$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft File: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json) Hash identifier: HZEEJAV+sTBH2ds1ABxDGtXHcdHGM84ES997nMnVQ7E= Subject key identifier: C1:B6:D1:53:6B:CC:93:56:0C:1F:FC:77:5A:3C:76:DC:D8:1C:EA:11 Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 6004CF1036A51CC380BC4F6B830D1EB4A624925B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft Manifest number: 01E9 Signing time: Wed 06 Aug 2025 10:30:02 +0000 Manifest this update: Wed 06 Aug 2025 10:25:02 +0000 Manifest next update: Sat 09 Aug 2025 19:06:02 +0000 Files and hashes: 1: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: xekDQg1d9y0KwzVPYB8ok5jaZ0VlgIsRra5cRynTTAc=) 2: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: fKyStuZP+cGYGL12Gl7DPoMVPGekA2LHOpNgfBK7K54=) 3: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: VpjDP2oZ/B1yei8Hfwo7pH5vGmOKYQBwxJOGVD0RFQE=) 4: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: u4NoFqVyyFqHI8VrRJJU5o8UKOJMJykYNFUtpxCJD/Y=) 5: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: hK06HKoqFlnupfPGbH4fj+kvbHmFb9y+Qhw58DcH1q0=) 6: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: D6xVrarR741Tat/B/aD4Gr/765oFGk3PkG8sC2eJZzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:04:cf:10:36:a5:1c:c3:80:bc:4f:6b:83:0d:1e:b4:a6:24:92:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Aug 6 10:25:02 2025 GMT Not After : Aug 9 19:06:02 2025 GMT Subject: CN=C1B6D1536BCC93560C1FFC775A3C76DCD81CEA11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:77:18:bd:44:10:ac:cb:41:7d:64:97:c1:a1: 89:4f:03:e1:af:35:19:60:da:30:f9:e5:2c:9d:24: b0:a3:69:89:28:3e:a2:0f:d9:0e:c9:4e:ec:ec:bb: 7c:a7:c8:c9:ac:e1:d1:c7:08:cf:4b:1e:9b:53:58: 48:15:b4:c9:bc:25:ed:e5:a6:f4:4c:c6:2a:3e:59: 23:ac:ae:2f:2c:d2:0c:96:b6:2a:ac:76:2a:98:b0: f7:63:dd:f0:cb:bc:df:61:13:10:2c:e9:72:22:c6: d0:e5:7c:47:8e:c9:56:fd:f9:64:98:bb:95:d8:e3: e3:9a:ab:c8:6f:61:6f:81:13:41:3d:bd:8f:94:59: 3a:1b:a3:61:f8:6d:10:ce:01:1d:a8:6b:85:3c:a6: e2:f2:37:05:0f:18:89:f5:01:4a:ee:8b:ef:89:c2: d2:bf:31:ee:df:b7:da:0a:f8:7f:2f:d2:9b:b4:63: f6:97:9b:ad:7a:ba:d1:e7:0f:32:1d:72:85:8b:e1: 24:14:3a:ec:f2:e4:e4:d3:40:bb:82:e5:d4:c9:3a: 79:6b:58:9a:ab:9b:90:0f:dc:44:c5:26:02:09:eb: 74:85:67:4c:7d:66:40:af:62:8e:8f:45:54:94:62: ce:f5:d5:4a:fd:a8:0d:dd:da:0f:a2:f8:0f:65:1c: e3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B6:D1:53:6B:CC:93:56:0C:1F:FC:77:5A:3C:76:DC:D8:1C:EA:11 X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:49:f7:2f:39:13:bc:04:f0:4b:b2:7e:95:16:29:1b:d8:db: 0f:aa:ba:20:aa:be:7f:7f:52:f1:4c:b5:2a:7e:bf:b7:68:33: 28:cf:9d:a9:5a:04:69:e2:80:d2:f2:19:73:01:a0:9c:7f:44: 8e:0c:f5:a1:02:20:2c:72:41:ae:21:a9:cf:9f:41:d0:50:93: b0:bc:f4:f8:f3:b1:c8:87:5a:b7:39:68:65:48:e1:83:17:db: aa:ef:94:07:0f:7c:fe:d3:be:d3:49:c8:12:51:b4:a8:d3:c3: 17:84:b7:0a:c6:87:70:bb:5b:b5:0a:19:a8:fa:d7:31:92:dd: 93:78:d8:2f:99:4b:76:96:6d:b6:0f:d6:e3:f1:51:e0:9e:c7: 60:28:50:c4:e5:12:06:fc:8b:9d:9b:18:75:b3:74:2c:d0:a4: 5b:7c:1e:6a:70:98:73:b0:4b:b5:99:6e:35:ad:31:d0:30:55: 82:a8:23:df:2d:f1:83:45:bf:fc:85:27:9c:f2:03:35:fc:db: b3:84:09:6c:0d:cb:90:b1:cf:39:56:eb:07:df:aa:d9:c4:df: 2d:7b:1f:10:5d:a0:d0:76:ec:fd:6e:60:f4:8a:50:35:06:90: eb:0c:18:ee:da:b6:eb:74:94:d0:ae:7b:78:64:c0:6b:6d:30: 1d:51:2b:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYATPEDalHMOAvE9rgw0etKYkklswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNTA4MDYxMDI1MDJaFw0yNTA4MDkxOTA2MDJaMDMxMTAvBgNV BAMTKEMxQjZEMTUzNkJDQzkzNTYwQzFGRkM3NzVBM0M3NkRDRDgxQ0VBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2dxi9RBCsy0F9ZJfBoYlPA+Gv NRlg2jD55SydJLCjaYkoPqIP2Q7JTuzsu3ynyMms4dHHCM9LHptTWEgVtMm8Je3l pvRMxio+WSOsri8s0gyWtiqsdiqYsPdj3fDLvN9hExAs6XIixtDlfEeOyVb9+WSY u5XY4+Oaq8hvYW+BE0E9vY+UWTobo2H4bRDOAR2oa4U8puLyNwUPGIn1AUrui++J wtK/Me7ft9oK+H8v0pu0Y/aXm616utHnDzIdcoWL4SQUOuzy5OTTQLuC5dTJOnlr WJqrm5AP3ETFJgIJ63SFZ0x9ZkCvYo6PRVSUYs711Ur9qA3d2g+i+A9lHOMbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwbbRU2vMk1YMH/x3Wjx23Ngc6hEwHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkND NjcyN0Q2RTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdJ9y85E7wE8EuyfpUWKRvY2w+quiCqvn9/ UvFMtSp+v7doMyjPnalaBGnigNLyGXMBoJx/RI4M9aECICxyQa4hqc+fQdBQk7C8 9PjzsciHWrc5aGVI4YMX26rvlAcPfP7TvtNJyBJRtKjTwxeEtwrGh3C7W7UKGaj6 1zGS3ZN42C+ZS3aWbbYP1uPxUeCex2AoUMTlEgb8i52bGHWzdCzQpFt8HmpwmHOw S7WZbjWtMdAwVYKoI98t8YNFv/yFJ5zyAzX827OECWwNy5CxzzlW6wffqtnE3y17 HxBdoNB27P1uYPSKUDUGkOsMGO7atut0lNCue3hkwGttMB1RK3g= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:21 2025 by rpki-client