$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: YVr201AHnya+tX1usx5gVK3HIkpkPAXEsTOmDuobROE= Subject key identifier: E2:8D:40:5D:03:DE:59:7C:8D:62:34:61:C6:06:47:2C:A9:3A:B2:75 Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 0CE48D5739F03B27DE9CCFD96EEAA000EC75F15D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 026A Signing time: Fri 08 Aug 2025 16:11:54 +0000 Manifest this update: Fri 08 Aug 2025 16:06:54 +0000 Manifest next update: Tue 12 Aug 2025 00:24:54 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: biBc3b6GGx2dUj7YnQWOhcGsodIKTbyhZn9FTYFEG1E=) 2: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: M2QkRuhCZtAw1nBl3kliuZQX6RWobFC5waZT96CIGQw=) 3: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e4:8d:57:39:f0:3b:27:de:9c:cf:d9:6e:ea:a0:00:ec:75:f1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Aug 8 16:06:54 2025 GMT Not After : Aug 12 00:24:54 2025 GMT Subject: CN=E28D405D03DE597C8D623461C606472CA93AB275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:74:27:e1:2c:5d:95:6a:59:38:34:28:6b:de: b3:83:eb:7b:2c:55:92:b4:85:bf:05:a7:da:96:37: b6:63:4d:74:82:2c:7f:3d:9e:4a:41:7e:0d:ec:a7: db:b5:8c:2f:55:52:a5:68:07:e3:e1:3a:9b:d2:25: 60:0a:3a:c6:cf:79:23:49:b6:8a:c8:e3:d2:0a:9a: 60:69:66:0f:01:4b:63:79:54:d8:5d:ed:f9:c4:63: 5b:6b:9c:de:72:c1:1b:7c:ff:59:30:22:26:77:2f: 35:48:e6:a6:0d:b8:cc:bd:03:a2:66:e9:5d:ed:77: ac:62:5a:b3:be:52:4a:b8:39:92:49:e8:79:08:d3: c4:14:73:01:9c:0b:dc:ec:60:50:dc:98:b8:15:63: bf:36:97:3d:c0:64:09:ec:67:8f:c7:e1:4f:74:2e: df:f0:aa:bd:2a:8d:35:26:fa:8a:ec:f6:93:88:1a: ba:26:2d:29:56:09:7a:4d:1d:7c:52:7b:6a:58:c5: d3:00:44:ac:2a:6c:9e:f5:eb:88:d6:7c:35:94:dd: ba:40:6b:92:5a:86:5f:02:44:62:75:e3:3f:76:16: dc:7f:aa:47:11:fc:f1:a6:27:3d:d0:fc:e8:f8:79: e1:f5:83:1b:8b:75:d7:eb:ef:65:e3:c1:c6:fb:39: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8D:40:5D:03:DE:59:7C:8D:62:34:61:C6:06:47:2C:A9:3A:B2:75 X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d3:40:f9:dc:18:53:76:d4:78:fa:cb:90:ff:78:37:1b:6d: 94:6d:97:e7:1e:0c:b1:2a:51:f9:0c:78:76:7f:76:28:7d:9b: 76:53:9f:4f:8d:2e:b0:bc:76:3d:e8:e7:ff:8d:32:23:c2:38: 2d:14:09:2b:10:f7:90:a8:30:e2:9c:4e:82:17:c7:50:67:07: e0:00:77:ea:55:52:b5:ed:b3:6d:69:aa:3d:74:24:0c:b8:d5: 62:6c:d9:09:fd:b9:05:e2:30:0a:fc:86:61:41:4c:14:c0:32: 50:3b:92:88:d1:f3:3e:92:ab:6d:81:95:a1:7c:fd:dc:95:d6: 18:66:c9:d7:e6:2c:2d:02:03:7f:ce:ca:d7:9f:2e:b1:df:b5: ed:ae:86:26:3c:7a:cb:db:28:fc:67:1a:f1:b0:e2:c8:20:28: 3b:48:38:27:73:ce:0d:3d:6b:ef:c5:45:ab:5c:c0:0a:79:ab: d7:b7:f0:56:02:c3:5a:b1:e9:c9:dc:9c:a3:b2:16:c5:0b:53: 10:0e:e1:6b:7d:5b:32:c5:b5:2f:25:bb:7e:eb:15:6d:72:e0: 6a:5b:aa:10:19:22:da:06:0a:95:6e:b1:c8:86:77:2f:ca:92: 92:79:b7:e4:d3:07:a5:9a:ed:15:e2:f3:ec:74:32:94:7d:b9: 99:5c:0f:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOSNVznwOyfenM/ZbuqgAOx18V0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTA4MDgxNjA2NTRaFw0yNTA4MTIwMDI0NTRaMDMxMTAvBgNV BAMTKEUyOEQ0MDVEMDNERTU5N0M4RDYyMzQ2MUM2MDY0NzJDQTkzQUIyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdCfhLF2Valk4NChr3rOD63ss VZK0hb8Fp9qWN7ZjTXSCLH89nkpBfg3sp9u1jC9VUqVoB+PhOpvSJWAKOsbPeSNJ torI49IKmmBpZg8BS2N5VNhd7fnEY1trnN5ywRt8/1kwIiZ3LzVI5qYNuMy9A6Jm 6V3td6xiWrO+Ukq4OZJJ6HkI08QUcwGcC9zsYFDcmLgVY782lz3AZAnsZ4/H4U90 Lt/wqr0qjTUm+ors9pOIGromLSlWCXpNHXxSe2pYxdMARKwqbJ7164jWfDWU3bpA a5Jahl8CRGJ14z92Ftx/qkcR/PGmJz3Q/Oj4eeH1gxuLddfr72Xjwcb7OZ8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4o1AXQPeWXyNYjRhxgZHLKk6snUwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXTQPncGFN21Hj6y5D/eDcbbZRtl+ceDLEq UfkMeHZ/dih9m3ZTn0+NLrC8dj3o5/+NMiPCOC0UCSsQ95CoMOKcToIXx1BnB+AA d+pVUrXts21pqj10JAy41WJs2Qn9uQXiMAr8hmFBTBTAMlA7kojR8z6Sq22BlaF8 /dyV1hhmydfmLC0CA3/OytefLrHfte2uhiY8esvbKPxnGvGw4sggKDtIOCdzzg09 a+/FRatcwAp5q9e38FYCw1qx6cncnKOyFsULUxAO4Wt9WzLFtS8lu37rFW1y4Gpb qhAZItoGCpVusciGdy/KkpJ5t+TTB6Wa7RXi8+x0MpR9uZlcDxM= -----END CERTIFICATE-----Generated at Sat Aug 9 05:34:17 2025 by rpki-client