$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: OTQMkDX0jp9S0/5czdqTPIy9akgLoiY7DW/kHHXqyTc= Subject key identifier: 5B:73:93:B2:35:A5:E2:19:B1:5F:5A:1A:26:28:83:79:2F:64:31:34 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 1B6B5BBD68E365433BC2E6C5472B50A05AAE0A8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: E4 Signing time: Sun 20 Jul 2025 13:03:33 +0000 Manifest this update: Sun 20 Jul 2025 12:58:33 +0000 Manifest next update: Wed 23 Jul 2025 17:53:33 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: txvKnah+2BqGvuItJ5OOJv2zYsWee9YemoE2eoYyeE0=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6b:5b:bd:68:e3:65:43:3b:c2:e6:c5:47:2b:50:a0:5a:ae:0a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Jul 20 12:58:33 2025 GMT Not After : Jul 23 17:53:33 2025 GMT Subject: CN=5B7393B235A5E219B15F5A1A262883792F643134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:74:a6:9c:33:9c:8e:6d:f1:18:e0:37:5d: ed:56:a1:b1:21:f3:7c:e1:d5:ed:56:75:c6:ba:b4: 6e:54:8c:03:4b:f4:57:6c:69:63:04:b5:38:54:58: d3:ba:3d:c7:f0:b8:5f:d0:20:23:c4:98:43:60:37: e6:6b:ae:71:eb:7d:7c:2f:a1:65:ed:d2:15:4f:16: 07:fd:15:e1:e9:56:7c:ef:49:a2:a4:6f:26:48:13: 29:2a:32:fe:ce:41:f0:ae:38:f1:cd:62:c7:ee:fd: 27:3b:f1:9e:87:a5:35:e8:37:66:16:00:c1:f9:2b: 8d:d2:94:68:d0:e9:0c:6a:a4:5a:ed:1e:b2:a1:28: a7:d3:7b:fe:12:3c:58:8d:28:a3:54:ae:c1:07:40: a6:d3:b3:31:73:61:cd:0d:28:2d:b2:13:62:ee:b5: b6:50:90:97:91:94:e6:c6:bf:8a:75:5e:95:0c:e4: 5f:e7:cd:1a:83:52:bb:69:01:f7:dd:fb:74:81:9b: 2a:ce:15:3b:8e:84:1e:ef:30:7f:a2:21:3c:6d:42: 6f:e2:cd:df:d9:1e:21:ef:a7:bb:79:c3:62:6c:44: e6:97:cd:a8:e1:79:4f:7d:60:06:e2:96:44:b7:88: 8f:a8:1d:3c:4d:b1:83:fd:9e:3c:55:cd:93:35:cf: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:73:93:B2:35:A5:E2:19:B1:5F:5A:1A:26:28:83:79:2F:64:31:34 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b1:db:77:30:ab:27:b0:04:b2:ac:7e:ac:2e:74:2e:85:a9: 7e:3d:ee:19:fe:47:29:a3:c8:1b:8c:e4:96:48:98:4a:75:8b: 60:4e:ed:af:ec:13:c8:37:85:18:f3:1c:7a:2d:56:94:fa:30: 20:8d:92:bc:7e:3b:5c:05:9c:17:f4:9f:7b:fa:64:43:c4:15: a3:88:b0:a1:99:9b:ea:7c:93:d4:1a:ba:40:35:0a:6d:84:77: 64:cc:19:42:05:12:fc:d3:06:ba:7f:ae:87:56:df:76:02:70: 35:9a:47:ae:9a:85:0f:74:91:4d:4a:52:9f:90:5c:89:ec:5e: 69:47:ed:d0:9d:33:6c:ef:a5:3c:9b:e8:1e:49:91:8c:42:61: 14:6e:e1:11:88:88:b3:0f:9f:17:0a:49:3e:f3:6d:67:41:f9: c9:10:87:57:77:f6:b2:74:26:d5:8a:0d:2a:62:dc:3e:e7:df: 64:00:81:1b:dc:74:46:c1:01:d7:45:c3:b4:2e:a0:c8:a5:c1: 2c:51:23:ae:b8:5d:be:8c:4a:30:e0:4a:4e:40:26:3c:3a:df: 3d:4d:ab:29:56:68:4e:ef:bf:31:44:2d:28:d7:66:9a:38:5b: 02:34:db:8f:29:ce:27:46:26:be:29:08:e4:28:e2:51:12:5c: 19:45:0a:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2tbvWjjZUM7wubFRytQoFquCo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTA3MjAxMjU4MzNaFw0yNTA3MjMxNzUzMzNaMDMxMTAvBgNV BAMTKDVCNzM5M0IyMzVBNUUyMTlCMTVGNUExQTI2Mjg4Mzc5MkY2NDMxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphXSmnDOcjm3xGOA3Xe1WobEh 83zh1e1Wdca6tG5UjANL9FdsaWMEtThUWNO6PcfwuF/QICPEmENgN+ZrrnHrfXwv oWXt0hVPFgf9FeHpVnzvSaKkbyZIEykqMv7OQfCuOPHNYsfu/Sc78Z6HpTXoN2YW AMH5K43SlGjQ6QxqpFrtHrKhKKfTe/4SPFiNKKNUrsEHQKbTszFzYc0NKC2yE2Lu tbZQkJeRlObGv4p1XpUM5F/nzRqDUrtpAffd+3SBmyrOFTuOhB7vMH+iITxtQm/i zd/ZHiHvp7t5w2JsROaXzajheU99YAbilkS3iI+oHTxNsYP9njxVzZM1z3kzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW3OTsjWl4hmxX1oaJiiDeS9kMTQwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEex23cwqyewBLKsfqwudC6FqX497hn+Rymj yBuM5JZImEp1i2BO7a/sE8g3hRjzHHotVpT6MCCNkrx+O1wFnBf0n3v6ZEPEFaOI sKGZm+p8k9QaukA1Cm2Ed2TMGUIFEvzTBrp/rodW33YCcDWaR66ahQ90kU1KUp+Q XInsXmlH7dCdM2zvpTyb6B5JkYxCYRRu4RGIiLMPnxcKST7zbWdB+ckQh1d39rJ0 JtWKDSpi3D7n32QAgRvcdEbBAddFw7QuoMilwSxRI664Xb6MSjDgSk5AJjw63z1N qylWaE7vvzFELSjXZpo4WwI0248pzidGJr4pCOQo4lESXBlFCoY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:48 2025 by rpki-client