$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: GtSrIdBQRdhmkRerMaCae5S12NrxSNE1R166SjTIB1Q= Subject key identifier: EE:64:63:B0:4F:DF:DA:8B:2B:74:E8:C0:F3:60:21:68:A2:9D:7C:CC Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 179C572C0606EC9AF90238422A741A6CD43F1D04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 0306 Signing time: Sat 25 Oct 2025 00:52:09 +0000 Manifest this update: Sat 25 Oct 2025 00:47:09 +0000 Manifest next update: Tue 28 Oct 2025 10:23:09 +0000 Files and hashes: 1: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: jZ5ilN6D3m8fhEfZDsP/XLsyfgIaE880yNnVT0mUpoU=) 2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: KB67q4SCRzcFv43ZUJG/KADzbe2hXV8kny5lP7t0r80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 10:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9c:57:2c:06:06:ec:9a:f9:02:38:42:2a:74:1a:6c:d4:3f:1d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Oct 25 00:47:09 2025 GMT Not After : Oct 28 10:23:09 2025 GMT Subject: CN=EE6463B04FDFDA8B2B74E8C0F3602168A29D7CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:79:26:d7:9b:a2:e3:54:30:5c:b8:33:70: 68:64:77:20:43:fd:15:ba:49:2c:a9:be:4a:40:52: c4:75:40:dd:58:ff:8c:6d:e7:5d:38:40:2e:98:d8: a9:5b:ef:1d:03:a6:50:c9:7e:77:d5:ed:b7:eb:b7: 93:8f:fb:4b:b2:1a:4a:f5:af:bc:a8:c7:1d:d3:fc: cd:9b:c1:4b:45:a3:50:ee:aa:9e:be:4f:f6:63:86: 93:20:d5:a9:0f:36:d3:8b:b6:ac:51:c7:eb:a0:2a: 0c:45:c8:9e:d9:d6:85:32:ca:f0:13:9a:2d:d1:5e: 86:36:78:81:bb:df:49:26:8c:a7:71:51:65:fc:f1: 72:44:99:44:b5:be:eb:97:e2:c6:79:b9:17:48:49: df:42:55:ce:25:6f:d2:5f:42:8f:f3:ca:e2:d1:15: 5d:64:7b:8c:fa:f9:09:4b:09:23:49:a6:fd:7e:e6: ba:ff:e2:d0:7c:6e:38:3a:30:c4:f1:3d:7f:d5:66: 54:b6:0d:3b:95:01:da:01:31:62:60:c3:81:7a:2d: 32:ce:7f:4d:2a:4e:4c:ab:e1:e7:42:39:e9:21:08: a7:a3:1b:5c:d9:72:6d:bf:16:ab:dc:57:11:2b:a7: 08:46:3d:8f:37:0d:3e:e1:db:85:fd:d8:27:05:5a: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:64:63:B0:4F:DF:DA:8B:2B:74:E8:C0:F3:60:21:68:A2:9D:7C:CC X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:50:15:46:bd:6b:82:d4:44:dd:98:3b:72:d5:36:25:24:c3: 82:e7:de:5e:6d:4a:33:32:77:ca:14:f2:27:d4:fb:fb:4e:da: 90:30:d4:fe:ed:b1:c9:8f:e2:c5:3c:bd:df:0f:81:76:3d:42: 79:8c:35:11:a3:e9:68:3c:05:3f:84:0f:f1:d0:e8:a7:eb:1e: ca:a9:08:97:9c:36:69:8f:86:ae:a9:27:c8:3a:65:70:07:95: 75:85:5b:3d:28:24:86:46:ef:70:f6:0c:1c:d0:42:d8:29:b5: 32:97:0c:1f:df:7d:0a:b5:2d:65:c5:98:dd:f3:e5:db:fc:02: 39:ff:fc:9f:02:41:72:1b:12:09:82:84:f5:75:98:51:1d:9a: 3c:d7:40:2f:07:f3:ce:58:f9:a4:38:88:06:c5:c1:e5:f9:92: 4e:93:df:39:b5:4e:01:69:18:bd:12:fb:99:3b:7d:ca:9d:be: a3:13:f8:8e:9a:82:d1:75:fc:fc:08:ea:79:34:f7:2f:67:b5: 3b:22:60:1e:67:da:e4:e9:85:73:81:ac:a5:92:8a:42:45:13: 75:8c:f9:0a:63:fd:9c:94:b8:d9:33:e7:7b:e7:ea:2c:d4:70: a6:a9:85:72:13:ab:4a:0c:2c:98:18:b0:93:0a:03:ff:ef:b7: 5f:a7:a4:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5xXLAYG7Jr5AjhCKnQabNQ/HQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNTEwMjUwMDQ3MDlaFw0yNTEwMjgxMDIzMDlaMDMxMTAvBgNV BAMTKEVFNjQ2M0IwNEZERkRBOEIyQjc0RThDMEYzNjAyMTY4QTI5RDdDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxnkm15ui41QwXLgzcGhkdyBD /RW6SSypvkpAUsR1QN1Y/4xt5104QC6Y2Klb7x0DplDJfnfV7bfrt5OP+0uyGkr1 r7yoxx3T/M2bwUtFo1Duqp6+T/ZjhpMg1akPNtOLtqxRx+ugKgxFyJ7Z1oUyyvAT mi3RXoY2eIG730kmjKdxUWX88XJEmUS1vuuX4sZ5uRdISd9CVc4lb9JfQo/zyuLR FV1ke4z6+QlLCSNJpv1+5rr/4tB8bjg6MMTxPX/VZlS2DTuVAdoBMWJgw4F6LTLO f00qTkyr4edCOekhCKejG1zZcm2/FqvcVxErpwhGPY83DT7h24X92CcFWmDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7mRjsE/f2osrdOjA82AhaKKdfMwwHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpQFUa9a4LURN2YO3LVNiUkw4Ln3l5tSjMy d8oU8ifU+/tO2pAw1P7tscmP4sU8vd8PgXY9QnmMNRGj6Wg8BT+ED/HQ6KfrHsqp CJecNmmPhq6pJ8g6ZXAHlXWFWz0oJIZG73D2DBzQQtgptTKXDB/ffQq1LWXFmN3z 5dv8Ajn//J8CQXIbEgmChPV1mFEdmjzXQC8H885Y+aQ4iAbFweX5kk6T3zm1TgFp GL0S+5k7fcqdvqMT+I6agtF1/PwI6nk09y9ntTsiYB5n2uTphXOBrKWSikJFE3WM +Qpj/ZyUuNkz53vn6izUcKaphXITq0oMLJgYsJMKA//vt1+npFw= -----END CERTIFICATE-----Generated at Sat Oct 25 16:29:55 2025 by rpki-client