$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: DTP/kSqItJZb+5pW6xHNoOW6enx5o9885eqMTETxvps= Subject key identifier: 16:07:44:60:62:D3:1E:78:B9:13:4D:AA:A2:DA:40:78:76:AF:AB:96 Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 294616A7FDA5D2B357DBE6C5162A9474D6E2F31E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 0270 Signing time: Fri 22 Aug 2025 05:31:53 +0000 Manifest this update: Fri 22 Aug 2025 05:26:53 +0000 Manifest next update: Mon 25 Aug 2025 13:41:53 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: biBc3b6GGx2dUj7YnQWOhcGsodIKTbyhZn9FTYFEG1E=) 2: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: 6dBEnNh1EvIfG1KXX6BqG3o0AFC/UxipRy5LrIR3jfM=) 3: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:46:16:a7:fd:a5:d2:b3:57:db:e6:c5:16:2a:94:74:d6:e2:f3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Aug 22 05:26:53 2025 GMT Not After : Aug 25 13:41:53 2025 GMT Subject: CN=1607446062D31E78B9134DAAA2DA407876AFAB96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ff:4e:36:e5:94:c0:8c:70:d9:b6:ba:90:9c: 4d:ec:72:47:56:d9:d1:b3:82:3c:ad:51:a9:88:a3: 5c:ed:1e:ba:ef:fc:55:39:82:dd:4c:fd:d7:39:2b: a5:ac:31:5c:67:cd:7d:91:ad:44:2e:46:fa:85:c3: 31:56:37:17:2f:43:14:5a:1d:e7:e1:8f:05:32:7c: 3a:65:5a:db:23:7d:5a:d8:a3:83:29:7f:44:9d:47: 79:02:b1:3f:95:13:68:42:46:8d:84:49:ee:72:50: ff:36:a2:39:22:af:3b:9a:65:c9:31:40:5a:53:ec: 26:f4:cd:05:a1:de:fe:e2:08:b3:98:bd:5f:16:5d: 02:17:67:64:65:a8:14:8c:04:a5:4b:a1:1d:ca:af: b2:5a:61:b8:15:d1:b9:64:ea:4b:d1:95:02:f2:32: c6:72:35:aa:57:47:b3:c1:0b:cd:4b:12:69:ac:da: ba:84:1d:bf:5a:a7:f3:4d:88:83:c4:7f:ec:c4:42: d0:54:52:b3:68:77:f6:62:6d:01:f2:9a:c0:8b:63: 9d:5e:05:5b:5f:a7:f1:0f:2f:5e:f0:d4:76:d4:2f: 3b:6b:6a:29:e1:27:c4:5d:4b:d4:33:46:cd:88:21: 94:5e:8a:e0:6a:a0:e9:86:b6:b3:c9:91:fb:31:d6: 2d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:07:44:60:62:D3:1E:78:B9:13:4D:AA:A2:DA:40:78:76:AF:AB:96 X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:33:d1:03:1b:fd:91:46:38:cc:0e:95:6a:8e:98:1d:ab:55: 1a:1f:fa:57:27:6d:4f:fa:86:d4:ff:e1:0a:af:c1:73:a7:94: 40:f5:17:7b:99:b3:bf:a4:e0:cb:80:4f:cf:c1:9e:c5:3b:72: ed:28:15:8c:b6:af:04:a5:7a:e6:31:0f:be:12:67:3e:16:46: 38:31:a2:d4:4d:06:fd:3a:d2:31:fa:80:13:f1:6a:f2:3f:cb: 6c:2e:48:2e:e7:72:98:02:5f:07:b6:f5:53:95:3a:d5:21:ed: 7a:a4:5f:94:c2:be:ac:5a:ff:1c:ca:76:10:f6:4e:80:95:b3: e6:49:1a:97:82:1a:bf:a5:01:62:91:0e:36:00:ee:2f:78:61: da:b2:5d:98:e8:c0:38:e1:55:ca:16:ee:b1:e3:5c:8f:fb:a6: 74:05:e7:76:11:7f:e2:c4:ec:24:50:8d:c6:ec:4d:11:cb:46: 84:85:8b:b8:e4:fd:1d:4a:2a:43:0b:fc:bc:bf:95:f0:78:bc: ea:c5:6a:cd:83:dd:01:37:fd:24:00:4d:f0:b3:fc:e4:8e:3f: be:54:72:62:54:22:ad:8f:47:85:77:28:00:0e:91:ea:dd:9a: 0b:cd:36:8b:72:aa:ac:7b:03:7a:21:03:66:31:32:9a:6a:ae: 9a:c8:45:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUYWp/2l0rNX2+bFFiqUdNbi8x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTA4MjIwNTI2NTNaFw0yNTA4MjUxMzQxNTNaMDMxMTAvBgNV BAMTKDE2MDc0NDYwNjJEMzFFNzhCOTEzNERBQUEyREE0MDc4NzZBRkFCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn/0425ZTAjHDZtrqQnE3sckdW 2dGzgjytUamIo1ztHrrv/FU5gt1M/dc5K6WsMVxnzX2RrUQuRvqFwzFWNxcvQxRa HefhjwUyfDplWtsjfVrYo4Mpf0SdR3kCsT+VE2hCRo2ESe5yUP82ojkirzuaZckx QFpT7Cb0zQWh3v7iCLOYvV8WXQIXZ2RlqBSMBKVLoR3Kr7JaYbgV0blk6kvRlQLy MsZyNapXR7PBC81LEmms2rqEHb9ap/NNiIPEf+zEQtBUUrNod/ZibQHymsCLY51e BVtfp/EPL17w1HbULztrainhJ8RdS9QzRs2IIZReiuBqoOmGtrPJkfsx1i3zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFgdEYGLTHni5E02qotpAeHavq5YwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoz0QMb/ZFGOMwOlWqOmB2rVRof+lcnbU/6 htT/4QqvwXOnlED1F3uZs7+k4MuAT8/BnsU7cu0oFYy2rwSleuYxD74SZz4WRjgx otRNBv060jH6gBPxavI/y2wuSC7ncpgCXwe29VOVOtUh7XqkX5TCvqxa/xzKdhD2 ToCVs+ZJGpeCGr+lAWKRDjYA7i94YdqyXZjowDjhVcoW7rHjXI/7pnQF53YRf+LE 7CRQjcbsTRHLRoSFi7jk/R1KKkML/Ly/lfB4vOrFas2D3QE3/SQATfCz/OSOP75U cmJUIq2PR4V3KAAOkerdmgvNNotyqqx7A3ohA2YxMppqrprIRXs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:57 2025 by rpki-client