$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: Pdz0JWXtnNmzz8Ln7/mjAg232PXua+7AytxJEk2DrNI= Subject key identifier: 04:FF:2F:F6:76:9A:A4:37:49:48:97:6E:0D:AC:A5:08:5D:CE:30:BA Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 5EBD262B4C3F7CD2F412F5475C5F4DDA2E4118B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 0163 Signing time: Sat 19 Jul 2025 07:31:54 +0000 Manifest this update: Sat 19 Jul 2025 07:26:54 +0000 Manifest next update: Tue 22 Jul 2025 14:14:54 +0000 Files and hashes: 1: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: cDZpOldDGdqgJMrs7Upfw0PnwwaOvxA2pXgQZE4mjfA=) 2: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) 3: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bd:26:2b:4c:3f:7c:d2:f4:12:f5:47:5c:5f:4d:da:2e:41:18:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Jul 19 07:26:54 2025 GMT Not After : Jul 22 14:14:54 2025 GMT Subject: CN=04FF2FF6769AA4374948976E0DACA5085DCE30BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:09:0f:8a:14:65:bf:a4:14:6e:c0:14:45: c8:88:75:6f:5c:61:2b:07:dc:93:10:43:4a:51:3c: a4:42:c5:40:3b:73:5e:d8:88:e3:d6:23:35:5e:e5: 47:34:1a:8b:93:fd:a6:93:3f:3e:9f:39:37:d6:b5: 3e:52:89:86:ac:5e:0d:78:d9:74:43:4e:bc:d7:54: d8:41:87:f6:0d:17:55:b5:4b:34:83:b9:b6:a6:ae: fd:3d:64:dc:ff:2e:cc:ee:0b:40:7e:1f:26:49:b3: 17:a2:c8:d2:e7:cd:2a:fd:27:e5:ab:90:ae:fe:df: b0:50:57:91:3f:29:1c:e2:49:e7:37:0d:a9:1b:76: 30:b1:95:12:39:1d:a7:ce:87:92:8c:50:5e:ad:cc: 0a:82:6c:a5:cd:05:7c:d6:d4:5e:bd:4a:08:e4:1f: 3c:b0:f4:08:4b:6e:47:c9:13:68:f5:24:3f:b6:3a: c8:3d:cd:2e:5c:51:c5:7f:e2:b9:90:8a:e3:e0:67: 79:c4:b1:d3:76:55:03:b2:fd:58:17:3d:bc:59:9e: 76:d0:8d:f2:ea:f9:9b:d5:83:89:79:75:48:99:aa: af:90:44:1a:45:57:d0:ee:79:a7:4f:8e:c1:e9:e3: 72:be:b9:cb:54:af:9b:36:12:f8:5b:ec:ec:6e:b1: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FF:2F:F6:76:9A:A4:37:49:48:97:6E:0D:AC:A5:08:5D:CE:30:BA X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:47:2f:f1:e5:3c:96:39:5e:50:65:07:54:6b:9e:bd:44:2e: 35:2b:08:88:3a:1e:f8:1e:df:dc:f4:ec:7a:65:21:56:29:f1: 90:01:8f:ce:ed:45:ed:96:8a:4f:c5:68:0c:fa:e2:1b:0b:55: 75:2a:96:93:f3:95:ea:64:f2:c6:34:05:ca:2b:5a:b9:6a:a7: f7:c3:0e:3a:f6:7c:a3:00:dc:10:4c:8b:3e:cd:a0:61:f1:9e: f3:4f:ba:73:d5:0b:d3:9c:0f:87:3d:28:72:94:10:73:50:7a: 49:70:0c:6d:63:80:91:ff:59:2e:f5:6f:3b:84:c2:7f:3a:bd: 8e:e5:93:a3:f0:1b:6f:58:87:db:68:ad:c6:24:06:c4:f2:47: de:00:7c:77:b3:d1:1c:e7:d5:56:5c:91:36:88:19:3c:fc:4e: 7f:fd:89:a9:36:22:2d:6b:12:47:a9:77:73:49:6c:0c:63:a8: c2:f4:03:a3:7f:a3:67:f4:f2:1e:5f:d4:dd:4d:bb:82:3e:d4: 57:d5:3a:34:b9:81:10:88:e4:02:b3:a3:9c:f2:b9:85:c0:99: 57:99:ef:10:19:20:99:b1:f3:14:40:c4:d7:ec:f8:6e:43:7a: c2:8c:12:89:f5:9e:bb:08:d8:da:18:3b:7e:32:d1:8c:d3:15: 33:50:35:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXr0mK0w/fNL0EvVHXF9N2i5BGLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTA3MTkwNzI2NTRaFw0yNTA3MjIxNDE0NTRaMDMxMTAvBgNV BAMTKDA0RkYyRkY2NzY5QUE0Mzc0OTQ4OTc2RTBEQUNBNTA4NURDRTMwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4gkPihRlv6QUbsAURciIdW9c YSsH3JMQQ0pRPKRCxUA7c17YiOPWIzVe5Uc0GouT/aaTPz6fOTfWtT5SiYasXg14 2XRDTrzXVNhBh/YNF1W1SzSDubamrv09ZNz/LszuC0B+HyZJsxeiyNLnzSr9J+Wr kK7+37BQV5E/KRziSec3DakbdjCxlRI5HafOh5KMUF6tzAqCbKXNBXzW1F69Sgjk Hzyw9AhLbkfJE2j1JD+2Osg9zS5cUcV/4rmQiuPgZ3nEsdN2VQOy/VgXPbxZnnbQ jfLq+ZvVg4l5dUiZqq+QRBpFV9DueadPjsHp43K+uctUr5s2Evhb7OxusXhxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBP8v9naapDdJSJduDaylCF3OMLowHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVHL/HlPJY5XlBlB1Rrnr1ELjUrCIg6Hvge 39z07HplIVYp8ZABj87tRe2Wik/FaAz64hsLVXUqlpPzlepk8sY0BcorWrlqp/fD Djr2fKMA3BBMiz7NoGHxnvNPunPVC9OcD4c9KHKUEHNQeklwDG1jgJH/WS71bzuE wn86vY7lk6PwG29Yh9torcYkBsTyR94AfHez0Rzn1VZckTaIGTz8Tn/9iak2Ii1r Ekepd3NJbAxjqML0A6N/o2f08h5f1N1Nu4I+1FfVOjS5gRCI5AKzo5zyuYXAmVeZ 7xAZIJmx8xRAxNfs+G5DesKMEon1nrsI2NoYO34y0YzTFTNQNS4= -----END CERTIFICATE-----Generated at Mon Jul 21 12:23:22 2025 by rpki-client