$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: AFYr1PNq8GxSGmxzjzluuBZh5b6ROlPLbrNTsDoHmDg= Subject key identifier: D7:1F:F7:04:42:FF:69:F0:BF:5A:91:5E:33:80:70:12:66:AA:E1:E8 Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 3AB66A6AE622CBBE945472F9EFF9456641482FAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 0206 Signing time: Thu 21 Aug 2025 11:21:54 +0000 Manifest this update: Thu 21 Aug 2025 11:16:54 +0000 Manifest next update: Sun 24 Aug 2025 19:52:54 +0000 Files and hashes: 1: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 2: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: oy1KsQ4UTLbLB1uxPrj3VVTizOM0Cb40u5QzL7xrHvM=) 3: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) 4: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) 5: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b6:6a:6a:e6:22:cb:be:94:54:72:f9:ef:f9:45:66:41:48:2f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Aug 21 11:16:54 2025 GMT Not After : Aug 24 19:52:54 2025 GMT Subject: CN=D71FF70442FF69F0BF5A915E3380701266AAE1E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:cd:b2:af:02:30:6d:33:72:c6:9d:d0:ab: 7c:e6:76:c8:80:f0:97:21:0d:87:e7:7e:eb:03:25: 59:e9:b5:a6:8b:ac:42:74:97:12:53:1d:a5:8e:d4: fb:85:d5:2b:3e:53:f0:ac:85:3c:25:c8:dc:cf:f0: 4e:ab:0c:d9:b0:7c:68:7d:e2:ee:76:f3:a1:f1:7a: 04:a2:d7:07:4b:9e:dc:5d:45:9a:a0:2e:07:2a:38: 85:4d:48:b2:95:69:aa:6a:b2:ad:1d:56:8c:f1:ba: c8:96:21:4b:7a:8d:7d:13:22:1b:cb:fc:a6:8f:2e: 18:a6:5b:1f:f6:3e:e3:29:f3:f5:9d:a1:9e:7f:3f: 47:42:b6:ed:db:73:f6:99:a8:98:4c:27:4b:5f:86: aa:22:6c:bc:8d:0a:ce:6e:c6:c7:f2:8e:c9:f0:3a: 29:28:0a:03:3d:2d:a1:78:f4:1e:38:42:25:f0:b8: 3a:e4:ae:a4:9a:51:e1:45:8e:f9:c8:d1:c7:f1:ae: 62:7d:31:dc:b6:7e:a1:84:85:1d:ad:5b:86:de:16: b8:c8:ca:43:cb:e2:b6:0f:3f:98:21:c0:5e:33:cf: b8:d7:4b:b4:36:cf:d8:37:5c:21:ad:13:3e:55:61: 64:ae:2d:a9:fb:96:72:1a:02:b6:53:eb:f9:2d:a7: 53:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1F:F7:04:42:FF:69:F0:BF:5A:91:5E:33:80:70:12:66:AA:E1:E8 X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:de:56:38:f8:f3:5b:45:e9:b3:38:5f:93:df:c4:d0:1b:21: 75:e1:87:aa:48:64:b4:77:cc:1c:4e:9f:c3:ca:b5:2b:b3:9e: 50:e0:f1:fc:27:3d:4c:39:f7:fe:2f:1d:1e:15:ce:98:30:b3: e9:82:f7:a5:35:ae:43:26:0a:f2:7c:33:a8:ea:19:a9:9b:cb: 63:3b:41:b9:5f:58:81:2e:7a:ae:6b:79:d8:2e:cd:41:e7:03: 38:5c:02:cc:ca:b8:84:2e:99:d5:c8:11:99:f1:c9:a4:ca:bd: 35:3c:fd:3c:66:a6:5d:8c:41:c5:94:9e:67:88:fc:8f:80:03: cb:14:3d:d8:5c:9e:4f:6a:5b:77:75:4f:28:77:1b:91:27:55: 6e:60:51:38:e5:ac:21:b3:b5:1c:e9:5e:5a:43:74:38:92:2a: 28:83:76:87:66:3d:da:18:0b:7c:56:84:c7:4f:4e:d5:25:d5: 7f:4b:fa:12:2f:1b:d7:94:b0:df:9b:91:bd:cc:ed:c3:ee:7f: 86:ff:25:62:00:10:a1:63:57:b4:c3:e4:4d:e6:e4:d1:27:48: 09:46:e6:e7:2e:ab:32:03:42:ca:69:1e:24:d9:bd:b2:a9:1c: ce:b6:42:53:98:14:6c:a9:c4:e6:15:4a:e8:71:8f:ba:b1:fb: d5:70:1d:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrZqauYiy76UVHL57/lFZkFIL68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTA4MjExMTE2NTRaFw0yNTA4MjQxOTUyNTRaMDMxMTAvBgNV BAMTKEQ3MUZGNzA0NDJGRjY5RjBCRjVBOTE1RTMzODA3MDEyNjZBQUUxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYas2yrwIwbTNyxp3Qq3zmdsiA 8JchDYfnfusDJVnptaaLrEJ0lxJTHaWO1PuF1Ss+U/CshTwlyNzP8E6rDNmwfGh9 4u5286HxegSi1wdLntxdRZqgLgcqOIVNSLKVaapqsq0dVozxusiWIUt6jX0TIhvL /KaPLhimWx/2PuMp8/WdoZ5/P0dCtu3bc/aZqJhMJ0tfhqoibLyNCs5uxsfyjsnw OikoCgM9LaF49B44QiXwuDrkrqSaUeFFjvnI0cfxrmJ9Mdy2fqGEhR2tW4beFrjI ykPL4rYPP5ghwF4zz7jXS7Q2z9g3XCGtEz5VYWSuLan7lnIaArZT6/ktp1P/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1x/3BEL/afC/WpFeM4BwEmaq4egwHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfeVjj481tF6bM4X5PfxNAbIXXhh6pIZLR3 zBxOn8PKtSuznlDg8fwnPUw59/4vHR4Vzpgws+mC96U1rkMmCvJ8M6jqGamby2M7 QblfWIEueq5redguzUHnAzhcAszKuIQumdXIEZnxyaTKvTU8/Txmpl2MQcWUnmeI /I+AA8sUPdhcnk9qW3d1Tyh3G5EnVW5gUTjlrCGztRzpXlpDdDiSKiiDdodmPdoY C3xWhMdPTtUl1X9L+hIvG9eUsN+bkb3M7cPuf4b/JWIAEKFjV7TD5E3m5NEnSAlG 5ucuqzIDQsppHiTZvbKpHM62QlOYFGypxOYVSuhxj7qx+9VwHXQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:02:11 2025 by rpki-client