$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: Q8L/0FJQy5dcBUXcf3hD/jDMKGEzqBk5nRcck/Lx9QM= Subject key identifier: F4:58:B1:4D:70:A3:26:18:42:E6:C2:12:8B:D2:0D:9D:9C:BD:A0:8F Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 1E40FBB7F4D5153375C4DB2AE030BB5A4A0ED515 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 01B9 Signing time: Sat 23 Aug 2025 01:01:21 +0000 Manifest this update: Sat 23 Aug 2025 00:56:21 +0000 Manifest next update: Tue 26 Aug 2025 10:18:21 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: SF8sXkJ+P8kmVe9R584DatmK+/uti25TkIzkGR5uKgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:40:fb:b7:f4:d5:15:33:75:c4:db:2a:e0:30:bb:5a:4a:0e:d5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Aug 23 00:56:21 2025 GMT Not After : Aug 26 10:18:21 2025 GMT Subject: CN=F458B14D70A3261842E6C2128BD20D9D9CBDA08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:31:72:75:17:39:eb:cc:2e:27:b0:7f:00: 68:20:66:1f:c2:db:41:f3:07:d6:a8:5b:9f:20:a4: af:43:2d:d4:95:f1:97:0f:76:21:72:19:76:f8:30: 88:9e:b8:03:79:9e:8c:31:5c:11:65:4e:6d:b3:79: 80:80:da:21:93:0f:aa:09:03:29:92:a7:be:cd:bd: 1c:f0:1f:ce:33:48:b5:df:e9:76:2d:16:73:c4:41: 6f:86:13:8a:8d:ca:26:ea:4e:7c:85:c3:8a:3b:21: 72:88:a4:f8:db:8f:a7:f9:f4:41:ca:71:97:a1:c3: 8b:c9:c1:61:1b:40:3d:45:5a:d0:bf:37:59:29:17: e5:3d:3a:a0:58:e5:c3:ee:49:8d:fb:47:e1:31:26: 9f:71:5a:c5:91:56:fa:42:49:c7:b5:51:65:5d:86: 3b:be:9a:47:a2:7d:98:3e:5d:cb:41:92:2f:56:15: fb:26:2b:70:99:06:7d:32:db:7c:3e:f3:98:1d:00: 76:6f:cc:28:57:99:23:16:4c:0a:bd:70:cd:82:a7: ad:b6:88:77:f9:43:50:0a:f6:4b:bd:4f:6d:68:17: 78:c9:1c:5e:63:95:65:72:fe:e6:63:00:82:33:7b: 58:d1:a1:02:d8:91:e4:5c:d5:f9:da:22:5a:06:c3: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:58:B1:4D:70:A3:26:18:42:E6:C2:12:8B:D2:0D:9D:9C:BD:A0:8F X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c3:fb:a0:b4:93:1f:c0:e1:e2:c9:c7:bb:1b:85:55:b8:45: 57:22:63:91:bd:3c:f2:e2:0d:f4:79:d2:27:9f:15:c4:b6:e4: 4c:f7:35:2a:24:6b:66:b3:d4:d9:65:21:f0:6c:40:5b:89:da: 6f:87:05:2a:c2:0c:40:84:9c:f3:85:e6:1a:a4:92:51:ab:ae: 40:8d:eb:9a:ba:f6:1e:5c:ca:99:25:e5:3c:53:9a:d9:c0:71: ce:54:18:7a:52:f3:23:52:89:b3:d5:09:90:3c:dc:d6:8c:f1: f9:87:12:81:10:eb:e6:56:8a:55:51:4a:28:9a:47:23:32:79: 23:fa:9a:3c:55:79:e3:06:e2:51:e2:71:c9:b8:a7:a3:bb:73: e4:81:7f:99:19:1c:42:b1:dc:e5:51:de:b4:19:8a:17:0b:8c: fe:8c:8a:16:87:ff:8a:a9:a7:ea:0c:4b:5b:99:a1:64:be:dc: e6:ee:e3:ce:56:24:5d:59:10:b1:ef:48:9d:82:ee:2d:46:5c: 63:b1:e4:5c:ee:b3:a2:48:2f:ce:b3:7c:55:58:7c:1c:b8:39: 83:01:df:20:aa:c9:4a:15:25:08:63:f7:e9:d3:f3:3f:09:53: 2d:ae:ea:f7:29:60:03:fc:44:41:50:c7:f9:83:77:ac:99:8f: 24:45:13:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHkD7t/TVFTN1xNsq4DC7WkoO1RUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNTA4MjMwMDU2MjFaFw0yNTA4MjYxMDE4MjFaMDMxMTAvBgNV BAMTKEY0NThCMTRENzBBMzI2MTg0MkU2QzIxMjhCRDIwRDlEOUNCREEwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsTFydRc568wuJ7B/AGggZh/C 20HzB9aoW58gpK9DLdSV8ZcPdiFyGXb4MIieuAN5nowxXBFlTm2zeYCA2iGTD6oJ AymSp77NvRzwH84zSLXf6XYtFnPEQW+GE4qNyibqTnyFw4o7IXKIpPjbj6f59EHK cZehw4vJwWEbQD1FWtC/N1kpF+U9OqBY5cPuSY37R+ExJp9xWsWRVvpCSce1UWVd hju+mkeifZg+XctBki9WFfsmK3CZBn0y23w+85gdAHZvzChXmSMWTAq9cM2Cp622 iHf5Q1AK9ku9T21oF3jJHF5jlWVy/uZjAIIze1jRoQLYkeRc1fnaIloGw0YdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9FixTXCjJhhC5sISi9INnZy9oI8wHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETD+6C0kx/A4eLJx7sbhVW4RVciY5G9PPLi DfR50iefFcS25Ez3NSoka2az1NllIfBsQFuJ2m+HBSrCDECEnPOF5hqkklGrrkCN 65q69h5cypkl5TxTmtnAcc5UGHpS8yNSibPVCZA83NaM8fmHEoEQ6+ZWilVRSiia RyMyeSP6mjxVeeMG4lHiccm4p6O7c+SBf5kZHEKx3OVR3rQZihcLjP6MihaH/4qp p+oMS1uZoWS+3Obu485WJF1ZELHvSJ2C7i1GXGOx5Fzus6JIL86zfFVYfBy4OYMB 3yCqyUoVJQhj9+nT8z8JUy2u6vcpYAP8REFQx/mDd6yZjyRFEy4= -----END CERTIFICATE-----Generated at Sat Aug 23 11:57:30 2025 by rpki-client