$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: Cd7QWa0lXHT5UptBtULsRZicy/M7vW0W9bKyYjrfOtI= Subject key identifier: D9:6C:52:76:A9:D4:F5:34:FA:6A:90:C5:A4:F8:68:CB:A0:55:F2:07 Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 5492C33591D6ED6CE6C2A9C5FE8D0359039FAFDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: 76 Signing time: Sat 19 Jul 2025 02:40:53 +0000 Manifest this update: Sat 19 Jul 2025 02:35:53 +0000 Manifest next update: Tue 22 Jul 2025 12:11:53 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: uUaWBsmfxkMLcV792+lTg6jTHZcNGk2KxXWpqljVsh8=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: 6pByXgAQ6YR6dUDH4dJy61wrtOMRHMSvLiETBeP3xAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:92:c3:35:91:d6:ed:6c:e6:c2:a9:c5:fe:8d:03:59:03:9f:af:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Jul 19 02:35:53 2025 GMT Not After : Jul 22 12:11:53 2025 GMT Subject: CN=D96C5276A9D4F534FA6A90C5A4F868CBA055F207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:93:71:d2:bb:b0:35:c4:24:3a:85:a1:09: 99:8e:21:1b:33:14:3e:d8:13:e2:8f:d1:d3:5d:20: ec:32:6a:6c:ef:8d:88:55:2e:2e:6f:60:0e:ed:8e: 58:28:39:19:07:4a:29:e3:d2:d6:02:2b:32:52:02: 2c:f2:5a:a4:ab:19:0f:93:c0:24:bb:c6:c6:8c:2d: a9:6f:a2:01:ba:44:ad:06:85:b0:ca:77:5f:a2:8c: 79:85:db:a5:d7:33:91:0b:64:6e:7a:96:d6:a2:ee: ea:9c:62:46:f2:4a:e2:29:23:30:6e:bd:e8:99:5a: 04:00:a4:e8:5c:85:39:47:bf:c6:9e:60:48:a8:29: b1:db:3b:63:df:62:f7:d2:f9:da:0a:d9:75:87:2f: 48:8d:6b:a6:9b:50:d5:37:3c:d9:2c:97:2a:c9:f2: 87:e8:58:7a:28:2b:76:42:e4:aa:01:40:8d:0c:59: 7e:17:42:e3:e1:99:c9:52:6a:06:3c:47:14:b4:e3: 3f:80:d2:52:51:0c:c2:fb:01:bb:23:50:30:65:e5: 2c:fe:bd:d7:80:97:ca:7d:ff:02:ca:63:1f:ad:a7: 4c:92:00:51:9b:77:15:89:e3:44:f0:e4:34:ab:a1: c3:02:ab:92:af:95:61:1f:c8:64:f7:4a:ec:dd:3c: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:52:76:A9:D4:F5:34:FA:6A:90:C5:A4:F8:68:CB:A0:55:F2:07 X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8a:87:bd:a9:ce:c0:c4:58:c1:2a:3b:2f:90:66:f9:a2:54: 07:1d:8b:d3:63:c2:27:b0:5c:40:90:14:9e:e9:ae:ff:89:2d: 4d:e4:4a:2d:80:3f:0a:f4:ff:c6:43:7d:a3:73:a7:85:42:d9: e2:c1:e6:7e:de:54:0e:80:4a:8f:3c:12:5e:29:df:06:57:79: ac:dd:a1:51:3f:12:ec:d0:12:ca:97:6b:a3:67:0d:91:50:f8: d0:3b:a8:8b:d9:0a:05:2e:ae:b4:39:9f:50:e8:cc:25:a0:d1: d6:5b:71:a8:99:8d:e5:10:56:04:74:67:19:b7:c4:4a:d7:31: c4:25:32:2a:ec:f4:25:d1:12:18:61:36:03:4b:af:9c:0e:2c: 66:83:26:32:65:0d:78:ee:ee:83:c7:80:f4:5f:96:b7:17:f0: 39:a5:d7:c3:55:59:61:03:d6:13:4f:be:d6:70:6c:af:cd:95: 4b:72:69:c7:10:dc:79:74:eb:f6:2d:be:94:2d:9d:03:c3:72: 92:1a:42:86:49:76:47:f0:90:f2:1e:39:a8:76:0a:26:01:f2: 34:f2:45:71:87:b6:44:98:43:1e:70:d7:5d:46:de:7f:c2:9c: 05:f8:e6:a1:f7:e9:4a:c6:39:f6:ad:71:01:1e:b2:6e:44:9e: 62:19:6b:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJLDNZHW7WzmwqnF/o0DWQOfr98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNTA3MTkwMjM1NTNaFw0yNTA3MjIxMjExNTNaMDMxMTAvBgNV BAMTKEQ5NkM1Mjc2QTlENEY1MzRGQTZBOTBDNUE0Rjg2OENCQTA1NUYyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FZNx0ruwNcQkOoWhCZmOIRsz FD7YE+KP0dNdIOwyamzvjYhVLi5vYA7tjlgoORkHSinj0tYCKzJSAizyWqSrGQ+T wCS7xsaMLalvogG6RK0GhbDKd1+ijHmF26XXM5ELZG56ltai7uqcYkbySuIpIzBu veiZWgQApOhchTlHv8aeYEioKbHbO2PfYvfS+doK2XWHL0iNa6abUNU3PNkslyrJ 8ofoWHooK3ZC5KoBQI0MWX4XQuPhmclSagY8RxS04z+A0lJRDML7AbsjUDBl5Sz+ vdeAl8p9/wLKYx+tp0ySAFGbdxWJ40Tw5DSrocMCq5KvlWEfyGT3SuzdPOC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2WxSdqnU9TT6apDFpPhoy6BV8gcwHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmKh72pzsDEWMEqOy+QZvmiVAcdi9Njwiew XECQFJ7prv+JLU3kSi2APwr0/8ZDfaNzp4VC2eLB5n7eVA6ASo88El4p3wZXeazd oVE/EuzQEsqXa6NnDZFQ+NA7qIvZCgUurrQ5n1DozCWg0dZbcaiZjeUQVgR0Zxm3 xErXMcQlMirs9CXREhhhNgNLr5wOLGaDJjJlDXju7oPHgPRflrcX8Dml18NVWWED 1hNPvtZwbK/NlUtyaccQ3Hl06/YtvpQtnQPDcpIaQoZJdkfwkPIeOah2CiYB8jTy RXGHtkSYQx5w111G3n/CnAX45qH36UrGOfatcQEesm5EnmIZa1Q= -----END CERTIFICATE-----Generated at Sun Jul 20 22:28:43 2025 by rpki-client