$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: l4YPYKeNU0Ar6AjbtYl0xVxhZ9OSfmNxPZzFk9fSem0= Subject key identifier: E2:07:49:37:2A:82:42:49:4C:6C:58:FD:45:59:B4:DD:E1:3C:7C:49 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 600419E08E040302C48EE6DB09E837DB6FD0FE86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 04F8 Signing time: Wed 06 Aug 2025 01:10:02 +0000 Manifest this update: Wed 06 Aug 2025 01:05:02 +0000 Manifest next update: Sat 09 Aug 2025 03:11:02 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: f65iWFC58u3yfeElwS9SbdTWn1HiGiie0eAEBagsJiE=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:04:19:e0:8e:04:03:02:c4:8e:e6:db:09:e8:37:db:6f:d0:fe:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Aug 6 01:05:02 2025 GMT Not After : Aug 9 03:11:02 2025 GMT Subject: CN=E20749372A8242494C6C58FD4559B4DDE13C7C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:8b:8e:ce:91:43:26:0e:18:52:25:bf:3c: 49:a3:8b:cd:3d:e8:78:6d:78:67:a7:8c:48:de:ef: 2c:d6:11:79:7c:7f:60:3d:b9:a4:08:d7:6e:ce:88: 8c:c2:c9:74:db:06:f5:a6:2c:9f:ca:ab:d3:20:b4: 50:94:96:09:a7:6d:67:64:d0:f1:6a:dc:27:4e:32: 39:94:07:00:3b:b9:44:87:30:9d:9c:ca:14:08:93: 35:35:01:a6:ff:34:9b:8e:46:62:3a:e8:f1:6b:68: 00:5a:08:1b:70:a9:f5:f7:8a:07:4f:10:b5:6a:f2: 40:c6:fd:82:1e:fa:19:53:0b:a2:ec:63:be:de:ae: 40:3c:d2:f7:80:c0:f9:a6:d1:30:f2:bf:c1:aa:49: 32:1e:68:e2:0f:ec:f1:e5:58:ac:fd:ad:9c:d1:28: cf:00:90:9c:56:27:53:cc:83:2c:14:85:32:7d:b4: e9:01:14:8d:78:a2:7d:58:69:ec:4c:1d:dc:6f:56: d0:ad:62:bf:2b:f5:76:e4:b7:2a:fc:3c:9c:2c:aa: 55:69:ac:d6:15:a5:f2:89:d7:55:34:8c:24:1d:e6: eb:99:b1:4a:94:66:ff:74:c7:b1:df:0a:cd:b9:76: cd:45:92:c3:3e:14:89:28:2a:01:cf:98:85:31:29: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:07:49:37:2A:82:42:49:4C:6C:58:FD:45:59:B4:DD:E1:3C:7C:49 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:88:93:ec:45:8f:fc:bd:18:fb:8c:a1:dd:da:38:91:51:2b: b0:dd:d2:fb:5f:07:96:74:8a:0a:79:ed:39:38:4d:28:e4:37: 83:63:1d:94:25:35:af:98:f5:d7:db:ce:9d:38:1e:11:9f:83: 60:17:f4:d1:70:d5:2f:a4:1b:fc:bd:14:97:65:e1:0f:36:d9: 0f:2e:2a:f4:86:1d:fc:d6:d7:1b:e8:c6:ec:8d:07:e1:52:7f: 02:16:eb:2d:7a:13:87:2d:5c:66:ea:f0:f0:49:28:18:ba:59: e1:59:b5:f3:00:4f:69:5d:54:c4:79:c2:55:f9:02:be:b6:69: 3a:59:3e:b2:97:3d:ec:b2:f9:63:4a:ed:76:18:6c:6f:de:49: e0:a1:9f:eb:cb:0f:5e:92:2b:57:f3:d8:12:c9:ed:f7:e1:e5: be:dc:e7:71:4d:01:c0:35:19:35:57:fb:04:3b:f2:3c:10:4b: ea:75:39:1b:00:0d:82:7a:35:20:a9:ef:9d:04:71:e8:c3:79: ca:bf:5c:a2:a7:da:eb:3a:21:62:28:53:13:c2:62:9a:96:80: 08:f7:48:6e:0d:c3:01:4c:ac:88:53:e5:88:71:f0:49:91:9f: ad:c1:82:d7:3f:a8:0b:d7:61:f9:7d:1b:b4:c4:8c:3d:32:32: d1:59:fd:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYAQZ4I4EAwLEjubbCeg322/Q/oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTA4MDYwMTA1MDJaFw0yNTA4MDkwMzExMDJaMDMxMTAvBgNV BAMTKEUyMDc0OTM3MkE4MjQyNDk0QzZDNThGRDQ1NTlCNERERTEzQzdDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJYuOzpFDJg4YUiW/PEmji809 6HhteGenjEje7yzWEXl8f2A9uaQI127OiIzCyXTbBvWmLJ/Kq9MgtFCUlgmnbWdk 0PFq3CdOMjmUBwA7uUSHMJ2cyhQIkzU1Aab/NJuORmI66PFraABaCBtwqfX3igdP ELVq8kDG/YIe+hlTC6LsY77erkA80veAwPmm0TDyv8GqSTIeaOIP7PHlWKz9rZzR KM8AkJxWJ1PMgywUhTJ9tOkBFI14on1YaexMHdxvVtCtYr8r9Xbktyr8PJwsqlVp rNYVpfKJ11U0jCQd5uuZsUqUZv90x7HfCs25ds1FksM+FIkoKgHPmIUxKaXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4gdJNyqCQklMbFj9RVm03eE8fEkwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmIk+xFj/y9GPuMod3aOJFRK7Dd0vtfB5Z0 igp57Tk4TSjkN4NjHZQlNa+Y9dfbzp04HhGfg2AX9NFw1S+kG/y9FJdl4Q822Q8u KvSGHfzW1xvoxuyNB+FSfwIW6y16E4ctXGbq8PBJKBi6WeFZtfMAT2ldVMR5wlX5 Ar62aTpZPrKXPeyy+WNK7XYYbG/eSeChn+vLD16SK1fz2BLJ7ffh5b7c53FNAcA1 GTVX+wQ78jwQS+p1ORsADYJ6NSCp750EcejDecq/XKKn2us6IWIoUxPCYpqWgAj3 SG4NwwFMrIhT5Yhx8EmRn63Bgtc/qAvXYfl9G7TEjD0yMtFZ/Zw= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:12 2025 by rpki-client