$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: atAQDS7IJvW9Wf8LszAkQiI7X241hc2FoyXWYYSHUeA= Subject key identifier: D5:82:49:EB:19:5C:BC:37:21:39:28:83:F2:EB:7F:B2:4B:BA:81:C3 Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 2A4E96349CE3E808ABD2B4A03341E5919D5136AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: F4 Signing time: Tue 01 Jul 2025 00:01:10 +0000 Manifest this update: Mon 30 Jun 2025 23:56:10 +0000 Manifest next update: Fri 04 Jul 2025 05:28:10 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: slGirTJ8TDbCeSDMnwp4Nya2XgxD0qfFWjEIbhrbjRI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4e:96:34:9c:e3:e8:08:ab:d2:b4:a0:33:41:e5:91:9d:51:36:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Jun 30 23:56:10 2025 GMT Not After : Jul 4 05:28:10 2025 GMT Subject: CN=D58249EB195CBC3721392883F2EB7FB24BBA81C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:86:a2:57:40:67:c5:87:c3:c4:e6:8e:85:24: 5c:11:3d:36:39:d0:fa:ba:f3:46:33:51:43:21:a9: 69:f0:fd:5e:a8:d6:a8:9a:f5:a7:f7:f0:fe:72:d2: ed:4f:15:da:e4:97:06:ff:84:a9:ae:47:8d:45:00: 1b:9d:4b:c5:c5:80:30:04:63:a6:50:1d:fc:b9:fa: 9d:ff:53:43:26:64:56:12:b7:be:74:0d:7e:a8:d5: 9b:f0:85:4e:cc:c4:20:e5:4b:fd:45:da:81:42:78: 85:47:41:ef:ec:6b:aa:42:84:17:ff:d8:57:2f:ac: 98:db:05:0c:71:dd:7e:b6:c3:8c:a6:a3:ae:a8:ed: c8:61:46:b0:dd:e3:1c:90:df:14:fe:d6:d7:d5:cd: 8a:78:1e:42:d9:7a:73:80:06:89:03:e6:4d:20:85: 60:25:6e:6a:e8:30:09:24:20:77:1e:34:a1:39:df: 09:ef:32:24:86:42:bc:eb:3c:86:6e:05:48:31:70: 7f:c9:cf:62:5d:04:69:08:af:3c:43:0d:73:31:3e: c8:d6:a8:6a:78:72:14:c9:18:92:3f:c2:96:96:79: cb:b1:fb:cb:17:b3:ed:5b:ff:ba:7d:82:67:a5:ca: 4f:da:da:ce:d9:57:00:69:77:10:44:2c:c6:02:3a: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:82:49:EB:19:5C:BC:37:21:39:28:83:F2:EB:7F:B2:4B:BA:81:C3 X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:61:97:1d:66:dc:ca:d0:52:e7:53:ba:bb:27:28:24:22:5c: 23:9b:56:9c:58:d8:b5:52:a7:02:04:9e:2c:bc:75:d1:3d:b2: f8:d3:d0:f3:d3:53:da:fc:8c:30:c6:00:c8:ea:28:f5:d8:5e: d7:34:98:fb:cd:11:78:3a:ce:8c:ed:a6:f6:b5:2e:ac:33:f3: f0:e1:bb:ab:2c:47:93:ec:84:7e:41:10:e9:55:27:b3:2d:ae: a7:fe:b0:55:33:d6:af:76:73:7c:9e:ee:0b:62:a2:10:50:71: b1:06:80:2a:b1:2e:83:35:42:68:b3:0b:aa:77:25:cf:b6:26: f9:20:3d:ce:52:f7:30:6a:58:e5:63:9c:01:32:42:b6:3d:1d: 4a:c8:24:c7:03:42:c1:0c:ec:6e:df:5b:7e:3f:00:1e:87:07: ef:86:be:ee:a1:66:8e:87:65:1b:11:05:34:68:1f:14:4f:18: 4d:95:86:b1:79:64:c5:4f:1a:65:25:b7:4e:92:06:1f:e5:73: 96:9d:d8:57:9a:7f:bb:ec:e0:8d:23:eb:6f:ac:c1:c3:41:48: 72:78:6c:f7:f4:0e:f4:0c:af:b4:90:0c:d7:1c:c8:ab:e8:8b: af:f7:69:52:68:50:63:13:15:34:1a:fa:11:f6:df:9c:a7:1f: e7:af:09:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKk6WNJzj6Air0rSgM0HlkZ1RNq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTA2MzAyMzU2MTBaFw0yNTA3MDQwNTI4MTBaMDMxMTAvBgNV BAMTKEQ1ODI0OUVCMTk1Q0JDMzcyMTM5Mjg4M0YyRUI3RkIyNEJCQTgxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjhqJXQGfFh8PE5o6FJFwRPTY5 0Pq680YzUUMhqWnw/V6o1qia9af38P5y0u1PFdrklwb/hKmuR41FABudS8XFgDAE Y6ZQHfy5+p3/U0MmZFYSt750DX6o1ZvwhU7MxCDlS/1F2oFCeIVHQe/sa6pChBf/ 2FcvrJjbBQxx3X62w4ymo66o7chhRrDd4xyQ3xT+1tfVzYp4HkLZenOABokD5k0g hWAlbmroMAkkIHceNKE53wnvMiSGQrzrPIZuBUgxcH/Jz2JdBGkIrzxDDXMxPsjW qGp4chTJGJI/wpaWecux+8sXs+1b/7p9gmelyk/a2s7ZVwBpdxBELMYCOtF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1YJJ6xlcvDchOSiD8ut/sku6gcMwHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKthlx1m3MrQUudTursnKCQiXCObVpxY2LVS pwIEniy8ddE9svjT0PPTU9r8jDDGAMjqKPXYXtc0mPvNEXg6zoztpva1Lqwz8/Dh u6ssR5PshH5BEOlVJ7Mtrqf+sFUz1q92c3ye7gtiohBQcbEGgCqxLoM1QmizC6p3 Jc+2JvkgPc5S9zBqWOVjnAEyQrY9HUrIJMcDQsEM7G7fW34/AB6HB++Gvu6hZo6H ZRsRBTRoHxRPGE2VhrF5ZMVPGmUlt06SBh/lc5ad2Feaf7vs4I0j62+swcNBSHJ4 bPf0DvQMr7SQDNccyKvoi6/3aVJoUGMTFTQa+hH235ynH+evCbI= -----END CERTIFICATE-----Generated at Tue Jul 1 19:16:01 2025 by rpki-client