$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: Pm8WZUo/mfVfl7FUDxXUO3+pYMz4Kl/PZB5D4CNn0so= Subject key identifier: A0:93:0E:7E:C0:0B:B2:59:02:80:EC:11:6B:5D:0E:E0:A0:8D:BD:D4 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 21D2A4E210DD78BA94DE175F83FF2BBEFD85DCC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: EB Signing time: Mon 04 Aug 2025 17:01:58 +0000 Manifest this update: Mon 04 Aug 2025 16:56:58 +0000 Manifest next update: Thu 07 Aug 2025 21:09:58 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) 3: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: EtgHZMZ/S5nR1rW0nsjH/n5Au8kj3GijZui3/OzHWVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 20:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d2:a4:e2:10:dd:78:ba:94:de:17:5f:83:ff:2b:be:fd:85:dc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Aug 4 16:56:58 2025 GMT Not After : Aug 7 21:09:58 2025 GMT Subject: CN=A0930E7EC00BB2590280EC116B5D0EE0A08DBDD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:46:ad:e4:32:2a:0e:72:1b:db:e5:b2:30: ba:9d:56:20:0c:a0:ec:01:c3:5c:44:fb:67:e6:79: ee:b2:1d:52:f4:78:89:cc:38:19:e5:97:ec:6d:aa: 06:7e:7f:70:38:9c:bd:9e:c1:d6:cc:42:34:eb:4a: e9:13:77:d6:40:53:ef:6e:1a:b7:8a:06:6a:a2:ee: 41:a4:6f:63:4f:02:21:86:dc:a3:0a:72:f0:72:2e: b2:71:c2:a7:a1:cb:8f:d0:d9:1b:23:cb:48:32:5b: e0:42:96:4f:2f:5d:62:0b:18:72:19:17:59:ad:0c: 1c:df:03:ba:10:dc:c4:2d:33:6f:5d:8a:7b:cd:93: 8b:6b:43:d5:12:d4:7c:cc:6d:62:df:2d:5e:e6:46: 39:d1:b7:c1:6b:7d:af:f1:af:7f:fd:06:56:1d:43: 27:82:ba:7f:21:c2:e0:ec:61:19:b4:20:ba:4b:87: 2b:06:23:70:9c:2f:de:32:8b:45:e0:ad:7c:c3:d1: 25:c6:07:eb:5b:f5:b4:63:29:9b:ff:67:20:b8:aa: 28:bc:2a:9e:62:3a:ec:d9:f9:a8:fc:ae:be:30:df: 31:df:f0:6d:9c:61:5a:68:e4:e8:b4:cb:60:0d:8e: 32:51:d2:26:1d:a7:93:75:81:59:28:15:56:60:8a: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:93:0E:7E:C0:0B:B2:59:02:80:EC:11:6B:5D:0E:E0:A0:8D:BD:D4 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c1:40:ff:00:84:55:50:fc:eb:e0:07:40:a8:7e:e7:59:4b: ec:42:26:20:bf:19:10:6a:64:cf:60:29:52:06:17:6c:9d:e2: cc:ba:1b:91:bb:7c:51:f1:22:7f:98:cd:4c:5b:43:6a:28:b0: 58:5b:5b:0e:4a:bc:44:5e:5e:34:53:0f:2b:a7:1f:30:30:b8: 93:36:e4:55:89:e6:45:f8:56:35:7f:01:6f:f7:72:59:90:a2: 89:54:39:02:2d:84:6f:3e:69:a8:91:35:3b:33:9b:e5:d8:a2: 0c:89:fe:e8:4f:c9:e0:a8:45:37:57:69:5b:83:e1:66:93:40: 76:ac:f8:21:f9:89:d6:d4:38:5d:b0:00:7d:aa:2c:a4:11:1a: f5:3d:80:2d:b7:7c:c2:cf:2f:ae:29:ce:4d:ba:4d:e0:51:e1: 0a:c8:ae:96:56:d5:a8:a7:c1:4d:fd:e4:5c:bb:61:cc:18:5c: c5:66:84:71:e0:20:ce:c3:91:f1:b3:43:18:1e:ae:fc:89:34: 0b:ef:25:a0:14:dc:93:77:31:d7:15:1f:44:b6:f6:4f:5e:9e: 37:97:10:81:a3:82:ce:6b:58:71:35:1a:df:d7:72:54:31:a1: e8:71:fa:b2:59:95:71:04:bc:ad:72:97:cb:aa:13:84:8d:23: 4f:85:17:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdKk4hDdeLqU3hdfg/8rvv2F3MMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTA4MDQxNjU2NThaFw0yNTA4MDcyMTA5NThaMDMxMTAvBgNV BAMTKEEwOTMwRTdFQzAwQkIyNTkwMjgwRUMxMTZCNUQwRUUwQTA4REJERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVEat5DIqDnIb2+WyMLqdViAM oOwBw1xE+2fmee6yHVL0eInMOBnll+xtqgZ+f3A4nL2ewdbMQjTrSukTd9ZAU+9u GreKBmqi7kGkb2NPAiGG3KMKcvByLrJxwqehy4/Q2Rsjy0gyW+BClk8vXWILGHIZ F1mtDBzfA7oQ3MQtM29dinvNk4trQ9US1HzMbWLfLV7mRjnRt8Frfa/xr3/9BlYd QyeCun8hwuDsYRm0ILpLhysGI3CcL94yi0XgrXzD0SXGB+tb9bRjKZv/ZyC4qii8 Kp5iOuzZ+aj8rr4w3zHf8G2cYVpo5Oi0y2ANjjJR0iYdp5N1gVkoFVZgilA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoJMOfsALslkCgOwRa10O4KCNvdQwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7BQP8AhFVQ/OvgB0CofudZS+xCJiC/GRBq ZM9gKVIGF2yd4sy6G5G7fFHxIn+YzUxbQ2oosFhbWw5KvEReXjRTDyunHzAwuJM2 5FWJ5kX4VjV/AW/3clmQoolUOQIthG8+aaiRNTszm+XYogyJ/uhPyeCoRTdXaVuD 4WaTQHas+CH5idbUOF2wAH2qLKQRGvU9gC23fMLPL64pzk26TeBR4QrIrpZW1ain wU395Fy7YcwYXMVmhHHgIM7DkfGzQxgervyJNAvvJaAU3JN3MdcVH0S29k9enjeX EIGjgs5rWHE1Gt/XclQxoehx+rJZlXEEvK1yl8uqE4SNI0+FFxw= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:08 2025 by rpki-client