$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: t7f86MnhTgMnEvQJzFfz65E64YhF4LNofpaN0d/BAZU= Subject key identifier: 56:55:2D:F8:4D:88:3E:5B:E6:22:D6:0D:1A:F9:25:FD:F2:E4:B1:64 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 05082A67A7955F42E8E9BF752B2C3D703513AF0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 04F7 Signing time: Fri 08 Aug 2025 06:01:43 +0000 Manifest this update: Fri 08 Aug 2025 05:56:43 +0000 Manifest next update: Mon 11 Aug 2025 06:42:43 +0000 Files and hashes: 1: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) 2: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: xbqJfguLJYY6RL4XLHsPKscwPaoctCOkzjBZB5ctDl0=) 3: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 06:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:08:2a:67:a7:95:5f:42:e8:e9:bf:75:2b:2c:3d:70:35:13:af:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Aug 8 05:56:43 2025 GMT Not After : Aug 11 06:42:43 2025 GMT Subject: CN=56552DF84D883E5BE622D60D1AF925FDF2E4B164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:ab:8b:ad:63:ef:f1:4c:9f:c3:52:09:94: 2b:4d:78:57:73:ba:64:ba:7e:40:19:6e:aa:6f:db: 00:fe:23:91:1b:d6:bf:bc:18:88:4f:48:2e:01:d2: 09:c5:ab:00:30:41:8b:aa:49:60:bd:6e:3a:35:80: 6b:4c:dd:45:de:23:76:5f:a4:66:a9:bd:6c:f4:dc: 2c:0d:d2:dd:85:f1:d8:33:a3:5f:bb:2f:fd:05:7f: 74:51:e9:45:66:64:2e:fd:70:77:08:5b:12:2b:ab: 2c:ac:91:7c:7f:82:d4:89:3a:12:00:6e:b5:37:8e: 4d:cb:f3:cc:db:0e:c9:f9:0a:f2:61:b2:87:06:4c: 2c:f6:c3:1e:5a:d4:0f:f9:78:50:7b:dd:f4:e4:b2: d7:d5:c2:d5:97:1b:a5:ab:1f:4d:9a:28:18:d7:e9: a0:7c:e4:86:88:33:56:aa:19:d0:89:ef:ce:8b:13: fa:82:9e:51:07:fb:36:50:9e:34:89:bf:a4:a1:a7: 1d:56:62:f9:64:56:f6:67:18:9a:36:ab:4a:3b:9a: d6:7f:af:d0:c8:76:b9:da:05:e1:c5:a1:d6:1a:5c: 7e:0b:72:fa:5b:5e:2a:90:a0:fb:90:f5:e0:5f:2d: de:54:79:8b:63:37:c7:81:54:34:3b:f2:9d:59:ed: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:55:2D:F8:4D:88:3E:5B:E6:22:D6:0D:1A:F9:25:FD:F2:E4:B1:64 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:24:88:3c:f1:08:ab:14:39:a9:ca:47:c5:41:94:68:ce:5b: 25:a0:fd:24:ea:f3:d1:fe:23:f5:d9:65:6d:30:d2:05:75:25: 80:13:24:3e:21:f0:8a:d2:5f:5b:fc:ea:6d:aa:07:6b:70:cc: bb:01:47:be:f8:55:2d:73:d1:49:2a:2c:7d:de:fb:b5:5f:8a: 6a:7b:9b:78:f6:5f:e4:03:cb:8f:61:c7:60:2b:85:8c:76:b0: a9:69:80:6c:d3:e1:0f:62:e7:9e:85:2a:d0:b7:85:c7:44:b3: bf:c4:f1:f4:4c:ec:3f:a3:23:b2:90:53:b8:c7:f2:5c:51:7d: d5:70:86:62:3d:62:7e:e6:70:8d:1f:c2:dc:b9:cd:f2:a1:89: e7:01:4e:0d:62:fb:60:25:6c:ea:ed:ba:e1:04:e7:cd:ca:fd: 7d:36:42:d0:0d:10:a1:7b:00:87:47:6c:80:ac:df:e3:00:5c: 19:f0:de:92:71:42:52:a8:26:c7:27:1f:f3:70:e0:84:14:41: a7:e4:63:ab:a7:4f:53:5a:46:97:e2:b9:2a:55:aa:da:b4:b2: 08:b3:22:d4:6a:53:9e:2d:22:f1:0b:cc:ae:09:75:70:ab:bf: de:90:ae:d8:4d:7e:94:28:bb:0c:86:cd:c0:48:84:13:f8:f6: 07:04:cb:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQgqZ6eVX0Lo6b91Kyw9cDUTrw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNTA4MDgwNTU2NDNaFw0yNTA4MTEwNjQyNDNaMDMxMTAvBgNV BAMTKDU2NTUyREY4NEQ4ODNFNUJFNjIyRDYwRDFBRjkyNUZERjJFNEIxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBauLrWPv8Uyfw1IJlCtNeFdz umS6fkAZbqpv2wD+I5Eb1r+8GIhPSC4B0gnFqwAwQYuqSWC9bjo1gGtM3UXeI3Zf pGapvWz03CwN0t2F8dgzo1+7L/0Ff3RR6UVmZC79cHcIWxIrqyyskXx/gtSJOhIA brU3jk3L88zbDsn5CvJhsocGTCz2wx5a1A/5eFB73fTkstfVwtWXG6WrH02aKBjX 6aB85IaIM1aqGdCJ786LE/qCnlEH+zZQnjSJv6Shpx1WYvlkVvZnGJo2q0o7mtZ/ r9DIdrnaBeHFodYaXH4LcvpbXiqQoPuQ9eBfLd5UeYtjN8eBVDQ78p1Z7dVZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVlUt+E2IPlvmItYNGvkl/fLksWQwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYkiDzxCKsUOanKR8VBlGjOWyWg/STq89H+ I/XZZW0w0gV1JYATJD4h8IrSX1v86m2qB2twzLsBR774VS1z0UkqLH3e+7Vfimp7 m3j2X+QDy49hx2ArhYx2sKlpgGzT4Q9i556FKtC3hcdEs7/E8fRM7D+jI7KQU7jH 8lxRfdVwhmI9Yn7mcI0fwty5zfKhiecBTg1i+2AlbOrtuuEE583K/X02QtANEKF7 AIdHbICs3+MAXBnw3pJxQlKoJscnH/Nw4IQUQafkY6unT1NaRpfiuSpVqtq0sgiz ItRqU54tIvELzK4JdXCrv96QrthNfpQouwyGzcBIhBP49gcEy9k= -----END CERTIFICATE-----Generated at Fri Aug 8 12:49:36 2025 by rpki-client