$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: veYNFgag7ndrZCZ02W9IHWL5hwIujZyvEdkV11VXxVk= Subject key identifier: A2:4B:EA:19:CD:4F:19:57:B4:C7:C4:22:45:36:C5:AE:37:91:C4:45 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 1C868F119D7DBAE2980EA4C13482C190F8A3227B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04D0 Signing time: Fri 22 Aug 2025 23:30:47 +0000 Manifest this update: Fri 22 Aug 2025 23:25:47 +0000 Manifest next update: Tue 26 Aug 2025 09:39:47 +0000 Files and hashes: 1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) 2: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: MEmkP0P8hNiJ7lpngASoQBvoxzSO/kX3Wqxe/Zz0mII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:86:8f:11:9d:7d:ba:e2:98:0e:a4:c1:34:82:c1:90:f8:a3:22:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Aug 22 23:25:47 2025 GMT Not After : Aug 26 09:39:47 2025 GMT Subject: CN=A24BEA19CD4F1957B4C7C4224536C5AE3791C445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:30:39:4a:55:12:62:3e:12:9f:d1:0d:e4:dc: 73:a3:5b:4b:cc:66:de:0d:ca:62:b9:7e:22:dd:80: d6:41:1d:19:58:e4:99:f5:5f:fe:6c:6e:63:05:69: 51:0d:5c:42:d0:e1:ac:03:a8:0e:f3:46:cd:5a:73: d0:ba:df:1f:7a:75:b2:26:6a:d8:87:52:b8:6b:42: 61:05:b6:8f:3d:2e:98:a4:b0:3d:18:93:51:e4:c3: 3f:59:f2:45:1c:b2:7f:eb:67:40:d8:61:e9:7d:a0: 06:f5:db:2b:49:6a:71:68:9c:52:39:53:4f:4d:d7: 1f:de:16:06:d4:0b:35:23:e0:64:d0:d6:40:ba:da: b3:dd:6c:c3:0f:77:14:a3:33:e6:04:7c:39:3d:fc: 8c:b9:d0:a4:55:b2:0f:06:58:e1:d7:35:50:83:83: 23:60:69:db:b3:1b:30:90:a7:8b:6a:12:75:48:55: ac:28:67:4b:1c:8e:37:4c:6d:12:ef:64:51:61:2a: c9:ee:43:f0:9c:5d:24:98:d0:43:5d:f7:6c:aa:2f: 1f:83:23:39:9d:30:dd:f5:90:8f:7d:fc:f2:1f:ae: 95:00:58:7b:88:2d:16:a5:33:7d:7a:b2:1b:82:da: bc:e1:49:8a:08:85:60:b1:29:d9:d4:8c:4c:c2:0b: 69:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4B:EA:19:CD:4F:19:57:B4:C7:C4:22:45:36:C5:AE:37:91:C4:45 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c6:05:4b:b0:bd:25:7f:49:ba:60:e2:ff:ea:e5:47:b7:7b: 79:83:d9:14:f8:84:0e:15:62:78:c6:a2:49:be:56:0f:4d:c8: d3:bb:68:cf:69:a0:3a:6b:01:b9:f5:73:05:4e:89:17:9e:7c: e9:67:84:76:7a:15:48:61:3f:ef:76:bb:95:58:7e:d6:f2:04: 1a:14:27:a2:4c:12:36:d8:5c:18:7a:df:d6:8e:64:7e:33:11: d9:19:f4:0d:92:16:d8:50:c2:a4:c1:a9:d8:1f:84:53:e1:c7: 6b:c6:d1:33:9d:a4:a2:df:a4:ab:bb:23:38:c7:0a:52:ba:ae: a2:bb:70:4d:61:f8:fe:fc:8d:18:0a:90:bc:a9:08:88:04:93: 99:6a:c0:9d:34:b2:d7:8e:3b:f8:a8:5f:66:c7:93:b6:8b:a6: ee:72:a4:d4:19:0b:bf:db:97:4c:30:49:c5:0f:c1:47:91:74: 92:23:d6:cf:fe:e5:c5:60:c3:eb:b1:73:6f:1c:c0:d6:de:2b: 2d:3f:45:5a:16:cb:2d:cf:73:ca:69:36:19:bb:c6:d5:ee:ab: e4:51:48:6d:31:aa:8a:a3:91:89:f9:ee:2d:eb:50:1c:d9:eb: 45:9e:b3:a3:67:55:e0:31:fb:90:96:b9:31:2f:dd:6c:dc:1c: ce:1a:b8:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHIaPEZ19uuKYDqTBNILBkPijInswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTA4MjIyMzI1NDdaFw0yNTA4MjYwOTM5NDdaMDMxMTAvBgNV BAMTKEEyNEJFQTE5Q0Q0RjE5NTdCNEM3QzQyMjQ1MzZDNUFFMzc5MUM0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyMDlKVRJiPhKf0Q3k3HOjW0vM Zt4NymK5fiLdgNZBHRlY5Jn1X/5sbmMFaVENXELQ4awDqA7zRs1ac9C63x96dbIm atiHUrhrQmEFto89LpiksD0Yk1Hkwz9Z8kUcsn/rZ0DYYel9oAb12ytJanFonFI5 U09N1x/eFgbUCzUj4GTQ1kC62rPdbMMPdxSjM+YEfDk9/Iy50KRVsg8GWOHXNVCD gyNgaduzGzCQp4tqEnVIVawoZ0scjjdMbRLvZFFhKsnuQ/CcXSSY0ENd92yqLx+D IzmdMN31kI99/PIfrpUAWHuILRalM316shuC2rzhSYoIhWCxKdnUjEzCC2mhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokvqGc1PGVe0x8QiRTbFrjeRxEUwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvGBUuwvSV/Sbpg4v/q5Ue3e3mD2RT4hA4V YnjGokm+Vg9NyNO7aM9poDprAbn1cwVOiReefOlnhHZ6FUhhP+92u5VYftbyBBoU J6JMEjbYXBh639aOZH4zEdkZ9A2SFthQwqTBqdgfhFPhx2vG0TOdpKLfpKu7IzjH ClK6rqK7cE1h+P78jRgKkLypCIgEk5lqwJ00steOO/ioX2bHk7aLpu5ypNQZC7/b l0wwScUPwUeRdJIj1s/+5cVgw+uxc28cwNbeKy0/RVoWyy3Pc8ppNhm7xtXuq+RR SG0xqoqjkYn57i3rUBzZ60Wes6NnVeAx+5CWuTEv3WzcHM4auLU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:03:53 2025 by rpki-client