$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: 51uf1Uu3IZWPfgseamcZ/gm88pmQGxgDTL6AHfHYH8M= Subject key identifier: 34:6A:F0:AC:41:ED:93:0D:FB:F3:A9:E4:D3:9A:4C:1B:FB:7A:43:1E Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 1FB31D54F411AC3ED8D06FE104DF11FF649A5852 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 03E5 Signing time: Wed 06 Aug 2025 16:01:59 +0000 Manifest this update: Wed 06 Aug 2025 15:56:59 +0000 Manifest next update: Sat 09 Aug 2025 18:30:59 +0000 Files and hashes: 1: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: JJUySL1sFysndCjD3tjIGjH0kySSBLsWZaghbcec6yk=) 2: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6ARHaxkV0HQRmAgHPZ4dlFB+3c6L0ZGJmc/nN2+k+no=) 3: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: 6KZnCoun2OeRfJhfU31JgFdGtJDoY9NCrchaCehwgfg=) 4: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 8zQK8AXHLSApMmYd7tjNJsIjZnWf3yDUEAsA1LFehWw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b3:1d:54:f4:11:ac:3e:d8:d0:6f:e1:04:df:11:ff:64:9a:58:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Aug 6 15:56:59 2025 GMT Not After : Aug 9 18:30:59 2025 GMT Subject: CN=346AF0AC41ED930DFBF3A9E4D39A4C1BFB7A431E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:ee:90:01:8f:61:a3:fb:d1:f9:fe:1d:26: fa:3e:1e:63:30:8e:6b:2b:28:36:3e:c8:a4:dc:bd: e8:ae:52:48:8e:72:07:12:59:a8:66:c9:fd:17:52: 1b:c6:f1:ce:ec:c9:59:f2:03:9d:03:fd:4a:76:91: de:d4:40:a0:33:72:8e:71:00:2d:a4:61:aa:d7:39: 2a:9d:9c:01:1a:7c:39:6d:f7:63:3d:50:b5:77:2a: 9b:3f:49:c5:20:ce:69:d6:ff:04:2e:51:2d:16:6b: bf:95:28:58:a4:1e:17:33:e6:00:b0:9e:54:75:b2: 93:23:52:68:e0:75:b9:59:43:63:97:20:a5:d4:6b: ae:9d:32:f7:91:35:ec:38:22:e1:af:fa:dd:cc:56: 0e:64:50:df:5c:d8:bb:85:59:8f:6d:d2:44:2f:e9: 95:eb:c9:e1:a0:51:10:99:63:a0:8d:22:3d:e3:72: fd:fa:37:26:f6:ac:df:46:57:9e:74:bc:7c:a5:a3: 17:68:80:8f:44:92:35:b5:a0:fc:8d:f6:a8:e0:5b: 08:f0:48:9a:e3:4b:72:39:15:f2:30:ca:52:1e:86: 66:78:e6:14:96:c7:1f:56:fe:f0:bd:e4:f1:14:be: 94:6b:22:2c:ef:98:b9:46:61:b3:fa:8e:65:d6:a0: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6A:F0:AC:41:ED:93:0D:FB:F3:A9:E4:D3:9A:4C:1B:FB:7A:43:1E X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a5:55:69:43:29:d6:56:87:fe:da:20:14:dc:f7:29:6f:37: 73:f6:63:37:88:28:00:9d:31:d1:91:15:43:89:06:18:40:be: 0e:6e:33:9c:fa:62:fa:e8:ef:64:32:8d:d3:bd:4c:3a:4c:32: e6:22:24:27:5b:85:28:df:a5:ed:f6:18:8a:f8:1a:f0:b2:29: d5:9b:47:d3:0e:85:85:28:14:85:89:0b:2c:88:4c:c5:7e:1c: 75:18:52:80:03:b5:52:c7:7e:05:b8:04:05:ae:f3:ca:12:9b: f1:b1:a7:08:0c:35:92:56:cc:1d:fd:c6:1e:1a:53:39:c5:e9: ca:78:81:f6:c2:ca:e1:49:04:dd:7a:a8:e7:92:8d:29:cb:a7: 5b:66:74:27:17:2f:f5:fb:85:44:60:0b:3d:93:46:a2:0e:83: d9:b6:bc:01:71:7f:b8:e0:93:2a:d0:ad:01:00:f3:59:b7:c3: a0:41:12:07:ed:07:41:77:34:df:37:43:0f:af:8e:c9:4c:3a: 9e:0d:fa:c4:ec:07:0e:3d:8e:20:01:4c:33:e7:bb:5e:bb:be: bf:d4:e2:7d:12:e5:6d:8c:27:f2:d4:b3:7f:4b:9c:d5:72:f3: 28:a5:30:61:ad:06:91:4e:12:ee:36:40:87:09:2b:46:3e:5f: 07:61:01:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7MdVPQRrD7Y0G/hBN8R/2SaWFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNTA4MDYxNTU2NTlaFw0yNTA4MDkxODMwNTlaMDMxMTAvBgNV BAMTKDM0NkFGMEFDNDFFRDkzMERGQkYzQTlFNEQzOUE0QzFCRkI3QTQzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBu6QAY9ho/vR+f4dJvo+HmMw jmsrKDY+yKTcveiuUkiOcgcSWahmyf0XUhvG8c7syVnyA50D/Up2kd7UQKAzco5x AC2kYarXOSqdnAEafDlt92M9ULV3Kps/ScUgzmnW/wQuUS0Wa7+VKFikHhcz5gCw nlR1spMjUmjgdblZQ2OXIKXUa66dMveRNew4IuGv+t3MVg5kUN9c2LuFWY9t0kQv 6ZXryeGgURCZY6CNIj3jcv36Nyb2rN9GV550vHyloxdogI9EkjW1oPyN9qjgWwjw SJrjS3I5FfIwylIehmZ45hSWxx9W/vC95PEUvpRrIizvmLlGYbP6jmXWoJMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNGrwrEHtkw3786nk05pMG/t6Qx4wHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJulVWlDKdZWh/7aIBTc9ylvN3P2YzeIKACd MdGRFUOJBhhAvg5uM5z6Yvro72QyjdO9TDpMMuYiJCdbhSjfpe32GIr4GvCyKdWb R9MOhYUoFIWJCyyITMV+HHUYUoADtVLHfgW4BAWu88oSm/GxpwgMNZJWzB39xh4a UznF6cp4gfbCyuFJBN16qOeSjSnLp1tmdCcXL/X7hURgCz2TRqIOg9m2vAFxf7jg kyrQrQEA81m3w6BBEgftB0F3NN83Qw+vjslMOp4N+sTsBw49jiABTDPnu167vr/U 4n0S5W2MJ/LUs39LnNVy8yilMGGtBpFOEu42QIcJK0Y+XwdhAUs= -----END CERTIFICATE-----Generated at Thu Aug 7 11:23:41 2025 by rpki-client