$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: 86aNtOw6t8OEBt2ibCQgTkvsN7+lALOiaBzwJx0f+/g= Subject key identifier: C0:AC:0E:7C:A5:F9:90:EA:B3:ED:F2:AD:CC:04:C2:33:58:07:BF:C9 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 54E36FFC15DB8B67F6DC2767520FBDCEB25D1CDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04C1 Signing time: Sun 20 Jul 2025 13:20:46 +0000 Manifest this update: Sun 20 Jul 2025 13:15:46 +0000 Manifest next update: Wed 23 Jul 2025 14:01:46 +0000 Files and hashes: 1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) 2: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: sVYi3U5Kf4Sqhhr215vVkSnm757pqehJlGLXFqUt594=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e3:6f:fc:15:db:8b:67:f6:dc:27:67:52:0f:bd:ce:b2:5d:1c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Jul 20 13:15:46 2025 GMT Not After : Jul 23 14:01:46 2025 GMT Subject: CN=C0AC0E7CA5F990EAB3EDF2ADCC04C2335807BFC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:20:da:a1:39:1c:a0:9e:9d:50:61:38:d9: 93:bd:bc:c0:97:56:bd:fb:2b:9a:f1:fe:11:fb:7a: c4:ee:4e:76:7a:e2:11:c3:2d:b9:ad:3f:16:df:d1: d6:24:c0:d3:72:7b:1b:43:54:01:8d:23:84:88:86: 38:a3:c5:a7:32:67:5f:9d:3e:e1:9c:15:99:d5:17: 9f:08:ab:ed:93:f1:5f:7f:bb:0b:bd:38:5d:4f:82: 30:ee:52:e5:ea:0d:c0:1b:c4:e9:5f:61:18:de:44: d7:dc:24:79:5a:e4:cd:5e:a7:8c:bd:53:fb:d8:ae: 98:72:eb:35:b0:06:99:1f:3c:0a:38:c8:61:89:ff: 94:b6:73:e3:2f:57:1c:4c:a0:7c:fe:3f:79:b2:68: a6:55:3c:7c:a9:cc:a0:91:c7:ba:14:9a:21:3d:87: b6:ee:d5:bc:c2:b9:28:2d:57:6b:04:53:80:2f:17: ed:a5:a6:13:e4:87:92:f1:68:85:8a:ef:74:e4:a6: ed:5c:5f:d5:44:70:a4:5d:ca:ee:f6:f7:94:ef:a3: 85:2b:41:aa:f7:a9:09:f7:ca:88:2b:e6:f5:a7:20: 3d:f7:a8:f3:c8:e0:8d:e2:8a:2e:a0:8e:26:42:0f: 45:a8:2c:32:a3:4e:c4:e5:fc:1a:d5:de:db:58:51: 80:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AC:0E:7C:A5:F9:90:EA:B3:ED:F2:AD:CC:04:C2:33:58:07:BF:C9 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ed:4a:52:17:77:80:92:40:b0:63:e7:63:ea:78:b5:9e:88: be:80:ff:f4:04:59:20:bc:4d:e9:c0:f1:51:73:1f:d7:36:0b: 90:46:38:3e:d7:5a:06:8f:61:e8:07:fc:66:c8:e9:00:09:e6: f8:86:b3:92:01:11:55:39:b7:a0:a7:58:49:c0:15:57:d6:45: ec:eb:1f:5b:c0:26:28:38:db:f5:b9:be:6f:59:32:37:be:e2: d6:54:96:61:41:ff:9c:7b:7d:32:9e:6c:1e:9b:05:49:f0:11: dd:f8:3e:12:3c:73:92:2c:24:35:8e:cb:e4:41:63:f6:81:0c: 0b:d0:c7:05:83:e8:a5:73:d0:4c:48:2c:64:e4:42:45:0a:8c: 69:f1:e6:ef:2c:27:cf:51:e2:f5:c3:28:da:67:d6:7c:2d:0e: 4c:a9:05:48:0d:d7:ee:75:e9:01:75:f3:89:b8:b4:f7:be:34: 5d:67:ba:e4:79:f4:bb:e6:f5:50:29:92:4d:ff:9e:81:bd:4d: 10:17:08:d3:f6:59:c9:1e:de:bb:74:85:f2:2b:a1:30:a4:9a: fd:a3:ff:58:a5:6c:07:16:e7:73:19:25:aa:1f:a4:ff:20:fa: f2:ce:b3:e8:34:de:1d:a3:70:e5:0c:c5:92:39:de:c9:d4:8b: e0:9d:a3:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVONv/BXbi2f23CdnUg+9zrJdHNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTA3MjAxMzE1NDZaFw0yNTA3MjMxNDAxNDZaMDMxMTAvBgNV BAMTKEMwQUMwRTdDQTVGOTkwRUFCM0VERjJBRENDMDRDMjMzNTgwN0JGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyCDaoTkcoJ6dUGE42ZO9vMCX Vr37K5rx/hH7esTuTnZ64hHDLbmtPxbf0dYkwNNyextDVAGNI4SIhjijxacyZ1+d PuGcFZnVF58Iq+2T8V9/uwu9OF1PgjDuUuXqDcAbxOlfYRjeRNfcJHla5M1ep4y9 U/vYrphy6zWwBpkfPAo4yGGJ/5S2c+MvVxxMoHz+P3myaKZVPHypzKCRx7oUmiE9 h7bu1bzCuSgtV2sEU4AvF+2lphPkh5LxaIWK73Tkpu1cX9VEcKRdyu7295Tvo4Ur Qar3qQn3yogr5vWnID33qPPI4I3iii6gjiZCD0WoLDKjTsTl/BrV3ttYUYAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwKwOfKX5kOqz7fKtzATCM1gHv8kwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLtSlIXd4CSQLBj52PqeLWeiL6A//QEWSC8 TenA8VFzH9c2C5BGOD7XWgaPYegH/GbI6QAJ5viGs5IBEVU5t6CnWEnAFVfWRezr H1vAJig42/W5vm9ZMje+4tZUlmFB/5x7fTKebB6bBUnwEd34PhI8c5IsJDWOy+RB Y/aBDAvQxwWD6KVz0ExILGTkQkUKjGnx5u8sJ89R4vXDKNpn1nwtDkypBUgN1+51 6QF184m4tPe+NF1nuuR59Lvm9VApkk3/noG9TRAXCNP2Wcke3rt0hfIroTCkmv2j /1ilbAcW53MZJaofpP8g+vLOs+g03h2jcOUMxZI53snUi+Cdo3U= -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:25 2025 by rpki-client