$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: UX5NN3HM8LFWsABk1AgvWt3C+b71zjS0taMEGQZk1LI= Subject key identifier: 38:C7:2A:F6:68:D5:A7:BE:A6:EC:21:F2:41:8A:FD:72:41:67:97:C3 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 1477036D0D6D04AA42B7A728930C2F54ADBA5040 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04C8 Signing time: Tue 05 Aug 2025 02:40:47 +0000 Manifest this update: Tue 05 Aug 2025 02:35:47 +0000 Manifest next update: Fri 08 Aug 2025 03:40:47 +0000 Files and hashes: 1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) 2: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: vtou8XoB4Er+ZHsz4r/U++qJU15aaENDmfYaVgnlupM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:77:03:6d:0d:6d:04:aa:42:b7:a7:28:93:0c:2f:54:ad:ba:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Aug 5 02:35:47 2025 GMT Not After : Aug 8 03:40:47 2025 GMT Subject: CN=38C72AF668D5A7BEA6EC21F2418AFD72416797C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:7f:eb:42:c0:e5:c1:ca:d3:6b:94:4f:55: 29:8b:4c:23:42:16:78:99:16:dc:f5:c2:43:33:c5: 16:53:4e:2f:bf:c7:8e:40:93:70:90:65:e8:56:f1: 26:89:91:14:4e:55:16:5a:c3:51:cb:c4:53:15:ff: 31:54:41:7f:7b:87:c7:e2:99:c1:51:d4:11:e3:dd: 15:f1:b3:21:e4:9f:61:39:45:de:e3:fb:7c:ef:6f: d8:54:29:3e:ef:c2:7f:1b:68:e4:b8:22:1b:9b:03: 98:d0:a7:a2:46:e5:6e:39:0c:e7:cd:51:e7:13:78: a9:0d:73:0d:cd:56:e7:6c:49:a0:f9:17:fe:d7:2f: de:0a:e2:f5:c5:06:45:06:28:c1:9b:35:ba:c0:b6: cd:c4:0a:43:a5:7b:55:e7:2f:8a:1f:53:cc:cb:1c: 5e:fc:c1:50:dd:48:73:17:90:73:07:fc:b6:97:dd: 3b:c3:6f:01:a6:b3:1f:65:8d:9f:dd:27:c7:8c:3e: bf:8c:be:07:3f:f6:8b:18:4b:c6:4c:02:0c:4c:77: 9f:07:74:d8:1b:b0:bc:a5:e1:99:12:d7:94:85:a4: 4e:bf:f4:4c:8e:a7:3e:30:cc:d7:3d:29:b8:55:15: 17:08:ce:2c:f2:d6:2f:9a:02:bd:11:a0:d0:d9:60: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C7:2A:F6:68:D5:A7:BE:A6:EC:21:F2:41:8A:FD:72:41:67:97:C3 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:84:48:59:74:cf:b6:46:82:47:94:81:77:d5:b7:0b:6c:f9: 14:f8:57:1c:56:1f:ea:41:3f:5f:b1:82:4c:44:d3:1e:48:88: a9:90:a3:2f:cb:74:50:62:89:92:08:79:b2:b3:f5:fd:f6:88: de:a6:5c:25:c3:c2:f6:5e:4d:4f:7b:ac:6f:8b:f1:5d:d5:37: 4d:22:fc:f2:b0:42:c4:4c:3d:9a:2e:f0:39:de:61:ee:20:3f: 01:7f:69:63:6e:c4:b8:89:fc:53:f5:13:80:e4:d0:56:5c:84: ac:c7:8c:f7:98:fc:a0:64:9d:7b:27:f0:f8:45:d5:6b:a3:1d: f7:c0:8a:51:a1:14:05:19:57:83:a8:74:b6:ed:26:53:8d:e2: fa:3a:e9:32:f8:9b:36:a9:dd:7f:61:3d:58:1f:10:9d:fc:95: 40:b7:3f:06:09:ea:49:59:0e:1b:8e:d2:96:17:d0:41:92:bf: b9:21:ab:1b:0d:94:6c:22:37:4a:93:1d:85:8f:38:72:34:94: e8:f8:51:0a:86:11:02:1b:f3:f3:5a:c9:05:18:d7:be:a4:e9: 61:61:31:2d:87:0a:b8:e8:e3:38:24:48:85:6e:97:d8:3e:ef: 87:d0:3b:ee:a7:bc:9c:64:7b:56:29:25:36:d8:71:c2:d1:a9: fd:0d:40:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHcDbQ1tBKpCt6cokwwvVK26UEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTA4MDUwMjM1NDdaFw0yNTA4MDgwMzQwNDdaMDMxMTAvBgNV BAMTKDM4QzcyQUY2NjhENUE3QkVBNkVDMjFGMjQxOEFGRDcyNDE2Nzk3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOnn/rQsDlwcrTa5RPVSmLTCNC FniZFtz1wkMzxRZTTi+/x45Ak3CQZehW8SaJkRROVRZaw1HLxFMV/zFUQX97h8fi mcFR1BHj3RXxsyHkn2E5Rd7j+3zvb9hUKT7vwn8baOS4IhubA5jQp6JG5W45DOfN UecTeKkNcw3NVudsSaD5F/7XL94K4vXFBkUGKMGbNbrAts3ECkOle1XnL4ofU8zL HF78wVDdSHMXkHMH/LaX3TvDbwGmsx9ljZ/dJ8eMPr+Mvgc/9osYS8ZMAgxMd58H dNgbsLyl4ZkS15SFpE6/9EyOpz4wzNc9KbhVFRcIzizy1i+aAr0RoNDZYPoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOMcq9mjVp76m7CHyQYr9ckFnl8MwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSESFl0z7ZGgkeUgXfVtwts+RT4VxxWH+pB P1+xgkxE0x5IiKmQoy/LdFBiiZIIebKz9f32iN6mXCXDwvZeTU97rG+L8V3VN00i /PKwQsRMPZou8DneYe4gPwF/aWNuxLiJ/FP1E4Dk0FZchKzHjPeY/KBknXsn8PhF 1WujHffAilGhFAUZV4OodLbtJlON4vo66TL4mzap3X9hPVgfEJ38lUC3PwYJ6klZ DhuO0pYX0EGSv7khqxsNlGwiN0qTHYWPOHI0lOj4UQqGEQIb8/NayQUY176k6WFh MS2HCrjo4zgkSIVul9g+74fQO+6nvJxke1YpJTbYccLRqf0NQNc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:00 2025 by rpki-client