$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: TW3FOGgbhyaNIFRvyoCi08rLtw9/i+FN1OSLxIdYGtQ= Subject key identifier: C2:B2:DD:48:78:6E:30:D3:4A:F2:E5:08:BA:B5:C1:59:4B:8B:AF:E2 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 4F0A6B41257876A11CAA10E80B215936557647EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 04F0 Signing time: Tue 22 Jul 2025 20:41:50 +0000 Manifest this update: Tue 22 Jul 2025 20:36:50 +0000 Manifest next update: Sat 26 Jul 2025 07:01:50 +0000 Files and hashes: 1: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: f/HS5SvzlnI1d1KjsNTEdLoyzaKEUB/b5qatg8cVHOo=) 2: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) 3: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0a:6b:41:25:78:76:a1:1c:aa:10:e8:0b:21:59:36:55:76:47:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Jul 22 20:36:50 2025 GMT Not After : Jul 26 07:01:50 2025 GMT Subject: CN=C2B2DD48786E30D34AF2E508BAB5C1594B8BAFE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:12:5d:fc:80:9c:97:26:e1:b4:50:65:11:05: 2c:8f:62:80:c8:3d:2f:a7:df:09:2b:f4:23:12:c6: 2a:b9:3a:e5:dd:65:20:50:1b:21:34:a8:21:44:2f: 16:58:e4:2a:93:74:08:82:b7:a5:d0:2c:9e:63:b1: 14:ac:12:a3:82:54:68:6e:35:f8:62:e1:c2:7f:0f: 73:b9:52:97:29:49:7d:4f:e1:04:37:4b:ca:a4:d4: aa:66:35:11:63:14:3e:62:40:44:fb:6b:78:0b:fc: bf:a8:b8:46:f9:8c:1f:ff:15:29:63:38:de:3e:91: dc:7c:e4:ac:d3:20:d4:ef:e9:6b:10:71:4a:b2:f5: 59:83:5e:1d:b9:e1:4a:5e:be:4b:3f:cc:3e:51:ef: 39:e0:35:1d:bc:d2:87:39:f1:c0:97:fc:e1:cd:e5: 12:4c:d6:f3:61:09:20:19:7d:ba:fc:22:cb:de:5e: 9d:cb:84:0f:53:37:41:ca:d7:0d:0d:b5:e9:ce:ca: 66:f9:f5:5b:c8:66:36:0b:28:f3:b9:62:f0:ca:7d: bf:90:15:84:c4:c8:90:a6:af:a6:e8:ed:df:f0:71: 1c:8a:db:c2:67:2a:03:c1:60:52:3f:d0:f1:b8:a3: 5b:d4:9f:0b:33:ec:8e:4c:ea:c1:5a:cf:0a:eb:5d: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:DD:48:78:6E:30:D3:4A:F2:E5:08:BA:B5:C1:59:4B:8B:AF:E2 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:aa:95:76:5b:d8:4a:04:52:7c:ad:c3:4e:bb:8c:50:63:80: f6:a6:a9:8a:1c:61:5d:c8:d5:1e:c8:24:0f:31:45:15:08:ef: 9b:93:d9:21:30:f6:f7:d6:fa:ac:2e:3d:ea:7b:b9:98:8a:15: a1:ba:c3:33:c2:14:fb:87:99:02:8a:47:5a:f2:bd:ad:6b:6d: c0:84:59:b7:16:6c:72:3b:e7:71:4a:a6:13:c3:ad:42:8d:4c: 15:c2:4f:94:6b:55:99:d3:40:d9:a1:25:b5:85:1b:85:f4:7f: 59:53:67:a2:29:b8:0b:c1:fc:d1:75:ed:35:f2:f6:ec:65:60: 5e:2f:1b:43:96:8a:74:68:52:2d:54:9e:e4:0a:86:2c:65:2c: 14:2c:38:4c:1a:88:7f:65:bf:7c:15:e7:06:e0:3c:02:e4:e4: dd:57:93:84:1b:a4:a0:64:ab:ff:b9:af:fa:ee:2a:38:1c:31: 7c:6c:2c:d3:af:ec:47:82:39:0e:14:40:d5:69:84:4b:15:3b: 0e:5d:e9:ee:23:af:b0:53:c9:fc:6e:8a:c4:48:ed:21:08:7e: 39:1b:81:15:78:f5:24:75:20:d5:90:07:57:a0:0d:fd:0d:13: d5:d1:98:ff:d4:35:15:9d:b8:04:ed:fb:83:bb:ba:f9:11:37: 0c:45:ba:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwprQSV4dqEcqhDoCyFZNlV2R+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNTA3MjIyMDM2NTBaFw0yNTA3MjYwNzAxNTBaMDMxMTAvBgNV BAMTKEMyQjJERDQ4Nzg2RTMwRDM0QUYyRTUwOEJBQjVDMTU5NEI4QkFGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsEl38gJyXJuG0UGURBSyPYoDI PS+n3wkr9CMSxiq5OuXdZSBQGyE0qCFELxZY5CqTdAiCt6XQLJ5jsRSsEqOCVGhu Nfhi4cJ/D3O5UpcpSX1P4QQ3S8qk1KpmNRFjFD5iQET7a3gL/L+ouEb5jB//FSlj ON4+kdx85KzTINTv6WsQcUqy9VmDXh254Upevks/zD5R7zngNR280oc58cCX/OHN 5RJM1vNhCSAZfbr8IsveXp3LhA9TN0HK1w0NtenOymb59VvIZjYLKPO5YvDKfb+Q FYTEyJCmr6bo7d/wcRyK28JnKgPBYFI/0PG4o1vUnwsz7I5M6sFazwrrXfofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwrLdSHhuMNNK8uUIurXBWUuLr+IwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaqlXZb2EoEUnytw067jFBjgPamqYocYV3I 1R7IJA8xRRUI75uT2SEw9vfW+qwuPep7uZiKFaG6wzPCFPuHmQKKR1ryva1rbcCE WbcWbHI753FKphPDrUKNTBXCT5RrVZnTQNmhJbWFG4X0f1lTZ6IpuAvB/NF17TXy 9uxlYF4vG0OWinRoUi1UnuQKhixlLBQsOEwaiH9lv3wV5wbgPALk5N1Xk4QbpKBk q/+5r/ruKjgcMXxsLNOv7EeCOQ4UQNVphEsVOw5d6e4jr7BTyfxuisRI7SEIfjkb gRV49SR1INWQB1egDf0NE9XRmP/UNRWduATt+4O7uvkRNwxFuq4= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:13 2025 by rpki-client