23:4f: 73:30:6e:b8:5c:18:bf:5f:f9:bf:37:db:ac:97:27:0e:58:f3: 0e:35:13:5a:09:85:cf:c9:68:b9:10:7f:ad:d7:82:63:51:50: b0:6e:4f:8a:a0:7f:27:1c:09:16:35:89:05:d5:21:f7:99:07: 52:30:94:25:e0:e5:fd:a9:e7:29:b2:d4:11:75:8a:bb:b8:ca: f6:2b:91:f9:a1:42:71:2a:18:fb:00:2e:f9:af:d8:bb:03:02: b8:94:89:8e:1d:f7:7e:1b:a8:1c:45:50:a5:31:4c:e9:e5:d4: 6e:a7:f3:8a:cc:42:33:d7:ec:ba:17:21:0a:be:e0:e5:90:e1: 07:d9:9f:53:84:77:5f:4e:f0:ef:3b:42:cf:fd:98:34:9f:b6: 77:55:72:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/Bz1M3KXM6YNQNtBxeJoKvbFfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTEwMjgwMTU3MDhaFw0yNTEwMzEwNzM2MDhaMDMxMTAvBgNV BAMTKDQxQjZGRjNDNzc4NTMyQjI4QTY4RUI3OUY0RkQ4QjJDNTBGOUJFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvwl8EvMxHFruwyktxCHY6+7zo dB4EnQOYvvI+wlQgZvXOLou5P8N1zxrnDzTyZSilATcjNaFHCLE0bwB/DIIztiNF qPZ6q7WOwA9BRbCUnqib3ezxaMFLpQJGls6a6e13YH8W+0/JPqKlg99cnGBLprjy 4y0OJf/NpLfxlxmWpNSexI6q6qALfrzUNK6VwZruC/TsJuLnGAgzCTRkeocOeoXI JBKJSX0OqF/wkCnF/PledL+X2A4jgw4RvYn2o9hV6RrZ/SBFHtfyWZEQWbtlR0c6 2ANS9plEnnbMjsdo8TfbEw9ZposJev+Y9U+9MrZmZtBcvKX0Gt7juupKs9GjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQbb/PHeFMrKKaOt59P2LLFD5vuMwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALV7XJsRV6yfzonM4MjAQFMx94BICzTR6BD+ F3exw6mEtIuLViFtFe+pEBcS6MMJoSbgUGaOgxOFbj3kRP1dXeLONwhmb2MX4ZD7 OtBmfdFczhlF0A5BdBTZgw1+A4EHjluv9uVZWRhiHi8jT3MwbrhcGL9f+b8326yX Jw5Y8w41E1oJhc/JaLkQf63XgmNRULBuT4qgfyccCRY1iQXVIfeZB1IwlCXg5f2p 5ymy1BF1iru4yvYrkfmhQnEqGPsALvmv2LsDAriUiY4d934bqBxFUKUxTOnl1G6n 84rMQjPX7LoXIQq+4OWQ4QfZn1OEd19O8O87Qs/9mDSftndVcgc= -----END CERTIFICATE-----Generated at Tue Oct 28 22:11:46 2025 by rpki-client