$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: EH358t8Je/gSeTa98AyygVSGy5adqQtGcRRSngaSolE= Subject key identifier: 41:5E:9A:BD:2A:02:FB:40:B3:DE:2D:A0:73:20:2D:06:45:AA:4E:21 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 79A26D5977C197DB45463227922212594349586E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 0172 Signing time: Tue 05 Aug 2025 06:12:18 +0000 Manifest this update: Tue 05 Aug 2025 06:07:18 +0000 Manifest next update: Fri 08 Aug 2025 17:17:18 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: d7qF1dxpLEf8vcXLM5twfo2meSPbo60PqeCnMcaSpKs=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a2:6d:59:77:c1:97:db:45:46:32:27:92:22:12:59:43:49:58:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Aug 5 06:07:18 2025 GMT Not After : Aug 8 17:17:18 2025 GMT Subject: CN=415E9ABD2A02FB40B3DE2DA073202D0645AA4E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:22:b6:2d:bc:77:ae:8e:6c:70:ea:e8:77: 03:66:c4:fa:01:79:cf:90:2d:cc:8a:de:9e:83:50: e5:8e:f5:75:34:d3:6b:ce:b8:03:fe:d1:3c:fb:a5: ae:be:57:e6:0b:aa:2f:99:dd:b7:5b:6e:07:1b:b4: 7d:4e:5b:57:84:fa:10:a5:c6:11:c5:a3:da:4c:f4: e9:ed:36:a5:f2:fa:d9:5b:ef:dc:e1:36:11:b0:f2: 08:23:36:f4:35:c3:1f:58:4a:06:3c:a7:42:2b:be: 03:32:88:21:60:0a:8d:a4:38:0a:9c:13:54:b3:30: 35:fb:f7:92:83:e1:5a:75:c6:91:a7:ca:c4:25:82: 6d:cd:f4:7a:42:0f:15:7a:b3:9e:86:0c:1c:95:8b: 2b:62:dd:de:11:75:58:83:67:d9:05:1d:ee:a7:0d: bb:76:91:09:6e:09:b4:42:36:79:58:0f:70:97:bc: ee:cc:f1:5e:14:9c:be:f7:5c:09:1f:5b:45:42:76: 53:18:82:c4:9b:20:7b:94:be:eb:a2:b4:01:e2:9a: 4b:1d:6e:57:ea:2c:c5:a3:68:52:dd:d1:e9:cd:57: 86:08:44:da:60:59:ce:53:14:89:0f:bf:55:23:ff: f7:e3:d7:5d:8c:e7:2f:66:5b:81:fa:f6:d6:7e:f2: ad:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5E:9A:BD:2A:02:FB:40:B3:DE:2D:A0:73:20:2D:06:45:AA:4E:21 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c6:ba:ce:b3:a9:99:5b:0b:af:1e:90:34:dc:38:b1:a9:20: 0d:bd:b8:ce:89:bb:d7:2b:1e:5c:f4:77:48:26:b3:80:06:50: 8d:c5:92:5f:de:49:6a:68:88:9c:7e:d4:c5:67:3e:d1:2f:7b: d3:0e:17:87:a5:3c:18:2c:91:e9:67:88:ed:f0:3e:d3:97:54: 37:f1:fa:1e:e0:93:1a:d7:76:30:d7:a2:df:fd:28:8a:41:cd: c6:1b:3a:95:83:f9:59:9d:1d:52:8a:97:c4:54:f7:64:d2:cd: a2:76:76:bb:70:a9:c4:99:66:05:6b:e9:49:20:a6:fa:5b:ee: b3:39:e9:af:e5:31:8e:6c:8b:95:0f:3e:36:87:25:5f:2b:92: 4b:70:a8:c9:71:ba:11:27:56:c1:54:f1:88:25:39:e4:3d:ec: 1e:68:99:9e:d7:10:df:fb:71:21:ce:34:59:91:dd:fd:ef:38: 8b:a7:bc:e0:d1:60:e7:92:9b:33:e1:30:19:43:53:c9:4f:73: 3a:b8:6c:26:04:ce:91:f8:f6:55:3c:6e:91:77:b0:34:63:7e: 40:c3:c7:f3:67:10:0f:41:d4:c3:31:dd:5f:9d:9b:57:dc:7e: cb:5e:7c:3d:a1:f8:a6:29:4f:58:a3:23:78:8a:4f:ac:62:f9: aa:a1:74:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaJtWXfBl9tFRjInkiISWUNJWG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTA4MDUwNjA3MThaFw0yNTA4MDgxNzE3MThaMDMxMTAvBgNV BAMTKDQxNUU5QUJEMkEwMkZCNDBCM0RFMkRBMDczMjAyRDA2NDVBQTRFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeiSK2Lbx3ro5scOrodwNmxPoB ec+QLcyK3p6DUOWO9XU002vOuAP+0Tz7pa6+V+YLqi+Z3bdbbgcbtH1OW1eE+hCl xhHFo9pM9OntNqXy+tlb79zhNhGw8ggjNvQ1wx9YSgY8p0IrvgMyiCFgCo2kOAqc E1SzMDX795KD4Vp1xpGnysQlgm3N9HpCDxV6s56GDByViyti3d4RdViDZ9kFHe6n Dbt2kQluCbRCNnlYD3CXvO7M8V4UnL73XAkfW0VCdlMYgsSbIHuUvuuitAHimksd blfqLMWjaFLd0enNV4YIRNpgWc5TFIkPv1Uj//fj112M5y9mW4H69tZ+8q3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQV6avSoC+0Cz3i2gcyAtBkWqTiEwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbGus6zqZlbC68ekDTcOLGpIA29uM6Ju9cr Hlz0d0gms4AGUI3Fkl/eSWpoiJx+1MVnPtEve9MOF4elPBgskelniO3wPtOXVDfx +h7gkxrXdjDXot/9KIpBzcYbOpWD+VmdHVKKl8RU92TSzaJ2drtwqcSZZgVr6Ukg pvpb7rM56a/lMY5si5UPPjaHJV8rkktwqMlxuhEnVsFU8YglOeQ97B5omZ7XEN/7 cSHONFmR3f3vOIunvODRYOeSmzPhMBlDU8lPczq4bCYEzpH49lU8bpF3sDRjfkDD x/NnEA9B1MMx3V+dm1fcfstefD2h+KYpT1ijI3iKT6xi+aqhdMU= -----END CERTIFICATE-----Generated at Thu Aug 7 14:33:05 2025 by rpki-client