$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json) Hash identifier: XRAM5/Sd7Sta+ESmDO9+ckWl69B5ZCcOmgwYpJf5mmg= Subject key identifier: 0C:0F:B8:B9:87:55:C3:F3:7A:D3:2C:B3:A2:D4:17:A9:41:64:99:6B Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Certificate serial: 227F50C0A4C758DA4F1B1D39829081AB4B081ACC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft Manifest number: 0390 Signing time: Tue 05 Aug 2025 04:11:14 +0000 Manifest this update: Tue 05 Aug 2025 04:06:14 +0000 Manifest next update: Fri 08 Aug 2025 06:50:14 +0000 Files and hashes: 1: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: aX8JsUajH0LtA0g+nb4IvX76YYAKw2XPkTCD7qQk088=) 2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: GKVVkkXboxeT4WcoJCcUdHA/7DHycn3Kvf/vm4KqRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7f:50:c0:a4:c7:58:da:4f:1b:1d:39:82:90:81:ab:4b:08:1a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Validity Not Before: Aug 5 04:06:14 2025 GMT Not After : Aug 8 06:50:14 2025 GMT Subject: CN=0C0FB8B98755C3F37AD32CB3A2D417A94164996B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:ff:ff:cc:bd:48:30:9e:66:33:fb:0b:39: ff:f3:aa:a3:4f:a9:33:e6:cf:de:2b:df:6a:f2:fc: 57:0a:d8:4b:4a:7c:e4:f4:16:9e:f0:58:21:82:ce: 35:b3:b4:25:34:91:3d:0f:67:f2:4b:ff:f7:f1:44: 26:c5:77:d6:7b:28:87:94:a2:df:d5:27:5b:c8:a4: 46:a7:24:5d:36:69:be:25:ee:ed:58:c0:e4:7a:3c: 47:a7:52:0e:d9:72:af:c9:7f:d1:a9:89:b4:8c:c3: eb:a0:06:3d:5c:24:8a:06:1a:62:32:15:37:87:5c: 27:d7:73:8e:b3:ce:5e:1c:fb:3f:61:76:2f:8d:d1: 24:49:d1:2e:83:89:eb:7f:6a:27:d1:8a:e1:f5:f6: ec:ba:ad:04:6b:88:63:f7:5f:d5:65:22:41:ed:d7: c4:14:a2:2c:f3:93:36:52:b7:d4:e2:1e:0d:e8:cc: aa:c9:46:af:9a:b5:38:58:b2:60:5f:40:a5:02:c2: ab:97:77:95:a4:d6:60:99:6f:fd:ee:6c:8f:28:37: cc:8c:77:0a:02:4c:85:3f:aa:58:24:c9:e0:44:eb: 8f:06:28:1c:90:33:d2:6f:a9:44:8c:4f:9e:b5:db: 71:84:c9:48:a3:c7:f1:bd:5f:5d:7d:25:54:42:6f: bb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0F:B8:B9:87:55:C3:F3:7A:D3:2C:B3:A2:D4:17:A9:41:64:99:6B X509v3 Authority Key Identifier: keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8e:1f:b9:3e:18:9b:2f:ae:85:b3:e9:b5:5a:7a:87:0a:e2: 15:8a:68:be:53:3f:9b:f2:14:d4:e8:7b:49:fe:10:2a:8f:2b: f6:4e:b5:f6:37:e8:a3:b5:c7:dd:b7:da:66:03:9c:42:b6:93: e0:af:cf:8f:16:40:56:43:63:5a:29:aa:74:5c:5b:a3:80:9a: 14:36:fc:6e:fb:4d:d4:fe:2e:04:95:97:2f:8b:23:ea:c1:9f: 9a:cf:ea:14:e9:d8:5d:3e:24:b7:dc:d2:f4:d7:75:62:c1:e9: 7e:d4:71:aa:f4:a8:be:31:5d:90:0d:c1:3f:2c:87:03:1f:f0: 34:ab:ca:6e:e5:c5:79:54:77:42:ad:9f:35:47:3e:8d:e6:7a: 4d:a8:8a:5b:db:70:66:bf:f2:c6:31:88:1b:30:42:e2:f5:ca: 77:ff:3f:66:37:34:09:23:07:02:e8:8e:2f:24:0b:be:91:31: 49:a2:7e:ad:e8:64:8c:97:2d:e6:47:ba:4c:80:da:f0:6d:75: 60:24:5d:24:99:25:1a:43:da:7e:4c:87:20:5f:69:2e:71:75: 08:33:ef:e0:fe:57:19:5b:6a:81:e3:2f:8c:2a:cb:81:9e:20: 2b:65:fc:6f:4f:e1:aa:81:af:7f:c7:1c:8c:71:0f:14:a1:93: 26:b9:1a:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIn9QwKTHWNpPGx05gpCBq0sIGswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC QzY0MzUyNTAeFw0yNTA4MDUwNDA2MTRaFw0yNTA4MDgwNjUwMTRaMDMxMTAvBgNV BAMTKDBDMEZCOEI5ODc1NUMzRjM3QUQzMkNCM0EyRDQxN0E5NDE2NDk5NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8///zL1IMJ5mM/sLOf/zqqNP qTPmz94r32ry/FcK2EtKfOT0Fp7wWCGCzjWztCU0kT0PZ/JL//fxRCbFd9Z7KIeU ot/VJ1vIpEanJF02ab4l7u1YwOR6PEenUg7Zcq/Jf9GpibSMw+ugBj1cJIoGGmIy FTeHXCfXc46zzl4c+z9hdi+N0SRJ0S6Diet/aifRiuH19uy6rQRriGP3X9VlIkHt 18QUoizzkzZSt9TiHg3ozKrJRq+atThYsmBfQKUCwquXd5Wk1mCZb/3ubI8oN8yM dwoCTIU/qlgkyeBE648GKByQM9JvqUSMT56123GEyUijx/G9X119JVRCb7vpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDA+4uYdVw/N60yyzotQXqUFkmWswHwYDVR0j BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0 MzUyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJG MkNCQzY0MzUyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyOH7k+GJsvroWz6bVaeocK4hWKaL5TP5vy FNToe0n+ECqPK/ZOtfY36KO1x9232mYDnEK2k+Cvz48WQFZDY1opqnRcW6OAmhQ2 /G77TdT+LgSVly+LI+rBn5rP6hTp2F0+JLfc0vTXdWLB6X7Ucar0qL4xXZANwT8s hwMf8DSrym7lxXlUd0KtnzVHPo3mek2oilvbcGa/8sYxiBswQuL1ynf/P2Y3NAkj BwLoji8kC76RMUmifq3oZIyXLeZHukyA2vBtdWAkXSSZJRpD2n5MhyBfaS5xdQgz 7+D+VxlbaoHjL4wqy4GeICtl/G9P4aqBr3/HHIxxDxShkya5GhE= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:27 2025 by rpki-client