$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json) Hash identifier: Ia74zoUOQMJEmXd60sa2b/eZt1H6zZvDPiaFbakD6LM= Subject key identifier: 63:FD:1C:8D:3F:4C:4C:75:85:29:9F:92:54:8F:46:BF:E8:50:73:D6 Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Certificate serial: 5F767B0320652C01BF116E24B5A0B3EE6827DE86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft Manifest number: 04EC Signing time: Fri 22 Aug 2025 13:20:50 +0000 Manifest this update: Fri 22 Aug 2025 13:15:50 +0000 Manifest next update: Mon 25 Aug 2025 18:11:50 +0000 Files and hashes: 1: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: Usk9JQ2XeRGm39smNUuLoGkN+7yFDsrjSvIs4nhXd0I=) 2: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: URb9jyr8zd+jerWNmQHQ92PoCAWrdyvkVTVaY9fn328=) 3: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: +zMuF2d6C36Qn9OFjFhter7f0zvIprv5Kce2a+7KyYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:76:7b:03:20:65:2c:01:bf:11:6e:24:b5:a0:b3:ee:68:27:de:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Validity Not Before: Aug 22 13:15:50 2025 GMT Not After : Aug 25 18:11:50 2025 GMT Subject: CN=63FD1C8D3F4C4C7585299F92548F46BFE85073D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:75:2d:63:6c:d4:d0:13:88:ac:26:2a:dc:b0: 22:12:2a:20:db:fd:60:c3:79:38:5b:12:cd:5c:c4: e2:db:c2:83:a8:1f:29:4d:2e:b4:04:6e:0f:89:34: f2:f9:55:8b:06:6f:c7:f4:5b:3d:75:46:59:87:9e: 1b:be:c5:75:b4:72:b4:b6:a8:b1:3c:b3:4a:3a:2f: 36:cf:79:21:f8:83:6d:d8:ce:b0:b0:6b:ae:5a:df: 7b:65:1f:ed:83:d5:d6:ba:23:fd:8c:d4:ef:82:eb: 5a:ee:11:35:9d:13:75:b7:68:ef:1f:d6:6f:9c:a5: fc:15:ba:5a:68:c8:1c:e8:7e:43:66:c8:7f:7b:02: 6b:9c:fe:06:09:20:fb:b3:d5:c8:65:d6:34:55:c7: 0e:2c:e7:7c:18:30:0e:54:78:e4:28:0c:fa:67:be: 16:8b:9e:ff:fc:77:a2:28:ef:ff:53:d8:73:58:c9: 9a:6a:a8:35:26:00:27:e1:4e:e3:ca:24:59:f0:15: c7:91:48:27:9e:8a:cb:a6:d9:51:ae:3e:b8:f3:5f: 5d:40:c8:e3:19:a1:ea:02:9c:a3:c7:10:97:6f:bc: 09:97:e1:2d:25:07:b6:e3:d0:8d:cf:b2:0a:d9:f7: c5:53:6d:aa:8a:05:b6:49:c2:d7:f7:43:be:20:e1: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:1C:8D:3F:4C:4C:75:85:29:9F:92:54:8F:46:BF:E8:50:73:D6 X509v3 Authority Key Identifier: keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1d:75:5e:5b:12:b7:a5:9e:31:7c:67:e8:72:9b:0f:54:26: e0:c7:ef:5c:92:f0:d4:2b:5b:5e:49:9c:e2:dd:80:5d:15:94: 9e:74:8d:ee:03:07:81:4d:00:6b:2c:33:17:0a:da:b8:3d:f2: 7d:be:44:88:1a:e8:05:cf:97:b7:f3:0e:53:f6:55:7d:f5:9d: 30:dd:79:c7:c6:90:09:26:23:33:be:ac:0b:80:df:7d:be:e5: 68:47:5c:f0:b7:1d:fe:85:09:18:6b:4b:a9:2e:88:b8:32:86: e0:10:85:eb:ef:3a:55:96:1e:69:14:e5:32:d7:01:df:d7:57: 32:16:4d:ba:b4:99:e3:6f:ed:16:aa:f5:73:ef:6d:18:10:db: 6a:03:cc:f4:f1:5c:5d:c9:21:b2:45:0a:39:da:df:15:7e:36: a6:d2:1a:16:9b:28:4f:2f:02:61:70:38:e5:21:ff:98:3c:8a: 28:96:3e:4e:8d:8c:a1:a5:53:40:1c:2d:7e:ae:a2:13:e6:3a: 7f:83:ad:03:8c:37:f4:e9:16:2a:5e:da:f6:98:47:e6:04:69: 4e:2b:15:5c:85:83:6e:10:72:13:7a:fc:0f:e2:4b:9e:77:e9: 29:38:09:f7:ac:c7:14:3f:aa:a0:21:a6:a6:b7:60:91:55:e7: fe:1b:61:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX3Z7AyBlLAG/EW4ktaCz7mgn3oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4 NDY0NzZBQjAeFw0yNTA4MjIxMzE1NTBaFw0yNTA4MjUxODExNTBaMDMxMTAvBgNV BAMTKDYzRkQxQzhEM0Y0QzRDNzU4NTI5OUY5MjU0OEY0NkJGRTg1MDczRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdS1jbNTQE4isJircsCISKiDb /WDDeThbEs1cxOLbwoOoHylNLrQEbg+JNPL5VYsGb8f0Wz11RlmHnhu+xXW0crS2 qLE8s0o6LzbPeSH4g23YzrCwa65a33tlH+2D1da6I/2M1O+C61ruETWdE3W3aO8f 1m+cpfwVulpoyBzofkNmyH97Amuc/gYJIPuz1chl1jRVxw4s53wYMA5UeOQoDPpn vhaLnv/8d6Io7/9T2HNYyZpqqDUmACfhTuPKJFnwFceRSCeeisum2VGuPrjzX11A yOMZoeoCnKPHEJdvvAmX4S0lB7bj0I3PsgrZ98VTbaqKBbZJwtf3Q74g4ZddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/0cjT9MTHWFKZ+SVI9Gv+hQc9YwHwYDVR0j BBgwFoAUPm8wZBhFVoPboKyVtP1B4YRkdqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMC8zRTZGMzA2NDE4 NDU1NjgzREJBMEFDOTVCNEZENDFFMTg0NjQ3NkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4NDY0 NzZBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQx RTE4NDY0NzZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwddV5bErelnjF8Z+hymw9UJuDH71yS8NQr W15JnOLdgF0VlJ50je4DB4FNAGssMxcK2rg98n2+RIga6AXPl7fzDlP2VX31nTDd ecfGkAkmIzO+rAuA332+5WhHXPC3Hf6FCRhrS6kuiLgyhuAQhevvOlWWHmkU5TLX Ad/XVzIWTbq0meNv7Raq9XPvbRgQ22oDzPTxXF3JIbJFCjna3xV+NqbSGhabKE8v AmFwOOUh/5g8iiiWPk6NjKGlU0AcLX6uohPmOn+DrQOMN/TpFipe2vaYR+YEaU4r FVyFg24QchN6/A/iS5536Sk4CfesxxQ/qqAhpqa3YJFV5/4bYTA= -----END CERTIFICATE-----Generated at Sat Aug 23 13:37:27 2025 by rpki-client