$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft File: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json) Hash identifier: j8qJSH1a8o64/l6p1VCuXUu+bIK7eWkjhHfcNOHTass= Subject key identifier: CF:52:EF:84:EE:4E:64:B9:17:A7:3A:D1:AB:8F:0E:D6:CE:CF:82:8F Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 7E8F0029604715D1901CE515CAF4B5B25015E664 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft Manifest number: 01F0 Signing time: Thu 21 Aug 2025 22:20:02 +0000 Manifest this update: Thu 21 Aug 2025 22:15:02 +0000 Manifest next update: Mon 25 Aug 2025 02:37:02 +0000 Files and hashes: 1: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: fKyStuZP+cGYGL12Gl7DPoMVPGekA2LHOpNgfBK7K54=) 2: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: u4NoFqVyyFqHI8VrRJJU5o8UKOJMJykYNFUtpxCJD/Y=) 3: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: FDIbHAQsFwQ0kPpqVdeFsn2B5smTQ4wxlAMSPeHocgo=) 4: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: hK06HKoqFlnupfPGbH4fj+kvbHmFb9y+Qhw58DcH1q0=) 5: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: VpjDP2oZ/B1yei8Hfwo7pH5vGmOKYQBwxJOGVD0RFQE=) 6: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: D6xVrarR741Tat/B/aD4Gr/765oFGk3PkG8sC2eJZzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8f:00:29:60:47:15:d1:90:1c:e5:15:ca:f4:b5:b2:50:15:e6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Aug 21 22:15:02 2025 GMT Not After : Aug 25 02:37:02 2025 GMT Subject: CN=CF52EF84EE4E64B917A73AD1AB8F0ED6CECF828F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:23:ee:5c:37:73:c9:44:38:e9:39:35:fe: d0:45:07:3a:10:88:aa:c0:b1:fe:8d:63:d0:3f:d6: 28:89:64:61:27:07:c0:3e:15:7c:f9:1f:1f:60:f8: ad:85:12:28:34:8f:df:1e:64:fc:85:57:9e:f0:20: 90:7d:8d:b9:96:da:40:90:d5:76:d7:b5:b5:8d:5f: 19:b4:2f:3c:8b:a4:b6:3a:6a:b9:06:00:a6:fa:bb: 04:16:e7:55:3b:61:c7:b6:1e:a7:58:5f:bb:48:89: 0b:8f:8a:8a:05:7d:7b:eb:f0:ec:ed:9b:6c:e5:28: fc:a1:1c:6b:00:74:0d:7f:6d:fb:ef:98:09:44:a6: e5:9a:12:e3:21:52:b4:13:b5:65:8a:e9:77:b7:00: 73:df:4a:1d:75:db:25:77:6f:ec:44:a2:f5:85:5c: fc:3f:e4:6e:51:c9:c8:2a:84:ec:23:20:8a:b1:dc: 19:72:38:a8:2a:ea:a1:b7:fc:12:a6:61:c5:6d:9b: ec:c8:0a:2a:8f:c3:d7:a8:71:75:ec:5b:96:5a:73: 91:0e:2a:79:59:49:84:1a:28:7e:9f:6c:00:63:23: 39:a4:fb:3a:a7:b6:92:f1:c1:a3:2f:d0:73:47:66: 3d:7c:76:d5:f1:88:67:bb:98:b1:e3:f0:2c:4c:0c: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:52:EF:84:EE:4E:64:B9:17:A7:3A:D1:AB:8F:0E:D6:CE:CF:82:8F X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:05:a8:5b:13:47:b4:23:4b:42:44:36:22:a6:cb:6e:c9:84: 44:43:09:a4:40:13:c4:f2:37:71:21:54:0e:82:9a:bd:d0:6c: 22:03:78:c5:e8:29:38:8a:0b:bf:eb:83:5f:98:8b:e3:4c:9e: af:f8:0e:c4:aa:45:7b:f9:48:00:5f:19:e5:8b:8c:34:a5:7e: e1:dd:fd:68:5c:dd:9c:bf:53:a8:9e:d2:30:e3:c0:bb:40:75: 46:3f:d7:ed:f8:b7:a8:42:87:50:bb:4d:51:13:41:25:40:21: bb:59:4e:33:cb:92:53:f8:4b:6a:ac:d0:b3:5a:d0:50:37:7d: 58:3f:e7:80:38:87:3a:d8:21:bb:d0:52:f5:6c:17:00:a1:07: bf:13:53:ef:c1:c4:b4:53:b8:ba:c7:02:36:c9:59:ce:ad:7c: 14:72:f9:0d:1c:58:de:82:f9:d6:fc:05:a1:66:fc:c6:d9:8e: 63:1a:07:d6:f6:ea:c9:3e:47:e5:19:3e:5c:e0:b4:22:b9:af: 8e:ad:c6:ee:3b:30:7d:f9:aa:99:a8:91:bc:df:85:50:3d:cc: 90:a1:99:f2:6a:55:8d:1f:44:d4:14:d1:9d:bf:f0:dd:9b:ea: bb:ce:c5:58:87:d2:dd:b6:ea:3a:98:8e:37:13:21:ee:60:f1: ca:ab:3e:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfo8AKWBHFdGQHOUVyvS1slAV5mQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNTA4MjEyMjE1MDJaFw0yNTA4MjUwMjM3MDJaMDMxMTAvBgNV BAMTKENGNTJFRjg0RUU0RTY0QjkxN0E3M0FEMUFCOEYwRUQ2Q0VDRjgyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCByPuXDdzyUQ46Tk1/tBFBzoQ iKrAsf6NY9A/1iiJZGEnB8A+FXz5Hx9g+K2FEig0j98eZPyFV57wIJB9jbmW2kCQ 1XbXtbWNXxm0LzyLpLY6arkGAKb6uwQW51U7Yce2HqdYX7tIiQuPiooFfXvr8Ozt m2zlKPyhHGsAdA1/bfvvmAlEpuWaEuMhUrQTtWWK6Xe3AHPfSh112yV3b+xEovWF XPw/5G5RycgqhOwjIIqx3BlyOKgq6qG3/BKmYcVtm+zICiqPw9eocXXsW5Zac5EO KnlZSYQaKH6fbABjIzmk+zqntpLxwaMv0HNHZj18dtXxiGe7mLHj8CxMDAHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz1LvhO5OZLkXpzrRq48O1s7Pgo8wHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkND NjcyN0Q2RTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQFqFsTR7QjS0JENiKmy27JhERDCaRAE8Ty N3EhVA6Cmr3QbCIDeMXoKTiKC7/rg1+Yi+NMnq/4DsSqRXv5SABfGeWLjDSlfuHd /Whc3Zy/U6ie0jDjwLtAdUY/1+34t6hCh1C7TVETQSVAIbtZTjPLklP4S2qs0LNa 0FA3fVg/54A4hzrYIbvQUvVsFwChB78TU+/BxLRTuLrHAjbJWc6tfBRy+Q0cWN6C +db8BaFm/MbZjmMaB9b26sk+R+UZPlzgtCK5r46txu47MH35qpmokbzfhVA9zJCh mfJqVY0fRNQU0Z2/8N2b6rvOxViH0t226jqYjjcTIe5g8cqrPhc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:51:50 2025 by rpki-client