$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: nHFNQxWYRFxZonxinhgylAqrpwQe9uljZq3vAMQp2hM= Subject key identifier: A8:78:65:A7:11:0A:B1:B6:9D:AC:AB:B3:21:FA:21:75:6F:04:9E:CA Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 3C28913995F5971F10079787E8FBE65C97DD3A8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 021E Signing time: Fri 22 Aug 2025 21:11:05 +0000 Manifest this update: Fri 22 Aug 2025 21:06:05 +0000 Manifest next update: Tue 26 Aug 2025 05:14:05 +0000 Files and hashes: 1: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: 8DZ/qn3TsYl/gGtoT+RCK5tJzsCsB41dPM6mHtxqcR4=) 2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:28:91:39:95:f5:97:1f:10:07:97:87:e8:fb:e6:5c:97:dd:3a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Aug 22 21:06:05 2025 GMT Not After : Aug 26 05:14:05 2025 GMT Subject: CN=A87865A7110AB1B69DACABB321FA21756F049ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:6f:ca:aa:cf:08:04:f9:64:5c:fd:3a:4b: e8:91:7d:a8:eb:85:5e:5d:c3:4b:d4:b6:93:09:0f: c0:34:93:8d:58:1c:84:9a:8d:9c:b5:97:1e:46:1b: e2:19:94:f1:23:5b:25:9d:bb:52:11:b4:fb:b0:d5: 09:2f:7b:e8:a2:7b:4e:d8:3f:dd:16:0c:86:d9:83: c5:27:1a:f5:b6:22:dd:c2:f5:dc:ac:05:e7:a0:26: a8:c3:dc:3b:00:cc:db:f0:a1:a4:c4:4d:59:c2:53: ca:8c:4c:f0:8f:1a:8e:a2:04:57:1d:12:fa:29:e7: da:8f:b2:fb:ab:d1:49:45:70:35:18:bc:33:f1:0d: b0:3a:d9:fd:a7:b3:85:3e:86:04:12:ba:1b:e8:0d: 27:c6:6c:6d:77:fa:65:d9:37:34:d4:f7:21:d0:40: 96:c3:c7:f5:a6:3a:e9:00:ff:ce:c7:4b:53:fd:82: 1a:bf:6b:fc:f9:50:fa:ca:a6:41:07:b5:61:1b:f7: 0a:16:af:bf:34:16:21:84:03:bb:c7:31:1d:85:8a: 47:79:b3:92:fd:84:97:db:cd:00:2c:bb:95:f7:c8: b2:0f:14:62:32:e9:5d:c9:29:54:fb:78:c7:c6:58: ed:2f:33:f2:1c:18:c6:2d:e9:4d:a9:a1:fc:54:7f: bc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:78:65:A7:11:0A:B1:B6:9D:AC:AB:B3:21:FA:21:75:6F:04:9E:CA X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d9:3c:45:1e:b4:1f:a8:92:d7:33:26:5a:49:21:43:d1:4b: d9:ae:9c:cb:c1:0f:91:c8:47:e9:b7:81:d5:33:c5:c3:53:d2: 7c:a1:af:5d:e9:c4:2a:78:f3:d1:11:a6:34:6b:a1:3b:3b:a0: ca:45:f1:23:c2:5e:93:d7:cb:a9:b1:b4:ca:46:6d:ec:eb:95: 96:69:8f:dc:0b:14:f0:18:26:3b:b4:21:69:f9:ee:aa:cf:b7: ed:86:0d:cd:a4:9b:2e:b6:3c:c5:d1:6b:aa:2d:01:cf:87:cb: 69:75:2b:fd:7f:5a:af:cb:91:36:cf:a0:4c:0c:7b:3b:17:45: 98:3e:75:37:f1:3a:4f:ae:8c:ba:c1:e1:d1:9b:1f:c4:40:64: e4:d5:84:0d:79:10:8d:0e:b7:7e:eb:cb:9c:6f:87:b1:2d:4a: d3:fa:bc:98:ef:f2:e8:a3:fc:cf:4f:5d:91:db:dd:a6:23:20: 0c:94:7c:a2:c6:a3:8b:47:e3:90:48:21:a2:23:fd:9a:94:bd: b9:3e:e5:c5:7b:ef:32:e8:21:9b:c9:fc:09:68:24:c8:b5:8e: 0c:64:20:69:3d:9d:59:88:49:57:b0:10:92:60:77:a6:25:51: 05:d1:2e:6a:53:8f:48:0b:54:9c:36:6d:91:71:c9:d7:48:9e: 20:e3:9c:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCiROZX1lx8QB5eH6PvmXJfdOo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTA4MjIyMTA2MDVaFw0yNTA4MjYwNTE0MDVaMDMxMTAvBgNV BAMTKEE4Nzg2NUE3MTEwQUIxQjY5REFDQUJCMzIxRkEyMTc1NkYwNDlFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IG/Kqs8IBPlkXP06S+iRfajr hV5dw0vUtpMJD8A0k41YHISajZy1lx5GG+IZlPEjWyWdu1IRtPuw1Qkve+iie07Y P90WDIbZg8UnGvW2It3C9dysBeegJqjD3DsAzNvwoaTETVnCU8qMTPCPGo6iBFcd Evop59qPsvur0UlFcDUYvDPxDbA62f2ns4U+hgQSuhvoDSfGbG13+mXZNzTU9yHQ QJbDx/WmOukA/87HS1P9ghq/a/z5UPrKpkEHtWEb9woWr780FiGEA7vHMR2Fikd5 s5L9hJfbzQAsu5X3yLIPFGIy6V3JKVT7eMfGWO0vM/IcGMYt6U2pofxUf7xBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqHhlpxEKsbadrKuzIfohdW8EnsowHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDZPEUetB+oktczJlpJIUPRS9munMvBD5HI R+m3gdUzxcNT0nyhr13pxCp489ERpjRroTs7oMpF8SPCXpPXy6mxtMpGbezrlZZp j9wLFPAYJju0IWn57qrPt+2GDc2kmy62PMXRa6otAc+Hy2l1K/1/Wq/LkTbPoEwM ezsXRZg+dTfxOk+ujLrB4dGbH8RAZOTVhA15EI0Ot37ry5xvh7EtStP6vJjv8uij /M9PXZHb3aYjIAyUfKLGo4tH45BIIaIj/ZqUvbk+5cV77zLoIZvJ/AloJMi1jgxk IGk9nVmISVewEJJgd6YlUQXRLmpTj0gLVJw2bZFxyddIniDjnIs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:51 2025 by rpki-client