$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: MMocJMRTekwtQ+XJqZ9JDpAK6qHnr3Em9SzQWoDUDvw= Subject key identifier: 1B:81:F9:ED:75:D9:0F:9A:28:AB:85:98:C7:87:6B:5C:44:8D:C5:94 Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 2CD73FB17B87B983274B6E74180D8DAEEE8DCBBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: B2 Signing time: Fri 22 Aug 2025 11:32:23 +0000 Manifest this update: Fri 22 Aug 2025 11:27:23 +0000 Manifest next update: Mon 25 Aug 2025 23:26:23 +0000 Files and hashes: 1: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: YOFr0sthwCSGTnkhgMWwUC1uDKAUfEb1Ur42KUQIU0c=) 2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d7:3f:b1:7b:87:b9:83:27:4b:6e:74:18:0d:8d:ae:ee:8d:cb:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Aug 22 11:27:23 2025 GMT Not After : Aug 25 23:26:23 2025 GMT Subject: CN=1B81F9ED75D90F9A28AB8598C7876B5C448DC594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:65:f3:ac:eb:07:23:c5:78:7c:97:36:8e: 4c:25:f9:57:6b:aa:80:af:27:08:d8:2a:7c:d3:12: 7c:6a:78:8c:b9:16:51:7a:99:d6:b2:76:64:c9:b7: 12:d5:fb:36:32:34:e8:36:9f:ff:3e:3e:bb:0c:5c: 80:f9:ae:3a:31:25:dc:b8:5a:86:60:e4:44:8d:85: 44:78:ba:34:1c:c1:ce:00:b0:b6:3a:19:a1:bf:8a: 91:ef:59:2c:46:a5:b7:88:0b:e5:52:a3:c6:c4:97: 0b:dc:90:59:35:33:0b:5a:d3:2e:e9:cb:b8:d6:86: f0:fa:14:98:7f:72:6a:9d:61:16:ff:e1:7d:67:06: 24:e2:ea:5d:bf:0a:20:1e:b4:45:f1:c1:ca:6c:cc: 18:dd:f6:b1:ae:75:ce:89:d5:58:e6:2b:d5:1b:f7: 6d:34:70:6f:da:7b:12:5e:93:df:23:44:24:03:b3: 6a:06:7f:62:92:f4:fe:c8:ca:06:f4:96:39:72:1d: 76:ef:23:ca:26:51:56:6a:f2:01:f2:8d:c4:94:eb: 9b:95:ed:9b:19:dd:f5:7a:e3:3d:8e:f1:06:c7:e6: 6b:67:a9:30:6c:0c:19:18:dc:f6:3e:24:1d:30:0c: e2:9a:85:56:b9:a2:cb:41:4a:8c:bb:bf:d5:8f:9d: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:81:F9:ED:75:D9:0F:9A:28:AB:85:98:C7:87:6B:5C:44:8D:C5:94 X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0e:8e:68:25:ac:9c:a7:45:8e:1b:d8:3f:4f:38:01:81:b6: cd:24:93:20:fa:f1:34:1a:0f:ff:a3:76:6d:d7:eb:3a:3d:fa: 33:81:b9:a9:97:3a:c7:4a:f5:95:05:27:dd:04:dd:d9:0a:f2: 5b:e9:f2:67:b3:64:a4:1e:a7:f0:cb:73:3e:88:be:39:52:0c: cc:89:c1:5c:68:4d:52:37:e1:38:0c:25:b2:da:74:dc:3e:ab: d2:51:b2:46:d7:17:9f:51:27:26:8c:ef:a9:6e:7b:b7:8b:14: 44:9c:6b:42:57:71:62:54:a3:4c:a6:25:4f:38:0c:cd:78:0d: 03:44:15:50:bc:82:fb:69:f3:96:e8:7a:93:68:c0:9a:16:5a: 53:52:0a:9c:19:69:96:ad:6e:dd:85:3d:de:e8:a4:52:1d:da: 4c:43:9a:e6:89:47:38:76:b8:f8:06:75:e3:25:53:bd:95:f1: c3:35:90:c3:0c:1c:2a:2c:ef:fb:29:83:4b:35:a0:1a:69:bc: 44:d9:6d:f3:87:73:3c:94:1d:d7:2c:ef:1f:9c:4d:75:df:08: 8b:be:68:01:89:53:8f:60:58:3b:a8:19:01:70:cc:40:92:e3: e2:26:55:73:d6:2f:4c:fe:80:8b:6a:43:d5:75:70:0e:e1:eb: 87:55:61:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNc/sXuHuYMnS250GA2Nru6Ny7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNTA4MjIxMTI3MjNaFw0yNTA4MjUyMzI2MjNaMDMxMTAvBgNV BAMTKDFCODFGOUVENzVEOTBGOUEyOEFCODU5OEM3ODc2QjVDNDQ4REM1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQmXzrOsHI8V4fJc2jkwl+Vdr qoCvJwjYKnzTEnxqeIy5FlF6mdaydmTJtxLV+zYyNOg2n/8+PrsMXID5rjoxJdy4 WoZg5ESNhUR4ujQcwc4AsLY6GaG/ipHvWSxGpbeIC+VSo8bElwvckFk1Mwta0y7p y7jWhvD6FJh/cmqdYRb/4X1nBiTi6l2/CiAetEXxwcpszBjd9rGudc6J1VjmK9Ub 9200cG/aexJek98jRCQDs2oGf2KS9P7Iygb0ljlyHXbvI8omUVZq8gHyjcSU65uV 7ZsZ3fV64z2O8QbH5mtnqTBsDBkY3PY+JB0wDOKahVa5ostBSoy7v9WPnRkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG4H57XXZD5ooq4WYx4drXESNxZQwHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMOjmglrJynRY4b2D9POAGBts0kkyD68TQa D/+jdm3X6zo9+jOBuamXOsdK9ZUFJ90E3dkK8lvp8mezZKQep/DLcz6IvjlSDMyJ wVxoTVI34TgMJbLadNw+q9JRskbXF59RJyaM76lue7eLFESca0JXcWJUo0ymJU84 DM14DQNEFVC8gvtp85boepNowJoWWlNSCpwZaZatbt2FPd7opFId2kxDmuaJRzh2 uPgGdeMlU72V8cM1kMMMHCos7/spg0s1oBppvETZbfOHczyUHdcs7x+cTXXfCIu+ aAGJU49gWDuoGQFwzECS4+ImVXPWL0z+gItqQ9V1cA7h64dVYc4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:27:02 2025 by rpki-client