$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: Z28te0sOaUICjMjI4VbQCjvlQLk+YT5827G2cw023hU= Subject key identifier: DB:93:4B:5B:5A:94:0A:68:B7:09:48:0A:87:5E:B8:ED:66:6D:A1:3E Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 799E6D56905E652B00F2B531A060A551E7F53FB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 0342 Signing time: Fri 07 Nov 2025 12:30:50 +0000 Manifest this update: Fri 07 Nov 2025 12:25:50 +0000 Manifest next update: Tue 11 Nov 2025 00:29:50 +0000 Files and hashes: 1: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=) 2: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pmzgckCGAS5Ljr2SgdcTD9JmH8nize0p1NnNdSRs+P0=) 3: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: Wy24oHBefsVD5tqKBPRYlaWGxYczufn9HWHCWCUzmvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 00:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9e:6d:56:90:5e:65:2b:00:f2:b5:31:a0:60:a5:51:e7:f5:3f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Nov 7 12:25:50 2025 GMT Not After : Nov 11 00:29:50 2025 GMT Subject: CN=DB934B5B5A940A68B709480A875EB8ED666DA13E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:fa:3e:e0:35:76:1b:de:dd:39:86:57:de: 2b:f6:e6:71:4d:1d:40:66:9c:cc:06:30:50:3c:e0: 1f:6a:cd:cb:32:e4:a9:bf:fb:59:02:18:49:d1:27: 92:ce:ef:3e:76:b0:7a:c2:c8:f8:9c:07:97:ae:82: 6f:d5:d9:a3:45:00:ec:dd:b1:f7:7c:db:15:01:da: 48:f0:7e:a7:9f:6b:51:33:6a:fe:9f:48:38:74:70: 4f:ff:de:b4:75:54:a1:ae:5b:c7:8e:c8:49:3c:62: 26:1a:49:2a:b0:27:8b:63:dc:d3:bf:27:35:59:b4: b8:81:43:51:fe:da:17:b0:dc:dc:5e:ae:71:e9:79: 42:59:de:17:78:f0:42:71:d3:47:74:2b:ef:74:16: 66:0e:11:01:c0:57:c4:c6:ee:e9:10:09:17:9f:39: dc:0c:af:7c:74:af:1e:1a:e3:cf:11:5c:12:60:91: 55:26:45:e8:af:50:64:79:e6:6d:a6:08:d8:99:69: df:ad:48:be:d2:3c:d0:f2:fb:e4:96:ff:96:87:f6: 0e:53:b4:53:2c:77:e7:95:1b:2c:35:ef:07:80:bb: 83:a6:cb:a1:0d:de:47:b9:79:94:8d:5a:cd:08:fe: 84:e4:da:a4:d2:f9:2f:42:6a:35:2e:c4:cb:07:68: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:93:4B:5B:5A:94:0A:68:B7:09:48:0A:87:5E:B8:ED:66:6D:A1:3E X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0d:ff:00:f9:79:26:1d:f5:fc:0e:00:be:66:77:eb:35:75: b9:89:fa:c1:18:72:a9:9a:d4:c0:3f:77:36:ba:c3:e3:2a:b1: a5:81:42:1c:dd:92:a6:d6:ef:51:1b:82:8f:af:f9:44:bd:47: 84:8d:20:0e:9c:78:98:5c:4a:6f:c9:3f:a0:bf:38:df:27:ff: 9a:48:60:50:d4:d5:ab:cd:60:fa:c7:dc:e2:3f:bf:75:94:3e: f6:d2:07:02:0c:96:d3:5d:dc:10:a7:cf:41:d4:65:5c:f9:2d: a9:c9:79:99:c3:28:6d:1d:11:d5:e2:0d:18:4e:16:48:76:e0: 22:de:c3:54:63:5f:aa:15:32:87:64:4a:52:c6:de:dc:85:c2: 90:e0:5a:7a:ff:c3:f4:8e:7a:90:e1:16:e9:a3:cb:31:02:05: a6:db:8a:ce:d6:51:22:a8:a2:da:17:49:63:a1:96:80:0c:07: f1:17:b6:83:34:ff:74:13:bd:40:53:ec:4b:64:4e:05:bd:51: a2:5a:44:7c:38:54:20:7b:2d:5b:ac:b3:9e:e4:f3:ef:a2:b2: 5a:96:9a:c4:b8:9a:56:d3:fa:48:11:33:8f:44:f0:68:f8:a5: 8d:09:91:0f:94:5e:e5:32:4b:a4:14:5f:8e:60:da:6d:8c:f9: 8f:ce:29:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZ5tVpBeZSsA8rUxoGClUef1P7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNTExMDcxMjI1NTBaFw0yNTExMTEwMDI5NTBaMDMxMTAvBgNV BAMTKERCOTM0QjVCNUE5NDBBNjhCNzA5NDgwQTg3NUVCOEVENjY2REExM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Sfo+4DV2G97dOYZX3iv25nFN HUBmnMwGMFA84B9qzcsy5Km/+1kCGEnRJ5LO7z52sHrCyPicB5eugm/V2aNFAOzd sfd82xUB2kjwfqefa1Ezav6fSDh0cE//3rR1VKGuW8eOyEk8YiYaSSqwJ4tj3NO/ JzVZtLiBQ1H+2hew3NxernHpeUJZ3hd48EJx00d0K+90FmYOEQHAV8TG7ukQCRef OdwMr3x0rx4a488RXBJgkVUmReivUGR55m2mCNiZad+tSL7SPNDy++SW/5aH9g5T tFMsd+eVGyw17weAu4Omy6EN3ke5eZSNWs0I/oTk2qTS+S9CajUuxMsHaHJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU25NLW1qUCmi3CUgKh1647WZtoT4wHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMN/wD5eSYd9fwOAL5md+s1dbmJ+sEYcqma 1MA/dza6w+MqsaWBQhzdkqbW71Ebgo+v+US9R4SNIA6ceJhcSm/JP6C/ON8n/5pI YFDU1avNYPrH3OI/v3WUPvbSBwIMltNd3BCnz0HUZVz5LanJeZnDKG0dEdXiDRhO Fkh24CLew1RjX6oVModkSlLG3tyFwpDgWnr/w/SOepDhFumjyzECBabbis7WUSKo otoXSWOhloAMB/EXtoM0/3QTvUBT7EtkTgW9UaJaRHw4VCB7LVuss57k8++islqW msS4mlbT+kgRM49E8Gj4pY0JkQ+UXuUyS6QUX45g2m2M+Y/OKeY= -----END CERTIFICATE-----Generated at Sat Nov 8 07:30:44 2025 by rpki-client