$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: 2z1gajXi+tehf/YUoZO9rajhhtaMiBlBTMemLfE6ibM= Subject key identifier: 15:41:F6:3F:2E:C3:4B:3F:91:8F:E2:7D:B2:21:9E:C0:44:F1:25:4F Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 25C4BFFF4B66E135C1B708B0857B088E809F1E76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 0172 Signing time: Thu 21 Aug 2025 18:11:53 +0000 Manifest this update: Thu 21 Aug 2025 18:06:53 +0000 Manifest next update: Mon 25 Aug 2025 05:22:53 +0000 Files and hashes: 1: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: IC3C+CIUmqfSlQNm0k+nEToNL6VFXEO97F6GcX1xQOs=) 2: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) 3: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c4:bf:ff:4b:66:e1:35:c1:b7:08:b0:85:7b:08:8e:80:9f:1e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Aug 21 18:06:53 2025 GMT Not After : Aug 25 05:22:53 2025 GMT Subject: CN=1541F63F2EC34B3F918FE27DB2219EC044F1254F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:fe:a1:76:fd:45:2e:29:6f:8d:6d:02:1f: c1:5a:d5:82:a4:2b:32:82:de:92:bf:65:08:62:78: 30:40:b6:32:cd:53:ec:54:19:59:85:9c:2a:f3:c2: a4:d9:a6:cf:4a:2a:a9:3a:3c:93:73:e8:90:48:7a: a6:b8:ef:bd:9e:20:00:7d:41:04:16:98:29:96:87: 83:57:2b:37:8a:ff:98:5f:d4:3a:e4:4f:8d:1a:8f: c9:f1:48:fa:d9:97:b4:c2:c2:cf:78:a0:c5:ee:e2: d1:7c:0c:78:a0:20:04:bb:c2:35:8b:c5:6c:1e:05: a0:8b:40:84:e1:fd:ec:1d:69:67:16:2b:d8:83:bd: 6b:25:6b:1b:63:2f:13:8e:b1:04:bf:65:b4:f7:5a: 5f:4d:b2:33:06:5b:8d:74:c3:83:75:0c:07:6d:f0: 65:15:e3:74:04:ec:4e:a7:d5:25:2d:f3:dd:23:e6: 66:7c:da:04:37:56:49:0b:2c:57:a0:38:b5:5a:84: d6:5d:fd:dc:da:b8:ad:85:d3:f9:d3:d2:3d:22:ca: c1:2e:f7:a3:b1:ed:42:b4:46:ad:6d:2d:0d:38:57: 8c:ac:a1:80:a8:a6:e6:37:3f:05:bf:68:e9:a8:fc: d1:fa:53:41:82:f6:59:1c:82:28:15:f0:93:c0:50: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:41:F6:3F:2E:C3:4B:3F:91:8F:E2:7D:B2:21:9E:C0:44:F1:25:4F X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:77:0a:da:12:7a:70:c5:b3:72:ed:8c:9b:4c:9c:18:f7:86: 5a:bd:0e:d5:d0:18:41:89:a4:fd:8b:e4:fb:2d:da:a8:ae:08: 91:39:42:ff:ae:6b:0f:93:5b:f1:63:63:dd:1b:d5:52:59:d8: 9c:b5:cc:ab:78:73:35:6c:dd:be:0a:8d:a2:86:e5:29:f1:2e: 69:2b:a1:3c:0f:3b:55:45:a8:12:8d:f8:8b:2b:ff:0d:9a:7a: 53:e2:96:b0:9e:8a:91:e9:b3:d8:f0:16:fe:c1:02:34:9d:18: 84:6c:d6:12:66:c0:c9:b4:2b:64:62:f7:72:5a:13:46:33:79: eb:5b:44:ee:c9:85:10:60:bd:00:5e:9a:86:9f:b4:2a:00:4f: 09:b2:5b:57:ed:e5:45:02:31:78:b4:3f:72:f0:ec:6f:90:3d: 93:bb:df:d8:41:94:dc:fc:f7:5c:50:95:03:22:24:e5:ec:7d: 13:62:99:a2:fe:43:68:4b:81:35:88:98:dd:9d:6e:19:fe:2d: 68:33:b4:1c:b7:69:73:bc:0a:27:7b:2a:23:09:9f:14:00:36: 8b:5c:db:97:60:58:47:e4:f3:57:37:d3:33:fc:5e:ce:a2:17: 87:3d:59:46:7f:54:8d:dc:95:77:7c:63:78:19:33:fe:e4:6d: 63:2f:b1:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcS//0tm4TXBtwiwhXsIjoCfHnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTA4MjExODA2NTNaFw0yNTA4MjUwNTIyNTNaMDMxMTAvBgNV BAMTKDE1NDFGNjNGMkVDMzRCM0Y5MThGRTI3REIyMjE5RUMwNDRGMTI1NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYP6hdv1FLilvjW0CH8Fa1YKk KzKC3pK/ZQhieDBAtjLNU+xUGVmFnCrzwqTZps9KKqk6PJNz6JBIeqa4772eIAB9 QQQWmCmWh4NXKzeK/5hf1DrkT40aj8nxSPrZl7TCws94oMXu4tF8DHigIAS7wjWL xWweBaCLQITh/ewdaWcWK9iDvWslaxtjLxOOsQS/ZbT3Wl9NsjMGW410w4N1DAdt 8GUV43QE7E6n1SUt890j5mZ82gQ3VkkLLFegOLVahNZd/dzauK2F0/nT0j0iysEu 96Ox7UK0Rq1tLQ04V4ysoYCopuY3PwW/aOmo/NH6U0GC9lkcgigV8JPAUPz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUH2Py7DSz+Rj+J9siGewETxJU8wHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADx3CtoSenDFs3LtjJtMnBj3hlq9DtXQGEGJ pP2L5Pst2qiuCJE5Qv+uaw+TW/FjY90b1VJZ2Jy1zKt4czVs3b4KjaKG5SnxLmkr oTwPO1VFqBKN+Isr/w2aelPilrCeipHps9jwFv7BAjSdGIRs1hJmwMm0K2Ri93Ja E0YzeetbRO7JhRBgvQBemoaftCoATwmyW1ft5UUCMXi0P3Lw7G+QPZO739hBlNz8 91xQlQMiJOXsfRNimaL+Q2hLgTWImN2dbhn+LWgztBy3aXO8Cid7KiMJnxQANotc 25dgWEfk81c30zP8Xs6iF4c9WUZ/VI3clXd8Y3gZM/7kbWMvsXw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:46 2025 by rpki-client