$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: k/Q9Pp0z3AiquESgl4B7/CoEBlL078Sv5q+Mrd6fIdI= Subject key identifier: 44:53:16:49:71:29:DF:0D:23:52:A7:42:7C:1F:1D:74:2D:47:AA:C0 Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 100FF66D0882201F23D9654C226225EBE26EE0D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 020A Signing time: Tue 28 Oct 2025 13:02:02 +0000 Manifest this update: Tue 28 Oct 2025 12:57:02 +0000 Manifest next update: Fri 31 Oct 2025 15:20:02 +0000 Files and hashes: 1: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) 2: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: 7F2RcTBgAG0/Zfg1jAma82apDof4zrjrJhjnFfraWAY=) 3: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) 4: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 15:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0f:f6:6d:08:82:20:1f:23:d9:65:4c:22:62:25:eb:e2:6e:e0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Oct 28 12:57:02 2025 GMT Not After : Oct 31 15:20:02 2025 GMT Subject: CN=445316497129DF0D2352A7427C1F1D742D47AAC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1c:a2:91:d0:76:be:f7:ba:5c:ff:4f:79:d6: 52:4e:2f:54:52:89:37:94:9c:c5:5a:89:90:89:5e: e6:05:ec:26:ec:b4:fc:2d:33:13:a8:cb:d0:0e:7f: e9:13:3c:fe:0f:20:bf:4e:c9:c9:6f:5d:5b:2e:66: fd:d8:7a:dc:01:b6:f1:26:f2:7a:39:9b:3c:dd:36: aa:bd:a2:9a:5e:22:56:99:8f:71:74:76:37:c0:a7: 5d:e8:4d:f7:e6:ec:db:70:02:07:2f:87:43:6d:ca: e9:10:f0:8f:3e:2b:dc:27:e9:af:4a:df:2d:9c:30: 4f:2e:76:14:3e:a8:aa:8d:e5:61:5c:8d:a5:14:07: 6a:38:7b:22:7c:ee:ba:25:7c:b9:aa:89:9b:dd:3b: 8f:28:f5:48:a5:bf:1f:84:61:da:8d:0b:07:26:19: f5:d1:68:0c:8e:95:23:f3:0b:14:46:4e:1d:f4:e1: ba:9d:70:ea:b2:51:7b:8c:2a:7e:34:98:3d:d1:18: e6:fb:e9:35:1d:da:4b:08:d9:e8:b7:87:0f:bb:d3: 05:d4:00:82:12:fc:1e:46:ef:c4:e2:5d:1b:1f:60: d3:05:f9:9b:90:c5:13:3a:10:0b:e8:8c:f0:78:7d: f2:61:ea:c9:c4:b5:71:ce:60:8d:ef:ab:3d:cb:98: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:53:16:49:71:29:DF:0D:23:52:A7:42:7C:1F:1D:74:2D:47:AA:C0 X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:84:bc:aa:84:70:19:2d:f0:5a:c6:ec:a7:8b:2a:81:77:00: 5c:04:93:58:cd:63:22:00:93:bd:8e:8f:ca:66:35:3e:7c:06: f3:7a:02:28:80:fd:3d:2e:90:8f:56:bf:8e:65:04:91:46:60: a3:11:81:0e:b7:2b:0d:ef:06:b0:7f:0e:de:6f:85:7c:f9:96: 1c:11:f1:fc:5f:ab:7d:d8:29:97:3d:2e:38:22:9d:24:3c:c0: 89:0f:2c:9d:84:ee:21:cb:f8:82:ef:9d:09:95:65:69:83:40: 21:58:c9:32:3e:b1:9c:72:fe:13:81:a2:90:52:bd:99:31:cb: 8f:7f:0b:ab:6b:58:fd:41:ca:58:6d:14:10:30:4f:08:5a:2a: 94:31:67:f3:f5:08:4e:92:36:5f:90:fe:2d:2d:ff:53:a5:db: 1b:cb:d9:a8:bc:45:30:d3:1b:8e:6a:6e:05:ab:58:36:fc:a9: 5d:48:f8:80:75:a9:f0:12:dc:e4:bd:4b:3f:d6:b6:1f:6b:d5: cb:04:6a:fd:b0:08:7a:c6:25:97:83:b0:6d:06:1a:35:ce:f1: 5f:1b:72:9c:75:bc:b2:65:43:a2:d3:4f:61:a0:43:65:53:ff: e8:90:de:7d:b3:85:68:bd:e8:4a:ef:b1:e4:40:41:1c:07:88: bb:79:eb:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEA/2bQiCIB8j2WVMImIl6+Ju4NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTEwMjgxMjU3MDJaFw0yNTEwMzExNTIwMDJaMDMxMTAvBgNV BAMTKDQ0NTMxNjQ5NzEyOURGMEQyMzUyQTc0MjdDMUYxRDc0MkQ0N0FBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnHKKR0Ha+97pc/0951lJOL1RS iTeUnMVaiZCJXuYF7CbstPwtMxOoy9AOf+kTPP4PIL9OyclvXVsuZv3YetwBtvEm 8no5mzzdNqq9oppeIlaZj3F0djfAp13oTffm7NtwAgcvh0NtyukQ8I8+K9wn6a9K 3y2cME8udhQ+qKqN5WFcjaUUB2o4eyJ87rolfLmqiZvdO48o9Uilvx+EYdqNCwcm GfXRaAyOlSPzCxRGTh304bqdcOqyUXuMKn40mD3RGOb76TUd2ksI2ei3hw+70wXU AIIS/B5G78TiXRsfYNMF+ZuQxRM6EAvojPB4ffJh6snEtXHOYI3vqz3LmNiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURFMWSXEp3w0jUqdCfB8ddC1HqsAwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqEvKqEcBkt8FrG7KeLKoF3AFwEk1jNYyIA k72Oj8pmNT58BvN6AiiA/T0ukI9Wv45lBJFGYKMRgQ63Kw3vBrB/Dt5vhXz5lhwR 8fxfq33YKZc9LjginSQ8wIkPLJ2E7iHL+ILvnQmVZWmDQCFYyTI+sZxy/hOBopBS vZkxy49/C6trWP1BylhtFBAwTwhaKpQxZ/P1CE6SNl+Q/i0t/1Ol2xvL2ai8RTDT G45qbgWrWDb8qV1I+IB1qfAS3OS9Sz/Wth9r1csEav2wCHrGJZeDsG0GGjXO8V8b cpx1vLJlQ6LTT2GgQ2VT/+iQ3n2zhWi96ErvseRAQRwHiLt5638= -----END CERTIFICATE-----Generated at Thu Oct 30 15:03:45 2025 by rpki-client