$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft (raw, json) Hash identifier: uq/EKy6JBWxiiJbPNwzF0Q+SzJ9S9b2BJXIRKmIrPrQ= Subject key identifier: AE:78:AB:B9:47:2A:B3:21:3F:0C:40:4A:18:CF:1D:57:B8:D8:A9:BB Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 4FAAD5A8DF79CF1F2F970310A2A104950984A88B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft Manifest number: 015F Signing time: Sat 23 Aug 2025 07:11:00 +0000 Manifest this update: Sat 23 Aug 2025 07:06:00 +0000 Manifest next update: Tue 26 Aug 2025 10:01:00 +0000 Files and hashes: 1: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl (hash: IVRroNLZn+pNe6HmCzFtLDa9DNl8UYY3HsXirSIzcFU=) 2: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: Ew2OSWEohUTuvmIQMM4jLPYBjKqzXCpLNwLiyPu5TfM=) 3: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: vmw9bcS7HYiEIqjVICRaVcatSeJQ8ZNuTTgtgTfawew=) 4: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: D5hukbaY+N3AjWmkuBGFFTwqc+CzamYmFL0amMEyMMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:aa:d5:a8:df:79:cf:1f:2f:97:03:10:a2:a1:04:95:09:84:a8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: Aug 23 07:06:00 2025 GMT Not After : Aug 26 10:01:00 2025 GMT Subject: CN=AE78ABB9472AB3213F0C404A18CF1D57B8D8A9BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:ad:b8:ee:50:c5:d7:36:d4:fa:eb:8c:c6: f0:f0:69:28:c8:6e:5d:db:83:ec:44:c3:83:31:9a: 44:11:8b:89:3b:62:d6:2a:19:96:ff:43:74:c3:ee: 4e:ef:63:29:bd:e1:49:63:46:63:fe:22:cf:15:2c: f7:ca:44:6d:2d:23:65:58:01:8a:66:a5:70:e8:9d: 06:bf:e0:1f:47:8d:5b:2a:f5:ec:7a:1c:18:34:5c: b9:15:b7:34:09:fc:a2:87:f3:7f:36:65:9b:9a:1d: 3c:34:c6:26:df:68:ee:36:5c:55:1f:9e:13:5d:6a: d4:a6:f5:3c:12:3f:6c:c4:96:ea:77:56:59:3f:19: be:ca:eb:b4:32:f2:a6:5f:6b:c1:34:e5:c6:d7:c3: 4e:81:99:7d:7b:80:b3:05:3c:3f:39:16:5a:c4:d8: 4a:80:78:5e:74:0d:e7:62:c8:39:02:0a:86:6d:9d: 4a:3a:7f:9c:9e:58:c8:5f:10:a0:31:b8:2f:b0:89: a8:5b:b5:ec:54:b0:bb:3a:32:4b:de:39:48:6b:28: 70:d1:9a:29:59:52:65:7e:44:92:06:ab:8e:c3:a2: 0e:5f:e2:cf:d3:4d:d4:85:3e:29:66:fb:68:81:ca: d9:ba:a3:ef:c6:12:7a:62:0b:c7:b6:37:d4:c8:5e: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:78:AB:B9:47:2A:B3:21:3F:0C:40:4A:18:CF:1D:57:B8:D8:A9:BB X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8d:50:8a:1e:2c:49:43:fa:6c:8b:42:a4:3a:e3:01:9a:a2: c2:d5:68:4d:e3:a4:33:4c:f9:fa:3b:34:22:d1:e2:94:23:32: be:65:8f:71:11:dc:4a:fa:8c:f3:85:15:e4:4b:fa:90:3d:f0: 42:35:48:99:b0:b4:fb:d1:40:ca:e5:4e:be:2c:a8:bc:4e:c6: be:e3:71:a4:11:39:f3:fa:71:2b:80:b0:50:1a:1f:e7:db:f5: 3d:fa:52:cc:48:46:90:04:7a:76:48:31:42:83:71:d6:aa:53: 5e:67:d5:4d:90:67:d1:88:07:9e:41:c0:02:86:c2:e6:f2:d1: 66:77:24:73:d0:ff:43:e0:0f:3a:11:6d:96:2d:ee:90:e5:7b: 7a:1e:90:e6:ef:e3:fc:b3:fd:0b:b0:0d:26:8b:13:8e:2c:63: 32:48:87:56:ac:77:0c:f9:26:2e:fa:36:fe:00:57:2e:10:ef: dd:dd:ad:2b:bf:7a:8c:3f:54:0f:d0:c5:72:34:d8:2e:f6:b6: 92:c5:a4:84:3e:d5:fe:b4:78:1d:ad:42:ca:59:15:3e:75:f4: 35:39:77:71:db:dc:f3:36:83:b2:8d:c3:8b:fe:7a:38:33:57: 8a:a0:c3:0b:80:ab:57:e6:48:32:f7:e1:02:be:80:ca:b2:84: 2d:52:fb:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6rVqN95zx8vlwMQoqEElQmEqIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNTA4MjMwNzA2MDBaFw0yNTA4MjYxMDAxMDBaMDMxMTAvBgNV BAMTKEFFNzhBQkI5NDcyQUIzMjEzRjBDNDA0QTE4Q0YxRDU3QjhEOEE5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmK247lDF1zbU+uuMxvDwaSjI bl3bg+xEw4MxmkQRi4k7YtYqGZb/Q3TD7k7vYym94UljRmP+Is8VLPfKRG0tI2VY AYpmpXDonQa/4B9HjVsq9ex6HBg0XLkVtzQJ/KKH8382ZZuaHTw0xibfaO42XFUf nhNdatSm9TwSP2zElup3Vlk/Gb7K67Qy8qZfa8E05cbXw06BmX17gLMFPD85FlrE 2EqAeF50DediyDkCCoZtnUo6f5yeWMhfEKAxuC+wiahbtexUsLs6MkveOUhrKHDR milZUmV+RJIGq47Dog5f4s/TTdSFPilm+2iBytm6o+/GEnpiC8e2N9TIXlC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrniruUcqsyE/DEBKGM8dV7jYqbswHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFE NEM1MDg1MkE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiNUIoeLElD+myLQqQ64wGaosLVaE3jpDNM +fo7NCLR4pQjMr5lj3ER3Er6jPOFFeRL+pA98EI1SJmwtPvRQMrlTr4sqLxOxr7j caQROfP6cSuAsFAaH+fb9T36UsxIRpAEenZIMUKDcdaqU15n1U2QZ9GIB55BwAKG wuby0WZ3JHPQ/0PgDzoRbZYt7pDle3oekObv4/yz/QuwDSaLE44sYzJIh1asdwz5 Ji76Nv4AVy4Q793drSu/eow/VA/QxXI02C72tpLFpIQ+1f60eB2tQspZFT519DU5 d3Hb3PM2g7KNw4v+ejgzV4qgwwuAq1fmSDL34QK+gMqyhC1S+58= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:44 2025 by rpki-client