$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: 3pQAOHrr4BhWFjtlYJQ2e3JdFyaVEdxTrhy9DZi6mcQ= Subject key identifier: E5:15:FE:18:00:5B:D4:37:92:D9:A5:CA:73:A9:D9:30:51:7A:C2:55 Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 27EB1FDF58CC3D40E3D995F3564D0E5CEA72E094 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 050E Signing time: Sat 23 Aug 2025 08:22:12 +0000 Manifest this update: Sat 23 Aug 2025 08:17:12 +0000 Manifest next update: Tue 26 Aug 2025 13:23:12 +0000 Files and hashes: 1: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: OJyBbiUW9ZRFZoJEtuiLRqobIe9TbGUmHd6h8Z4YolY=) 2: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: vI68Gh5Oh59Rb2lPrZHZHoQWOjb0zjzOJoq8Na+SUkQ=) 3: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) 4: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: bFn5Y7JpqG3baSv58HSYajbj+++aONkagR6UZgJDf70=) 5: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: SDpHmQWrvR6QYeGR7FQ79oyRI2YwxolyxjXNhlqbQOw=) 6: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: E6XmK1t6H2i7DnMzin3eXEnNRLj+glllDjzpw3yQ+tE=) 7: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: f+KL9sRBKYThjcUf6Fn4ETIt2vwAYX6+xVDk6HrJGjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:eb:1f:df:58:cc:3d:40:e3:d9:95:f3:56:4d:0e:5c:ea:72:e0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Aug 23 08:17:12 2025 GMT Not After : Aug 26 13:23:12 2025 GMT Subject: CN=E515FE18005BD43792D9A5CA73A9D930517AC255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:13:a8:22:da:6f:ec:55:00:e3:75:f0:de: 26:ca:7b:ed:c4:fb:39:02:0b:4c:0b:ae:39:07:5c: fe:bf:60:98:94:99:75:c4:8a:d5:67:2d:7d:59:c2: b2:a5:11:ce:64:f9:d8:b4:7d:84:86:93:02:9e:fa: 89:af:33:bc:2d:cc:32:2b:68:62:f4:af:d1:d4:e1: a5:49:b2:fc:c9:a6:1b:72:d6:0e:22:93:00:f9:34: 9f:0c:4c:89:5e:1c:50:be:e3:47:43:53:8a:a4:f9: 7e:e1:be:15:0f:e7:cb:eb:c3:67:9f:bd:e9:7d:83: 45:8c:3d:00:56:40:8e:1c:c7:a7:f0:83:b5:98:80: 06:8a:dd:e9:4a:dc:cc:2c:8c:3b:8f:75:81:92:5e: c1:ba:c6:9f:2d:3d:b0:c9:80:3f:90:75:f9:67:e4: 39:a5:22:2f:bd:bd:7e:01:da:bd:f1:c4:68:6e:6f: 6e:9e:58:65:a4:86:51:3d:68:23:8f:3f:64:3b:20: cd:08:89:ce:e1:45:a3:99:92:21:fd:bc:78:74:88: 4a:47:dd:40:51:6e:01:24:40:22:9d:6a:42:09:75: d5:62:af:93:68:f3:5c:05:8b:54:4d:88:2c:96:16: 74:b3:66:98:53:2c:8b:b2:7e:2f:4f:0d:c1:2f:d3: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:15:FE:18:00:5B:D4:37:92:D9:A5:CA:73:A9:D9:30:51:7A:C2:55 X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:fe:ff:8e:6c:73:cb:00:ba:89:f5:2f:fc:18:21:8d:1b:a0: e1:94:f7:7c:06:d3:9e:2e:6e:e1:5b:24:6a:87:51:34:8d:2b: 33:07:da:da:4d:16:ca:8b:6c:3f:61:b0:ef:31:e9:a3:24:29: 1a:e9:25:fd:4b:dd:b6:52:28:ba:c9:e6:68:26:c2:06:e5:f6: 20:83:b1:be:f2:a1:5f:f7:00:25:52:de:e9:ad:a0:06:6e:62: 23:ba:35:75:98:fe:f6:1b:37:df:2d:41:75:1d:33:01:f4:97: 96:a2:39:ef:b3:de:10:19:06:be:74:62:74:f3:5a:33:42:51: 5d:8a:26:44:fb:e1:ca:b5:69:4c:c7:9c:07:18:f0:4b:5b:45: 1a:d0:5d:63:4f:63:67:30:c1:fe:eb:57:13:2d:93:2f:7c:7e: 62:bc:11:ed:8b:9e:6d:54:87:34:18:13:f1:91:46:74:52:f6: 42:de:99:ad:4c:b8:b1:17:ea:a3:85:ea:98:51:c9:02:ed:84: 86:c1:0d:42:94:c5:7d:1b:a1:de:0c:93:a9:31:96:13:83:d0: 33:a8:13:f2:bd:3a:fe:c4:5e:ec:a4:5f:f8:76:ae:e5:6f:67: 54:0c:1f:fe:59:6a:0d:49:c9:ac:30:c4:f0:26:4b:af:68:57: 53:43:23:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+sf31jMPUDj2ZXzVk0OXOpy4JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNTA4MjMwODE3MTJaFw0yNTA4MjYxMzIzMTJaMDMxMTAvBgNV BAMTKEU1MTVGRTE4MDA1QkQ0Mzc5MkQ5QTVDQTczQTlEOTMwNTE3QUMyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkROoItpv7FUA43Xw3ibKe+3E +zkCC0wLrjkHXP6/YJiUmXXEitVnLX1ZwrKlEc5k+di0fYSGkwKe+omvM7wtzDIr aGL0r9HU4aVJsvzJphty1g4ikwD5NJ8MTIleHFC+40dDU4qk+X7hvhUP58vrw2ef vel9g0WMPQBWQI4cx6fwg7WYgAaK3elK3MwsjDuPdYGSXsG6xp8tPbDJgD+Qdfln 5DmlIi+9vX4B2r3xxGhub26eWGWkhlE9aCOPP2Q7IM0Iic7hRaOZkiH9vHh0iEpH 3UBRbgEkQCKdakIJddVir5No81wFi1RNiCyWFnSzZphTLIuyfi9PDcEv09X/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5RX+GABb1DeS2aXKc6nZMFF6wlUwHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHj+/45sc8sAuon1L/wYIY0boOGU93wG054u buFbJGqHUTSNKzMH2tpNFsqLbD9hsO8x6aMkKRrpJf1L3bZSKLrJ5mgmwgbl9iCD sb7yoV/3ACVS3umtoAZuYiO6NXWY/vYbN98tQXUdMwH0l5aiOe+z3hAZBr50YnTz WjNCUV2KJkT74cq1aUzHnAcY8EtbRRrQXWNPY2cwwf7rVxMtky98fmK8Ee2Lnm1U hzQYE/GRRnRS9kLema1MuLEX6qOF6phRyQLthIbBDUKUxX0bod4Mk6kxlhOD0DOo E/K9Ov7EXuykX/h2ruVvZ1QMH/5Zag1JyawwxPAmS69oV1NDI1M= -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:42 2025 by rpki-client