$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: DCICWjwSF5lyOhqlGEEdx+CuQ4wB6vsQ7QyfYP1Ridk= Subject key identifier: A8:5F:EC:04:82:7C:AC:0F:28:08:3F:34:8C:B2:EA:DD:2D:EB:2A:11 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 5F6BB0F1BFB6877801CAFCF6BFF00735255D77DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 04FD Signing time: Thu 21 Aug 2025 11:21:46 +0000 Manifest this update: Thu 21 Aug 2025 11:16:46 +0000 Manifest next update: Sun 24 Aug 2025 13:06:46 +0000 Files and hashes: 1: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: JLO1NUZxwv4chYpJQP6b6urdh1EsjzTf9OEdOB2KYnY=) 2: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) 3: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6b:b0:f1:bf:b6:87:78:01:ca:fc:f6:bf:f0:07:35:25:5d:77:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Aug 21 11:16:46 2025 GMT Not After : Aug 24 13:06:46 2025 GMT Subject: CN=A85FEC04827CAC0F28083F348CB2EADD2DEB2A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:59:f9:90:d0:b1:4b:60:37:07:0b:99:d2: 55:98:dc:f1:44:fe:2f:8d:9c:a1:a3:12:20:c1:4a: a3:35:30:6a:da:e6:9c:9e:07:1b:af:00:c8:b6:36: 8a:b7:08:d4:60:dd:38:af:d6:44:cb:71:a8:da:ef: 63:a1:7b:19:55:c9:b6:0b:d6:ee:9a:f4:a6:7e:37: ea:7b:9c:3f:a9:ea:69:0a:85:96:c6:4f:8d:ad:18: 29:e0:5e:21:2d:38:3b:45:b8:45:36:c3:59:ef:3b: 8f:c7:40:e4:95:23:39:da:06:a6:59:b0:fe:f4:c4: 33:58:fd:4f:a4:5f:46:e2:b7:43:8a:37:f4:b1:8b: ad:8b:e5:d3:64:b5:e6:7c:24:d4:5e:43:38:63:ca: ce:18:38:42:9e:33:6b:1c:a4:68:2f:69:81:55:9a: 4d:42:4e:c4:8e:4e:84:19:20:85:44:c3:c1:86:3c: 62:05:75:16:48:51:aa:e4:25:93:ca:d9:0e:ca:b4: d2:40:ff:a6:c8:7f:c0:f4:94:23:a3:5f:b1:9c:ef: 36:8b:cf:5c:ca:89:69:5e:c6:cd:c7:52:eb:80:61: 9a:45:85:f4:2c:ca:31:32:36:bc:52:c8:74:37:6f: b5:c5:6e:a8:b1:db:21:6e:3f:a7:e1:d1:30:c0:c6: 58:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5F:EC:04:82:7C:AC:0F:28:08:3F:34:8C:B2:EA:DD:2D:EB:2A:11 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:da:c0:46:68:9a:9c:87:f2:48:da:3c:b6:66:1f:55:8f:c4: 6d:cd:5e:5b:f7:0f:c8:79:b1:f5:d8:2a:92:bb:14:0f:2d:bf: d4:2e:3a:89:8c:21:14:65:8b:e1:40:a8:7a:93:e9:71:84:cd: 42:ec:91:dc:e8:d8:f1:5b:eb:53:1d:0d:5b:ea:2e:9e:9f:4d: 98:96:a0:0c:37:4a:04:1b:69:85:75:89:ea:3e:66:68:9c:6f: 69:89:d7:52:df:68:7d:c7:3e:bd:d2:b0:38:e6:92:d4:27:d0: bc:f4:c4:55:da:92:6c:16:55:52:8a:68:8b:39:f9:c8:84:fb: aa:e8:d6:24:ff:16:b0:3a:5b:ad:06:79:94:5e:bc:0c:36:af: 5f:a2:27:86:c3:7d:57:c0:b1:73:28:7a:a8:ef:a9:a8:b3:c0: f7:8b:b4:df:59:ad:9f:12:2d:3b:79:03:9f:6e:1c:c4:f7:87: b9:95:db:01:32:8a:6e:10:99:0d:ee:aa:07:d0:43:4d:7f:18: 35:e9:4d:95:b5:ad:f6:88:67:2a:e6:ec:43:5b:69:d9:78:7d: c4:18:cc:d6:f1:b0:56:8f:a0:9a:b3:12:0a:cf:70:74:bb:ee: 88:6b:5a:42:1c:ef:43:5f:70:06:47:bc:ab:3a:d4:51:4c:95: bf:4a:e9:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2uw8b+2h3gByvz2v/AHNSVdd9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNTA4MjExMTE2NDZaFw0yNTA4MjQxMzA2NDZaMDMxMTAvBgNV BAMTKEE4NUZFQzA0ODI3Q0FDMEYyODA4M0YzNDhDQjJFQUREMkRFQjJBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCll1n5kNCxS2A3BwuZ0lWY3PFE /i+NnKGjEiDBSqM1MGra5pyeBxuvAMi2Noq3CNRg3Tiv1kTLcaja72OhexlVybYL 1u6a9KZ+N+p7nD+p6mkKhZbGT42tGCngXiEtODtFuEU2w1nvO4/HQOSVIznaBqZZ sP70xDNY/U+kX0bit0OKN/Sxi62L5dNkteZ8JNReQzhjys4YOEKeM2scpGgvaYFV mk1CTsSOToQZIIVEw8GGPGIFdRZIUarkJZPK2Q7KtNJA/6bIf8D0lCOjX7Gc7zaL z1zKiWlexs3HUuuAYZpFhfQsyjEyNrxSyHQ3b7XFbqix2yFuP6fh0TDAxlj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqF/sBIJ8rA8oCD80jLLq3S3rKhEwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXawEZompyH8kjaPLZmH1WPxG3NXlv3D8h5 sfXYKpK7FA8tv9QuOomMIRRli+FAqHqT6XGEzULskdzo2PFb61MdDVvqLp6fTZiW oAw3SgQbaYV1ieo+Zmicb2mJ11LfaH3HPr3SsDjmktQn0Lz0xFXakmwWVVKKaIs5 +ciE+6ro1iT/FrA6W60GeZRevAw2r1+iJ4bDfVfAsXMoeqjvqaizwPeLtN9ZrZ8S LTt5A59uHMT3h7mV2wEyim4QmQ3uqgfQQ01/GDXpTZW1rfaIZyrm7ENbadl4fcQY zNbxsFaPoJqzEgrPcHS77ohrWkIc70NfcAZHvKs61FFMlb9K6TQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:00:54 2025 by rpki-client