$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft File: 3E08DEC2AE0EB41653597023376671331769A43E.mft (raw, json) Hash identifier: crRmkkoT9sP7vpko8J1SHcNZUUqiqyfgqqiwSIgryVw= Subject key identifier: 95:33:2D:5D:48:4A:35:67:8F:84:0E:F0:EC:A4:17:4F:82:99:AD:A3 Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E Certificate issuer: /CN=3E08DEC2AE0EB41653597023376671331769A43E Certificate serial: 6ABC06481B8F05B54712E688E212DCA9D7FA2CB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft Manifest number: 71 Signing time: Tue 05 Aug 2025 06:11:33 +0000 Manifest this update: Tue 05 Aug 2025 06:06:33 +0000 Manifest next update: Fri 08 Aug 2025 13:58:33 +0000 Files and hashes: 1: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: 0OT1N5Rf9ROOY/Zt+fSYDh8hyIpfNlFvEpZdIjJrZrs=) 2: 3E08DEC2AE0EB41653597023376671331769A43E.crl (hash: Iwgql7vOASWWQW00zoVJdbgE+Ml11BfC//ffhH4NPi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:bc:06:48:1b:8f:05:b5:47:12:e6:88:e2:12:dc:a9:d7:fa:2c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E Validity Not Before: Aug 5 06:06:33 2025 GMT Not After : Aug 8 13:58:33 2025 GMT Subject: CN=95332D5D484A35678F840EF0ECA4174F8299ADA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:de:91:b0:06:38:72:3b:a9:d7:9f:d9:58: 45:a1:19:09:e7:f9:68:a3:e9:9c:e7:5c:6b:ac:ef: 55:1f:c9:30:5a:b1:17:1d:3e:d4:54:3c:36:f9:ee: 32:97:e8:95:c2:5b:fd:38:a4:b8:cc:d9:60:6c:17: ce:50:9f:09:10:fd:ec:bc:3f:f5:de:77:89:41:e0: bb:f0:76:7f:9f:4f:de:18:27:2f:38:85:bd:9f:90: ee:1d:60:30:32:9d:5b:cc:7e:ce:ef:9e:3f:b6:0c: 48:3e:67:22:0f:b0:b3:4e:97:21:c2:cf:23:29:a1: 33:8b:c9:88:e0:c6:4a:ab:8f:42:8d:0f:b4:e4:4e: 79:ba:c6:bc:35:3d:04:68:46:4f:b2:51:56:cb:8b: 84:1d:b0:ba:a5:21:9d:84:98:36:ef:33:5f:8c:bc: 63:34:e0:73:f2:0e:ae:40:50:9c:f2:52:de:3b:e9: ea:d7:45:a5:a2:c0:51:41:21:33:ac:2e:03:a0:84: 26:dc:d7:1b:dd:ae:b7:24:06:ec:c6:c0:40:b1:9e: 9f:e0:2d:61:12:67:af:ff:e7:dc:6b:0b:1e:88:ad: 07:aa:e0:23:a8:c9:7a:1b:7e:37:d2:fd:d3:97:ff: 1e:3b:b0:ef:49:01:e1:29:df:de:7b:2c:c4:62:9b: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:33:2D:5D:48:4A:35:67:8F:84:0E:F0:EC:A4:17:4F:82:99:AD:A3 X509v3 Authority Key Identifier: keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:47:7f:aa:b9:52:1e:16:16:4e:36:bc:6e:14:25:f4:7b:b9: be:a7:94:71:37:f0:69:82:5e:0f:0b:ca:e5:9f:c7:a1:75:36: 8a:70:54:d7:e4:1f:22:1a:b9:5c:e5:6d:0e:5b:1c:fc:4c:ba: 92:0e:ec:c6:95:5d:9b:24:b5:2e:b7:a3:7e:6f:84:d7:c0:26: bb:04:55:18:97:e4:77:27:82:b8:14:90:0d:a8:67:1f:4a:ed: 1a:79:8b:73:38:10:9b:4f:5b:eb:22:93:1c:cd:89:5e:92:e1: 7e:5d:25:27:2c:4b:45:b9:d1:4d:01:4b:57:c1:07:ec:aa:3a: 31:e9:88:1f:8c:e5:90:11:ed:f6:e4:9e:1b:0c:f8:b8:54:58: 89:15:b2:db:76:a3:11:c9:ee:d0:54:f6:fc:34:3c:00:37:13: 2f:ca:fb:76:fe:70:7c:bd:92:9b:2d:eb:5d:76:44:d9:f2:69: 9d:19:0f:e6:03:41:34:16:59:33:fa:e4:2c:12:90:28:86:91: c9:ba:a6:17:74:ca:e7:c0:6c:9a:6e:5a:d2:e3:37:cc:e1:9d: 35:86:0a:bb:ff:d7:1a:f7:7f:00:54:d3:93:2c:1e:2d:f9:9c: 91:5e:6f:e5:1d:a3:8c:f9:60:00:51:80:ab:9c:54:7c:68:70: cb:b4:bb:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarwGSBuPBbVHEuaI4hLcqdf6LLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMx NzY5QTQzRTAeFw0yNTA4MDUwNjA2MzNaFw0yNTA4MDgxMzU4MzNaMDMxMTAvBgNV BAMTKDk1MzMyRDVENDg0QTM1Njc4Rjg0MEVGMEVDQTQxNzRGODI5OUFEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdUN6RsAY4cjup15/ZWEWhGQnn +Wij6ZznXGus71UfyTBasRcdPtRUPDb57jKX6JXCW/04pLjM2WBsF85QnwkQ/ey8 P/Xed4lB4Lvwdn+fT94YJy84hb2fkO4dYDAynVvMfs7vnj+2DEg+ZyIPsLNOlyHC zyMpoTOLyYjgxkqrj0KND7TkTnm6xrw1PQRoRk+yUVbLi4QdsLqlIZ2EmDbvM1+M vGM04HPyDq5AUJzyUt476erXRaWiwFFBITOsLgOghCbc1xvdrrckBuzGwECxnp/g LWESZ6//59xrCx6IrQeq4COoyXobfjfS/dOX/x47sO9JAeEp3957LMRim173AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlTMtXUhKNWePhA7w7KQXT4KZraMwHwYDVR0j BBgwFoAUPgjewq4OtBZTWXAjN2ZxMxdppD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjgxOWJhOS01ZjQ0LTQxMjUtOGI4Yy1mYzE2NGI1NGQ3M2EvMC8zRTA4REVDMkFF MEVCNDE2NTM1OTcwMjMzNzY2NzEzMzE3NjlBNDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMxNzY5 QTQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI4MTliYTktNWY0NC00MTI1LThi OGMtZmMxNjRiNTRkNzNhLzAvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2Njcx MzMxNzY5QTQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpHf6q5Uh4WFk42vG4UJfR7ub6nlHE38GmC Xg8LyuWfx6F1NopwVNfkHyIauVzlbQ5bHPxMupIO7MaVXZsktS63o35vhNfAJrsE VRiX5HcngrgUkA2oZx9K7Rp5i3M4EJtPW+sikxzNiV6S4X5dJScsS0W50U0BS1fB B+yqOjHpiB+M5ZAR7fbknhsM+LhUWIkVstt2oxHJ7tBU9vw0PAA3Ey/K+3b+cHy9 kpst6112RNnyaZ0ZD+YDQTQWWTP65CwSkCiGkcm6phd0yufAbJpuWtLjN8zhnTWG Crv/1xr3fwBU05MsHi35nJFeb+Udo4z5YABRgKucVHxocMu0u/M= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:29 2025 by rpki-client