$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: c2X4Txyzv2kZX2AmRDMh2bHp/VwqvXEUpoeQpLbB/IM= Subject key identifier: 5A:DC:1B:E0:0F:E6:55:2B:87:FA:67:2D:50:D5:B7:15:35:62:72:E6 Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 48F478BF46C8DEC26A5BB73CA4F5B7403897E9E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 01EC Signing time: Thu 21 Aug 2025 05:42:01 +0000 Manifest this update: Thu 21 Aug 2025 05:37:01 +0000 Manifest next update: Sun 24 Aug 2025 08:39:01 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) 2: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) 3: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: KHK7AtFcRuzvnPJkH5eutYYtBmDXl2HxKpjlqLmdIc4=) 4: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f4:78:bf:46:c8:de:c2:6a:5b:b7:3c:a4:f5:b7:40:38:97:e9:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Aug 21 05:37:01 2025 GMT Not After : Aug 24 08:39:01 2025 GMT Subject: CN=5ADC1BE00FE6552B87FA672D50D5B715356272E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:36:18:63:d0:e5:ad:75:c0:21:1f:c0:49:ff: 2b:a4:06:69:77:5c:a7:f4:11:5a:f4:6c:2d:14:98: 9f:3f:54:45:4f:c1:3d:bf:5c:d4:1d:68:26:ab:07: b0:60:96:f1:c2:8d:1d:a8:d5:dc:18:a4:e9:ec:a1: 94:90:31:1a:ec:74:9d:6a:6a:7e:e4:1f:61:a4:d9: e4:e1:0e:7e:5e:13:93:e5:d8:2c:bd:4a:06:61:09: c5:6c:65:eb:41:f2:9e:c1:5e:de:2c:cd:e0:10:a0: 0c:9a:c5:3e:7b:0f:90:7d:e3:b4:f5:a2:07:c0:28: f5:f9:cd:a4:6e:10:ab:53:28:29:11:02:8d:d8:f4: f3:50:b9:d6:63:48:af:ac:8b:4d:7f:f4:64:d2:2e: 6f:fd:0c:5c:fe:eb:bd:2f:7a:62:dd:b7:13:6b:10: 66:0d:63:96:2e:a9:16:40:e4:70:76:0f:e1:9c:a5: 28:44:36:b8:ef:c0:fe:b3:78:cd:cf:0e:b2:b3:4b: d3:f6:95:15:63:39:d5:22:ea:8b:b2:c1:69:43:5d: e9:a8:2f:55:c0:c9:fb:b3:fb:c7:af:83:bb:9c:c6: 1a:b4:8b:0c:e9:98:0e:5e:83:c4:59:1a:ee:a5:39: 9e:94:8a:b4:74:17:66:ec:9f:2a:ad:b7:c5:e4:24: f7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DC:1B:E0:0F:E6:55:2B:87:FA:67:2D:50:D5:B7:15:35:62:72:E6 X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5a:93:54:6b:d0:4f:43:8a:bf:29:88:a1:a7:fe:c4:bb:4e: 4e:61:c7:61:dd:0e:98:3a:09:f4:42:1e:72:0b:08:22:87:e1: 62:8e:bf:8d:0e:9f:73:6b:11:ee:e4:76:13:83:04:3e:c5:14: fd:db:3c:c7:fe:14:5a:f4:93:88:41:54:02:e2:39:60:a9:ef: a8:a7:30:11:79:bb:92:2f:49:fc:ca:21:af:0c:9b:cd:69:e7: fc:2a:c6:e0:ae:4e:92:68:86:d3:58:70:77:4e:15:ae:08:21: 6d:55:72:c3:52:75:0f:7e:fb:11:1b:81:17:99:f6:49:48:66: 82:2c:db:48:ca:13:7a:f2:ec:f9:f7:ba:c1:f8:d4:c0:44:d4: 63:99:6d:aa:40:80:c4:2d:0c:c2:db:9e:0b:28:77:d1:ef:5d: a5:9c:01:a1:c7:e7:66:fc:35:68:90:79:14:5f:aa:c2:96:a1: bb:c8:7f:3d:09:42:7e:be:b4:c7:3f:96:ef:a6:a9:5d:9c:f3: fc:42:8b:8c:e3:b5:17:df:f1:c5:78:de:41:d5:7c:0a:b4:be: 73:83:e0:4c:09:3d:e7:33:5b:27:bc:6a:b1:a7:28:a3:e4:7a: 3d:76:ed:94:3a:b6:25:40:5d:ce:26:25:d0:57:7b:61:dd:fa: fb:ad:35:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPR4v0bI3sJqW7c8pPW3QDiX6eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTA4MjEwNTM3MDFaFw0yNTA4MjQwODM5MDFaMDMxMTAvBgNV BAMTKDVBREMxQkUwMEZFNjU1MkI4N0ZBNjcyRDUwRDVCNzE1MzU2MjcyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnNhhj0OWtdcAhH8BJ/yukBml3 XKf0EVr0bC0UmJ8/VEVPwT2/XNQdaCarB7BglvHCjR2o1dwYpOnsoZSQMRrsdJ1q an7kH2Gk2eThDn5eE5Pl2Cy9SgZhCcVsZetB8p7BXt4szeAQoAyaxT57D5B947T1 ogfAKPX5zaRuEKtTKCkRAo3Y9PNQudZjSK+si01/9GTSLm/9DFz+670vemLdtxNr EGYNY5YuqRZA5HB2D+GcpShENrjvwP6zeM3PDrKzS9P2lRVjOdUi6ouywWlDXemo L1XAyfuz+8evg7ucxhq0iwzpmA5eg8RZGu6lOZ6UirR0F2bsnyqtt8XkJPeLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWtwb4A/mVSuH+mctUNW3FTVicuYwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdak1Rr0E9Dir8piKGn/sS7Tk5hx2HdDpg6 CfRCHnILCCKH4WKOv40On3NrEe7kdhODBD7FFP3bPMf+FFr0k4hBVALiOWCp76in MBF5u5IvSfzKIa8Mm81p5/wqxuCuTpJohtNYcHdOFa4IIW1VcsNSdQ9++xEbgReZ 9klIZoIs20jKE3ry7Pn3usH41MBE1GOZbapAgMQtDMLbngsod9HvXaWcAaHH52b8 NWiQeRRfqsKWobvIfz0JQn6+tMc/lu+mqV2c8/xCi4zjtRff8cV43kHVfAq0vnOD 4EwJPeczWye8arGnKKPkej127ZQ6tiVAXc4mJdBXe2Hd+vutNag= -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:09 2025 by rpki-client