$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: CskSxB6Ulaam84Xw7aca/dOcgZYntUYsp44F7/9ZbgQ= Subject key identifier: 42:76:39:31:96:7A:76:CE:79:38:D1:A8:2D:E8:76:62:60:F5:47:F5 Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 29E10C51C812826E8277F4F58DE526BBF09CAB9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 04FB Signing time: Thu 21 Aug 2025 21:31:18 +0000 Manifest this update: Thu 21 Aug 2025 21:26:18 +0000 Manifest next update: Sun 24 Aug 2025 22:09:18 +0000 Files and hashes: 1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: LtScTHZoxOHSbHhuqbZIrkhW+lipK1u0xCr0E9aMFWE=) 2: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: QVtizSPtRbHvPBxZgLY21oNx3hqLZlTF4FOZ2JiNstw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e1:0c:51:c8:12:82:6e:82:77:f4:f5:8d:e5:26:bb:f0:9c:ab:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Aug 21 21:26:18 2025 GMT Not After : Aug 24 22:09:18 2025 GMT Subject: CN=42763931967A76CE7938D1A82DE8766260F547F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a9:eb:90:ad:3f:2b:3a:dd:3b:1d:59:84:fe: 3b:93:c5:2a:16:a3:bc:ca:ad:b8:6b:ad:29:ad:64: ea:cb:fc:58:45:23:77:3b:5c:08:df:89:99:b1:f2: dc:d1:b8:ee:82:b9:77:da:7c:0b:48:38:95:d2:69: 58:24:e6:72:41:4d:30:c5:77:ec:cf:e1:d6:10:b2: 19:b6:8e:23:91:4f:42:84:f0:e4:7e:a4:b6:95:8f: c5:4d:fb:cc:c6:2c:15:e4:31:b0:7b:07:0e:f4:09: 07:3d:79:4b:0d:e2:9c:08:64:74:43:50:77:2a:12: dd:42:7a:cb:74:fc:3a:2f:a6:23:25:c7:66:e4:ec: df:e0:ca:77:9f:d9:e6:56:1c:d8:e5:bf:f5:1b:9d: 96:57:f8:41:f8:61:ef:af:6a:10:7b:9a:85:1f:f1: 76:95:04:e4:4c:4d:42:07:77:0f:8d:f4:d0:52:04: 39:e1:4e:77:45:e7:b1:89:6a:28:33:d1:0e:b5:98: 7d:43:ad:a1:53:c4:d9:fe:c8:17:c3:e5:74:66:3d: 04:1d:04:dc:b0:66:3c:00:05:84:36:0a:30:46:3c: 34:6c:94:16:1f:ca:44:a8:37:87:33:e1:b4:1b:25: d8:23:83:9b:c6:5a:30:27:7b:8c:e0:94:ee:3c:ed: 51:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:76:39:31:96:7A:76:CE:79:38:D1:A8:2D:E8:76:62:60:F5:47:F5 X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:24:1c:67:81:d4:4c:7e:2f:4d:20:cc:f0:2e:12:83:3a:61: 97:da:e3:ed:81:32:ce:e1:9b:fb:ac:11:0b:53:09:e3:94:59: 1b:7c:b2:61:7e:2b:c8:fa:8b:b1:c6:80:e3:2e:81:bb:81:3d: 29:56:6f:45:3a:03:14:ec:9f:3c:a5:8b:2b:0a:91:28:eb:6f: 99:a6:93:19:e5:84:91:64:c7:1e:9d:94:57:1b:ce:4c:3a:3e: 8d:66:e0:08:b4:19:74:9a:2b:e6:23:bc:af:4a:de:26:96:a5: 61:0e:c5:cf:c6:9e:ae:fe:49:aa:a5:22:4d:2e:70:02:fc:de: 55:51:ed:25:5a:fb:7d:82:a9:08:f7:37:ea:56:b9:1a:61:8e: 07:95:aa:cf:ec:e7:1c:ac:49:22:c7:c9:cc:ff:2d:b8:7d:fd: 4d:aa:f1:da:aa:8d:6c:d0:f2:41:be:c8:65:30:17:71:8c:80: 46:73:a9:64:4b:bf:16:8e:6d:11:1b:88:31:2b:6f:85:7e:3c: 67:80:d3:ce:32:58:a1:c3:f3:cf:04:2f:99:f4:1d:d2:1c:96: ad:65:79:b9:64:1a:fc:30:ac:5f:38:e8:cb:f8:85:2a:cd:eb: ed:30:51:9b:32:31:6f:d3:cd:a9:58:9b:41:6a:3e:bc:2b:e3: 97:62:1a:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKeEMUcgSgm6Cd/T1jeUmu/Ccq50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNTA4MjEyMTI2MThaFw0yNTA4MjQyMjA5MThaMDMxMTAvBgNV BAMTKDQyNzYzOTMxOTY3QTc2Q0U3OTM4RDFBODJERTg3NjYyNjBGNTQ3RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXqeuQrT8rOt07HVmE/juTxSoW o7zKrbhrrSmtZOrL/FhFI3c7XAjfiZmx8tzRuO6CuXfafAtIOJXSaVgk5nJBTTDF d+zP4dYQshm2jiORT0KE8OR+pLaVj8VN+8zGLBXkMbB7Bw70CQc9eUsN4pwIZHRD UHcqEt1Cest0/DovpiMlx2bk7N/gynef2eZWHNjlv/UbnZZX+EH4Ye+vahB7moUf 8XaVBORMTUIHdw+N9NBSBDnhTndF57GJaigz0Q61mH1DraFTxNn+yBfD5XRmPQQd BNywZjwABYQ2CjBGPDRslBYfykSoN4cz4bQbJdgjg5vGWjAne4zglO487VGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQnY5MZZ6ds55ONGoLeh2YmD1R/UwHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYkHGeB1Ex+L00gzPAuEoM6YZfa4+2BMs7h m/usEQtTCeOUWRt8smF+K8j6i7HGgOMugbuBPSlWb0U6AxTsnzyliysKkSjrb5mm kxnlhJFkxx6dlFcbzkw6Po1m4Ai0GXSaK+YjvK9K3iaWpWEOxc/Gnq7+SaqlIk0u cAL83lVR7SVa+32CqQj3N+pWuRphjgeVqs/s5xysSSLHycz/Lbh9/U2q8dqqjWzQ 8kG+yGUwF3GMgEZzqWRLvxaObREbiDErb4V+PGeA084yWKHD888EL5n0HdIclq1l eblkGvwwrF846Mv4hSrN6+0wUZsyMW/TzalYm0FqPrwr45diGnI= -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:23 2025 by rpki-client