$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: Ea/EfOTK9pBJ5csU9wGuFAnUzvSVxXbg3edJJlBRQxM= Subject key identifier: 42:38:64:A4:0A:91:18:56:29:6B:07:55:B1:80:F4:F1:5F:3D:D3:AF Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 5BCB60FA31A8E3E63E948E4E87A247246B3FFF83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 010B Signing time: Fri 22 Aug 2025 06:01:11 +0000 Manifest this update: Fri 22 Aug 2025 05:56:11 +0000 Manifest next update: Mon 25 Aug 2025 13:53:11 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: DlSFwvkO2cq2QC3ld3TLgrjq14bAb3R8+7EctSUwEDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:cb:60:fa:31:a8:e3:e6:3e:94:8e:4e:87:a2:47:24:6b:3f:ff:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Aug 22 05:56:11 2025 GMT Not After : Aug 25 13:53:11 2025 GMT Subject: CN=423864A40A911856296B0755B180F4F15F3DD3AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8d:4a:fe:31:20:39:0b:dd:d0:ec:58:c7:23: a7:53:fe:df:77:be:66:30:89:54:0a:d7:4c:54:5c: a1:ac:1d:cf:76:17:03:81:67:6d:23:1b:71:22:26: 71:27:ca:e5:35:8f:a6:a7:93:66:55:ff:6c:92:80: 83:fe:f2:b8:21:95:d8:81:51:f1:91:21:cd:42:f9: 0e:80:35:77:bb:45:eb:c6:bd:ff:62:e2:3a:c2:9d: 7d:02:62:7f:24:59:10:d6:d4:24:b8:dc:eb:f5:36: 5d:84:8f:51:a3:63:b0:f3:5b:1f:e8:bc:1f:87:b4: 5e:5c:eb:ae:bb:d0:17:e1:20:fa:f5:3d:18:07:2a: b9:ca:91:38:0f:60:0a:dd:02:b4:5a:1c:fa:de:b4: dd:ee:7d:f6:4a:61:be:34:0c:c7:45:24:84:02:69: 17:7e:4c:d6:11:c0:00:13:3f:5d:f4:77:7d:52:a4: 62:69:c1:8e:4f:b9:34:c0:20:d3:c7:be:eb:26:10: 26:f0:c3:cf:a7:5b:71:aa:44:e8:bc:42:94:0b:e3: 85:85:fb:f6:e1:23:e4:19:6d:3f:47:f2:b5:9b:ff: f8:f5:1d:93:84:3c:af:88:df:1a:6e:f9:dd:fc:56: b1:b5:33:eb:c1:fe:a5:7b:eb:72:e2:b0:ed:51:19: 7a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:38:64:A4:0A:91:18:56:29:6B:07:55:B1:80:F4:F1:5F:3D:D3:AF X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:73:33:ed:0e:0b:7a:de:f2:6c:db:74:ee:1c:ae:3c:49:15: 64:4d:47:ed:96:9d:e7:28:1f:3b:37:29:18:9b:b2:e8:11:72: 91:05:b6:d0:0e:f3:19:e3:16:91:03:f7:73:3a:67:56:a0:17: c9:dd:c1:ae:e8:4e:bb:44:44:3f:9c:b8:a9:8a:18:fa:74:d6: 52:b3:51:b3:6c:9c:46:b8:56:bb:6b:fd:68:77:5e:ca:45:5e: 08:aa:04:0b:cb:a5:70:16:ec:46:de:d7:c8:48:f2:6c:8f:c3: 91:16:0c:86:ff:60:f4:c4:2b:1c:3e:dd:b2:2d:c8:a8:37:4f: ea:1c:04:16:a8:8c:f3:a9:80:85:3b:0d:53:cd:ab:73:a3:dc: 48:c7:d1:a7:da:ab:3f:5d:5d:29:61:14:b4:a3:48:10:c2:12: a7:5e:3a:0a:8b:ff:8c:00:a5:09:2d:26:37:93:6b:cd:69:d7: 28:20:3f:85:8b:4d:24:72:0b:9e:c9:f7:f8:0b:aa:df:26:5c: 81:98:13:a6:6a:88:55:a6:db:98:86:74:c2:2b:ff:e1:27:b0: 5f:99:cc:30:28:17:48:9c:fe:e1:75:52:65:9f:6b:17:9e:e9: 47:94:1e:33:86:22:44:c9:04:4c:c9:e0:fc:e5:be:ea:6a:7b: 8e:6c:62:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8tg+jGo4+Y+lI5Oh6JHJGs//4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTA4MjIwNTU2MTFaFw0yNTA4MjUxMzUzMTFaMDMxMTAvBgNV BAMTKDQyMzg2NEE0MEE5MTE4NTYyOTZCMDc1NUIxODBGNEYxNUYzREQzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjUr+MSA5C93Q7FjHI6dT/t93 vmYwiVQK10xUXKGsHc92FwOBZ20jG3EiJnEnyuU1j6ank2ZV/2ySgIP+8rghldiB UfGRIc1C+Q6ANXe7RevGvf9i4jrCnX0CYn8kWRDW1CS43Ov1Nl2Ej1GjY7DzWx/o vB+HtF5c66670BfhIPr1PRgHKrnKkTgPYArdArRaHPretN3uffZKYb40DMdFJIQC aRd+TNYRwAATP130d31SpGJpwY5PuTTAINPHvusmECbww8+nW3GqROi8QpQL44WF +/bhI+QZbT9H8rWb//j1HZOEPK+I3xpu+d38VrG1M+vB/qV763LisO1RGXpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQjhkpAqRGFYpawdVsYD08V89068wHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5zM+0OC3re8mzbdO4crjxJFWRNR+2Wneco Hzs3KRibsugRcpEFttAO8xnjFpED93M6Z1agF8ndwa7oTrtERD+cuKmKGPp01lKz UbNsnEa4Vrtr/Wh3XspFXgiqBAvLpXAW7Ebe18hI8myPw5EWDIb/YPTEKxw+3bIt yKg3T+ocBBaojPOpgIU7DVPNq3Oj3EjH0afaqz9dXSlhFLSjSBDCEqdeOgqL/4wA pQktJjeTa81p1yggP4WLTSRyC57J9/gLqt8mXIGYE6ZqiFWm25iGdMIr/+EnsF+Z zDAoF0ic/uF1UmWfaxee6UeUHjOGIkTJBEzJ4Pzlvupqe45sYgc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:02:02 2025 by rpki-client