$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: Dal4zzfgliopPr0fFdCH6cAiigr0LtJ7t6e1LF5mx7Q= Subject key identifier: 48:45:1B:5B:3A:C8:0F:44:D1:9E:7D:2E:BE:31:C7:39:95:8D:73:DE Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 6355E860CFE7C675C73E46BE6A47C7C8194672E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 01AC Signing time: Sat 23 Aug 2025 05:51:13 +0000 Manifest this update: Sat 23 Aug 2025 05:46:13 +0000 Manifest next update: Tue 26 Aug 2025 14:58:13 +0000 Files and hashes: 1: 3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa (hash: V7RFCHjDQmX/bycVf9vGUXwZyU+bAqqIJro21SU5i0w=) 2: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: aEpZxBWTQgCZSC8wXaU0vrLAOntolImhxoUB2y55NOQ=) 3: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:55:e8:60:cf:e7:c6:75:c7:3e:46:be:6a:47:c7:c8:19:46:72:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Aug 23 05:46:13 2025 GMT Not After : Aug 26 14:58:13 2025 GMT Subject: CN=48451B5B3AC80F44D19E7D2EBE31C739958D73DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:79:9a:10:c0:ce:65:2e:99:ba:13:e0:ff: e0:05:f5:2e:87:d8:24:fc:76:60:f8:63:cd:db:cd: 97:d3:7c:93:1f:8c:c0:97:44:bb:50:c3:51:45:c3: 56:9b:cd:8d:02:ca:1f:37:30:5e:f8:9d:39:8b:32: c9:13:5a:e3:6a:08:71:ea:c5:21:81:38:b1:8b:fd: 38:79:4e:e6:e2:41:e4:e9:32:e7:14:93:7a:ac:1c: 6d:fd:fe:9f:3c:71:df:5e:0f:5c:18:d7:56:a3:cd: 10:f9:55:b1:3f:fb:9c:ed:97:8f:ff:3e:4c:9d:02: 14:e7:ee:94:17:52:99:bd:8b:21:17:6a:cb:d9:4d: d9:af:0c:77:b3:00:9b:eb:13:36:f7:1d:1c:ea:07: c3:c9:d2:0d:b2:82:9f:f7:f4:f4:63:ac:70:2b:f8: 0d:a9:8a:0f:2b:31:a1:35:6b:4d:46:15:d1:2e:e8: 41:e3:20:de:9b:4e:2c:49:85:25:b1:2b:21:35:d0: ca:22:36:ef:70:99:41:a7:b4:e4:af:33:d7:de:3a: 13:6c:9d:22:6a:04:cc:bd:b0:34:af:b7:d8:86:07: a7:ba:68:30:73:a2:ae:73:5b:a2:71:ec:94:c0:d2: 7c:ab:69:3d:dd:4e:f2:6f:f7:85:e3:b4:1c:d5:89: c5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:45:1B:5B:3A:C8:0F:44:D1:9E:7D:2E:BE:31:C7:39:95:8D:73:DE X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b9:e0:d6:79:f6:7d:21:5a:b3:09:67:15:2e:71:8a:9c:02: 7d:4c:4b:0d:36:82:35:c0:ed:ed:81:7a:0f:48:4d:d9:92:41: e7:76:25:08:39:10:44:84:13:31:a9:bd:60:0c:2f:a9:e9:df: cb:33:10:c8:b7:60:e4:e7:58:5a:68:e6:cd:44:20:f7:9d:7d: 77:0d:1a:5f:fe:00:ce:f0:aa:f5:75:89:62:f6:21:1f:c4:49: c3:fb:67:0b:1e:b7:95:1d:5f:51:8c:8b:c8:24:3f:0e:2c:17: fb:91:47:ec:46:3e:93:63:8b:ee:c1:04:2e:42:3f:1d:df:18: 1a:d9:61:89:42:66:c1:41:40:55:9a:da:ff:43:7f:2d:01:ec: 1f:40:c7:b2:3b:c9:b9:32:0e:6a:ed:f4:2c:55:e3:56:56:bb: 77:7f:63:72:79:06:81:fc:48:7f:28:be:ec:95:e0:a8:64:66: 8e:7e:e3:cb:20:76:13:7d:d9:93:1d:80:e2:16:c0:ed:86:e4: 65:7a:3e:23:9a:aa:16:1e:9c:18:8d:9d:e5:41:47:0b:92:1d: c1:c1:ac:d4:5a:53:90:67:64:eb:a6:dd:45:68:05:f2:88:9c: ea:19:e6:bd:73:46:f9:c1:05:fb:d9:8e:ee:45:85:98:30:5c: 83:65:63:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1XoYM/nxnXHPka+akfHyBlGcucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNTA4MjMwNTQ2MTNaFw0yNTA4MjYxNDU4MTNaMDMxMTAvBgNV BAMTKDQ4NDUxQjVCM0FDODBGNDREMTlFN0QyRUJFMzFDNzM5OTU4RDczREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LHmaEMDOZS6ZuhPg/+AF9S6H 2CT8dmD4Y83bzZfTfJMfjMCXRLtQw1FFw1abzY0Cyh83MF74nTmLMskTWuNqCHHq xSGBOLGL/Th5TubiQeTpMucUk3qsHG39/p88cd9eD1wY11ajzRD5VbE/+5ztl4// PkydAhTn7pQXUpm9iyEXasvZTdmvDHezAJvrEzb3HRzqB8PJ0g2ygp/39PRjrHAr +A2pig8rMaE1a01GFdEu6EHjIN6bTixJhSWxKyE10MoiNu9wmUGntOSvM9feOhNs nSJqBMy9sDSvt9iGB6e6aDBzoq5zW6Jx7JTA0nyraT3dTvJv94XjtBzVicUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSEUbWzrID0TRnn0uvjHHOZWNc94wHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJW54NZ59n0hWrMJZxUucYqcAn1MSw02gjXA 7e2Beg9ITdmSQed2JQg5EESEEzGpvWAML6np38szEMi3YOTnWFpo5s1EIPedfXcN Gl/+AM7wqvV1iWL2IR/EScP7Zwset5UdX1GMi8gkPw4sF/uRR+xGPpNji+7BBC5C Px3fGBrZYYlCZsFBQFWa2v9Dfy0B7B9Ax7I7ybkyDmrt9CxV41ZWu3d/Y3J5BoH8 SH8ovuyV4KhkZo5+48sgdhN92ZMdgOIWwO2G5GV6PiOaqhYenBiNneVBRwuSHcHB rNRaU5BnZOum3UVoBfKInOoZ5r1zRvnBBfvZju5FhZgwXINlYyk= -----END CERTIFICATE-----Generated at Sun Aug 24 03:43:44 2025 by rpki-client