$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: qBylbWnQEg/ybChWIha/B4YzSca53wfV+7ZMsvxf52w= Subject key identifier: D9:AA:1D:55:E9:3A:43:1D:9E:7C:ED:AE:4D:F5:95:E6:D4:B6:70:6A Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 01BE80F92EF5F42626988F9DCD49FCD7AA656CF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: FB Signing time: Mon 04 Aug 2025 22:30:47 +0000 Manifest this update: Mon 04 Aug 2025 22:25:47 +0000 Manifest next update: Fri 08 Aug 2025 03:07:47 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: bCf3JyC+LLu9vwPaCijrkMvqHp1pfuKHQsFMVhvXQkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:be:80:f9:2e:f5:f4:26:26:98:8f:9d:cd:49:fc:d7:aa:65:6c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Aug 4 22:25:47 2025 GMT Not After : Aug 8 03:07:47 2025 GMT Subject: CN=D9AA1D55E93A431D9E7CEDAE4DF595E6D4B6706A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:8e:ff:8c:ec:50:3b:86:99:55:49:4e:a5: 3d:54:df:09:0b:fe:f1:01:9a:e0:13:27:bc:e6:4e: 1c:a6:f5:d1:8f:40:ba:c9:2b:31:c6:4e:87:63:94: bd:f4:e6:6c:e1:b6:c5:63:a3:a0:60:f2:b6:19:0e: bc:fe:56:bc:27:a2:77:9c:10:79:b0:e0:35:b1:5b: 15:a3:45:4b:2c:fb:c6:5d:6d:0a:6b:59:3b:e5:15: da:e9:ad:f1:c7:14:05:89:82:c5:0b:96:06:26:3a: b2:ad:a7:e8:7d:6a:ef:94:d3:26:ac:f0:10:f8:eb: cb:9c:dd:44:58:d8:02:f0:75:b0:b2:85:8e:42:e9: dc:d4:09:63:b3:62:10:d7:fa:1f:dc:6a:d5:4b:57: 1f:e1:c6:3c:6a:bf:6f:bf:7f:3f:91:7a:e7:f5:45: 1e:3a:42:fd:9d:24:b9:46:a9:c9:e2:8e:b2:37:fa: 84:fe:91:32:0e:c9:1c:fc:ee:06:dd:58:50:55:ab: 38:c0:b9:e9:03:3a:fe:58:37:21:f4:b0:12:f3:45: 7c:0c:4e:d2:aa:22:ca:52:58:4d:19:13:82:4c:3c: 17:e1:25:e2:f3:94:2b:03:19:32:09:5e:b6:97:ed: d6:8e:92:a3:8f:da:61:4c:4e:d5:46:a4:35:11:54: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AA:1D:55:E9:3A:43:1D:9E:7C:ED:AE:4D:F5:95:E6:D4:B6:70:6A X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:e2:56:a9:8f:ba:f9:a1:1c:2a:25:7f:d1:b8:bb:08:bd:f2: df:7a:b8:6a:65:ed:e5:89:05:06:6e:11:7b:a6:9b:66:11:bb: b3:9a:84:e7:86:65:f5:d1:2e:aa:b3:54:ea:79:22:c5:91:23: 90:36:73:b5:42:1e:6c:1a:bf:b8:12:33:b7:be:02:3e:f7:fc: 60:88:c5:c8:04:4c:6f:d7:20:a5:51:55:85:37:b1:bb:87:33: 7d:ec:c3:06:bf:c9:56:a1:8a:ef:92:20:99:b5:4d:17:63:d3: e1:fa:ed:03:9a:65:e3:9b:50:34:63:77:5e:61:47:ea:61:cf: ec:ce:ef:c7:ab:50:d3:6f:0e:2e:bd:10:4c:c8:28:85:19:bc: 9f:61:f0:fc:1c:1a:6e:91:17:5b:d2:3c:60:27:fc:0e:ea:1c: 62:a2:64:8d:e8:8e:43:8f:1d:6a:fc:ff:32:60:22:4e:6d:b8: f2:6f:72:13:33:1f:62:b5:03:e5:dc:43:2d:bb:f6:20:4b:b4: a9:4f:34:66:a1:6f:f4:8b:a9:f9:c1:f6:b5:8e:c8:7b:a3:f9: fd:a5:b6:6a:93:a7:6b:d6:96:9c:ff:97:03:ab:52:5a:49:69: f0:00:b8:89:6b:57:79:48:23:78:2e:5b:68:53:ae:33:b7:cf: c5:6e:54:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAb6A+S719CYmmI+dzUn816plbPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTA4MDQyMjI1NDdaFw0yNTA4MDgwMzA3NDdaMDMxMTAvBgNV BAMTKEQ5QUExRDU1RTkzQTQzMUQ5RTdDRURBRTRERjU5NUU2RDRCNjcwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEY7/jOxQO4aZVUlOpT1U3wkL /vEBmuATJ7zmThym9dGPQLrJKzHGTodjlL305mzhtsVjo6Bg8rYZDrz+Vrwnonec EHmw4DWxWxWjRUss+8ZdbQprWTvlFdrprfHHFAWJgsULlgYmOrKtp+h9au+U0yas 8BD468uc3URY2ALwdbCyhY5C6dzUCWOzYhDX+h/catVLVx/hxjxqv2+/fz+Reuf1 RR46Qv2dJLlGqcnijrI3+oT+kTIOyRz87gbdWFBVqzjAuekDOv5YNyH0sBLzRXwM TtKqIspSWE0ZE4JMPBfhJeLzlCsDGTIJXraX7daOkqOP2mFMTtVGpDURVG2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2aodVek6Qx2efO2uTfWV5tS2cGowHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/iVqmPuvmhHColf9G4uwi98t96uGpl7eWJ BQZuEXumm2YRu7OahOeGZfXRLqqzVOp5IsWRI5A2c7VCHmwav7gSM7e+Aj73/GCI xcgETG/XIKVRVYU3sbuHM33swwa/yVahiu+SIJm1TRdj0+H67QOaZeObUDRjd15h R+phz+zO78erUNNvDi69EEzIKIUZvJ9h8PwcGm6RF1vSPGAn/A7qHGKiZI3ojkOP HWr8/zJgIk5tuPJvchMzH2K1A+XcQy279iBLtKlPNGahb/SLqfnB9rWOyHuj+f2l tmqTp2vWlpz/lwOrUlpJafAAuIlrV3lII3guW2hTrjO3z8VuVBA= -----END CERTIFICATE-----Generated at Thu Aug 7 03:55:26 2025 by rpki-client