$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: Ep5+9uzTAF7vI8SXCYpOhnkGEkGlIZlxaIEIC+eq0/w= Subject key identifier: 4D:20:B3:FA:20:8B:0A:C2:91:61:C1:F9:78:4D:45:7F:36:C3:E4:52 Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 2C5DA815F79F5CEBEC8A78C15C66A3DE65FEA451 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 02A3 Signing time: Mon 04 Aug 2025 16:21:22 +0000 Manifest this update: Mon 04 Aug 2025 16:16:22 +0000 Manifest next update: Thu 07 Aug 2025 18:21:22 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: US6PyM2ZetW9iVD56D/IRUGPj/VkvAVc9MIIMaEapGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 18:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5d:a8:15:f7:9f:5c:eb:ec:8a:78:c1:5c:66:a3:de:65:fe:a4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Aug 4 16:16:22 2025 GMT Not After : Aug 7 18:21:22 2025 GMT Subject: CN=4D20B3FA208B0AC29161C1F9784D457F36C3E452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:a1:f0:65:f8:84:ba:94:c5:5c:d0:84:ba: 7d:56:5f:89:65:1c:8c:fb:bb:64:6f:e9:24:66:0b: 42:4e:2a:bd:4d:dd:a0:b6:20:f4:f6:f8:c2:af:7b: 71:75:27:b7:d9:53:0b:29:3c:47:c2:5e:b7:9e:d9: 63:9f:51:06:b9:10:21:08:5e:73:6b:df:35:f0:bb: 21:d0:64:1e:b5:ae:38:ac:5a:6d:07:97:6d:7b:4e: 74:d5:e9:1e:8e:fb:bc:d9:e4:f9:82:35:5e:19:55: e5:88:a9:59:12:d6:a7:30:6c:ce:96:d8:10:5a:61: ab:9f:ae:22:56:d1:b2:74:31:42:4a:4f:41:a4:a4: 32:c5:ce:8b:60:82:05:18:89:0e:8e:6f:1c:8b:58: 83:c6:d1:58:34:a2:38:a7:16:dd:0e:64:0f:6d:41: bf:b0:cb:33:c9:9f:68:6a:19:0b:af:ff:35:f8:f4: 1d:ef:15:d7:51:f9:80:da:c2:3b:8f:43:fd:8f:8f: 44:4b:cc:cf:9e:13:14:53:ca:46:82:db:a0:e7:6d: e7:58:01:3a:c6:fa:de:23:42:b2:e0:a3:97:24:49: 76:c1:95:5c:a3:b7:8e:0f:51:45:2d:b8:84:42:4a: 89:a0:34:70:c5:09:1d:ce:d8:ab:43:0d:78:93:3a: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:20:B3:FA:20:8B:0A:C2:91:61:C1:F9:78:4D:45:7F:36:C3:E4:52 X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fd:5c:65:55:97:11:f1:d5:85:85:6b:49:9b:5a:21:d7:a6: f5:8f:9d:f2:14:d9:8d:c1:d6:c9:91:89:fc:d0:40:84:93:8f: ff:3e:75:91:e1:f9:6c:d4:c7:c7:1e:e1:dc:78:50:e7:35:f5: 4d:64:2b:c2:67:d3:db:37:02:23:68:bf:e6:59:9c:c4:b6:2f: 27:30:8b:71:f2:bd:65:3d:02:c6:eb:17:43:76:7d:60:71:68: 83:ab:fe:18:a6:68:0e:d1:48:01:4f:a8:3a:7f:e6:fb:f1:aa: 1d:24:ff:d4:6a:e9:93:93:2e:4b:fb:51:8f:fc:5d:c2:17:c3: d1:c0:96:3e:f0:35:38:46:63:a0:c4:9f:5f:30:89:02:50:9b: 20:1b:78:60:1a:6b:36:dc:6a:1a:f9:b6:83:ce:4a:03:62:4d: f3:88:a8:74:f5:6b:62:b5:82:f1:97:da:82:9a:6c:55:a2:05: 48:e5:66:b9:df:20:f2:98:3b:40:a7:ec:f4:2d:12:b4:35:1c: a5:8b:93:9f:4c:ce:e2:24:76:23:0a:f6:1d:16:be:33:a9:ab: 3e:08:06:08:9c:d9:31:e5:0b:0a:4b:b1:a5:b6:12:3b:31:04: 25:20:75:56:a5:e0:6e:94:11:cd:b5:4e:aa:02:94:69:51:90: 5e:e1:07:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULF2oFfefXOvsinjBXGaj3mX+pFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTA4MDQxNjE2MjJaFw0yNTA4MDcxODIxMjJaMDMxMTAvBgNV BAMTKDREMjBCM0ZBMjA4QjBBQzI5MTYxQzFGOTc4NEQ0NTdGMzZDM0U0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7qHwZfiEupTFXNCEun1WX4ll HIz7u2Rv6SRmC0JOKr1N3aC2IPT2+MKve3F1J7fZUwspPEfCXree2WOfUQa5ECEI XnNr3zXwuyHQZB61rjisWm0Hl217TnTV6R6O+7zZ5PmCNV4ZVeWIqVkS1qcwbM6W 2BBaYaufriJW0bJ0MUJKT0GkpDLFzotgggUYiQ6ObxyLWIPG0Vg0ojinFt0OZA9t Qb+wyzPJn2hqGQuv/zX49B3vFddR+YDawjuPQ/2Pj0RLzM+eExRTykaC26DnbedY ATrG+t4jQrLgo5ckSXbBlVyjt44PUUUtuIRCSomgNHDFCR3O2KtDDXiTOoRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTSCz+iCLCsKRYcH5eE1FfzbD5FIwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL9XGVVlxHx1YWFa0mbWiHXpvWPnfIU2Y3B 1smRifzQQISTj/8+dZHh+WzUx8ce4dx4UOc19U1kK8Jn09s3AiNov+ZZnMS2Lycw i3HyvWU9AsbrF0N2fWBxaIOr/himaA7RSAFPqDp/5vvxqh0k/9Rq6ZOTLkv7UY/8 XcIXw9HAlj7wNThGY6DEn18wiQJQmyAbeGAaazbcahr5toPOSgNiTfOIqHT1a2K1 gvGX2oKabFWiBUjlZrnfIPKYO0Cn7PQtErQ1HKWLk59MzuIkdiMK9h0WvjOpqz4I Bgic2THlCwpLsaW2EjsxBCUgdVal4G6UEc21TqoClGlRkF7hB1I= -----END CERTIFICATE-----Generated at Wed Aug 6 12:26:14 2025 by rpki-client