$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: PxYv2cc97UboLwyDkF7gjFrFSbah8OFeQTz0cMCRHRw= Subject key identifier: FD:7D:11:0C:F8:22:02:A9:A5:40:63:62:00:47:A5:5D:A8:D5:CF:11 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 6C788C852027509FDBEC489B90FA3E233D9E410D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: ED Signing time: Thu 07 Aug 2025 20:12:09 +0000 Manifest this update: Thu 07 Aug 2025 20:07:09 +0000 Manifest next update: Mon 11 Aug 2025 07:37:09 +0000 Files and hashes: 1: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: 519c4siWigUrLgCcqJRb3ukZDCs41pIbDOzAN4nFeZk=) 2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 3: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 07:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:78:8c:85:20:27:50:9f:db:ec:48:9b:90:fa:3e:23:3d:9e:41:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Aug 7 20:07:09 2025 GMT Not After : Aug 11 07:37:09 2025 GMT Subject: CN=FD7D110CF82202A9A54063620047A55DA8D5CF11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4b:b4:f1:96:13:ac:b1:8f:47:3a:81:b3:ed: 37:28:ff:5e:2e:cd:d7:ca:55:cf:90:b2:92:43:f9: d1:0a:d7:43:e9:14:64:a5:6f:87:04:64:46:5c:47: 41:0b:64:83:8f:c7:3d:1c:db:86:8c:1e:4b:20:3c: 85:3f:93:d4:46:ce:0b:d9:6b:f8:8f:e0:14:21:e0: 69:a7:9d:c8:ba:d0:ec:6d:d8:81:74:dd:a0:20:7f: b7:13:14:1a:34:43:11:ea:47:f4:cf:71:61:12:66: e5:e8:1c:d3:2e:78:7e:80:2f:89:b8:47:e8:04:73: 83:c9:25:90:aa:16:ed:c6:5c:b2:cb:70:83:72:2c: 37:a0:f9:da:94:a3:43:ef:1d:d7:68:0d:d0:8b:b4: 39:ba:e7:b6:28:78:cf:e6:cb:9b:6d:25:a2:04:25: 8c:df:39:9c:4a:d2:2e:60:e5:ef:95:56:ee:11:20: c7:31:92:11:72:ac:b9:0a:3d:8b:b6:00:f1:38:f0: 93:d1:2d:80:d0:6c:86:f9:c9:c1:bd:ca:6e:e1:71: 40:48:a3:93:f9:d3:40:9e:c4:a2:d6:5b:b7:cc:22: 53:0d:28:0f:73:55:00:1c:2b:70:5e:cc:f5:1b:46: b1:ca:fc:4f:82:ea:32:c5:e4:ba:90:47:c7:0e:40: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7D:11:0C:F8:22:02:A9:A5:40:63:62:00:47:A5:5D:A8:D5:CF:11 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:55:71:72:84:8d:b5:ee:5c:f5:e7:90:58:1b:be:56:29:cf: 59:14:fc:48:1b:ad:f0:f3:8b:b6:83:99:22:db:77:96:61:09: 19:30:ea:fa:a2:a3:93:af:70:62:74:f1:32:c0:95:29:32:e0: 73:4e:82:fc:a4:14:a0:f8:0c:c2:34:24:48:b2:be:c3:0a:70: f1:b8:e4:d7:97:24:01:71:b9:c0:6c:78:c9:d4:1c:2d:58:17: 6b:5d:94:ac:45:5e:1f:f6:39:5c:61:59:e3:d6:64:9f:be:23: 1c:ba:74:2c:c2:33:5d:26:29:02:4f:6e:55:4c:f1:40:93:6a: 0b:86:26:15:9a:01:71:52:45:08:b4:00:dc:b7:79:c6:7e:00: 28:3d:64:f9:55:8e:a2:8d:9f:44:b2:40:c5:5f:50:14:71:b7: 38:52:50:f2:62:5c:3e:42:66:f9:24:8d:0f:98:5c:2a:60:11: a7:9c:79:22:57:e8:36:9d:9d:b9:48:77:aa:53:ce:c7:f0:8d: 04:60:70:bb:22:64:69:c7:6f:71:e6:2d:3a:21:b7:c0:ba:a7: aa:ee:0e:8d:5b:80:76:02:c1:47:43:9e:c8:39:ea:d5:7a:c0: a3:c3:a3:ec:72:25:39:e8:48:f7:59:77:e3:2f:e3:0a:43:22: 22:16:23:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHiMhSAnUJ/b7EibkPo+Iz2eQQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTA4MDcyMDA3MDlaFw0yNTA4MTEwNzM3MDlaMDMxMTAvBgNV BAMTKEZEN0QxMTBDRjgyMjAyQTlBNTQwNjM2MjAwNDdBNTVEQThENUNGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVS7TxlhOssY9HOoGz7Tco/14u zdfKVc+QspJD+dEK10PpFGSlb4cEZEZcR0ELZIOPxz0c24aMHksgPIU/k9RGzgvZ a/iP4BQh4Gmnnci60Oxt2IF03aAgf7cTFBo0QxHqR/TPcWESZuXoHNMueH6AL4m4 R+gEc4PJJZCqFu3GXLLLcINyLDeg+dqUo0PvHddoDdCLtDm657YoeM/my5ttJaIE JYzfOZxK0i5g5e+VVu4RIMcxkhFyrLkKPYu2APE48JPRLYDQbIb5ycG9ym7hcUBI o5P500CexKLWW7fMIlMNKA9zVQAcK3BezPUbRrHK/E+C6jLF5LqQR8cOQPSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/X0RDPgiAqmlQGNiAEelXajVzxEwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFVcXKEjbXuXPXnkFgbvlYpz1kU/EgbrfDz i7aDmSLbd5ZhCRkw6vqio5OvcGJ08TLAlSky4HNOgvykFKD4DMI0JEiyvsMKcPG4 5NeXJAFxucBseMnUHC1YF2tdlKxFXh/2OVxhWePWZJ++Ixy6dCzCM10mKQJPblVM 8UCTaguGJhWaAXFSRQi0ANy3ecZ+ACg9ZPlVjqKNn0SyQMVfUBRxtzhSUPJiXD5C ZvkkjQ+YXCpgEaeceSJX6DadnblId6pTzsfwjQRgcLsiZGnHb3HmLToht8C6p6ru Do1bgHYCwUdDnsg56tV6wKPDo+xyJTnoSPdZd+Mv4wpDIiIWI4Q= -----END CERTIFICATE-----Generated at Sat Aug 9 10:31:27 2025 by rpki-client