$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: Gz79Kg1svbtbUZa/B2LcKjF+GOwgI02xAt5WTUOuqJs= Subject key identifier: 45:2C:7D:1C:49:27:51:FD:06:E8:AB:31:8D:EA:01:43:83:11:9E:FA Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 5ED2F2169503EED1915941C157B26F8026A1454B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 0103 Signing time: Sat 23 Aug 2025 01:20:44 +0000 Manifest this update: Sat 23 Aug 2025 01:15:44 +0000 Manifest next update: Tue 26 Aug 2025 04:13:44 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: nNvlEqhvBEl5IEKW8zd8itjhkwuiP0L8LGrVmvZxiyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d2:f2:16:95:03:ee:d1:91:59:41:c1:57:b2:6f:80:26:a1:45:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Aug 23 01:15:44 2025 GMT Not After : Aug 26 04:13:44 2025 GMT Subject: CN=452C7D1C492751FD06E8AB318DEA014383119EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b3:94:cd:f6:67:f6:15:f8:0d:9b:1f:69:81: 5e:b1:af:57:2d:a4:df:0f:4d:24:a2:4b:ab:60:08: 67:6e:18:a5:26:43:a8:93:4e:2d:00:24:c1:0b:d3: bf:f2:f3:f9:23:22:9a:33:5c:33:f9:85:2b:03:7b: a9:be:c6:05:74:61:62:01:e2:4b:83:bb:8c:d1:5a: c9:83:9d:a5:da:9b:80:35:0d:1f:c8:11:a5:26:36: 59:33:ec:71:7e:b8:3b:25:84:13:9c:91:f8:24:99: 93:1e:5d:8e:79:be:58:25:b6:12:96:e6:95:ae:a1: a7:42:2f:e3:f1:e5:eb:29:d4:da:b8:ae:84:95:b3: 5a:6c:76:96:9b:73:20:a3:78:97:97:1d:25:df:6c: c1:d9:a4:16:a2:ba:39:a6:83:6d:6e:da:4e:a9:c9: ab:23:97:90:c9:77:ee:37:b9:5a:69:61:f8:d2:e5: d8:26:e1:f3:d8:00:cf:cc:55:c8:27:44:01:27:4e: b5:93:d7:26:7f:4d:0b:8b:f8:c9:36:1d:5e:f8:14: a0:7b:db:7f:a1:b8:ad:a2:e0:00:59:3a:d2:76:5a: cb:9e:1e:47:3b:03:25:85:bf:35:af:0a:a4:3c:d6: b8:db:a7:73:4e:06:f2:d8:dc:85:4a:6a:aa:1c:f2: b6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2C:7D:1C:49:27:51:FD:06:E8:AB:31:8D:EA:01:43:83:11:9E:FA X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4b:af:9d:15:d0:1e:93:ff:07:4c:b7:0d:ca:23:44:1e:9c: 53:4a:15:5c:21:40:73:1b:81:bf:85:e5:b2:f7:bb:99:0a:65: 1c:ec:34:f4:ad:e5:c3:ea:3b:1d:36:3c:aa:97:48:f5:95:bc: 4b:9c:1f:ca:88:e3:18:bb:58:5e:4a:b1:c7:29:ec:2e:66:ef: 6d:84:2b:85:03:ff:be:42:c2:4e:5a:03:31:6a:19:f8:53:22: 82:66:0f:d9:9b:b6:31:1b:c8:f5:af:b2:af:e4:33:48:3e:57: ed:06:22:ec:57:cc:0d:03:8f:e8:b5:a9:4c:cf:33:db:80:28: 7c:70:27:4a:1c:46:3b:43:aa:97:bb:fc:17:9c:ca:0b:02:3e: 5f:04:98:15:a6:d4:6c:db:f0:fa:85:76:72:ee:fc:6c:23:79: ca:72:ae:55:fb:0c:fc:1b:5f:e2:6d:66:a1:58:b1:2e:28:22: 2a:1d:06:f6:ca:64:b2:14:bc:52:20:39:4b:bf:75:8e:81:72: 7c:91:74:6e:3d:b8:12:2e:b4:91:a8:c1:99:2d:72:dd:9a:2b: 7b:0e:67:8d:b7:cd:22:70:95:d8:d7:75:40:b6:21:f1:de:62: a8:c7:dc:28:88:69:1b:4e:21:07:48:67:8f:94:c7:0b:e1:be: af:2a:ca:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtLyFpUD7tGRWUHBV7JvgCahRUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTA4MjMwMTE1NDRaFw0yNTA4MjYwNDEzNDRaMDMxMTAvBgNV BAMTKDQ1MkM3RDFDNDkyNzUxRkQwNkU4QUIzMThERUEwMTQzODMxMTlFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDps5TN9mf2FfgNmx9pgV6xr1ct pN8PTSSiS6tgCGduGKUmQ6iTTi0AJMEL07/y8/kjIpozXDP5hSsDe6m+xgV0YWIB 4kuDu4zRWsmDnaXam4A1DR/IEaUmNlkz7HF+uDslhBOckfgkmZMeXY55vlglthKW 5pWuoadCL+Px5esp1Nq4roSVs1psdpabcyCjeJeXHSXfbMHZpBaiujmmg21u2k6p yasjl5DJd+43uVppYfjS5dgm4fPYAM/MVcgnRAEnTrWT1yZ/TQuL+Mk2HV74FKB7 23+huK2i4ABZOtJ2WsueHkc7AyWFvzWvCqQ81rjbp3NOBvLY3IVKaqoc8rY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURSx9HEknUf0G6KsxjeoBQ4MRnvowHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVLr50V0B6T/wdMtw3KI0QenFNKFVwhQHMb gb+F5bL3u5kKZRzsNPSt5cPqOx02PKqXSPWVvEucH8qI4xi7WF5Ksccp7C5m722E K4UD/75Cwk5aAzFqGfhTIoJmD9mbtjEbyPWvsq/kM0g+V+0GIuxXzA0Dj+i1qUzP M9uAKHxwJ0ocRjtDqpe7/BecygsCPl8EmBWm1Gzb8PqFdnLu/GwjecpyrlX7DPwb X+JtZqFYsS4oIiodBvbKZLIUvFIgOUu/dY6BcnyRdG49uBIutJGowZktct2aK3sO Z423zSJwldjXdUC2IfHeYqjH3CiIaRtOIQdIZ4+Uxwvhvq8qymA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:34:37 2025 by rpki-client