$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: 84T0dvsjgn+1EkErdYUsU/Xa9VIeLDmwQKt2buR+tFY= Subject key identifier: 3F:92:14:C9:59:E9:14:54:E3:A7:E5:DE:73:04:30:48:5D:56:34:CC Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 45416A66105C22E04E350BCD37BECF5444506FDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 04FF Signing time: Thu 21 Aug 2025 12:10:02 +0000 Manifest this update: Thu 21 Aug 2025 12:05:02 +0000 Manifest next update: Sun 24 Aug 2025 19:51:02 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: eHYAs5R4bO0HYElKlD5GrrWM4djFIESEKZ1a5PhTsUw=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:41:6a:66:10:5c:22:e0:4e:35:0b:cd:37:be:cf:54:44:50:6f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Aug 21 12:05:02 2025 GMT Not After : Aug 24 19:51:02 2025 GMT Subject: CN=3F9214C959E91454E3A7E5DE730430485D5634CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:55:f8:dd:92:d9:f0:7e:90:bb:01:4b:af: 20:cd:bb:01:f7:e9:c2:77:c4:92:20:da:c1:91:ac: a4:4a:ef:85:cd:73:a3:e9:e0:38:df:db:e0:06:9d: 19:95:82:32:86:55:b1:0c:80:2c:bd:d1:44:58:4a: e3:46:7c:27:63:1b:93:8c:f0:f0:85:e8:b7:69:04: 79:7e:fa:e4:20:4e:94:e0:90:f7:fc:23:50:f8:f5: 5c:33:f0:3c:11:e6:e4:74:4e:2b:5f:a4:b9:f6:14: 06:db:5a:94:95:90:62:a2:8c:8c:aa:12:8d:18:f3: 16:8e:74:a7:1f:bf:e1:e2:79:db:f9:50:54:46:24: 21:0b:ff:38:38:21:27:34:ed:6c:a1:fb:42:0f:b7: b6:e1:21:f2:87:ab:a6:e7:d0:e7:72:0e:38:d7:06: f8:82:2c:3b:0d:98:6d:13:16:38:3a:28:20:e7:49: 86:a5:a8:de:62:09:35:7e:75:28:84:74:09:ab:4c: 21:7c:a2:ba:80:ef:89:bb:ea:e3:85:da:84:9c:f4: 60:3e:af:8a:43:2b:bc:5d:bd:fc:56:ce:03:14:2f: cd:42:c6:62:d7:9f:14:1e:79:5c:c4:6f:d2:02:b8: 1a:13:e3:7b:95:08:81:2a:33:f6:15:b3:5e:29:35: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:92:14:C9:59:E9:14:54:E3:A7:E5:DE:73:04:30:48:5D:56:34:CC X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:de:f0:c9:1d:cc:cc:e3:a2:7f:6d:08:c0:63:42:be:c5:1c: 1c:d2:81:83:6e:9d:68:80:58:89:fc:9a:50:ff:7d:b4:8f:9e: 6d:cf:19:50:00:ac:ea:6e:ab:22:07:d4:a8:e9:0f:ea:cf:d0: 31:c7:20:77:e7:4f:fd:e8:fb:0b:fd:2d:71:af:97:75:40:db: 73:b4:0c:b7:fd:8b:70:ae:36:67:c4:98:1f:6a:65:4e:45:d1: 13:59:c7:71:14:40:31:08:0d:9f:ce:f4:28:59:4e:d0:b4:04: 3b:86:af:42:59:6b:dc:29:f2:d1:c2:ea:f0:90:c8:ed:10:25: a4:35:31:83:c3:1d:1c:5c:56:df:c7:3e:da:e2:2b:27:60:8f: 73:e5:a2:d9:7b:ba:50:87:9a:fd:2e:9b:1d:59:1c:be:f4:4a: 54:fa:e1:5a:63:b9:dd:7e:d9:c3:d8:c7:26:30:a3:7e:13:9c: 4f:d1:61:37:3d:e8:32:ad:d9:17:f0:67:f8:9a:ff:5b:2e:df: 09:66:37:6a:56:1c:9a:9a:72:67:f3:46:b7:79:dc:2e:ab:b6: 75:dc:4a:1d:87:73:16:87:4d:e1:23:52:b7:9c:57:cb:7d:0a: 5b:bb:0b:64:5a:81:8f:9e:f1:80:6e:e3:49:a6:6d:28:f7:4b: a5:61:18:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUFqZhBcIuBONQvNN77PVERQb9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTA4MjExMjA1MDJaFw0yNTA4MjQxOTUxMDJaMDMxMTAvBgNV BAMTKDNGOTIxNEM5NTlFOTE0NTRFM0E3RTVERTczMDQzMDQ4NUQ1NjM0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLVX43ZLZ8H6QuwFLryDNuwH3 6cJ3xJIg2sGRrKRK74XNc6Pp4Djf2+AGnRmVgjKGVbEMgCy90URYSuNGfCdjG5OM 8PCF6LdpBHl++uQgTpTgkPf8I1D49Vwz8DwR5uR0TitfpLn2FAbbWpSVkGKijIyq Eo0Y8xaOdKcfv+Hiedv5UFRGJCEL/zg4ISc07Wyh+0IPt7bhIfKHq6bn0OdyDjjX BviCLDsNmG0TFjg6KCDnSYalqN5iCTV+dSiEdAmrTCF8orqA74m76uOF2oSc9GA+ r4pDK7xdvfxWzgMUL81CxmLXnxQeeVzEb9ICuBoT43uVCIEqM/YVs14pNTgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP5IUyVnpFFTjp+XecwQwSF1WNMwwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXe8MkdzMzjon9tCMBjQr7FHBzSgYNunWiA WIn8mlD/fbSPnm3PGVAArOpuqyIH1KjpD+rP0DHHIHfnT/3o+wv9LXGvl3VA23O0 DLf9i3CuNmfEmB9qZU5F0RNZx3EUQDEIDZ/O9ChZTtC0BDuGr0JZa9wp8tHC6vCQ yO0QJaQ1MYPDHRxcVt/HPtriKydgj3Plotl7ulCHmv0umx1ZHL70SlT64Vpjud1+ 2cPYxyYwo34TnE/RYTc96DKt2RfwZ/ia/1su3wlmN2pWHJqacmfzRrd53C6rtnXc Sh2HcxaHTeEjUrecV8t9Clu7C2RagY+e8YBu40mmbSj3S6VhGHw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:01 2025 by rpki-client