$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: Fjt/FcEZ1J4PxWtVUrAXeSRT412dVAt5FxLqkXoKpwQ= Subject key identifier: 10:7C:C0:F9:B0:D3:53:BA:D1:3E:03:D6:DE:DD:86:40:CE:FA:35:48 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 764F92D24A9372EB75A5E7E8B045521D775B50EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 03C9 Signing time: Tue 28 Oct 2025 12:22:12 +0000 Manifest this update: Tue 28 Oct 2025 12:17:12 +0000 Manifest next update: Fri 31 Oct 2025 15:43:12 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: CtJLs6WFUsoi0/V8x4X/5emPW2Z0+796yK0V+brkq8w=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 15:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4f:92:d2:4a:93:72:eb:75:a5:e7:e8:b0:45:52:1d:77:5b:50:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Oct 28 12:17:12 2025 GMT Not After : Oct 31 15:43:12 2025 GMT Subject: CN=107CC0F9B0D353BAD13E03D6DEDD8640CEFA3548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:be:5e:17:88:84:5c:e9:6d:f8:e7:14:36: e8:c8:53:4a:0d:ec:ec:7a:73:f6:8a:57:29:c8:85: 41:77:ec:fa:27:c2:ac:d3:2a:bb:ff:73:8d:57:dc: 80:71:84:04:d2:69:15:65:25:9f:1f:e2:b9:e1:32: af:bb:39:35:ad:0f:9a:2e:45:4f:96:d4:4a:4f:93: 76:4b:5d:4d:cc:01:9b:37:c3:45:9c:7b:e4:7b:40: 4a:76:a8:b5:08:2d:9c:00:f6:0e:ad:7d:df:99:d2: d8:45:1b:9c:30:52:a7:69:9d:62:66:62:73:b5:cd: 76:77:49:d1:64:72:04:fe:c2:df:22:80:3b:d7:53: 12:bf:bb:ba:e4:b0:a9:b6:bb:0a:f1:2f:0c:04:fc: 01:c7:a1:b4:4c:db:73:98:cf:9a:51:2a:23:38:78: 4c:95:be:a5:1f:56:5f:d9:01:dd:3a:a1:04:20:ea: 10:9d:24:47:9d:ec:df:b3:b6:51:d0:a3:b6:0a:0d: 5e:39:e5:d2:04:2b:39:84:e2:01:82:1a:9c:c4:74: 86:96:49:29:2f:99:eb:5b:af:13:1b:d7:9c:aa:92: 67:42:0b:32:05:6c:b4:23:dc:bb:d5:bf:6a:87:9f: 7a:0c:20:5a:de:c2:42:6d:8b:b2:ae:30:0d:32:b2: 74:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7C:C0:F9:B0:D3:53:BA:D1:3E:03:D6:DE:DD:86:40:CE:FA:35:48 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:94:8c:f5:3c:eb:e0:dd:6c:a1:00:d6:20:79:c2:ef:a4:75: cc:6d:c8:9f:d0:27:dd:b8:1e:07:79:c8:12:2e:8a:ed:6e:96: d4:48:f9:b4:82:c9:68:57:14:37:2e:62:05:b1:0d:3d:ae:57: 6d:0e:ab:2a:f6:e2:c4:2d:23:fc:53:81:9d:de:11:64:3e:67: a6:05:76:cb:79:82:ab:94:e6:db:e9:b2:5c:23:22:f6:1e:62: 9c:58:b7:22:65:7e:b7:23:e3:b3:2c:4b:56:a0:e7:c0:a0:d4: 90:a4:28:a3:cf:0b:37:6f:94:45:3e:e3:fd:52:d1:3d:67:67: ad:4a:54:3e:f1:87:46:ec:db:cb:78:13:08:5b:56:c3:af:bc: 41:c6:12:3e:7b:09:b3:99:a5:5b:69:43:a1:2b:cb:a0:04:12: a3:53:41:0c:00:45:1a:5a:85:1e:bf:d0:5e:ea:81:e7:c4:39: 98:2b:71:e1:7d:4a:9b:d1:33:9b:3e:e3:4b:16:56:a4:ad:ab: 5f:99:12:d8:e1:7e:8e:4d:c9:df:d5:48:44:1a:58:22:f3:cc: d2:19:e9:e8:c8:bb:3a:62:8b:91:ae:b3:2d:8d:4d:b4:e3:0c: 37:69:d5:9b:05:7c:5f:1f:81:15:c3:ff:c8:9f:e3:3f:bc:8b: 53:61:18:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdk+S0kqTcut1pefosEVSHXdbUOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNTEwMjgxMjE3MTJaFw0yNTEwMzExNTQzMTJaMDMxMTAvBgNV BAMTKDEwN0NDMEY5QjBEMzUzQkFEMTNFMDNENkRFREQ4NjQwQ0VGQTM1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY675eF4iEXOlt+OcUNujIU0oN 7Ox6c/aKVynIhUF37PonwqzTKrv/c41X3IBxhATSaRVlJZ8f4rnhMq+7OTWtD5ou RU+W1EpPk3ZLXU3MAZs3w0Wce+R7QEp2qLUILZwA9g6tfd+Z0thFG5wwUqdpnWJm YnO1zXZ3SdFkcgT+wt8igDvXUxK/u7rksKm2uwrxLwwE/AHHobRM23OYz5pRKiM4 eEyVvqUfVl/ZAd06oQQg6hCdJEed7N+ztlHQo7YKDV455dIEKzmE4gGCGpzEdIaW SSkvmetbrxMb15yqkmdCCzIFbLQj3LvVv2qHn3oMIFrewkJti7KuMA0ysnSrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEHzA+bDTU7rRPgPW3t2GQM76NUgwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGUjPU86+DdbKEA1iB5wu+kdcxtyJ/QJ924 Hgd5yBIuiu1ultRI+bSCyWhXFDcuYgWxDT2uV20Oqyr24sQtI/xTgZ3eEWQ+Z6YF dst5gquU5tvpslwjIvYeYpxYtyJlfrcj47MsS1ag58Cg1JCkKKPPCzdvlEU+4/1S 0T1nZ61KVD7xh0bs28t4EwhbVsOvvEHGEj57CbOZpVtpQ6Ery6AEEqNTQQwARRpa hR6/0F7qgefEOZgrceF9SpvRM5s+40sWVqStq1+ZEtjhfo5Nyd/VSEQaWCLzzNIZ 6ejIuzpii5Gusy2NTbTjDDdp1ZsFfF8fgRXD/8if4z+8i1NhGMU= -----END CERTIFICATE-----Generated at Tue Oct 28 16:02:05 2025 by rpki-client