$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft File: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft (raw, json) Hash identifier: r4qfOeu6iPEKf7M+nIVZW5f8elcumD2u8uAX2+g46Hg= Subject key identifier: B0:61:B0:0C:8A:FE:95:37:4C:1D:66:0D:06:3C:56:AB:7B:B3:ED:86 Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Certificate serial: 7744FA17BAE9EFC90EFD907DCA982D869974EDFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft Manifest number: 034A Signing time: Thu 21 Aug 2025 18:51:57 +0000 Manifest this update: Thu 21 Aug 2025 18:46:57 +0000 Manifest next update: Mon 25 Aug 2025 00:00:57 +0000 Files and hashes: 1: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl (hash: aE7Snjo3UQQ0YnM2ZlQab50f/XTFqe1c8F6tWs6Gsno=) 2: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: YYGVRYPBp9IPNMR5VwzW826x/acetE+4Oj6LGMt7tPU=) 3: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: DCgYEPaVukPuYmvO5a2cczC4OgprkfQ5HG76ulQS39Q=) 4: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: aihSJuIZjlYbfPjvBLdvafMIwZ5NASIBmOuqn4SEmM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:44:fa:17:ba:e9:ef:c9:0e:fd:90:7d:ca:98:2d:86:99:74:ed:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Validity Not Before: Aug 21 18:46:57 2025 GMT Not After : Aug 25 00:00:57 2025 GMT Subject: CN=B061B00C8AFE95374C1D660D063C56AB7BB3ED86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:70:33:95:4f:6e:a2:c1:ee:5e:c2:1b:8f:f8: a3:6e:c8:ca:ca:b8:52:5d:fc:ca:86:00:6a:13:d7: b4:0c:08:82:e8:b0:33:9e:37:26:3d:22:9b:26:f9: 61:14:5e:6d:59:15:3d:ef:15:20:37:30:17:ba:67: b8:eb:32:24:b2:0e:f5:4f:4a:31:79:90:d5:17:d6: d1:28:bb:6b:8b:16:12:5c:ff:8f:ff:df:a9:76:c9: 8a:f3:08:1f:a1:d3:b9:3a:a5:65:5d:0f:76:f9:7f: 5d:a5:73:8f:4d:86:20:e3:b2:d6:fa:36:95:8b:83: ce:0d:ee:c4:d2:52:f3:4a:49:cd:06:cc:94:9c:b9: a2:d9:98:5b:37:cd:1a:f0:15:1f:6c:ee:84:29:dc: 1b:84:1b:05:84:33:53:d4:43:f5:4c:c6:54:8a:a0: 9b:73:59:28:ec:8d:72:73:82:6e:b7:9e:ef:83:9d: 06:fe:5f:18:ce:32:0c:9a:da:80:25:a0:5d:e9:77: 5f:31:86:64:37:a0:f7:db:6b:44:d0:40:92:23:e8: 26:b0:9b:07:3e:20:28:77:6b:97:15:eb:a5:c3:e1: b5:48:c8:fd:12:92:e1:9a:33:08:89:94:d1:9a:96: cc:83:d2:7b:2f:8c:f9:60:02:a9:66:78:e2:b3:b3: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:61:B0:0C:8A:FE:95:37:4C:1D:66:0D:06:3C:56:AB:7B:B3:ED:86 X509v3 Authority Key Identifier: keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:20:70:c4:b6:56:94:bf:ae:9c:1c:a6:75:51:a6:75:4e:1b: de:5e:ca:28:49:88:5a:65:72:29:6c:50:79:ae:3a:f6:93:7c: ba:48:21:0a:09:2a:92:c8:ca:2e:0d:94:96:e3:b9:d8:fe:64: 65:39:44:79:a9:50:a6:a5:e8:f6:28:be:82:07:e1:95:29:ab: 7c:e0:a8:b0:8b:cc:8c:af:82:ba:39:d2:1d:8c:d4:17:c1:d5: 42:9b:74:5d:ae:7f:db:ac:60:26:4a:24:9e:08:b4:c4:c9:4f: 26:a0:d8:e3:2a:ec:81:61:b2:5e:d0:b9:7f:e6:4a:09:51:f6: 61:67:f9:2e:80:41:9f:33:a2:9b:c6:df:54:3e:e5:66:9f:e1: 6b:05:6c:8f:ce:cd:2d:1c:8f:f1:47:69:dd:c0:13:99:f5:bf: cc:5a:b0:23:93:42:49:1f:c7:56:0b:32:c8:73:93:82:dc:18: 70:b5:ad:42:bc:bf:90:01:39:63:a1:18:b5:30:ec:17:8a:7a: 02:d1:59:a7:be:09:cd:fc:06:db:30:d3:c3:76:eb:ec:ea:ff: 89:93:83:b7:91:fe:e9:1e:06:ef:c4:58:97:2b:4b:29:d0:fd: 0e:cb:3e:d4:e4:23:ce:c6:5b:22:67:1c:9a:c1:9f:94:77:96: cf:e9:b3:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0T6F7rp78kO/ZB9ypgthpl07fwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG NjUxQkFBQTAeFw0yNTA4MjExODQ2NTdaFw0yNTA4MjUwMDAwNTdaMDMxMTAvBgNV BAMTKEIwNjFCMDBDOEFGRTk1Mzc0QzFENjYwRDA2M0M1NkFCN0JCM0VEODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmcDOVT26iwe5ewhuP+KNuyMrK uFJd/MqGAGoT17QMCILosDOeNyY9Ipsm+WEUXm1ZFT3vFSA3MBe6Z7jrMiSyDvVP SjF5kNUX1tEou2uLFhJc/4//36l2yYrzCB+h07k6pWVdD3b5f12lc49NhiDjstb6 NpWLg84N7sTSUvNKSc0GzJScuaLZmFs3zRrwFR9s7oQp3BuEGwWEM1PUQ/VMxlSK oJtzWSjsjXJzgm63nu+DnQb+XxjOMgya2oAloF3pd18xhmQ3oPfba0TQQJIj6Caw mwc+ICh3a5cV66XD4bVIyP0SkuGaMwiJlNGalsyD0nsvjPlgAqlmeOKzs02fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsGGwDIr+lTdMHWYNBjxWq3uz7YYwHwYDVR0j BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx QkFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM1MDVjYjMtYjU1ZS00MGU0LWFj NzktNjM2NTYwNmY0ZWY5LzAvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMz RkVGNjUxQkFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEgcMS2VpS/rpwcpnVRpnVOG95eyihJiFpl cilsUHmuOvaTfLpIIQoJKpLIyi4NlJbjudj+ZGU5RHmpUKal6PYovoIH4ZUpq3zg qLCLzIyvgro50h2M1BfB1UKbdF2uf9usYCZKJJ4ItMTJTyag2OMq7IFhsl7QuX/m SglR9mFn+S6AQZ8zopvG31Q+5Waf4WsFbI/OzS0cj/FHad3AE5n1v8xasCOTQkkf x1YLMshzk4LcGHC1rUK8v5ABOWOhGLUw7BeKegLRWae+Cc38Btsw08N26+zq/4mT g7eR/ukeBu/EWJcrSynQ/Q7LPtTkI87GWyJnHJrBn5R3ls/ps4g= -----END CERTIFICATE-----Generated at Sat Aug 23 18:30:54 2025 by rpki-client