$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: sQsL0GQWE4lZGoZRr/BhN53LINZMBwzB6vBF2DB9ruI= Subject key identifier: 07:FA:78:CB:FC:E6:35:70:C6:A9:8A:E2:45:B8:6F:84:51:0D:A2:29 Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 68D83EF70C4F8933A5111AFA26C85953351198FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: 0194 Signing time: Thu 07 Aug 2025 01:00:45 +0000 Manifest this update: Thu 07 Aug 2025 00:55:45 +0000 Manifest next update: Sun 10 Aug 2025 10:50:45 +0000 Files and hashes: 1: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: Zt4pVMyBUOUR2i3dP+v4ZMJlIgPdgcbMBFuDvS/d1AM=) 2: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: bY09S58JuRMnRZFg/qJz8l2GALj8CEukiohA16BsJD4=) 3: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: woe8wTOCkgzw1AhZmS0qc2WfDSk5Txn9xI0A9rGDrdg=) 4: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: fEJQJx/Txzr+vMmd8tCh4JvmoJuakGNPJHf3zsUQTcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 10:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d8:3e:f7:0c:4f:89:33:a5:11:1a:fa:26:c8:59:53:35:11:98:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Aug 7 00:55:45 2025 GMT Not After : Aug 10 10:50:45 2025 GMT Subject: CN=07FA78CBFCE63570C6A98AE245B86F84510DA229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:d9:38:b8:d3:88:dd:dc:f8:22:a2:7e:01: 2e:6f:9a:3a:06:91:08:8a:71:88:50:94:cc:d5:90: 50:80:3d:0e:54:26:d3:3b:f5:97:42:84:73:8b:02: 7c:e5:cb:c7:56:ba:29:df:d6:3d:e9:68:36:3b:10: 5f:a5:e2:c4:9d:7c:b2:26:8e:d0:cf:f5:09:14:82: b5:c0:d8:a7:d1:d6:d9:58:13:ca:09:3b:41:c1:03: 58:9f:d7:0a:c4:21:53:a9:cb:17:5a:58:eb:09:71: df:3c:1c:1c:52:aa:cb:32:a7:75:5d:ec:12:53:4b: b5:bb:39:64:66:60:71:71:f5:d9:b0:d2:6f:ab:14: 73:62:87:52:9a:d1:a0:21:ef:30:be:79:f6:73:41: 1d:1a:e6:c6:14:c9:a8:fa:02:e2:1e:0f:5f:ae:b0: c5:a5:4c:91:47:eb:33:dc:39:8f:9d:c2:76:e3:bc: 55:5f:66:1b:12:0b:37:a2:9d:a3:d3:f0:53:a4:69: 5b:b0:55:e2:e8:3d:64:62:ff:d2:5e:09:dc:6f:b0: a8:24:34:44:d2:ec:bd:16:68:7d:1d:8f:0b:86:4d: 04:43:3e:47:fc:49:19:b6:f9:3a:9e:1e:33:bc:2a: c1:07:75:ca:96:78:1d:24:2d:74:c7:34:3c:d9:93: 76:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FA:78:CB:FC:E6:35:70:C6:A9:8A:E2:45:B8:6F:84:51:0D:A2:29 X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c5:d4:a0:1d:de:8d:fe:0f:5b:c0:5e:ae:e8:07:0e:30:9b: bf:dd:c0:42:90:25:4f:74:f0:67:34:0b:5c:d2:6f:51:52:88: 7e:91:4b:3d:70:ea:55:c9:4a:73:0d:94:ea:33:9f:79:18:c4: 4c:3c:f4:28:5e:af:c9:1e:3e:dc:a1:4d:ea:50:3a:d4:ed:14: 4e:ea:51:05:20:61:fa:88:4c:5d:05:3d:75:29:c1:13:18:11: 51:81:6f:29:1a:59:1e:45:02:9d:a8:64:b2:63:5a:b8:1e:cb: 6d:96:f1:3f:53:17:22:0d:53:02:c0:2d:1b:dd:90:c0:22:0f: c5:96:6b:46:e6:86:2f:01:ab:ab:d9:03:81:c0:86:d8:2c:de: 6f:ff:c6:c1:60:05:a7:07:bd:ca:48:01:68:c2:2d:7c:b6:81: bc:9d:5d:07:89:95:e1:64:5c:44:74:f2:32:3a:f6:be:df:eb: 02:b8:3c:5f:26:9d:24:ef:d8:58:71:e1:a9:8d:34:2e:6f:dc: c5:9f:97:b0:a6:2d:39:27:57:7e:e7:c9:47:e7:b0:83:14:63: 92:f6:07:ea:44:b0:df:f9:e6:d3:51:ac:c2:11:c9:39:95:39: 13:f3:ca:cd:5a:7b:c9:75:f5:72:1e:a0:6e:24:56:64:73:20: 7c:99:dd:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNg+9wxPiTOlERr6JshZUzURmPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNTA4MDcwMDU1NDVaFw0yNTA4MTAxMDUwNDVaMDMxMTAvBgNV BAMTKDA3RkE3OENCRkNFNjM1NzBDNkE5OEFFMjQ1Qjg2Rjg0NTEwREEyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC909k4uNOI3dz4IqJ+AS5vmjoG kQiKcYhQlMzVkFCAPQ5UJtM79ZdChHOLAnzly8dWuinf1j3paDY7EF+l4sSdfLIm jtDP9QkUgrXA2KfR1tlYE8oJO0HBA1if1wrEIVOpyxdaWOsJcd88HBxSqssyp3Vd 7BJTS7W7OWRmYHFx9dmw0m+rFHNih1Ka0aAh7zC+efZzQR0a5sYUyaj6AuIeD1+u sMWlTJFH6zPcOY+dwnbjvFVfZhsSCzeinaPT8FOkaVuwVeLoPWRi/9JeCdxvsKgk NETS7L0WaH0djwuGTQRDPkf8SRm2+TqeHjO8KsEHdcqWeB0kLXTHNDzZk3ZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB/p4y/zmNXDGqYriRbhvhFENoikwHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDF1KAd3o3+D1vAXq7oBw4wm7/dwEKQJU90 8Gc0C1zSb1FSiH6RSz1w6lXJSnMNlOozn3kYxEw89Cher8kePtyhTepQOtTtFE7q UQUgYfqITF0FPXUpwRMYEVGBbykaWR5FAp2oZLJjWrgey22W8T9TFyINUwLALRvd kMAiD8WWa0bmhi8Bq6vZA4HAhtgs3m//xsFgBacHvcpIAWjCLXy2gbydXQeJleFk XER08jI69r7f6wK4PF8mnSTv2Fhx4amNNC5v3MWfl7CmLTknV37nyUfnsIMUY5L2 B+pEsN/55tNRrMIRyTmVORPzys1ae8l19XIeoG4kVmRzIHyZ3aU= -----END CERTIFICATE-----Generated at Sat Aug 9 05:51:07 2025 by rpki-client