$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: hE1gQxx98IcWO9uH2eDT1MRJOwgQ6jJvhxhJsWzGeKg= Subject key identifier: 79:89:46:75:9C:F3:AA:4D:C4:16:07:7F:AF:7A:0E:86:45:BF:C5:E1 Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 457D4827193B7698AEEFD05A46F114F48F8A9B17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: FC Signing time: Fri 22 Aug 2025 18:01:59 +0000 Manifest this update: Fri 22 Aug 2025 17:56:59 +0000 Manifest next update: Mon 25 Aug 2025 22:31:59 +0000 Files and hashes: 1: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: G0a1IDIDp/6OW+B4SPVbcSdJGPsXh5ci397pwO85gSY=) 2: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: vB179aTeR/T2u9MXnec3EZkky1Zkp7lW1u30WE4+7T8=) 3: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: mMVF2hYAKg0sTXxaBuy+2bvelwvkw1QteJi5RAQF2oo=) 4: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: 2sgMNPvdPKPmSXukXACjrwvtdQ3QHDjRcB3RK3DeklA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7d:48:27:19:3b:76:98:ae:ef:d0:5a:46:f1:14:f4:8f:8a:9b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Aug 22 17:56:59 2025 GMT Not After : Aug 25 22:31:59 2025 GMT Subject: CN=798946759CF3AA4DC416077FAF7A0E8645BFC5E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:fd:b2:2e:27:17:11:56:e2:8d:1e:e6:a9: 47:c0:06:bf:d7:09:38:50:26:c6:cd:d4:de:96:d1: d4:18:b6:f4:fc:9f:a3:80:db:7c:34:96:f3:b2:d4: 32:e6:58:02:01:c8:c4:e5:19:ab:2b:d6:bd:22:97: ca:b9:cc:99:cb:9d:1e:63:09:5f:3b:29:b4:d5:4f: 83:ae:09:e2:52:53:1d:8d:35:4b:6c:bd:cb:08:f8: 94:66:69:23:55:23:84:dc:3c:c0:4b:d2:d1:98:c7: 8f:ff:76:5d:e2:50:f9:86:38:41:41:b5:ce:d5:ad: 6f:f9:a8:9d:36:88:61:a1:43:f8:f1:25:92:33:43: 2c:1b:20:6f:e8:02:71:85:fd:70:56:fb:f7:46:6f: 0e:2f:65:d3:d4:82:89:83:2e:2b:bf:75:d9:5a:26: 2e:fa:82:94:eb:76:77:99:cc:fc:1d:12:d7:81:4d: de:43:fe:88:ed:a1:0e:3e:0c:54:7d:cb:08:63:e6: c8:46:75:b6:75:39:08:af:18:ac:42:63:c1:8c:1a: 6f:c8:91:22:40:5f:d0:f5:df:ad:79:5e:76:c0:4d: 12:ef:9e:af:53:1c:45:0e:b6:8a:84:dd:9e:59:17: dc:2b:b8:80:72:9d:27:e7:68:cf:cd:a9:a0:d7:90: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:89:46:75:9C:F3:AA:4D:C4:16:07:7F:AF:7A:0E:86:45:BF:C5:E1 X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9a:23:1a:83:d1:1f:b2:81:f5:04:8b:14:fa:76:89:46:ce: 6f:49:18:a5:a9:4d:27:aa:d0:cc:a6:0a:c2:90:2c:22:f1:8e: db:bc:28:82:28:81:9a:2a:0e:45:e4:db:07:b0:ba:2f:15:a5: f1:e7:82:43:e0:1f:cb:00:6d:cf:d4:b4:af:b8:10:b2:83:4c: 1a:91:56:fb:48:1b:05:39:70:89:d4:fd:5c:75:be:08:8d:d7: a5:4d:b6:05:31:3d:ef:20:2b:3f:0d:9b:a5:25:fd:75:d7:14: 85:d2:65:3d:dc:bb:e4:80:6e:f9:d6:8c:c5:1b:d0:65:9f:ce: 4b:f4:03:84:ff:7c:7b:f3:7e:03:14:eb:66:2f:50:75:fa:96: e0:d0:bb:ec:5c:05:df:22:05:ca:68:de:35:8d:0b:88:92:48: 9a:c9:bf:44:96:c1:1f:ff:6a:0a:e2:b2:a6:65:73:c6:fc:b8: e0:0e:ff:72:d6:66:2c:88:3a:ee:64:44:ae:1f:c4:5f:75:d3: b2:2a:cb:27:a1:7a:8d:7f:2e:0b:66:36:31:1b:23:1a:fb:74: 9b:73:95:9d:80:2d:cc:08:c3:4f:79:f4:c7:ec:56:93:6b:36: 80:78:60:a0:c0:75:06:da:d0:fe:ca:8c:39:98:c3:22:f2:96: 76:21:e5:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURX1IJxk7dpiu79BaRvEU9I+KmxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTA4MjIxNzU2NTlaFw0yNTA4MjUyMjMxNTlaMDMxMTAvBgNV BAMTKDc5ODk0Njc1OUNGM0FBNERDNDE2MDc3RkFGN0EwRTg2NDVCRkM1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Y/2yLicXEVbijR7mqUfABr/X CThQJsbN1N6W0dQYtvT8n6OA23w0lvOy1DLmWAIByMTlGasr1r0il8q5zJnLnR5j CV87KbTVT4OuCeJSUx2NNUtsvcsI+JRmaSNVI4TcPMBL0tGYx4//dl3iUPmGOEFB tc7VrW/5qJ02iGGhQ/jxJZIzQywbIG/oAnGF/XBW+/dGbw4vZdPUgomDLiu/ddla Ji76gpTrdneZzPwdEteBTd5D/ojtoQ4+DFR9ywhj5shGdbZ1OQivGKxCY8GMGm/I kSJAX9D13615XnbATRLvnq9THEUOtoqE3Z5ZF9wruIBynSfnaM/NqaDXkCcdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeYlGdZzzqk3EFgd/r3oOhkW/xeEwHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqaIxqD0R+ygfUEixT6dolGzm9JGKWpTSeq 0MymCsKQLCLxjtu8KIIogZoqDkXk2wewui8VpfHngkPgH8sAbc/UtK+4ELKDTBqR VvtIGwU5cInU/Vx1vgiN16VNtgUxPe8gKz8Nm6Ul/XXXFIXSZT3cu+SAbvnWjMUb 0GWfzkv0A4T/fHvzfgMU62YvUHX6luDQu+xcBd8iBcpo3jWNC4iSSJrJv0SWwR// agrisqZlc8b8uOAO/3LWZiyIOu5kRK4fxF9107Iqyyeheo1/LgtmNjEbIxr7dJtz lZ2ALcwIw0959MfsVpNrNoB4YKDAdQba0P7KjDmYwyLylnYh5b0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:43:32 2025 by rpki-client