$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: 9HikeIM3pmjwrz/2sjhFv9GyKVS+s1IToLxz+NgvHPM= Subject key identifier: 2B:47:69:37:47:DD:72:8D:43:6D:A2:A7:74:32:EB:C1:64:39:EC:F2 Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 368C497DDFB79446D9C3A8BC8C28E4215EDD169F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 016B Signing time: Wed 06 Aug 2025 06:11:56 +0000 Manifest this update: Wed 06 Aug 2025 06:06:56 +0000 Manifest next update: Sat 09 Aug 2025 07:02:56 +0000 Files and hashes: 1: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: HAuPwxbBWq+T14AKmmrMF5I8FwvSFgYSA+KM8n7+kBc=) 2: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) 3: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8c:49:7d:df:b7:94:46:d9:c3:a8:bc:8c:28:e4:21:5e:dd:16:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Aug 6 06:06:56 2025 GMT Not After : Aug 9 07:02:56 2025 GMT Subject: CN=2B47693747DD728D436DA2A77432EBC16439ECF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ba:54:20:c2:47:c0:a0:f4:1e:97:37:91:cf: 23:65:c9:6a:ca:23:6b:bc:a4:20:b9:b5:36:fc:e1: 00:88:85:a3:69:97:07:04:13:fc:55:c0:c7:06:2d: b2:7b:d9:0f:f2:09:5e:39:71:fd:53:6a:4b:3a:1a: 1f:f8:d2:f1:82:c9:48:11:f2:36:c4:08:97:d2:66: 18:16:7d:67:2b:cf:fb:3d:9d:ca:c2:89:37:90:2d: 5e:d6:07:54:6f:3b:0b:2b:69:51:52:a3:e4:61:70: a0:6e:c7:e0:5a:61:17:56:92:a5:da:ba:d6:9e:c2: 02:e4:f2:2e:35:ef:d4:82:2c:68:85:a0:b7:eb:7f: 9a:83:1e:2c:26:f3:d4:63:0b:e4:ad:b4:91:b0:20: c2:8b:e4:01:71:1a:5b:dd:4f:04:81:bd:e4:16:4c: 12:84:a4:4f:f3:3d:9d:e4:a9:0a:53:fb:09:6b:15: 83:e5:a7:6a:ba:3c:4e:f9:34:1a:5d:75:8b:46:e5: 2a:a5:6d:52:0b:b0:07:b2:21:9d:fc:52:96:d8:dd: fd:f0:03:b2:58:f4:72:0e:77:8d:ae:69:98:11:b2: ca:e9:0a:22:70:19:db:cb:b0:3f:f1:47:eb:dd:f6: 1d:64:a6:b3:37:a7:c6:de:07:40:99:d6:9b:ed:33: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:47:69:37:47:DD:72:8D:43:6D:A2:A7:74:32:EB:C1:64:39:EC:F2 X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:04:1e:8a:3c:c9:a6:db:28:bf:0e:2b:91:a3:36:e0:b8:64: fe:e9:db:dd:f6:64:43:8e:2a:a2:3e:c6:44:c7:46:c9:0b:92: 70:9c:14:98:d0:60:a9:1e:4a:54:d5:8b:b5:74:df:8b:a9:64: 7e:60:8f:e6:97:73:d6:c1:09:d1:1c:82:34:77:f8:a2:e2:68: b8:e2:b8:18:d6:a1:92:77:d4:f8:3a:bf:b7:55:51:20:78:89: a1:fa:d3:fc:cb:7a:9e:e3:28:b6:98:40:ca:af:24:d7:70:2c: 60:6b:d3:7d:5d:48:55:b7:8e:94:45:7a:b5:08:64:85:86:e3: d4:2f:0b:21:a4:68:e9:81:2a:ed:66:84:4e:75:c8:09:e3:92: dc:9b:e5:ad:4a:2e:10:52:87:e1:63:aa:34:07:9c:23:8b:1e: 43:51:27:bd:ea:31:15:bd:94:83:af:bd:39:68:41:40:c8:f8: 40:a8:35:ae:9d:08:ae:76:2e:ed:c0:c5:4e:b5:1a:3e:47:e3: 05:17:2e:c5:fa:cb:ac:96:a4:9c:da:1e:61:5d:0a:2c:26:40: b5:df:59:ba:9f:c4:b5:8c:cb:f6:02:57:60:67:c1:cf:f3:4e: 4a:28:73:7f:4e:a9:63:04:42:21:15:d7:96:d5:8b:18:59:14: 08:aa:77:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoxJfd+3lEbZw6i8jCjkIV7dFp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTA4MDYwNjA2NTZaFw0yNTA4MDkwNzAyNTZaMDMxMTAvBgNV BAMTKDJCNDc2OTM3NDdERDcyOEQ0MzZEQTJBNzc0MzJFQkMxNjQzOUVDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtulQgwkfAoPQelzeRzyNlyWrK I2u8pCC5tTb84QCIhaNplwcEE/xVwMcGLbJ72Q/yCV45cf1Taks6Gh/40vGCyUgR 8jbECJfSZhgWfWcrz/s9ncrCiTeQLV7WB1RvOwsraVFSo+RhcKBux+BaYRdWkqXa utaewgLk8i4179SCLGiFoLfrf5qDHiwm89RjC+SttJGwIMKL5AFxGlvdTwSBveQW TBKEpE/zPZ3kqQpT+wlrFYPlp2q6PE75NBpddYtG5SqlbVILsAeyIZ38UpbY3f3w A7JY9HIOd42uaZgRssrpCiJwGdvLsD/xR+vd9h1kprM3p8beB0CZ1pvtM7ZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0dpN0fdco1DbaKndDLrwWQ57PIwHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoEHoo8yabbKL8OK5GjNuC4ZP7p2932ZEOO KqI+xkTHRskLknCcFJjQYKkeSlTVi7V034upZH5gj+aXc9bBCdEcgjR3+KLiaLji uBjWoZJ31Pg6v7dVUSB4iaH60/zLep7jKLaYQMqvJNdwLGBr031dSFW3jpRFerUI ZIWG49QvCyGkaOmBKu1mhE51yAnjktyb5a1KLhBSh+FjqjQHnCOLHkNRJ73qMRW9 lIOvvTloQUDI+ECoNa6dCK52Lu3AxU61Gj5H4wUXLsX6y6yWpJzaHmFdCiwmQLXf WbqfxLWMy/YCV2Bnwc/zTkooc39OqWMEQiEV15bVixhZFAiqd80= -----END CERTIFICATE-----Generated at Thu Aug 7 17:36:15 2025 by rpki-client