$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: Gn0P3HGlg9T6J4Q2WMlqhydXPtbhJGqiOydKGUCq3a0= Subject key identifier: 32:A9:C2:7A:15:C7:A6:3F:55:A8:59:1F:68:EE:81:33:E9:88:2B:52 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 2D36FCC571BECA7FF86927D83D0B281570030CA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 01CF Signing time: Sun 19 Oct 2025 00:31:50 +0000 Manifest this update: Sun 19 Oct 2025 00:26:50 +0000 Manifest next update: Wed 22 Oct 2025 01:09:50 +0000 Files and hashes: 1: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: ncYGXRGoDNxvYIX3PcGqdrJLj1FxUvjJrqOvy1GAKxo=) 2: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: +rUpwLTA3BOwHr4x7TkN/w5rLKbsxhQUS6JDxWImh/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:36:fc:c5:71:be:ca:7f:f8:69:27:d8:3d:0b:28:15:70:03:0c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Oct 19 00:26:50 2025 GMT Not After : Oct 22 01:09:50 2025 GMT Subject: CN=32A9C27A15C7A63F55A8591F68EE8133E9882B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:86:d4:54:ed:f6:91:77:a0:a0:6c:e2:58:86: 52:ef:34:0f:51:c1:b7:53:75:2c:a3:a2:27:13:bd: 47:a2:3e:44:b4:d6:33:38:5c:5b:b6:01:0c:19:b8: 24:10:91:9a:e8:60:b6:7a:c2:6c:a5:02:04:1f:55: e0:5f:f0:50:d7:e4:f0:c5:ce:65:76:a5:49:3c:bc: b1:8d:a9:b4:b8:fc:f9:b7:29:06:c9:1e:44:35:ea: 13:62:0d:4e:f4:88:01:15:a6:14:1e:49:e1:da:1d: d6:53:81:09:6a:a8:95:56:61:de:f8:4d:5c:28:3c: 51:43:a8:80:f7:7f:03:78:55:24:c8:7a:15:5e:91: a7:88:db:32:c4:0a:4b:0d:0e:1e:6c:fa:6f:d1:df: d9:b7:1d:73:61:9a:cb:49:5d:5f:0c:f0:b8:45:c5: 13:86:18:7e:d3:a9:99:5a:14:ef:02:c1:04:81:10: 18:db:e7:f3:78:60:65:73:69:22:bd:a2:a0:d6:d2: 2e:08:30:93:33:20:7f:c0:8b:5f:74:f7:32:b8:71: 81:48:5a:0e:ef:f0:4c:a6:f4:da:f3:6d:e5:7b:3f: f8:b3:fe:64:97:8c:0b:d9:d6:fc:5a:24:2a:3f:08: f2:eb:87:db:30:57:79:3f:6a:b3:12:65:56:6c:12: 12:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:C2:7A:15:C7:A6:3F:55:A8:59:1F:68:EE:81:33:E9:88:2B:52 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:51:d8:dc:9d:f2:34:d8:9e:20:cf:3b:dc:1a:86:61:37:04: 9e:05:d5:78:fe:33:27:7c:86:68:c2:df:1d:3b:08:23:8c:df: b4:80:5e:e9:77:26:8c:e7:ad:98:b9:50:fc:fe:12:95:19:a5: b8:99:db:b6:7d:25:8e:aa:5c:25:44:8a:7a:55:63:f3:b0:6b: 87:b7:c2:15:d9:35:09:fe:02:ce:9c:9d:6f:e7:12:58:fe:f0: e7:f0:95:eb:02:d9:a4:f4:e4:84:43:2d:37:b4:c5:d4:1a:d4: 76:1a:da:49:82:fe:a6:8e:7c:6f:c3:d4:51:14:2b:de:ca:88: 08:70:22:0d:ee:be:05:8b:50:2d:cf:aa:68:5d:b1:74:15:5b: 13:64:b9:18:6e:16:7b:dd:9e:dd:9f:8b:ce:4f:6e:2a:16:75: 32:7d:ce:50:b3:de:7a:0c:de:d1:26:53:87:a1:73:9c:1d:88: 1f:1b:dd:f2:ea:db:56:8a:02:4d:e7:72:72:32:cb:0b:fe:46: 7e:92:77:f4:45:98:16:ff:2a:18:1f:24:76:3f:20:41:a8:5c: cf:3b:a2:eb:f7:be:b5:ff:98:32:e6:01:eb:2d:37:75:74:1d: 5f:4e:ca:3c:ed:ff:52:4f:f0:59:b6:57:15:04:06:45:dc:1f: 40:bc:61:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTb8xXG+yn/4aSfYPQsoFXADDKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTEwMTkwMDI2NTBaFw0yNTEwMjIwMTA5NTBaMDMxMTAvBgNV BAMTKDMyQTlDMjdBMTVDN0E2M0Y1NUE4NTkxRjY4RUU4MTMzRTk4ODJCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDchtRU7faRd6CgbOJYhlLvNA9R wbdTdSyjoicTvUeiPkS01jM4XFu2AQwZuCQQkZroYLZ6wmylAgQfVeBf8FDX5PDF zmV2pUk8vLGNqbS4/Pm3KQbJHkQ16hNiDU70iAEVphQeSeHaHdZTgQlqqJVWYd74 TVwoPFFDqID3fwN4VSTIehVekaeI2zLECksNDh5s+m/R39m3HXNhmstJXV8M8LhF xROGGH7TqZlaFO8CwQSBEBjb5/N4YGVzaSK9oqDW0i4IMJMzIH/Ai1909zK4cYFI Wg7v8Eym9NrzbeV7P/iz/mSXjAvZ1vxaJCo/CPLrh9swV3k/arMSZVZsEhKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMqnCehXHpj9VqFkfaO6BM+mIK1IwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFR2Nyd8jTYniDPO9wahmE3BJ4F1Xj+Myd8 hmjC3x07CCOM37SAXul3JoznrZi5UPz+EpUZpbiZ27Z9JY6qXCVEinpVY/Owa4e3 whXZNQn+As6cnW/nElj+8OfwlesC2aT05IRDLTe0xdQa1HYa2kmC/qaOfG/D1FEU K97KiAhwIg3uvgWLUC3PqmhdsXQVWxNkuRhuFnvdnt2fi85PbioWdTJ9zlCz3noM 3tEmU4ehc5wdiB8b3fLq21aKAk3ncnIyywv+Rn6Sd/RFmBb/KhgfJHY/IEGoXM87 ouv3vrX/mDLmAestN3V0HV9Oyjzt/1JP8Fm2VxUEBkXcH0C8YdE= -----END CERTIFICATE-----Generated at Sun Oct 19 18:23:06 2025 by rpki-client