$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: VioFlrh7x6xcM+Ykl/0N+EIk6Pfb/2t4Gu7ImFK6DJ8= Subject key identifier: 43:CB:BC:0F:0D:02:32:BA:24:A7:29:C4:B4:30:1D:7A:B4:B5:A6:7E Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 2015EDE4CC1C963CC5BF0CF45D0ED3562EAFB4CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 01FF Signing time: Tue 05 Aug 2025 13:52:01 +0000 Manifest this update: Tue 05 Aug 2025 13:47:01 +0000 Manifest next update: Fri 08 Aug 2025 21:59:01 +0000 Files and hashes: 1: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: OfhLjul7buJ2Na/mHHkXUMGgQfYlwXhN/fJ3LR+aV60=) 2: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) 3: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 4: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) 5: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 21:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:15:ed:e4:cc:1c:96:3c:c5:bf:0c:f4:5d:0e:d3:56:2e:af:b4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Aug 5 13:47:01 2025 GMT Not After : Aug 8 21:59:01 2025 GMT Subject: CN=43CBBC0F0D0232BA24A729C4B4301D7AB4B5A67E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:fe:99:30:6c:69:70:d1:6b:5d:42:c6:8b: b4:45:9f:67:0f:5a:66:31:bf:98:c2:0a:c2:d6:76: 37:98:37:2f:fc:16:63:82:2b:03:c6:ce:a1:bc:ae: af:d6:c6:34:f3:d5:e8:03:7a:86:26:86:bf:d5:fa: 5a:48:b3:81:24:d8:0a:18:b6:3b:e5:5a:5f:4a:3b: 0b:f4:8b:fc:71:bf:45:8d:dc:29:e4:c2:e5:37:9e: cb:21:72:33:b2:27:12:b6:28:c1:ca:7d:70:cb:12: b8:88:56:65:a0:90:04:4f:d2:1a:6c:ad:58:46:d5: 6c:6e:ed:78:6b:ac:62:96:4c:93:36:36:23:c3:ef: 60:a1:a3:82:78:2c:5c:de:dd:40:39:d6:4b:84:77: 92:d4:df:4d:90:bc:72:ad:d9:19:87:60:77:16:ce: bd:c5:62:c7:03:9e:00:4c:42:71:84:2e:1a:f4:97: 4b:89:ae:ec:fa:47:07:66:e6:78:a3:d9:a1:3b:97: 51:f7:e8:e1:b1:43:d4:b6:e7:e7:ba:b6:5c:dc:5b: 6d:0e:1a:49:64:c9:fb:ee:e0:e6:37:ab:05:16:ca: 4d:55:2b:a1:0e:ae:0b:ad:49:d6:fe:01:32:1a:32: a3:8a:9d:fe:a9:54:5b:c3:20:1a:41:e2:2f:94:d1: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CB:BC:0F:0D:02:32:BA:24:A7:29:C4:B4:30:1D:7A:B4:B5:A6:7E X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:94:27:02:c2:e7:b1:80:91:a0:59:68:d8:66:f4:81:33:9b: 19:06:00:98:bb:5d:cb:c7:10:b8:4d:dc:b7:44:d9:b5:28:00: cd:ff:f5:74:8e:10:2e:4c:cf:09:1c:90:bf:34:7e:5b:03:e7: 1d:ec:ca:cd:da:8d:5e:4e:62:8c:0c:36:a8:e3:19:29:92:e9: ca:da:0a:a1:a0:de:5b:10:d1:1f:66:f2:df:fb:89:16:8e:7d: ea:32:ab:c2:11:be:c3:b8:c3:2a:01:31:54:19:fa:27:f5:e8: 3e:c8:37:10:50:ce:03:1a:29:db:a3:2a:b5:e8:ae:a4:16:c0: 61:a1:d1:cc:55:53:00:39:4f:c6:dc:21:2d:9b:9f:db:e4:5a: 6d:68:b1:2e:07:e6:4c:5d:29:d0:73:8f:91:b2:b3:cf:1c:09: ae:9f:44:de:30:d2:76:57:2a:e0:f7:46:20:6d:8c:34:1b:de: 14:5b:fb:6b:5b:2d:27:10:0a:72:93:c8:26:8c:34:4b:17:e2: ba:d5:70:af:bf:79:6f:f2:67:cf:72:0b:37:f9:20:97:1f:cb: 87:4a:1a:df:a0:0a:a1:2e:67:10:8d:df:6a:aa:5f:06:fb:fb: 5e:f3:32:3b:ed:01:32:08:e9:a9:fb:54:b4:cf:74:eb:09:3b: eb:3a:e1:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBXt5MwcljzFvwz0XQ7TVi6vtM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTA4MDUxMzQ3MDFaFw0yNTA4MDgyMTU5MDFaMDMxMTAvBgNV BAMTKDQzQ0JCQzBGMEQwMjMyQkEyNEE3MjlDNEI0MzAxRDdBQjRCNUE2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWXv6ZMGxpcNFrXULGi7RFn2cP WmYxv5jCCsLWdjeYNy/8FmOCKwPGzqG8rq/WxjTz1egDeoYmhr/V+lpIs4Ek2AoY tjvlWl9KOwv0i/xxv0WN3CnkwuU3nsshcjOyJxK2KMHKfXDLEriIVmWgkARP0hps rVhG1Wxu7XhrrGKWTJM2NiPD72Cho4J4LFze3UA51kuEd5LU302QvHKt2RmHYHcW zr3FYscDngBMQnGELhr0l0uJruz6Rwdm5nij2aE7l1H36OGxQ9S25+e6tlzcW20O Gklkyfvu4OY3qwUWyk1VK6EOrgutSdb+ATIaMqOKnf6pVFvDIBpB4i+U0WV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8u8Dw0CMrokpynEtDAderS1pn4wHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISUJwLC57GAkaBZaNhm9IEzmxkGAJi7XcvH ELhN3LdE2bUoAM3/9XSOEC5MzwkckL80flsD5x3sys3ajV5OYowMNqjjGSmS6cra CqGg3lsQ0R9m8t/7iRaOfeoyq8IRvsO4wyoBMVQZ+if16D7INxBQzgMaKdujKrXo rqQWwGGh0cxVUwA5T8bcIS2bn9vkWm1osS4H5kxdKdBzj5Gys88cCa6fRN4w0nZX KuD3RiBtjDQb3hRb+2tbLScQCnKTyCaMNEsX4rrVcK+/eW/yZ89yCzf5IJcfy4dK Gt+gCqEuZxCN32qqXwb7+17zMjvtATII6an7VLTPdOsJO+s64ew= -----END CERTIFICATE-----Generated at Thu Aug 7 04:03:54 2025 by rpki-client