$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: MsrsKweBcjbtO0XqLacbB5R4gi2m/VIxqNk0e9lHmQk= Subject key identifier: 3C:57:CE:F1:27:CB:A5:62:AE:0F:82:54:39:41:FB:2A:55:EB:BF:B0 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 40C83F4A676DD79FE8218423BAC422653DC5F5E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: F2 Signing time: Tue 11 Nov 2025 15:22:25 +0000 Manifest this update: Tue 11 Nov 2025 15:17:25 +0000 Manifest next update: Fri 14 Nov 2025 16:07:25 +0000 Files and hashes: 1: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: DGIWXpL27DCIiPr41Waq605UnvgZpvmqiGgud3DbtT4=) 2: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) 3: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) 4: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 16:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c8:3f:4a:67:6d:d7:9f:e8:21:84:23:ba:c4:22:65:3d:c5:f5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Nov 11 15:17:25 2025 GMT Not After : Nov 14 16:07:25 2025 GMT Subject: CN=3C57CEF127CBA562AE0F82543941FB2A55EBBFB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:5f:9e:ed:2f:6b:3a:e2:e8:60:f3:04:f1: 0e:d4:5d:78:e2:73:c1:0f:8e:25:3a:78:44:b1:58: b5:20:ec:af:a6:a5:8b:da:2e:87:aa:23:00:c1:b7: d3:9c:42:c6:ab:97:33:93:d5:e6:8f:4c:17:15:ea: 0d:6a:38:5d:a0:ec:15:be:a6:ef:0c:77:01:a4:7a: 1b:e8:36:60:a1:cf:ef:2a:9e:e3:8d:2b:22:4d:8a: 04:76:53:82:f3:6b:b5:95:19:9c:7e:5e:9a:10:da: 19:da:81:76:66:03:e0:38:3c:c2:95:82:5d:04:2e: a9:69:b4:0c:17:4c:e8:3c:e2:c1:8e:07:fb:c1:5b: 36:01:75:72:00:43:36:e7:b7:fc:84:d3:5c:49:7f: 8b:23:4e:93:c3:b9:a5:46:3c:d8:d0:64:44:96:b1: 6c:62:f2:aa:93:20:1d:6c:75:74:41:ea:64:35:8d: 8f:90:be:53:f4:41:30:2a:5f:1e:ca:ac:8d:cf:03: ca:20:63:10:17:16:3d:e0:11:e2:47:d1:e8:fb:57: 1e:2d:55:58:4c:85:a6:cd:69:0b:9d:82:e0:09:ee: ee:d8:db:4d:48:6d:79:cb:e4:91:5f:82:2c:e3:32: 9b:22:50:a7:f0:db:b3:65:29:99:0e:ba:3c:69:fe: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:57:CE:F1:27:CB:A5:62:AE:0F:82:54:39:41:FB:2A:55:EB:BF:B0 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:8d:e6:96:61:d3:c5:0e:78:36:80:9c:86:36:0a:e0:d3:96: 2e:15:a5:b4:24:fd:c9:bd:03:b4:f3:2f:54:d7:78:1b:92:4f: b8:7e:2b:9b:93:ba:4c:43:08:79:7e:b6:61:79:63:9a:46:06: 01:39:f7:e2:f4:3f:ce:e3:62:91:68:ae:cf:39:d7:cf:84:00: 5b:56:6e:68:f0:9d:17:3f:c3:d5:21:f6:e6:8a:02:e8:6b:a1: 5f:b6:c9:fd:be:a8:4c:15:ba:ec:87:2e:34:98:fa:de:10:3f: fb:37:28:b0:58:2f:3c:4c:23:ea:2b:cf:b3:ed:e1:8c:ec:ce: 40:9c:88:92:f3:78:93:a9:4e:d8:4f:01:a6:3a:c0:36:b6:86: 9e:d1:0c:fb:21:76:a7:d1:10:ab:72:7a:d6:34:e6:9b:85:37: 3e:43:89:34:6a:fe:2c:2b:8e:8f:a0:18:a0:a0:33:ac:0c:68: 0d:fb:f4:5c:82:04:37:aa:c6:84:b8:41:74:30:1d:1e:63:2a: 25:2c:a9:23:e3:49:67:2a:cf:ea:e7:13:ac:db:a7:1d:7c:07: ae:0b:1f:b9:5d:d8:bc:3c:19:a0:e9:3b:d9:2c:28:27:4d:6c: ee:4e:28:f0:a8:80:f0:f0:4b:5f:7b:e0:86:bf:62:38:26:be: ea:c8:d9:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMg/Smdt15/oIYQjusQiZT3F9ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTExMTExNTE3MjVaFw0yNTExMTQxNjA3MjVaMDMxMTAvBgNV BAMTKDNDNTdDRUYxMjdDQkE1NjJBRTBGODI1NDM5NDFGQjJBNTVFQkJGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MF+e7S9rOuLoYPME8Q7UXXji c8EPjiU6eESxWLUg7K+mpYvaLoeqIwDBt9OcQsarlzOT1eaPTBcV6g1qOF2g7BW+ pu8MdwGkehvoNmChz+8qnuONKyJNigR2U4Lza7WVGZx+XpoQ2hnagXZmA+A4PMKV gl0ELqlptAwXTOg84sGOB/vBWzYBdXIAQzbnt/yE01xJf4sjTpPDuaVGPNjQZESW sWxi8qqTIB1sdXRB6mQ1jY+QvlP0QTAqXx7KrI3PA8ogYxAXFj3gEeJH0ej7Vx4t VVhMhabNaQudguAJ7u7Y201IbXnL5JFfgizjMpsiUKfw27NlKZkOujxp/jZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFfO8SfLpWKuD4JUOUH7KlXrv7AwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKN5pZh08UOeDaAnIY2CuDTli4VpbQk/cm9 A7TzL1TXeBuST7h+K5uTukxDCHl+tmF5Y5pGBgE59+L0P87jYpFors8518+EAFtW bmjwnRc/w9Uh9uaKAuhroV+2yf2+qEwVuuyHLjSY+t4QP/s3KLBYLzxMI+orz7Pt 4YzszkCciJLzeJOpTthPAaY6wDa2hp7RDPshdqfREKtyetY05puFNz5DiTRq/iwr jo+gGKCgM6wMaA379FyCBDeqxoS4QXQwHR5jKiUsqSPjSWcqz+rnE6zbpx18B64L H7ld2Lw8GaDpO9ksKCdNbO5OKPCogPDwS1974Ia/YjgmvurI2fI= -----END CERTIFICATE-----Generated at Wed Nov 12 03:00:10 2025 by rpki-client