$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: ewdgZUZY3drqtvkn2O1h7tC/EqBOxt4KZ6EKuU+6kBU= Subject key identifier: 68:5D:98:5A:EB:93:25:18:86:58:3E:9B:06:15:F3:C8:E2:F2:23:07 Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 45F9436CEB3926F3F5BCEE02C3E23D321DF0426E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 01F6 Signing time: Fri 22 Aug 2025 09:51:28 +0000 Manifest this update: Fri 22 Aug 2025 09:46:28 +0000 Manifest next update: Mon 25 Aug 2025 16:14:28 +0000 Files and hashes: 1: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: op3kcp/Jux1C/+QLHq+DwkglnKtAVbCBf6EpBIYqup8=) 2: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f9:43:6c:eb:39:26:f3:f5:bc:ee:02:c3:e2:3d:32:1d:f0:42:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Aug 22 09:46:28 2025 GMT Not After : Aug 25 16:14:28 2025 GMT Subject: CN=685D985AEB93251886583E9B0615F3C8E2F22307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:ee:a8:a5:e4:d2:7c:5e:24:87:c0:ee:6c: 4d:78:9b:87:ac:0d:ee:71:a9:5d:88:f8:e1:e1:a8: 0b:15:6c:e0:7e:84:e2:bd:f8:4d:00:e4:ed:d7:f0: cb:91:87:db:2a:1f:f1:87:68:72:05:a6:f4:06:fe: 45:4c:29:88:b1:2e:e6:23:bd:ea:4e:a8:09:c4:4e: 30:95:b1:4d:10:95:ba:77:1c:83:5f:68:0a:74:eb: 99:65:dc:21:e0:f2:5a:14:18:ef:0a:84:ff:9b:30: 0d:e2:75:16:59:bb:35:cc:31:1d:01:45:7f:bf:c5: 30:23:9c:97:59:d8:28:7d:62:22:9b:60:c7:9f:cb: 92:d4:fc:ed:30:ff:23:c5:cf:65:df:bd:47:18:99: 00:8f:e6:15:a3:0f:3f:f1:80:7d:26:ef:62:17:4b: 46:b7:59:7c:b7:52:27:5a:74:ac:90:2b:71:2c:1b: 59:33:69:d5:eb:37:a3:04:f4:55:2b:6f:b5:68:a3: 9c:46:0b:67:1e:a3:f8:ca:dd:9d:5c:35:da:fb:5e: 1c:7e:0c:ed:7d:5e:10:7f:16:dc:31:1a:06:87:fa: d7:a4:35:7d:82:21:e2:18:d2:c9:89:e6:89:6d:61: 54:1f:31:68:23:a3:a5:58:91:ce:c2:6c:8b:df:cf: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5D:98:5A:EB:93:25:18:86:58:3E:9B:06:15:F3:C8:E2:F2:23:07 X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:95:0e:e6:c9:f0:06:6f:b4:df:ed:83:6d:1c:cc:35:9d:ae: 08:7f:80:c6:9c:f8:10:87:38:91:02:a8:42:b5:7c:d1:b4:bf: de:27:42:7f:16:8b:2f:38:df:43:16:1f:0c:8f:12:95:2c:ce: f6:cf:ff:ca:c6:8f:53:68:a6:13:e5:4e:d6:8d:61:df:b8:b0: c0:a3:4a:e5:14:db:0f:fd:16:75:c8:3d:7b:52:36:d4:05:6b: 29:83:10:99:ea:11:4d:14:07:71:ed:48:ec:b1:9b:3a:b6:99: 7b:09:36:34:5c:13:6c:a6:0f:8b:aa:ec:af:38:a4:c5:53:4e: d3:17:b7:bd:9b:ac:2e:61:fc:40:91:f4:bb:7d:e6:18:51:15: 97:75:8e:57:c3:85:42:4d:78:94:aa:90:4b:ef:0e:98:d2:e3: 1c:c9:02:2a:ab:4f:68:0f:00:1c:c2:8b:33:cb:94:81:d2:eb: 1f:ad:e7:4c:95:bc:74:7a:28:1f:86:c2:b7:ef:af:56:9f:bf: 00:63:3f:03:4f:8a:87:b9:2d:e8:6c:95:6f:e3:02:34:7c:4c: 7a:6d:82:f1:fa:cb:72:17:b0:85:d3:26:97:22:fb:dd:61:60: b2:62:04:93:dd:29:af:f7:66:e2:8b:bd:4e:a2:cc:98:2d:ff: 0f:40:78:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURflDbOs5JvP1vO4Cw+I9Mh3wQm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTA4MjIwOTQ2MjhaFw0yNTA4MjUxNjE0MjhaMDMxMTAvBgNV BAMTKDY4NUQ5ODVBRUI5MzI1MTg4NjU4M0U5QjA2MTVGM0M4RTJGMjIzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCve+6opeTSfF4kh8DubE14m4es De5xqV2I+OHhqAsVbOB+hOK9+E0A5O3X8MuRh9sqH/GHaHIFpvQG/kVMKYixLuYj vepOqAnETjCVsU0Qlbp3HINfaAp065ll3CHg8loUGO8KhP+bMA3idRZZuzXMMR0B RX+/xTAjnJdZ2Ch9YiKbYMefy5LU/O0w/yPFz2XfvUcYmQCP5hWjDz/xgH0m72IX S0a3WXy3UidadKyQK3EsG1kzadXrN6ME9FUrb7Voo5xGC2ceo/jK3Z1cNdr7Xhx+ DO19XhB/FtwxGgaH+tekNX2CIeIY0smJ5oltYVQfMWgjo6VYkc7CbIvfzyctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaF2YWuuTJRiGWD6bBhXzyOLyIwcwHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCVDubJ8AZvtN/tg20czDWdrgh/gMac+BCH OJECqEK1fNG0v94nQn8Wiy8430MWHwyPEpUszvbP/8rGj1NophPlTtaNYd+4sMCj SuUU2w/9FnXIPXtSNtQFaymDEJnqEU0UB3HtSOyxmzq2mXsJNjRcE2ymD4uq7K84 pMVTTtMXt72brC5h/ECR9Lt95hhRFZd1jlfDhUJNeJSqkEvvDpjS4xzJAiqrT2gP ABzCizPLlIHS6x+t50yVvHR6KB+Gwrfvr1afvwBjPwNPioe5LehslW/jAjR8THpt gvH6y3IXsIXTJpci+91hYLJiBJPdKa/3ZuKLvU6izJgt/w9AeDk= -----END CERTIFICATE-----Generated at Sat Aug 23 10:11:40 2025 by rpki-client