$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: HurdO2RlImltjeSngl+mfsDxQf9hT4FDi/bkY/rCwMk= Subject key identifier: 1F:FD:CB:08:9B:B9:42:30:FD:F1:62:70:99:08:4C:6E:FD:D5:79:47 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 7288A15C28EF9F45C3083E26056C9777036303E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0351 Signing time: Thu 07 Aug 2025 00:21:18 +0000 Manifest this update: Thu 07 Aug 2025 00:16:18 +0000 Manifest next update: Sun 10 Aug 2025 04:30:18 +0000 Files and hashes: 1: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: fENyyO+x5duJqA3iZ4HRsCqKTAb0AZa+IkAXghYc6PQ=) 2: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) 3: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:88:a1:5c:28:ef:9f:45:c3:08:3e:26:05:6c:97:77:03:63:03:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Aug 7 00:16:18 2025 GMT Not After : Aug 10 04:30:18 2025 GMT Subject: CN=1FFDCB089BB94230FDF1627099084C6EFDD57947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:5e:13:b7:c4:15:1f:3f:42:fc:23:d7:3d: ef:81:5f:6c:58:92:8a:4a:be:b9:09:31:7e:cf:9f: 0a:48:f7:95:80:b9:20:7b:06:d4:f3:46:83:70:5f: 2a:27:f9:f3:fa:4a:44:8a:4a:68:16:45:da:59:6e: 6f:88:65:2f:aa:c9:f7:ba:f9:54:0a:4e:c5:3f:28: 20:cd:e2:9d:aa:f7:fc:36:1c:e3:d9:fe:d5:67:dd: 1d:da:b0:f6:0e:d7:2a:d7:c4:27:b1:50:9a:af:28: ab:67:28:a1:e5:f9:2a:68:91:cf:30:f1:99:ae:de: e4:a7:67:dc:6d:08:68:1c:15:3d:59:c9:11:3c:16: 54:f3:eb:79:20:96:1e:cc:5e:27:c7:87:ca:98:32: 98:db:21:9b:5e:24:f7:06:41:f1:66:24:3a:5f:ff: 3f:c9:9b:a9:7f:74:1c:97:b2:ac:b3:90:ee:c2:20: 81:38:23:26:7d:1c:b5:3c:23:99:21:67:f6:20:ab: a2:8b:b7:99:f3:e5:fa:f0:e6:e0:3b:83:35:a5:f4: 91:ba:9f:f3:91:07:f3:19:9d:79:77:39:0b:46:67: df:4a:cc:64:0a:1e:f5:4c:5c:f2:d2:12:48:ad:d1: 6f:4c:f7:cd:b1:3b:16:46:6d:97:47:18:58:e4:b1: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FD:CB:08:9B:B9:42:30:FD:F1:62:70:99:08:4C:6E:FD:D5:79:47 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:62:1f:5f:08:1f:de:de:32:9a:e9:5b:11:e6:4c:53:a4:da: a8:20:ec:8a:29:4b:4b:60:ea:8d:be:2a:19:9c:b4:bb:3f:8e: e8:d1:ec:84:7f:0b:36:97:b2:96:54:37:68:24:24:3b:0c:9e: 43:34:25:07:19:af:a1:37:8c:bb:7a:4a:33:2d:78:da:97:75: 18:4a:f5:3b:fe:83:01:59:00:09:e9:ee:5a:8c:9a:e3:a3:00: e8:3d:3a:11:57:42:9d:2c:f3:f8:c6:ca:31:5e:cb:7a:01:ef: 05:2c:a9:ef:44:e0:3e:9d:35:bb:60:ad:89:5c:8f:ee:a7:37: 2e:83:67:38:ba:1d:4f:d0:89:82:d2:ab:96:13:3f:f0:80:64: a7:6e:d9:80:12:d6:60:e3:d6:6b:36:a2:e1:84:12:b0:bd:e0: dd:d2:4b:66:6b:0f:c3:0b:44:50:1a:69:09:0f:a9:8c:b6:7f: 09:89:f8:28:2d:43:90:da:70:80:7f:26:d7:ad:78:36:9c:ca: c8:39:fe:2f:2a:06:7f:69:0d:db:19:73:0d:69:59:69:22:49: 27:4d:15:7d:77:96:4b:18:15:fe:b7:ba:b5:b7:22:99:c3:b7: e8:f8:32:8c:1f:65:d4:c5:db:26:25:23:f3:20:06:81:e0:4a: c5:26:d7:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoihXCjvn0XDCD4mBWyXdwNjA+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTA4MDcwMDE2MThaFw0yNTA4MTAwNDMwMThaMDMxMTAvBgNV BAMTKDFGRkRDQjA4OUJCOTQyMzBGREYxNjI3MDk5MDg0QzZFRkRENTc5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkV4Tt8QVHz9C/CPXPe+BX2xY kopKvrkJMX7PnwpI95WAuSB7BtTzRoNwXyon+fP6SkSKSmgWRdpZbm+IZS+qyfe6 +VQKTsU/KCDN4p2q9/w2HOPZ/tVn3R3asPYO1yrXxCexUJqvKKtnKKHl+Spokc8w 8Zmu3uSnZ9xtCGgcFT1ZyRE8FlTz63kglh7MXifHh8qYMpjbIZteJPcGQfFmJDpf /z/Jm6l/dByXsqyzkO7CIIE4IyZ9HLU8I5khZ/Ygq6KLt5nz5frw5uA7gzWl9JG6 n/ORB/MZnXl3OQtGZ99KzGQKHvVMXPLSEkit0W9M982xOxZGbZdHGFjksZXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/3LCJu5QjD98WJwmQhMbv3VeUcwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpiH18IH97eMprpWxHmTFOk2qgg7IopS0tg 6o2+KhmctLs/jujR7IR/CzaXspZUN2gkJDsMnkM0JQcZr6E3jLt6SjMteNqXdRhK 9Tv+gwFZAAnp7lqMmuOjAOg9OhFXQp0s8/jGyjFey3oB7wUsqe9E4D6dNbtgrYlc j+6nNy6DZzi6HU/QiYLSq5YTP/CAZKdu2YAS1mDj1ms2ouGEErC94N3SS2ZrD8ML RFAaaQkPqYy2fwmJ+CgtQ5DacIB/JteteDacysg5/i8qBn9pDdsZcw1pWWkiSSdN FX13lksYFf63urW3IpnDt+j4MowfZdTF2yYlI/MgBoHgSsUm12k= -----END CERTIFICATE-----Generated at Thu Aug 7 11:08:19 2025 by rpki-client