$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: +laUbWIx2jkcl5D8EKiP/UbB+BMfcVxBLx+E+ukfjDI= Subject key identifier: B7:B2:8A:BB:1D:C4:9E:AB:C7:13:E5:8E:64:22:49:54:78:58:A8:9C Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 59ABEE33F4F7E85293437373C9BB11C181C00F35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 02AB Signing time: Fri 22 Aug 2025 12:01:21 +0000 Manifest this update: Fri 22 Aug 2025 11:56:21 +0000 Manifest next update: Mon 25 Aug 2025 20:54:21 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: Ln7RhBP7+jSnmKtRblyJq0YQDGa90hQgdO8NSfkKOtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ab:ee:33:f4:f7:e8:52:93:43:73:73:c9:bb:11:c1:81:c0:0f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Aug 22 11:56:21 2025 GMT Not After : Aug 25 20:54:21 2025 GMT Subject: CN=B7B28ABB1DC49EABC713E58E642249547858A89C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:09:5d:eb:0f:df:3a:f6:6b:2b:43:b8:89: be:55:b1:e3:49:65:84:9a:4e:28:4c:3b:dc:93:e4: 8e:65:2b:61:85:58:0c:fc:fd:86:fd:cd:5f:17:e7: 2b:a5:a2:1e:e0:e5:cc:57:d9:95:ca:30:75:5e:0f: ed:11:40:a5:26:8e:7b:66:f8:7a:61:d5:ff:b2:a7: be:e1:94:79:f4:c3:54:da:6c:ec:4c:81:e3:f8:92: f5:4b:ed:24:59:f3:ee:3e:c2:2c:c8:cd:ba:56:3c: 46:4e:c3:b1:5a:cd:98:d1:8b:74:74:8d:24:c8:44: d5:19:a1:a5:71:14:f7:6f:07:86:2b:e4:6b:59:ba: 02:0d:fa:2b:b2:43:9f:2a:af:fd:ad:21:1e:25:c4: 6e:e6:6b:e6:11:9a:cb:3d:2e:2e:b9:36:33:46:1b: 52:c6:68:f3:67:93:1a:e5:f9:d4:9f:4a:1b:02:60: 9d:36:69:83:36:3b:ee:22:32:4a:ae:6f:fb:f7:6b: 6f:7f:54:83:93:27:6f:85:76:82:9d:98:a0:9c:b6: 0c:d7:b8:7a:88:2e:cc:68:28:33:10:35:8d:bb:8e: e8:d4:25:4f:ef:4d:b3:de:2b:05:23:ff:18:d9:88: 2e:12:e2:ff:17:88:e0:14:bc:2a:7a:43:7e:a4:40: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B2:8A:BB:1D:C4:9E:AB:C7:13:E5:8E:64:22:49:54:78:58:A8:9C X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:fd:40:05:9a:4a:32:b2:94:64:2b:8c:1d:41:c9:6c:86:de: 11:6f:d8:92:b5:7e:83:f2:6c:58:76:bd:3e:d3:ee:e3:c2:8c: 0c:af:79:c6:aa:f6:af:17:9d:f7:e6:1b:9a:9c:3d:44:37:39: 32:81:b3:30:47:8e:f4:c8:b6:80:31:cc:60:d0:e6:ff:50:22: 23:b7:a6:38:0f:6e:24:ba:38:90:f5:f6:b9:7a:e3:ef:88:79: aa:c5:8d:89:98:52:ff:f8:9f:71:e0:e2:e1:bc:bd:49:1f:61: 16:08:83:3e:e7:12:de:08:36:27:5c:2b:a8:15:58:94:90:58: b0:69:56:83:ff:5c:70:7b:be:69:45:de:b8:16:a1:b5:31:6c: 89:88:c9:d9:aa:7e:64:c5:6e:4c:5b:20:3f:63:f6:80:96:97: 9c:5f:c2:fb:2c:60:0e:62:a4:33:ee:09:d4:98:65:49:76:ce: 37:7d:cb:8d:61:71:dc:db:b1:7c:af:fa:cd:e6:ca:06:3b:e4: b4:66:dd:2b:ea:39:3d:dd:3e:2d:61:23:db:ad:cf:6c:17:a8: c3:af:ab:4a:a1:c8:91:4d:61:3c:9a:37:b4:1a:60:31:9e:23: c4:8c:ef:02:2e:4c:47:54:e1:ef:de:0b:7d:5c:3c:a1:12:d0: c2:69:aa:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWavuM/T36FKTQ3NzybsRwYHADzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTA4MjIxMTU2MjFaFw0yNTA4MjUyMDU0MjFaMDMxMTAvBgNV BAMTKEI3QjI4QUJCMURDNDlFQUJDNzEzRTU4RTY0MjI0OTU0Nzg1OEE4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNAld6w/fOvZrK0O4ib5VseNJ ZYSaTihMO9yT5I5lK2GFWAz8/Yb9zV8X5yuloh7g5cxX2ZXKMHVeD+0RQKUmjntm +Hph1f+yp77hlHn0w1TabOxMgeP4kvVL7SRZ8+4+wizIzbpWPEZOw7FazZjRi3R0 jSTIRNUZoaVxFPdvB4Yr5GtZugIN+iuyQ58qr/2tIR4lxG7ma+YRmss9Li65NjNG G1LGaPNnkxrl+dSfShsCYJ02aYM2O+4iMkqub/v3a29/VIOTJ2+FdoKdmKCctgzX uHqILsxoKDMQNY27jujUJU/vTbPeKwUj/xjZiC4S4v8XiOAUvCp6Q36kQLIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt7KKux3EnqvHE+WOZCJJVHhYqJwwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKD9QAWaSjKylGQrjB1ByWyG3hFv2JK1foPy bFh2vT7T7uPCjAyvecaq9q8XnffmG5qcPUQ3OTKBszBHjvTItoAxzGDQ5v9QIiO3 pjgPbiS6OJD19rl64++IearFjYmYUv/4n3Hg4uG8vUkfYRYIgz7nEt4INidcK6gV WJSQWLBpVoP/XHB7vmlF3rgWobUxbImIydmqfmTFbkxbID9j9oCWl5xfwvssYA5i pDPuCdSYZUl2zjd9y41hcdzbsXyv+s3mygY75LRm3SvqOT3dPi1hI9utz2wXqMOv q0qhyJFNYTyaN7QaYDGeI8SM7wIuTEdU4e/eC31cPKES0MJpqlc= -----END CERTIFICATE-----Generated at Sat Aug 23 20:01:09 2025 by rpki-client