$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: Q3CZjLqUMEYgXiZgnFAvuf8plGVsUPOIcpN7cKQtZO0= Subject key identifier: AB:F4:35:1B:3E:0B:2C:BA:51:6A:A2:C9:30:96:60:3D:42:6C:F2:A5 Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 17ECF63EB31467619F6B38E26AFE0D14B6A3C675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 0298 Signing time: Wed 06 Aug 2025 18:12:19 +0000 Manifest this update: Wed 06 Aug 2025 18:07:19 +0000 Manifest next update: Sun 10 Aug 2025 02:15:19 +0000 Files and hashes: 1: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: tNCrkyzG4AciCmgimqvIw2bQeulAylk5FoXAJrDEuic=) 2: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: Y8LDyYfAVyIXqt7tfLp7kdWZiaUDDaTtuvwhMYD5dgE=) 3: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: HpSArK9wKsGD/4QjsHQDEChpbO5zQMtEgV2WhSH9EBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ec:f6:3e:b3:14:67:61:9f:6b:38:e2:6a:fe:0d:14:b6:a3:c6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Aug 6 18:07:19 2025 GMT Not After : Aug 10 02:15:19 2025 GMT Subject: CN=ABF4351B3E0B2CBA516AA2C93096603D426CF2A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:65:0d:26:7b:2a:d2:b2:ed:56:ca:6e:e0: fe:e3:98:11:5c:69:1d:bd:61:60:1f:3d:cf:4b:67: 44:19:50:47:af:89:d4:fa:85:e9:42:30:3b:26:e4: 60:87:f0:79:8d:c6:04:80:4d:1d:03:20:10:58:72: 31:d7:c7:45:7b:2f:c7:0c:48:97:6d:de:3e:b7:12: 1c:7f:53:19:e7:70:38:3c:ae:a9:5b:27:9f:b2:6f: d5:f4:26:75:b6:22:ef:8c:aa:ed:a9:76:08:71:5d: 56:9a:48:f7:57:8d:23:e7:d4:b1:68:4c:00:2f:6b: 1a:f9:dc:24:cb:dd:0d:6d:0f:a6:c4:5a:c8:6a:0d: cf:48:e3:9a:6f:5a:4d:94:bf:b0:d2:28:91:11:6d: cb:a3:e6:ec:35:33:c0:34:d4:cc:3c:c4:5e:9b:90: 43:49:c5:7d:89:ca:6a:f8:1e:d3:fb:d6:c8:d2:1a: d8:53:17:c2:cc:57:3f:61:19:1f:55:52:db:37:3e: ab:ae:1c:cc:cb:e5:4f:54:1e:0d:fa:d3:df:ce:29: d3:f2:eb:a9:32:df:d1:78:b3:e1:f8:3c:01:71:77: 12:af:92:d5:30:06:50:e2:af:dd:cb:c1:bb:17:90: 7b:2f:be:cd:01:49:12:ca:a4:10:98:18:db:07:f0: f5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F4:35:1B:3E:0B:2C:BA:51:6A:A2:C9:30:96:60:3D:42:6C:F2:A5 X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:90:19:ff:5e:3d:95:d1:66:2b:75:d9:88:9a:2f:3a:36:16: fe:13:1a:a9:55:d3:fd:3c:50:ab:7b:e0:8d:fd:e1:4c:36:56: df:2c:e3:5e:2f:4b:69:b1:81:2a:e2:c5:37:e1:76:4b:49:c7: 1b:5e:3d:4a:13:e2:71:55:d6:b2:de:95:58:98:d1:7f:d8:9c: 07:c0:55:e1:19:c6:c0:48:c6:33:37:1d:c0:10:f8:4d:b1:46: c8:74:8e:95:67:48:9d:c2:a8:c0:d6:4e:00:01:34:0c:16:a0: d3:64:d7:a1:8c:4f:ae:1f:99:42:f7:cb:9c:93:4a:11:b5:a7: 66:d0:52:f4:c5:90:8c:24:ee:32:b7:c5:61:3a:ff:04:b4:9f: 3d:4e:ae:18:68:01:52:98:0e:c5:e8:45:af:dc:3d:16:61:47: 56:e1:14:45:51:eb:0f:f4:93:ca:43:01:65:bd:66:1b:1b:2c: e7:ce:73:18:88:4f:e6:cc:75:64:69:14:a0:93:b0:9c:a5:21: a0:cd:bf:45:5e:b8:e1:07:c9:64:49:8e:7b:c0:9c:cb:60:71: a7:d6:f3:73:a2:bb:ad:01:d6:bb:02:3c:0f:12:18:c4:be:99: 0a:9c:8b:c0:48:8b:9f:cf:47:7f:52:d0:ba:61:c8:4f:5d:2b: 97:8e:a8:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+z2PrMUZ2Gfazjiav4NFLajxnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNTA4MDYxODA3MTlaFw0yNTA4MTAwMjE1MTlaMDMxMTAvBgNV BAMTKEFCRjQzNTFCM0UwQjJDQkE1MTZBQTJDOTMwOTY2MDNENDI2Q0YyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03GUNJnsq0rLtVspu4P7jmBFc aR29YWAfPc9LZ0QZUEevidT6helCMDsm5GCH8HmNxgSATR0DIBBYcjHXx0V7L8cM SJdt3j63Ehx/UxnncDg8rqlbJ5+yb9X0JnW2Iu+Mqu2pdghxXVaaSPdXjSPn1LFo TAAvaxr53CTL3Q1tD6bEWshqDc9I45pvWk2Uv7DSKJERbcuj5uw1M8A01Mw8xF6b kENJxX2Jymr4HtP71sjSGthTF8LMVz9hGR9VUts3PquuHMzL5U9UHg3609/OKdPy 66ky39F4s+H4PAFxdxKvktUwBlDir93LwbsXkHsvvs0BSRLKpBCYGNsH8PVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq/Q1Gz4LLLpRaqLJMJZgPUJs8qUwHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKQGf9ePZXRZit12YiaLzo2Fv4TGqlV0/08 UKt74I394Uw2Vt8s414vS2mxgSrixTfhdktJxxtePUoT4nFV1rLelViY0X/YnAfA VeEZxsBIxjM3HcAQ+E2xRsh0jpVnSJ3CqMDWTgABNAwWoNNk16GMT64fmUL3y5yT ShG1p2bQUvTFkIwk7jK3xWE6/wS0nz1OrhhoAVKYDsXoRa/cPRZhR1bhFEVR6w/0 k8pDAWW9ZhsbLOfOcxiIT+bMdWRpFKCTsJylIaDNv0VeuOEHyWRJjnvAnMtgcafW 83Oiu60B1rsCPA8SGMS+mQqci8BIi5/PR39S0LphyE9dK5eOqBQ= -----END CERTIFICATE-----Generated at Sat Aug 9 01:07:12 2025 by rpki-client