$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: TokH2WZLO9Pde+JdLBs1ZDPhTFpKVLOp8JwK2Et7bAw= Subject key identifier: 6D:B6:1A:10:5B:5B:6F:80:06:70:D9:65:F5:26:B3:2B:10:6C:88:42 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 261A3FA3E2BA34C4DC347F9BE083FF0A46F021F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: F3 Signing time: Thu 21 Aug 2025 12:02:08 +0000 Manifest this update: Thu 21 Aug 2025 11:57:08 +0000 Manifest next update: Sun 24 Aug 2025 12:13:08 +0000 Files and hashes: 1: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 2: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 3: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: ju8t1JNA07kipjS2rhiIOINzrq8SeLWb6/OM7JdDDXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1a:3f:a3:e2:ba:34:c4:dc:34:7f:9b:e0:83:ff:0a:46:f0:21:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Aug 21 11:57:08 2025 GMT Not After : Aug 24 12:13:08 2025 GMT Subject: CN=6DB61A105B5B6F800670D965F526B32B106C8842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fa:ea:ae:b1:62:43:9a:01:1f:88:8b:fa:70: a7:d0:b0:47:74:88:77:2a:a9:09:e0:ff:19:8b:fe: 28:2f:de:0c:ee:5b:f5:0c:65:25:ec:6f:5b:01:b4: a3:39:9a:41:e3:03:71:1c:59:3f:28:70:88:2a:5d: 28:7e:3f:a1:6d:e5:cf:34:0e:6f:50:00:e4:de:a2: c5:20:18:11:96:3c:94:2d:db:48:c4:a4:86:47:2a: f7:f5:8e:80:72:9f:bb:fe:22:6c:aa:c0:3a:a7:65: 5e:d4:07:ae:f5:d9:9e:0a:e3:22:dc:69:48:64:50: 20:ae:60:f9:5c:30:3a:2f:f6:8e:60:54:43:22:a8: 93:56:43:02:d1:11:a4:e2:fc:f4:f2:85:03:35:b8: 97:39:0b:ca:44:04:b4:13:33:55:00:68:d0:19:f0: 5e:b8:0c:70:80:7b:11:ce:bb:9a:1b:02:5e:f6:33: bc:ee:8a:4e:6d:e1:c8:b0:07:74:83:27:71:98:ab: f1:0f:86:db:61:b9:ce:2c:73:2b:4b:88:9c:b2:c6: 62:0e:67:b1:e6:a0:41:0f:9b:b7:a7:86:8f:ce:68: fc:73:6e:ba:d8:7f:07:3d:1e:2b:f2:cc:3b:83:c3: f6:bf:70:79:37:78:ab:49:27:87:4f:e2:2d:42:01: bc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B6:1A:10:5B:5B:6F:80:06:70:D9:65:F5:26:B3:2B:10:6C:88:42 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:bf:e7:c7:34:a8:1b:4c:4a:57:d7:91:1f:69:b4:40:bf:d1: 42:ad:1e:d4:82:93:71:4a:4b:77:01:00:a7:c9:7c:f7:1a:21: fd:8b:70:81:2d:c2:0b:d3:3d:09:39:76:29:a8:fe:41:3d:82: f3:1b:11:9b:39:cf:86:50:87:3a:fe:df:72:0e:91:06:5a:95: 44:b2:59:d0:7d:df:b9:be:24:77:22:09:db:f6:d3:b4:eb:7d: 0d:84:17:4c:f9:6c:d1:e0:92:a5:65:a6:02:85:ec:38:ef:d1: ea:0b:45:d0:af:95:a8:ed:06:b8:e5:68:37:ec:61:81:cc:5c: 5e:8d:ac:45:8b:bf:c9:1d:9c:d9:ab:17:9d:7e:d7:01:d9:6c: 84:9a:af:81:ed:a3:6f:99:01:db:ed:ac:8e:7a:3c:d0:03:2e: 09:7d:75:c9:2c:8c:ed:e6:ed:94:f5:42:a0:ce:80:ed:f4:6e: 54:3b:b4:d8:a6:0f:83:57:6c:f0:39:15:92:3f:ff:32:0c:29: 60:2e:a8:4f:63:c4:14:7f:1c:77:16:15:13:f7:25:27:ab:25: e6:eb:bf:eb:95:eb:22:da:0e:6c:a6:e8:10:17:18:25:20:e0: 66:51:98:44:60:f1:cc:7b:6d:d6:e9:74:fb:ba:60:83:f2:48: cf:51:4f:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJho/o+K6NMTcNH+b4IP/CkbwIfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTA4MjExMTU3MDhaFw0yNTA4MjQxMjEzMDhaMDMxMTAvBgNV BAMTKDZEQjYxQTEwNUI1QjZGODAwNjcwRDk2NUY1MjZCMzJCMTA2Qzg4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw+uqusWJDmgEfiIv6cKfQsEd0 iHcqqQng/xmL/igv3gzuW/UMZSXsb1sBtKM5mkHjA3EcWT8ocIgqXSh+P6Ft5c80 Dm9QAOTeosUgGBGWPJQt20jEpIZHKvf1joByn7v+ImyqwDqnZV7UB6712Z4K4yLc aUhkUCCuYPlcMDov9o5gVEMiqJNWQwLREaTi/PTyhQM1uJc5C8pEBLQTM1UAaNAZ 8F64DHCAexHOu5obAl72M7zuik5t4ciwB3SDJ3GYq/EPhtthuc4scytLiJyyxmIO Z7HmoEEPm7enho/OaPxzbrrYfwc9HivyzDuDw/a/cHk3eKtJJ4dP4i1CAbzTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbbYaEFtbb4AGcNll9SazKxBsiEIwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS/58c0qBtMSlfXkR9ptEC/0UKtHtSCk3FK S3cBAKfJfPcaIf2LcIEtwgvTPQk5dimo/kE9gvMbEZs5z4ZQhzr+33IOkQZalUSy WdB937m+JHciCdv207TrfQ2EF0z5bNHgkqVlpgKF7Djv0eoLRdCvlajtBrjlaDfs YYHMXF6NrEWLv8kdnNmrF51+1wHZbISar4Hto2+ZAdvtrI56PNADLgl9dcksjO3m 7ZT1QqDOgO30blQ7tNimD4NXbPA5FZI//zIMKWAuqE9jxBR/HHcWFRP3JSerJebr v+uV6yLaDmym6BAXGCUg4GZRmERg8cx7bdbpdPu6YIPySM9RT9k= -----END CERTIFICATE-----Generated at Sat Aug 23 14:02:32 2025 by rpki-client