$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: 099qbwJQJ2vSX9ypZZQRn3zM09mx34RJBcpx1ih4spo= Subject key identifier: F2:A5:58:03:6C:BD:D0:56:F6:8D:BD:AA:B1:9B:0E:82:5D:03:76:01 Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 6676A76BA175154D33B2ED4A11E4F966E58432D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 01C5 Signing time: Sat 18 Oct 2025 04:20:41 +0000 Manifest this update: Sat 18 Oct 2025 04:15:41 +0000 Manifest next update: Tue 21 Oct 2025 15:55:41 +0000 Files and hashes: 1: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: 1iDVOfJMEqET1+Dmm70Jrd9LFsLPsIidob8Co6RDUvI=) 2: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=) 3: 3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa (hash: V7RFCHjDQmX/bycVf9vGUXwZyU+bAqqIJro21SU5i0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:76:a7:6b:a1:75:15:4d:33:b2:ed:4a:11:e4:f9:66:e5:84:32:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Oct 18 04:15:41 2025 GMT Not After : Oct 21 15:55:41 2025 GMT Subject: CN=F2A558036CBDD056F68DBDAAB19B0E825D037601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:03:50:3b:31:c3:60:ce:7f:71:65:e2:93: 5a:05:bc:dc:af:23:d4:97:bc:9f:e6:1f:36:a6:93: 57:72:7c:d2:ec:1b:4e:cf:96:c2:7b:6c:e0:c7:dc: df:d9:ac:96:38:1e:76:99:68:67:48:b4:0c:b2:89: 8f:a8:55:06:05:7a:4c:36:f8:8b:67:01:90:76:dc: 78:28:ba:b5:2b:56:08:70:0c:50:4f:4f:5f:9b:65: 73:38:14:81:89:b3:94:78:41:7b:de:6a:97:cf:49: ec:65:8b:14:b7:55:a2:76:a8:7d:17:48:e6:b3:95: 58:10:4e:1d:39:7a:24:13:d4:87:2d:63:1b:9e:fa: 78:03:db:f8:ae:71:92:3b:da:d9:7c:55:f0:39:c3: 97:8b:9f:f0:29:f8:d9:d7:d6:8e:1c:17:55:31:ac: 0b:31:4c:e0:e5:d9:cc:1e:2d:c7:26:29:1c:3e:6b: 58:5f:ec:76:56:bb:c0:e3:c3:48:5b:db:3d:1f:24: 41:35:72:e9:a6:e2:3f:ba:ed:bf:70:b9:f2:4a:66: 99:cc:2e:2c:81:6e:d3:dd:de:ab:17:0b:2f:6e:9b: 30:df:17:e3:19:5b:ad:c1:fc:6d:15:63:fc:73:22: 87:f2:81:3a:c8:81:b5:1c:07:25:54:b3:37:71:cc: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A5:58:03:6C:BD:D0:56:F6:8D:BD:AA:B1:9B:0E:82:5D:03:76:01 X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:05:62:1b:32:c7:02:ee:94:c2:bf:8f:66:97:25:98:6d:51: 11:3e:cd:da:ff:91:36:de:91:20:b2:5f:c0:c6:34:89:0b:83: ca:69:d6:91:f3:a4:76:80:10:3f:26:22:d8:0a:ac:d8:77:56: 34:44:4c:26:88:20:c9:cb:16:44:c5:96:f6:d7:a0:6b:c2:7f: 1b:ed:1c:c3:83:44:1b:c3:e4:25:7b:b1:a1:3c:2d:b3:91:06: 91:13:d3:f3:5b:00:e3:f6:8d:e4:2c:44:18:b4:b5:c9:7d:f2: 40:35:84:54:2c:4e:c0:ce:e5:74:b9:c3:11:ef:aa:4b:e9:18: 17:fd:80:42:fc:b6:e6:c0:05:34:8f:5b:3b:1d:f7:b8:c9:ef: e0:96:9e:34:cc:a2:1a:b3:9e:34:e8:97:7a:7f:48:1c:4d:e8: 49:b4:97:9b:02:79:b3:4f:89:67:ae:70:2c:5c:6b:cd:76:00: 75:da:65:05:5a:b7:52:9a:53:89:72:ce:65:9b:6d:34:0e:0e: 12:08:3a:1c:32:9c:b9:23:be:be:f7:88:23:ec:04:dc:3d:77: b7:4b:0d:b3:22:2c:f8:62:fa:85:e6:01:d6:06:fe:5f:2a:1f: aa:b5:0b:3e:6a:cb:dc:1f:70:c8:06:a4:eb:c6:b6:81:cf:64: e9:c2:a1:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnana6F1FU0zsu1KEeT5ZuWEMtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNTEwMTgwNDE1NDFaFw0yNTEwMjExNTU1NDFaMDMxMTAvBgNV BAMTKEYyQTU1ODAzNkNCREQwNTZGNjhEQkRBQUIxOUIwRTgyNUQwMzc2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpANQOzHDYM5/cWXik1oFvNyv I9SXvJ/mHzamk1dyfNLsG07PlsJ7bODH3N/ZrJY4HnaZaGdItAyyiY+oVQYFekw2 +ItnAZB23HgourUrVghwDFBPT1+bZXM4FIGJs5R4QXveapfPSexlixS3VaJ2qH0X SOazlVgQTh05eiQT1IctYxue+ngD2/iucZI72tl8VfA5w5eLn/Ap+NnX1o4cF1Ux rAsxTODl2cweLccmKRw+a1hf7HZWu8Djw0hb2z0fJEE1cumm4j+67b9wufJKZpnM LiyBbtPd3qsXCy9umzDfF+MZW63B/G0VY/xzIofygTrIgbUcByVUszdxzEaBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qVYA2y90Fb2jb2qsZsOgl0DdgEwHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0FYhsyxwLulMK/j2aXJZhtURE+zdr/kTbe kSCyX8DGNIkLg8pp1pHzpHaAED8mItgKrNh3VjRETCaIIMnLFkTFlvbXoGvCfxvt HMODRBvD5CV7saE8LbORBpET0/NbAOP2jeQsRBi0tcl98kA1hFQsTsDO5XS5wxHv qkvpGBf9gEL8tubABTSPWzsd97jJ7+CWnjTMohqznjTol3p/SBxN6Em0l5sCebNP iWeucCxca812AHXaZQVat1KaU4lyzmWbbTQODhIIOhwynLkjvr73iCPsBNw9d7dL DbMiLPhi+oXmAdYG/l8qH6q1Cz5qy9wfcMgGpOvGtoHPZOnCoUI= -----END CERTIFICATE-----Generated at Sun Oct 19 17:47:17 2025 by rpki-client