$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: PCkzOEhpzfvJd7MzCTGNpdrdzc3AjoHar3Bn1N339EY= Subject key identifier: 07:46:3A:18:8C:AD:D4:A9:B9:97:5A:E4:48:F8:4A:CC:AB:CE:03:D8 Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 330F786CBEDF5FC86014860603ED7F0EC1701B74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 0409 Signing time: Sun 26 Oct 2025 19:02:10 +0000 Manifest this update: Sun 26 Oct 2025 18:57:10 +0000 Manifest next update: Thu 30 Oct 2025 05:31:10 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 8zQK8AXHLSApMmYd7tjNJsIjZnWf3yDUEAsA1LFehWw=) 2: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: 6KZnCoun2OeRfJhfU31JgFdGtJDoY9NCrchaCehwgfg=) 3: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: 21q7Iv93Q6zcChs0bfd71YIwcefMC28w6jeCpwe5mLs=) 4: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6ARHaxkV0HQRmAgHPZ4dlFB+3c6L0ZGJmc/nN2+k+no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0f:78:6c:be:df:5f:c8:60:14:86:06:03:ed:7f:0e:c1:70:1b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Oct 26 18:57:10 2025 GMT Not After : Oct 30 05:31:10 2025 GMT Subject: CN=07463A188CADD4A9B9975AE448F84ACCABCE03D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:84:b0:58:a6:39:e9:8f:55:2f:a8:b6:f0:85: 53:75:1f:94:12:df:9a:72:e8:b6:cc:88:e3:c3:59: 45:20:42:01:43:72:70:65:1c:04:1f:00:a9:17:2b: 66:dd:fc:cc:ad:83:83:9e:b5:56:e5:0f:e6:32:ee: fe:e1:c0:fa:34:d5:ba:74:ea:e5:c1:7f:3e:63:6e: a5:4c:ad:00:4f:29:06:e6:7b:2c:7b:cf:16:0e:42: 2b:dc:95:17:fa:e9:0c:71:29:fe:b1:af:d8:31:35: e6:fa:55:ad:37:eb:6d:87:bb:a0:bd:f0:0d:c6:26: 72:4f:c3:44:b3:85:6d:7f:9d:90:ab:02:ea:44:bd: 78:1b:63:18:9a:48:31:94:1f:b5:34:e6:70:85:7c: d8:f9:8f:1d:7b:3f:36:c6:c3:3c:8d:5f:20:a4:b6: 49:59:5b:1f:c4:f2:15:1e:3f:e0:e9:23:fd:81:57: 81:09:21:aa:7f:2d:96:5a:36:ba:4e:81:3d:28:6d: 2f:b7:cd:eb:21:32:cd:89:09:93:0c:15:d0:db:a6: c6:02:10:3b:53:a1:eb:bd:e9:2a:e4:cc:48:3f:c0: f0:99:fc:b7:2a:33:55:bf:00:60:58:e0:3c:c7:77: 76:01:2e:e0:91:f2:11:f6:71:50:36:d7:06:71:36: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:46:3A:18:8C:AD:D4:A9:B9:97:5A:E4:48:F8:4A:CC:AB:CE:03:D8 X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:48:93:3f:e7:66:b5:56:8e:98:f7:cc:b7:4b:be:72:72:a3: 0c:50:68:6d:e8:07:05:87:c6:f3:88:33:96:8b:96:c2:88:0a: b5:d5:5f:70:fa:a8:be:60:5a:2b:a5:34:fb:01:3b:5a:46:cb: ba:5f:d6:e3:30:ac:aa:1a:77:dc:f7:f9:17:cd:da:7b:b0:8c: d1:a7:c8:6a:58:6c:16:ff:bf:28:cc:23:5b:eb:b2:bd:c4:e9: 72:99:ea:86:f5:2d:be:5e:35:0f:95:75:3c:0b:ce:61:c8:f9: 71:68:91:30:be:eb:3e:3e:b3:ba:18:20:03:62:59:8c:88:82: 1d:dc:f2:98:39:ca:b1:60:61:21:f3:6a:e3:56:b0:ea:4d:b4: 71:fc:9c:5c:ad:e4:f5:ad:93:e8:b7:eb:bb:de:05:0b:db:c8: 94:4c:2d:d2:36:ad:83:cf:dc:da:67:ce:83:58:18:1c:f4:36: 41:2c:ab:bc:bd:60:c5:e5:07:3c:43:ad:c4:c2:77:e5:81:51: b9:2b:b4:a2:36:55:3e:88:f5:d6:c3:ea:c3:24:ba:48:0a:ef: 03:02:be:d8:66:f9:61:b3:fc:ae:53:f9:54:c9:90:ad:fb:76: 7c:3d:96:e0:39:f8:11:d8:bb:d8:ef:ad:37:7c:a0:57:fd:e6: e0:3e:36:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMw94bL7fX8hgFIYGA+1/DsFwG3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNTEwMjYxODU3MTBaFw0yNTEwMzAwNTMxMTBaMDMxMTAvBgNV BAMTKDA3NDYzQTE4OENBREQ0QTlCOTk3NUFFNDQ4Rjg0QUNDQUJDRTAzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhLBYpjnpj1UvqLbwhVN1H5QS 35py6LbMiOPDWUUgQgFDcnBlHAQfAKkXK2bd/Mytg4OetVblD+Yy7v7hwPo01bp0 6uXBfz5jbqVMrQBPKQbmeyx7zxYOQivclRf66QxxKf6xr9gxNeb6Va03622Hu6C9 8A3GJnJPw0SzhW1/nZCrAupEvXgbYxiaSDGUH7U05nCFfNj5jx17PzbGwzyNXyCk tklZWx/E8hUeP+DpI/2BV4EJIap/LZZaNrpOgT0obS+3zeshMs2JCZMMFdDbpsYC EDtToeu96SrkzEg/wPCZ/LcqM1W/AGBY4DzHd3YBLuCR8hH2cVA21wZxNrLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB0Y6GIyt1Km5l1rkSPhKzKvOA9gwHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdIkz/nZrVWjpj3zLdLvnJyowxQaG3oBwWH xvOIM5aLlsKICrXVX3D6qL5gWiulNPsBO1pGy7pf1uMwrKoad9z3+RfN2nuwjNGn yGpYbBb/vyjMI1vrsr3E6XKZ6ob1Lb5eNQ+VdTwLzmHI+XFokTC+6z4+s7oYIANi WYyIgh3c8pg5yrFgYSHzauNWsOpNtHH8nFyt5PWtk+i367veBQvbyJRMLdI2rYPP 3NpnzoNYGBz0NkEsq7y9YMXlBzxDrcTCd+WBUbkrtKI2VT6I9dbD6sMkukgK7wMC vthm+WGz/K5T+VTJkK37dnw9luA5+BHYu9jvrTd8oFf95uA+NgQ= -----END CERTIFICATE-----Generated at Tue Oct 28 02:25:31 2025 by rpki-client