$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: ywZuWp1XCyzyIci7q5HLN2iUdRhiTDUA2sETsFVFIPQ= Subject key identifier: DC:54:74:A6:18:01:70:EB:99:12:DA:13:E3:03:6A:5B:34:94:7E:E3 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 1B61798C979B3A060DB702886457DC9C96BA2C1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 03AB Signing time: Fri 22 Aug 2025 05:52:10 +0000 Manifest this update: Fri 22 Aug 2025 05:47:10 +0000 Manifest next update: Mon 25 Aug 2025 13:23:10 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: UqL3N+t/NXseWnV+5YN8BqVK7VnvZV14qssJIdWSgcQ=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:61:79:8c:97:9b:3a:06:0d:b7:02:88:64:57:dc:9c:96:ba:2c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Aug 22 05:47:10 2025 GMT Not After : Aug 25 13:23:10 2025 GMT Subject: CN=DC5474A6180170EB9912DA13E3036A5B34947EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:48:27:65:28:2e:10:22:4b:8f:2c:c6:35: d7:1e:fd:14:fc:58:6a:9f:a3:38:4a:80:93:0b:a5: 7d:49:82:47:30:45:55:56:8c:d8:65:77:af:81:1c: ca:29:11:f9:63:d1:97:8c:11:4a:a8:cf:8e:19:af: 53:2d:46:d7:9b:28:8f:ee:d5:b4:82:25:ba:83:c5: d0:f5:fa:2c:11:ab:d4:ea:14:16:26:eb:8e:56:13: 79:15:c9:4a:c5:86:ee:d3:17:e8:79:fc:cf:9e:7b: bb:36:a1:53:42:22:77:08:cc:b6:4d:63:60:4b:32: fd:86:97:44:a1:41:cd:f4:ec:05:1e:c1:1a:15:e6: 48:ac:34:d2:a1:9a:85:b9:e0:b0:1c:30:14:e7:b3: 3a:72:bb:23:d3:f8:48:22:9a:3d:1a:a1:8d:00:8c: 02:bc:06:09:eb:49:47:e5:5c:d9:82:e9:2a:4f:8e: 9e:60:62:0e:39:26:e5:e3:aa:53:8b:d1:8e:e4:20: 79:76:48:4c:e9:90:7f:46:8d:75:87:bb:f0:28:a3: 12:8a:05:68:ba:0f:8f:ad:eb:0f:4b:d7:40:18:56: fd:c6:30:25:58:c7:f0:a2:38:18:7e:9e:a4:fe:b2: 8b:8f:71:fa:0c:c3:41:33:3f:b3:37:95:52:74:a5: e7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:54:74:A6:18:01:70:EB:99:12:DA:13:E3:03:6A:5B:34:94:7E:E3 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0a:58:27:1e:48:0b:07:82:c6:42:ad:9e:6a:79:22:73:6d: 0e:98:ef:2a:38:5e:91:3b:40:a0:d1:03:63:23:bb:81:12:52: 7c:ea:ec:ae:4e:61:43:ae:6f:b0:a6:3f:a3:eb:5a:fd:02:93: c1:c3:3b:6e:ab:75:6b:3e:53:7c:e1:94:28:e0:79:39:93:7f: a7:67:a5:0b:22:ee:77:40:2e:bd:ed:db:ea:52:c6:13:e9:dc: 57:2d:14:81:5f:ae:35:ac:42:62:b4:2d:d4:31:c0:1b:3a:4d: e5:2f:91:6f:93:6d:c0:bc:00:eb:dc:07:ec:ea:39:e3:b2:e6: ec:e1:b3:27:e1:14:c3:a6:d7:e1:cb:c9:f6:b3:74:b0:66:69: 18:97:99:49:19:1f:99:ba:ab:1f:d8:a0:57:06:53:b7:ea:14: 4e:0d:09:dd:5a:75:c8:05:34:26:f1:bc:99:02:6e:c5:2e:79: 83:52:2d:67:71:f3:bc:39:67:96:a0:38:10:0b:10:a7:3d:af: bd:43:50:2d:9b:90:7e:3d:6f:dd:8f:40:99:53:b6:66:45:66: 0c:d8:8b:68:ce:e5:75:46:8d:da:b9:2a:3f:8f:3c:55:e0:ef: 09:52:0a:6f:3c:02:dd:4b:16:46:21:6a:89:9b:92:74:3e:14: 24:0c:73:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2F5jJebOgYNtwKIZFfcnJa6LBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNTA4MjIwNTQ3MTBaFw0yNTA4MjUxMzIzMTBaMDMxMTAvBgNV BAMTKERDNTQ3NEE2MTgwMTcwRUI5OTEyREExM0UzMDM2QTVCMzQ5NDdFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TEgnZSguECJLjyzGNdce/RT8 WGqfozhKgJMLpX1JgkcwRVVWjNhld6+BHMopEflj0ZeMEUqoz44Zr1MtRtebKI/u 1bSCJbqDxdD1+iwRq9TqFBYm645WE3kVyUrFhu7TF+h5/M+ee7s2oVNCIncIzLZN Y2BLMv2Gl0ShQc307AUewRoV5kisNNKhmoW54LAcMBTnszpyuyPT+Egimj0aoY0A jAK8BgnrSUflXNmC6SpPjp5gYg45JuXjqlOL0Y7kIHl2SEzpkH9GjXWHu/AooxKK BWi6D4+t6w9L10AYVv3GMCVYx/CiOBh+nqT+souPcfoMw0EzP7M3lVJ0pecNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FR0phgBcOuZEtoT4wNqWzSUfuMwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMKWCceSAsHgsZCrZ5qeSJzbQ6Y7yo4XpE7 QKDRA2Mju4ESUnzq7K5OYUOub7CmP6PrWv0Ck8HDO26rdWs+U3zhlCjgeTmTf6dn pQsi7ndALr3t2+pSxhPp3FctFIFfrjWsQmK0LdQxwBs6TeUvkW+TbcC8AOvcB+zq OeOy5uzhsyfhFMOm1+HLyfazdLBmaRiXmUkZH5m6qx/YoFcGU7fqFE4NCd1adcgF NCbxvJkCbsUueYNSLWdx87w5Z5agOBALEKc9r71DUC2bkH49b92PQJlTtmZFZgzY i2jO5XVGjdq5Kj+PPFXg7wlSCm88At1LFkYhaombknQ+FCQMc44= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:11 2025 by rpki-client