$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft File: 3D93688202931D72322A7EE0053964A2DD8EB457.mft (raw, json) Hash identifier: BZUM088VM8F82GNef7K1AaUgYd+f2QAvdFvu6SgFkK4= Subject key identifier: 2F:86:C9:22:2F:3C:F6:5C:42:D3:17:EB:C6:B1:68:AF:DB:94:12:8A Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457 Certificate serial: 06F3F02F4712DCD7A3B1A6973D8A416662C29AF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft Manifest number: 022D Signing time: Fri 22 Aug 2025 00:22:21 +0000 Manifest this update: Fri 22 Aug 2025 00:17:21 +0000 Manifest next update: Mon 25 Aug 2025 01:23:21 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: DkL978cCjpD0PQ0XgknN+Mz9vJLe59QDx419VcnHPIA=) 2: 3D93688202931D72322A7EE0053964A2DD8EB457.crl (hash: mcY0im/KQjrz/4tbrIFqQiYkOUV6uACQSnh5xXI23Ag=) 3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: eaULz+kMsRSSqy6h3V303twAaR4RcVJjEt3EXFQ5l2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f3:f0:2f:47:12:dc:d7:a3:b1:a6:97:3d:8a:41:66:62:c2:9a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457 Validity Not Before: Aug 22 00:17:21 2025 GMT Not After : Aug 25 01:23:21 2025 GMT Subject: CN=2F86C9222F3CF65C42D317EBC6B168AFDB94128A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:a7:e5:47:31:bb:5b:6c:94:63:6c:18:28: 8a:ed:b7:87:37:a7:6a:66:d7:37:ab:cb:4c:b5:cb: 2f:96:69:11:84:12:59:bb:d9:3f:75:9c:2a:c0:51: 3e:4e:be:c9:1c:0c:8b:3d:bf:fc:73:45:13:0a:3f: 9f:8e:0a:af:0a:66:32:a1:4e:42:c1:7c:43:9f:16: f0:96:4b:03:de:d8:44:2e:92:ed:b3:00:a2:ec:98: 1e:26:2b:4e:38:d4:22:ca:f3:46:d4:0a:ca:c1:13: 9a:2a:44:7b:ca:a3:42:4f:0d:8a:30:b4:42:4b:2f: d9:b8:f8:ff:e8:1e:1b:b4:15:14:fd:a2:a4:6c:9e: 32:90:d1:e4:f6:57:51:57:71:ef:5f:1c:e7:a5:75: 0a:c8:e4:89:fb:24:20:35:e2:1c:6c:8f:79:eb:5c: 31:8b:0e:27:bd:52:78:8b:93:2e:78:84:bb:cd:77: 79:76:b2:23:e1:0b:f4:3a:c5:21:00:03:65:7b:bd: cc:d9:c5:1e:14:6e:1e:0e:c3:7d:fd:88:5f:39:61: fb:23:c3:32:13:5c:0f:71:66:00:a2:4f:4a:61:4b: 72:f8:c7:a4:e6:97:65:3e:23:84:2b:1e:02:06:16: c6:4e:eb:64:3a:d6:1c:ec:ba:4b:85:a6:cc:c7:a8: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:C9:22:2F:3C:F6:5C:42:D3:17:EB:C6:B1:68:AF:DB:94:12:8A X509v3 Authority Key Identifier: keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:cc:c4:1b:a5:72:f1:86:2e:9d:0c:6d:36:e0:03:81:d3:af: 52:9f:a4:f2:ea:67:33:ee:e4:03:74:9f:1b:ae:6a:1a:f1:9c: 21:8a:af:0c:29:f1:25:ab:d9:48:a5:99:3c:df:0c:d6:07:1f: f0:3f:f8:6e:51:b3:c9:cd:7c:41:04:0e:72:fa:8b:66:e4:bb: 7c:c4:57:89:08:a9:4b:39:d7:07:d0:bb:62:36:3d:4c:e5:86: 1b:f2:c4:2f:e6:b4:a2:2b:6b:00:fb:f5:09:02:23:06:ff:d9: ed:ff:17:71:a4:7d:53:3e:2f:6d:95:a2:6a:56:f3:4b:5c:4f: ec:b8:95:3e:17:96:97:6d:ad:85:71:56:77:e7:1f:e4:7c:43: 6f:5a:ad:05:e9:8e:58:9f:60:65:61:79:e0:61:bf:55:17:19: a7:28:b9:9b:72:ed:c5:5d:fe:63:d9:5b:cc:49:bd:05:0d:b8: 1c:24:e8:58:fc:0a:49:8e:ce:89:51:ec:53:e6:df:18:a7:67: fe:3c:17:b1:2d:13:c6:81:ce:4c:0f:8c:8d:5d:08:7a:55:bb: 9d:bd:81:6b:30:e3:77:8e:06:44:db:cc:d9:d6:a6:4c:ea:d0: e2:9c:f5:66:13:79:46:2c:6b:77:b4:79:f8:29:98:e0:b6:de: 91:46:c0:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvPwL0cS3NejsaaXPYpBZmLCmvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE RDhFQjQ1NzAeFw0yNTA4MjIwMDE3MjFaFw0yNTA4MjUwMTIzMjFaMDMxMTAvBgNV BAMTKDJGODZDOTIyMkYzQ0Y2NUM0MkQzMTdFQkM2QjE2OEFGREI5NDEyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo66flRzG7W2yUY2wYKIrtt4c3 p2pm1zery0y1yy+WaRGEElm72T91nCrAUT5OvskcDIs9v/xzRRMKP5+OCq8KZjKh TkLBfEOfFvCWSwPe2EQuku2zAKLsmB4mK0441CLK80bUCsrBE5oqRHvKo0JPDYow tEJLL9m4+P/oHhu0FRT9oqRsnjKQ0eT2V1FXce9fHOeldQrI5In7JCA14hxsj3nr XDGLDie9UniLky54hLvNd3l2siPhC/Q6xSEAA2V7vczZxR4Ubh4Ow339iF85Yfsj wzITXA9xZgCiT0phS3L4x6Tml2U+I4QrHgIGFsZO62Q61hzsukuFpszHqKOTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4bJIi889lxC0xfrxrFor9uUEoowHwYDVR0j BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF QjQ1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0 QTJERDhFQjQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfMxBulcvGGLp0MbTbgA4HTr1KfpPLqZzPu 5AN0nxuuahrxnCGKrwwp8SWr2UilmTzfDNYHH/A/+G5Rs8nNfEEEDnL6i2bku3zE V4kIqUs51wfQu2I2PUzlhhvyxC/mtKIrawD79QkCIwb/2e3/F3GkfVM+L22VompW 80tcT+y4lT4XlpdtrYVxVnfnH+R8Q29arQXpjlifYGVheeBhv1UXGacouZty7cVd /mPZW8xJvQUNuBwk6Fj8CkmOzolR7FPm3xinZ/48F7EtE8aBzkwPjI1dCHpVu529 gWsw43eOBkTbzNnWpkzq0OKc9WYTeUYsa3e0efgpmOC23pFGwG0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:12 2025 by rpki-client