$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json) Hash identifier: EBbu+tUkqOR0U4zbnenCqkil/ESybaT0gtGvaPL82vg= Subject key identifier: D0:05:3B:04:93:10:52:A3:7B:E3:B0:76:1F:DB:BA:B9:78:5A:82:AC Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 2E853C8E60C1FC5B2C73C6FE729293131232BB2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft Manifest number: 01F2 Signing time: Tue 05 Aug 2025 23:10:58 +0000 Manifest this update: Tue 05 Aug 2025 23:05:58 +0000 Manifest next update: Sat 09 Aug 2025 08:21:58 +0000 Files and hashes: 1: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: 5ODCvpJsl+XnXZcZjU6a9g5frNriLFm4lEWGxVY15JQ=) 2: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: 6pWVSpFXVKH6EqJrCt3rmPa2Bj+n9pO/wL1SNQ2qvtg=) 3: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: C5VmgVP9RG290aFWBEjgGU6lSckzf3T3NmUTLEtPyWw=) 4: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: YfWdCVoIH1DQu9Nb8zknsBq3gjAx6STdl7+GflAiVVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:85:3c:8e:60:c1:fc:5b:2c:73:c6:fe:72:92:93:13:12:32:bb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Aug 5 23:05:58 2025 GMT Not After : Aug 9 08:21:58 2025 GMT Subject: CN=D0053B04931052A37BE3B0761FDBBAB9785A82AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:98:2e:90:63:3c:13:7e:22:63:c7:f8:65: da:66:3d:78:8b:5f:f2:6d:50:7c:54:40:f5:b0:9d: 7b:ba:59:7e:50:4a:37:ca:f4:54:65:26:f8:24:a4: aa:98:b7:f9:05:b4:62:0b:57:b7:e0:c0:60:db:bb: db:62:bf:8d:fc:42:15:28:a3:dc:62:03:07:18:88: 38:bb:57:20:56:60:dd:ee:a2:2e:12:d3:ab:91:fa: d9:6d:00:36:8e:79:aa:13:97:7a:6b:63:35:bf:db: 85:28:1c:12:33:2d:29:ee:39:d2:9f:88:9f:3a:75: 78:8f:67:83:65:80:42:8e:73:77:15:9d:bf:b9:13: 5a:f1:a0:50:64:60:60:37:e5:98:ea:d1:6d:fb:f3: dc:21:50:ab:6f:46:88:f7:77:36:ca:25:ca:da:f4: ab:ca:7d:63:05:e2:b8:ca:b4:b8:99:ff:60:f6:af: a9:37:05:d4:ad:67:61:a4:e6:0e:6d:cd:1b:38:fa: c2:ad:85:04:91:cb:6c:6f:e5:e7:36:74:f7:03:92: c2:24:aa:63:e8:4c:74:ff:39:05:5d:be:55:1e:d4: cb:eb:c7:c7:b9:00:df:bc:5f:ae:28:95:ef:fe:8f: 18:7e:c0:6d:72:f4:dd:55:bf:a1:46:c7:3e:2b:81: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:05:3B:04:93:10:52:A3:7B:E3:B0:76:1F:DB:BA:B9:78:5A:82:AC X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:44:da:a3:f8:1f:e1:22:d8:14:88:ff:0d:41:48:98:17:27: 3d:c0:b8:dc:85:0c:06:fc:c1:2b:55:ba:26:10:58:a2:85:00: 5c:79:53:9f:71:a2:9b:a8:ac:98:45:2d:46:21:c1:cc:0f:d5: 49:17:85:e8:1d:a5:22:7f:28:4f:b6:50:3b:9e:b1:ac:80:6c: 98:f4:f7:a6:cf:ad:9f:ad:e5:f1:e4:26:1e:29:8c:12:57:71: 2d:84:ec:c1:4e:99:1f:e0:2d:7e:11:8d:8e:39:ea:18:dd:80: f7:ad:45:37:c6:fb:1c:04:27:35:98:99:fd:44:ef:3e:56:4d: ab:5d:21:ca:62:03:b3:5d:00:73:db:ad:29:69:96:74:5e:8b: 2f:3d:03:4f:af:79:71:2e:a7:05:0d:d8:8d:13:e0:8e:63:a4: b5:dc:8f:d6:7f:64:e7:8e:75:a9:27:a8:8f:cb:52:0c:9e:36: c3:d4:da:84:3d:3e:8a:b4:59:a2:dc:2c:5a:08:1d:f3:aa:8d: 9d:6b:b9:cf:1e:0c:f4:65:2d:5e:e2:50:94:ec:e4:9b:a1:a1: b1:c2:62:a1:d2:28:7f:da:94:c3:c4:8c:2e:60:9a:0f:ea:8f: 90:a3:70:7f:da:52:15:1a:15:dd:49:fa:58:bf:c3:5e:7a:19: a7:d4:8b:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULoU8jmDB/Fssc8b+cpKTExIyuywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNTA4MDUyMzA1NThaFw0yNTA4MDkwODIxNThaMDMxMTAvBgNV BAMTKEQwMDUzQjA0OTMxMDUyQTM3QkUzQjA3NjFGREJCQUI5Nzg1QTgyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcRZgukGM8E34iY8f4ZdpmPXiL X/JtUHxUQPWwnXu6WX5QSjfK9FRlJvgkpKqYt/kFtGILV7fgwGDbu9tiv438QhUo o9xiAwcYiDi7VyBWYN3uoi4S06uR+tltADaOeaoTl3prYzW/24UoHBIzLSnuOdKf iJ86dXiPZ4NlgEKOc3cVnb+5E1rxoFBkYGA35Zjq0W3789whUKtvRoj3dzbKJcra 9KvKfWMF4rjKtLiZ/2D2r6k3BdStZ2Gk5g5tzRs4+sKthQSRy2xv5ec2dPcDksIk qmPoTHT/OQVdvlUe1Mvrx8e5AN+8X64ole/+jxh+wG1y9N1Vv6FGxz4rgTYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0AU7BJMQUqN747B2H9u6uXhagqwwHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1E2qP4H+Ei2BSI/w1BSJgXJz3AuNyFDAb8 wStVuiYQWKKFAFx5U59xopuorJhFLUYhwcwP1UkXhegdpSJ/KE+2UDuesayAbJj0 96bPrZ+t5fHkJh4pjBJXcS2E7MFOmR/gLX4RjY456hjdgPetRTfG+xwEJzWYmf1E 7z5WTatdIcpiA7NdAHPbrSlplnReiy89A0+veXEupwUN2I0T4I5jpLXcj9Z/ZOeO daknqI/LUgyeNsPU2oQ9Poq0WaLcLFoIHfOqjZ1ruc8eDPRlLV7iUJTs5JuhobHC YqHSKH/alMPEjC5gmg/qj5CjcH/aUhUaFd1J+li/w156GafUi0o= -----END CERTIFICATE-----Generated at Thu Aug 7 00:43:55 2025 by rpki-client