$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json) Hash identifier: A6y2A6S3Cw/Z63TdbPTvB3qxK4QLPg11hDqRrC3yVek= Subject key identifier: 9F:B3:0D:BF:9C:D5:12:1E:09:9D:B9:92:46:22:20:6F:11:45:B0:14 Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 4F3435A81BEAC1BC68505D75F172A0162D54A062 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft Manifest number: 01C0 Signing time: Wed 06 Aug 2025 10:31:45 +0000 Manifest this update: Wed 06 Aug 2025 10:26:45 +0000 Manifest next update: Sat 09 Aug 2025 12:49:45 +0000 Files and hashes: 1: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: FkjuZkviekb7VaMyMmuCMchrVU1yZ527lgE1cprIhiU=) 2: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: rf43nBbh2Ah+sbiUmyG/s83VerMFh1EVx8y4VHv9OZY=) 3: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: c6BbZqskhId1bW3l6aSuRQLjcbQNOmGBaOGbC28FTXg=) 4: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZsYKQLKtHkVTslRdGYlW0kXwJ9gapNRm2k1uNrTnTX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:34:35:a8:1b:ea:c1:bc:68:50:5d:75:f1:72:a0:16:2d:54:a0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: Aug 6 10:26:45 2025 GMT Not After : Aug 9 12:49:45 2025 GMT Subject: CN=9FB30DBF9CD5121E099DB9924622206F1145B014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a5:6e:30:f4:f2:00:44:d1:2d:c4:5a:eb:18: 2f:61:1f:2e:62:21:d6:51:1f:9c:68:52:43:82:aa: 0d:72:4a:9c:b8:90:6a:5d:fc:a6:f7:42:37:17:89: eb:58:37:58:42:a0:1c:d3:12:1f:73:6c:bc:c2:60: b1:b0:fa:e7:74:07:59:8f:ed:2d:82:bc:a7:86:8b: 1f:d1:fd:1a:15:04:56:5e:85:b4:69:86:12:a4:58: 78:3a:87:e7:96:97:2b:e3:38:d4:51:6c:25:e9:6d: 32:74:4a:fe:62:bc:b5:80:03:51:64:11:54:ff:b9: a9:af:af:06:32:16:06:c1:ab:5e:6f:f7:e5:f7:2a: 2d:80:cc:64:d6:0e:b4:1e:21:02:67:37:b3:41:0f: 39:1e:e2:86:2a:5d:21:85:96:61:ba:f1:50:7b:96: 0d:84:65:d1:7d:a8:2a:d6:9a:2e:1c:b0:e8:9d:ca: 20:de:2d:48:c0:e7:c1:07:55:26:4f:6b:35:5b:c9: 9b:31:69:3a:9c:e6:b2:be:75:44:df:2e:29:22:6c: 7d:89:fd:59:08:67:e4:c6:f2:cf:a4:d9:6d:cf:6d: 95:27:7a:b6:34:83:8c:62:98:d2:4e:25:6c:7a:3c: 90:47:43:26:c4:ba:85:10:b4:62:33:7e:81:8b:65: 44:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B3:0D:BF:9C:D5:12:1E:09:9D:B9:92:46:22:20:6F:11:45:B0:14 X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:11:7b:f9:9c:36:86:56:27:dd:70:2a:88:83:6d:56:69:a9: a6:8a:61:c9:28:33:08:34:7f:7f:cf:d4:4d:bc:09:64:c7:3a: 47:57:13:e0:a5:9b:ec:67:8e:1d:a7:f5:d6:56:21:3c:b5:c4: fc:2f:84:2f:22:e7:a4:78:9b:ec:b2:ff:61:16:01:f7:e6:47: 65:4d:7d:a6:35:72:38:b5:34:d2:29:6b:81:0a:d8:c3:ba:f4: 2c:dc:a4:44:c2:aa:66:81:ff:f3:34:63:2b:4c:54:e8:9f:80: c3:ea:9b:57:99:ee:e8:fe:96:ca:eb:7b:02:61:2c:fe:2f:6f: fa:95:e7:7e:ad:f4:16:a0:47:e1:3f:ef:68:f1:f4:ce:87:7d: 16:9f:6d:64:7d:db:5d:49:ba:43:24:03:36:ca:d2:ca:4f:bb: dd:7b:75:eb:71:73:e6:a6:dc:b0:50:ea:0c:c9:3b:24:5f:4e: 49:12:61:74:d4:d9:f3:4c:80:4d:49:d0:da:6e:17:03:b6:db: 60:bb:4c:60:99:92:d6:63:04:d3:27:78:5f:79:80:6e:48:bc: f8:5d:1e:b2:02:8c:8a:b1:d4:e7:c2:0a:5b:c4:41:17:4d:57: 8c:b9:af:8e:d7:e1:ff:9a:f5:67:39:e8:09:ed:6e:82:b0:a4: 04:cb:88:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzQ1qBvqwbxoUF118XKgFi1UoGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVC NkMyMUM3NzAeFw0yNTA4MDYxMDI2NDVaFw0yNTA4MDkxMjQ5NDVaMDMxMTAvBgNV BAMTKDlGQjMwREJGOUNENTEyMUUwOTlEQjk5MjQ2MjIyMDZGMTE0NUIwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5pW4w9PIARNEtxFrrGC9hHy5i IdZRH5xoUkOCqg1ySpy4kGpd/Kb3QjcXietYN1hCoBzTEh9zbLzCYLGw+ud0B1mP 7S2CvKeGix/R/RoVBFZehbRphhKkWHg6h+eWlyvjONRRbCXpbTJ0Sv5ivLWAA1Fk EVT/uamvrwYyFgbBq15v9+X3Ki2AzGTWDrQeIQJnN7NBDzke4oYqXSGFlmG68VB7 lg2EZdF9qCrWmi4csOidyiDeLUjA58EHVSZPazVbyZsxaTqc5rK+dUTfLikibH2J /VkIZ+TG8s+k2W3PbZUnerY0g4ximNJOJWx6PJBHQybEuoUQtGIzfoGLZURVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn7MNv5zVEh4JnbmSRiIgbxFFsBQwHwYDVR0j BBgwFoAUPSBSK1GuqkH1lJDi1Vw23rbCHHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTYxZTVhZS1lNDVmLTRlZTMtOGY2Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUx QUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIxQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVCNkMy MUM3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2 REVCNkMyMUM3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsRe/mcNoZWJ91wKoiDbVZpqaaKYckoMwg0 f3/P1E28CWTHOkdXE+Clm+xnjh2n9dZWITy1xPwvhC8i56R4m+yy/2EWAffmR2VN faY1cji1NNIpa4EK2MO69CzcpETCqmaB//M0YytMVOifgMPqm1eZ7uj+lsrrewJh LP4vb/qV536t9BagR+E/72jx9M6HfRafbWR9211JukMkAzbK0spPu917detxc+am 3LBQ6gzJOyRfTkkSYXTU2fNMgE1J0NpuFwO222C7TGCZktZjBNMneF95gG5IvPhd HrICjIqx1OfCClvEQRdNV4y5r47X4f+a9Wc56AntboKwpATLiAo= -----END CERTIFICATE-----Generated at Thu Aug 7 07:22:31 2025 by rpki-client