$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json) Hash identifier: gg6MKbMXp5KW5hQ44VFlmEYfDUoBStS9EL95U+tw24A= Subject key identifier: 59:78:6A:23:B5:7B:3F:29:0F:D4:1F:69:FA:F5:9B:08:57:A2:B2:AF Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Certificate serial: 20C28FAB0D92C3B590A2F2E6002EB038801910FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft Manifest number: 04E4 Signing time: Mon 04 Aug 2025 10:30:49 +0000 Manifest this update: Mon 04 Aug 2025 10:25:49 +0000 Manifest next update: Thu 07 Aug 2025 13:22:49 +0000 Files and hashes: 1: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: b486vBMRdMjj/sj3VZO18OrgI6Ln9i0GWw+13ATp+ds=) 2: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: Usk9JQ2XeRGm39smNUuLoGkN+7yFDsrjSvIs4nhXd0I=) 3: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: +zMuF2d6C36Qn9OFjFhter7f0zvIprv5Kce2a+7KyYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 13:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c2:8f:ab:0d:92:c3:b5:90:a2:f2:e6:00:2e:b0:38:80:19:10:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Validity Not Before: Aug 4 10:25:49 2025 GMT Not After : Aug 7 13:22:49 2025 GMT Subject: CN=59786A23B57B3F290FD41F69FAF59B0857A2B2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:97:4f:2a:e6:cb:c9:9e:64:61:58:8c:8c:8b: 3c:16:d8:e4:12:84:57:17:77:67:ce:d2:0f:92:59: d9:bd:7f:ae:61:5c:4c:d1:90:23:ee:99:f0:a1:e2: 2d:a8:61:df:4b:9e:bc:25:8d:81:ba:7f:e8:e8:41: 2a:9c:d9:a8:c3:87:b1:6d:ac:c0:5e:82:d5:21:82: 11:48:d0:c7:1c:20:38:18:0c:97:4a:71:72:fa:77: 54:62:4e:2a:8c:20:f8:25:7b:c0:10:27:68:55:01: 0c:88:59:b8:d9:1d:f3:74:16:eb:23:49:76:f1:05: b9:53:1c:52:f7:00:6d:cb:e3:17:c4:43:99:f7:5f: 4e:2c:3b:71:d3:aa:95:8f:ed:54:c5:24:56:18:fb: e4:a2:d8:41:69:a7:41:54:db:ae:5f:5b:5d:c8:f9: 15:7b:fc:c7:d1:b3:74:84:59:80:eb:57:58:55:92: 9f:12:35:ca:b5:a3:e2:03:8e:53:14:c9:b6:76:f3: b9:d3:29:74:5f:55:d1:fe:fd:ab:a9:d5:59:5d:5d: 18:63:24:0d:cc:97:6a:64:c2:44:08:85:c0:31:6a: 30:75:3f:8d:59:47:a7:f7:67:84:e3:a0:ee:d3:90: 49:2f:2c:76:f5:c1:25:3f:3f:dd:0b:1d:49:13:06: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:78:6A:23:B5:7B:3F:29:0F:D4:1F:69:FA:F5:9B:08:57:A2:B2:AF X509v3 Authority Key Identifier: keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1d:4e:06:a1:ba:95:f2:0c:21:b3:ce:bd:17:2f:c6:15:1d: 29:ec:43:c0:a6:1e:48:f9:af:81:75:57:82:0d:cb:b9:16:91: aa:7b:9f:cd:0f:d6:17:64:7e:72:39:c8:3e:17:d4:af:e8:92: e7:7c:5b:0f:28:59:40:6c:d8:0e:77:79:9f:a2:63:e1:01:6d: 41:98:69:f7:44:e2:12:de:49:f0:76:60:b4:0b:94:f3:dd:07: ea:f2:86:2f:8e:55:de:49:56:d0:a1:cb:8e:04:13:b2:f1:7d: 00:d0:2f:67:e0:f7:fe:19:ea:8c:b5:1b:56:79:4b:f9:83:4d: c6:ea:ff:ea:32:13:28:da:24:68:a9:ff:56:50:21:70:cd:3f: e5:62:be:a4:d2:ae:ab:f4:b3:a3:b4:a0:0b:2c:e0:f9:0b:9a: e8:b8:b7:c4:26:42:1b:b2:62:67:14:21:0c:5e:72:44:55:dc: 8a:22:87:1d:df:4e:21:68:18:aa:2a:cf:b5:c6:c3:a8:80:fb: e3:51:d1:43:12:f7:b3:a6:d6:cf:f1:fb:22:3f:55:5d:df:c9: 77:95:5e:4a:af:ca:cd:1d:64:5b:41:7b:93:22:d5:78:12:6c: 79:e0:c1:d7:9c:8b:4a:99:05:23:48:02:f3:31:7b:33:d0:ba: 4b:e5:4a:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMKPqw2Sw7WQovLmAC6wOIAZEPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4 NDY0NzZBQjAeFw0yNTA4MDQxMDI1NDlaFw0yNTA4MDcxMzIyNDlaMDMxMTAvBgNV BAMTKDU5Nzg2QTIzQjU3QjNGMjkwRkQ0MUY2OUZBRjU5QjA4NTdBMkIyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvl08q5svJnmRhWIyMizwW2OQS hFcXd2fO0g+SWdm9f65hXEzRkCPumfCh4i2oYd9LnrwljYG6f+joQSqc2ajDh7Ft rMBegtUhghFI0MccIDgYDJdKcXL6d1RiTiqMIPgle8AQJ2hVAQyIWbjZHfN0Fusj SXbxBblTHFL3AG3L4xfEQ5n3X04sO3HTqpWP7VTFJFYY++Si2EFpp0FU265fW13I +RV7/MfRs3SEWYDrV1hVkp8SNcq1o+IDjlMUybZ287nTKXRfVdH+/aup1VldXRhj JA3Ml2pkwkQIhcAxajB1P41ZR6f3Z4TjoO7TkEkvLHb1wSU/P90LHUkTBn0LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWXhqI7V7PykP1B9p+vWbCFeisq8wHwYDVR0j BBgwFoAUPm8wZBhFVoPboKyVtP1B4YRkdqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMC8zRTZGMzA2NDE4 NDU1NjgzREJBMEFDOTVCNEZENDFFMTg0NjQ3NkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4NDY0 NzZBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQx RTE4NDY0NzZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYdTgahupXyDCGzzr0XL8YVHSnsQ8CmHkj5 r4F1V4INy7kWkap7n80P1hdkfnI5yD4X1K/okud8Ww8oWUBs2A53eZ+iY+EBbUGY afdE4hLeSfB2YLQLlPPdB+ryhi+OVd5JVtChy44EE7LxfQDQL2fg9/4Z6oy1G1Z5 S/mDTcbq/+oyEyjaJGip/1ZQIXDNP+VivqTSrqv0s6O0oAss4PkLmui4t8QmQhuy YmcUIQxeckRV3Ioihx3fTiFoGKoqz7XGw6iA++NR0UMS97Om1s/x+yI/VV3fyXeV Xkqvys0dZFtBe5Mi1XgSbHngwdeci0qZBSNIAvMxezPQukvlSsI= -----END CERTIFICATE-----Generated at Wed Aug 6 10:04:39 2025 by rpki-client