$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: aPuyD10s9SZNZ+sfiwAyi7G8IX3Xc0U5sNOiSczzz/s= Subject key identifier: E7:7D:39:71:F0:5A:69:B9:A5:BB:64:32:CB:CB:7A:29:35:71:45:B0 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 1A4B6A542ED7281A39C9919F45512390DF068E0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0375 Signing time: Mon 27 Oct 2025 13:01:19 +0000 Manifest this update: Mon 27 Oct 2025 12:56:19 +0000 Manifest next update: Thu 30 Oct 2025 20:04:19 +0000 Files and hashes: 1: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: ePeBl0d8tWBw4Nf6iYvx6T394qGPDvZRh9IyXbTO46o=) 2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) 3: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 20:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4b:6a:54:2e:d7:28:1a:39:c9:91:9f:45:51:23:90:df:06:8e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Oct 27 12:56:19 2025 GMT Not After : Oct 30 20:04:19 2025 GMT Subject: CN=E77D3971F05A69B9A5BB6432CBCB7A29357145B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:d0:bd:c8:de:df:b1:df:bd:fa:5b:82:b9: eb:fc:80:3c:a4:9f:83:f3:49:7b:19:db:98:39:a9: f8:cf:c9:a9:32:fa:fd:c1:2a:74:c6:8e:31:02:a4: 78:03:6f:4b:93:ca:4a:a8:cc:b4:2a:bf:06:34:08: 1a:9e:24:4f:2e:cd:c3:3b:63:aa:fc:82:ba:3a:27: a6:76:14:76:10:ef:84:34:61:d8:e8:9b:1c:85:88: cc:17:be:f0:be:18:f5:63:48:6f:2b:eb:0d:9f:de: 4d:b3:ee:42:56:c9:10:92:2d:19:de:0c:d8:74:50: a8:73:91:37:ce:08:da:b9:0f:ed:7f:7e:ce:47:79: f6:3d:9b:fc:ce:85:f0:b8:16:cb:7e:6e:c7:3a:9c: bc:31:b1:42:73:90:f3:82:82:e8:96:b0:9e:74:1f: 76:4d:14:82:a9:59:54:c1:06:eb:59:db:e1:e6:8e: 56:bc:81:5c:82:de:7e:91:3e:32:6b:b5:ca:e2:b7: 66:09:c9:f8:79:60:05:81:ab:60:1f:b2:d8:18:e9: cc:9e:0e:66:d2:39:ff:64:d0:40:09:aa:61:16:89: 2c:8b:97:1f:f9:22:1d:42:d2:67:c0:6b:7a:11:95: 5c:1b:7c:e1:98:a8:46:d6:86:a0:f6:55:c0:45:c0: 90:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7D:39:71:F0:5A:69:B9:A5:BB:64:32:CB:CB:7A:29:35:71:45:B0 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:95:0d:4e:70:07:68:42:46:3c:2c:1a:ce:52:73:67:da:82: 06:3a:62:a3:ee:6d:3c:9f:d5:f0:3d:ec:1d:76:31:81:5a:c7: 41:96:c4:80:ff:aa:37:ec:66:f1:2f:75:72:ed:22:3a:13:14: 54:2e:d5:00:f4:75:78:4e:c4:9e:d7:05:52:ae:df:cd:57:f3: 0b:90:32:82:c0:48:1d:fd:4a:15:db:d1:d3:c0:a2:c4:27:b5: 67:fc:cd:14:82:35:3e:15:c3:27:b3:c0:ea:d6:09:ae:b9:2b: ec:79:45:63:c9:40:52:3e:b3:00:ca:d2:b5:3d:b6:77:04:6d: 9c:56:14:8c:a6:ae:d6:43:ed:6a:0a:25:16:a3:13:b7:a6:bf: fc:9d:77:75:c5:41:4c:9c:06:8d:62:22:4f:b6:d5:d0:46:4b: bf:de:f9:f7:ef:39:88:49:db:2e:28:dd:67:5e:e4:6f:4a:f1: eb:65:ea:d6:d9:71:81:18:b9:bc:bd:47:64:6d:76:1e:5f:6c: 39:43:2a:da:19:e0:d6:84:e6:e0:3a:8e:48:47:95:76:53:67: 84:d2:d3:a0:aa:f6:0c:a8:68:72:07:21:9f:0e:95:4e:6a:59: 43:03:be:8e:28:c2:96:7e:52:67:73:b5:9d:46:58:9b:ee:e6: 93:57:37:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGktqVC7XKBo5yZGfRVEjkN8GjgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTEwMjcxMjU2MTlaFw0yNTEwMzAyMDA0MTlaMDMxMTAvBgNV BAMTKEU3N0QzOTcxRjA1QTY5QjlBNUJCNjQzMkNCQ0I3QTI5MzU3MTQ1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5N9C9yN7fsd+9+luCuev8gDyk n4PzSXsZ25g5qfjPyaky+v3BKnTGjjECpHgDb0uTykqozLQqvwY0CBqeJE8uzcM7 Y6r8gro6J6Z2FHYQ74Q0YdjomxyFiMwXvvC+GPVjSG8r6w2f3k2z7kJWyRCSLRne DNh0UKhzkTfOCNq5D+1/fs5HefY9m/zOhfC4Fst+bsc6nLwxsUJzkPOCguiWsJ50 H3ZNFIKpWVTBButZ2+Hmjla8gVyC3n6RPjJrtcrit2YJyfh5YAWBq2AfstgY6cye DmbSOf9k0EAJqmEWiSyLlx/5Ih1C0mfAa3oRlVwbfOGYqEbWhqD2VcBFwJCDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5305cfBaabmlu2Qyy8t6KTVxRbAwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaVDU5wB2hCRjwsGs5Sc2faggY6YqPubTyf 1fA97B12MYFax0GWxID/qjfsZvEvdXLtIjoTFFQu1QD0dXhOxJ7XBVKu381X8wuQ MoLASB39ShXb0dPAosQntWf8zRSCNT4VwyezwOrWCa65K+x5RWPJQFI+swDK0rU9 tncEbZxWFIymrtZD7WoKJRajE7emv/ydd3XFQUycBo1iIk+21dBGS7/e+ffvOYhJ 2y4o3Wde5G9K8etl6tbZcYEYuby9R2Rtdh5fbDlDKtoZ4NaE5uA6jkhHlXZTZ4TS 06Cq9gyoaHIHIZ8OlU5qWUMDvo4owpZ+UmdztZ1GWJvu5pNXN5M= -----END CERTIFICATE-----Generated at Tue Oct 28 09:47:02 2025 by rpki-client