$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: T7mgwItYgF207snP1PGJUpzSuGFvKldWok8sIzz9JFM= Subject key identifier: 9E:63:C8:B6:19:4D:39:3E:8C:A8:A1:6E:32:64:65:73:AF:FD:A2:FA Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 332951209681510F6476F1AF6E32A1D8CC5635A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 0217 Signing time: Wed 06 Aug 2025 19:42:55 +0000 Manifest this update: Wed 06 Aug 2025 19:37:55 +0000 Manifest next update: Sun 10 Aug 2025 01:54:55 +0000 Files and hashes: 1: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: 6tzgj23iClSSej7yGHv91K3uA7AxoD6Cv2VbF5P/Xqc=) 2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:29:51:20:96:81:51:0f:64:76:f1:af:6e:32:a1:d8:cc:56:35:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Aug 6 19:37:55 2025 GMT Not After : Aug 10 01:54:55 2025 GMT Subject: CN=9E63C8B6194D393E8CA8A16E32646573AFFDA2FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:30:0d:7e:c7:ed:07:62:4b:f7:c4:1d:b3: 9f:40:90:fd:45:a3:a3:87:99:e2:7e:7a:02:1f:35: 83:01:d9:3e:f3:d1:47:eb:1e:78:10:e8:cf:e4:27: 93:6a:da:dd:ff:73:fa:b8:1a:41:57:45:b8:73:21: b4:1e:0c:62:f5:ac:23:de:87:3e:88:d0:f6:b2:2a: 1f:0c:93:63:8f:25:3a:91:49:b1:13:11:a7:f0:e6: 97:3b:c2:cd:a3:01:50:4a:4a:8d:46:63:ec:bb:2f: 0e:8f:fd:60:78:77:15:65:e7:77:b1:c5:5f:79:b2: 07:6c:2d:4c:9a:ab:d3:c4:96:f4:00:0a:27:3d:bd: 09:71:64:24:ef:57:23:fd:24:87:69:4c:51:95:06: 74:36:4c:e6:07:ef:32:25:eb:51:3d:7f:4e:ee:a9: 73:ec:be:a1:ce:d3:e1:d6:7a:42:42:3a:2c:b5:c4: 25:25:d9:66:f0:59:20:9c:85:63:bc:ed:e9:83:50: a9:cc:0f:cd:35:11:05:63:f9:62:06:32:0a:b8:1b: cd:1b:21:fe:e6:67:3e:85:4d:a1:e2:d2:46:1a:57: 59:4b:d3:26:fd:c4:71:1b:8d:31:c3:e5:90:7d:c2: ff:e8:8b:dc:00:52:1c:6c:1d:7a:fb:d7:6a:1a:94: a4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:63:C8:B6:19:4D:39:3E:8C:A8:A1:6E:32:64:65:73:AF:FD:A2:FA X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:34:a7:79:1c:8e:ef:8a:2a:34:7b:f1:04:91:61:c1:72:c5: 9e:b4:11:f9:0c:dc:9e:77:b9:7c:5f:6c:99:d5:c8:7d:bb:ff: 6e:b6:ec:6f:94:38:c6:9a:eb:e8:91:20:84:81:fd:85:cb:8e: c3:c8:68:c1:52:8c:c2:51:ee:c2:6b:d7:c1:b1:2f:3a:b7:e4: 0a:06:eb:99:2f:aa:06:d3:35:2d:57:a7:3b:56:6c:cf:6b:c4: ea:b4:5b:da:41:9e:78:b3:bc:a6:bb:e9:b1:21:d3:d1:a1:6f: ba:bb:40:74:c0:0e:5e:48:a4:8a:a9:ae:0e:64:7d:32:b8:31: 1c:a6:54:4c:93:4f:80:e8:1c:80:df:5e:16:0e:dc:31:52:55: c7:bc:86:b5:8f:d2:dd:1d:1b:e9:0c:ef:58:21:d0:2b:d5:7b: a0:e6:43:88:20:d2:c5:41:aa:9f:3e:bb:a4:ef:8c:2d:98:d9: 2e:46:56:ec:3e:5e:75:39:0d:a5:94:eb:ad:e0:8b:1f:20:bd: 58:61:e1:d3:96:cd:6d:60:6c:7b:04:13:c9:b4:c8:26:5a:ba: d3:12:5c:33:b3:24:94:fd:fd:8e:14:40:92:18:18:47:34:e9: eb:23:5a:e0:e0:e7:fd:bb:2e:e7:ab:4c:67:d2:a3:8c:85:72: d2:d7:b4:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMylRIJaBUQ9kdvGvbjKh2MxWNaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTA4MDYxOTM3NTVaFw0yNTA4MTAwMTU0NTVaMDMxMTAvBgNV BAMTKDlFNjNDOEI2MTk0RDM5M0U4Q0E4QTE2RTMyNjQ2NTczQUZGREEyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rDANfsftB2JL98Qds59AkP1F o6OHmeJ+egIfNYMB2T7z0UfrHngQ6M/kJ5Nq2t3/c/q4GkFXRbhzIbQeDGL1rCPe hz6I0PayKh8Mk2OPJTqRSbETEafw5pc7ws2jAVBKSo1GY+y7Lw6P/WB4dxVl53ex xV95sgdsLUyaq9PElvQACic9vQlxZCTvVyP9JIdpTFGVBnQ2TOYH7zIl61E9f07u qXPsvqHO0+HWekJCOiy1xCUl2WbwWSCchWO87emDUKnMD801EQVj+WIGMgq4G80b If7mZz6FTaHi0kYaV1lL0yb9xHEbjTHD5ZB9wv/oi9wAUhxsHXr712oalKRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnmPIthlNOT6MqKFuMmRlc6/9ovowHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHc0p3kcju+KKjR78QSRYcFyxZ60EfkM3J53 uXxfbJnVyH27/2627G+UOMaa6+iRIISB/YXLjsPIaMFSjMJR7sJr18GxLzq35AoG 65kvqgbTNS1XpztWbM9rxOq0W9pBnnizvKa76bEh09Ghb7q7QHTADl5IpIqprg5k fTK4MRymVEyTT4DoHIDfXhYO3DFSVce8hrWP0t0dG+kM71gh0CvVe6DmQ4gg0sVB qp8+u6TvjC2Y2S5GVuw+XnU5DaWU663gix8gvVhh4dOWzW1gbHsEE8m0yCZautMS XDOzJJT9/Y4UQJIYGEc06esjWuDg5/27LuerTGfSo4yFctLXtDY= -----END CERTIFICATE-----Generated at Thu Aug 7 07:21:24 2025 by rpki-client