$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft (raw, json) Hash identifier: dOgAieuXyKNXm2gPx0661+vXiaWp5v21jK2P/zPAx1U= Subject key identifier: F6:3C:A6:28:97:7F:9D:3B:DB:E6:DB:DC:6D:80:A7:6E:42:05:6F:C8 Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 6ECC61A6DDBEC20C79F8EC7738DA0F69F02457A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft Manifest number: 0150 Signing time: Mon 21 Jul 2025 02:50:59 +0000 Manifest this update: Mon 21 Jul 2025 02:45:59 +0000 Manifest next update: Thu 24 Jul 2025 09:52:59 +0000 Files and hashes: 1: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl (hash: pYvTY2ZynZKNgZAGSjoyJDCrdE/+XedOy4f6JDp1dwc=) 2: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: Ew2OSWEohUTuvmIQMM4jLPYBjKqzXCpLNwLiyPu5TfM=) 3: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: vmw9bcS7HYiEIqjVICRaVcatSeJQ8ZNuTTgtgTfawew=) 4: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: D5hukbaY+N3AjWmkuBGFFTwqc+CzamYmFL0amMEyMMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:cc:61:a6:dd:be:c2:0c:79:f8:ec:77:38:da:0f:69:f0:24:57:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: Jul 21 02:45:59 2025 GMT Not After : Jul 24 09:52:59 2025 GMT Subject: CN=F63CA628977F9D3BDBE6DBDC6D80A76E42056FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9b:cb:6e:60:99:b4:4f:b8:5f:c3:44:d0:86: ec:05:f3:0f:a3:c1:96:66:53:68:f7:73:74:48:ac: 2a:50:b1:90:ea:5b:64:40:fb:9d:40:11:53:f4:ff: 1c:50:6d:bb:dc:3f:b2:a2:0e:ac:9e:fa:18:28:5a: d8:03:f1:c5:d2:a1:49:d8:2a:d8:d3:f3:ec:a1:64: 94:e2:28:9f:1a:47:a3:73:e4:26:4e:f8:d7:47:16: e6:ba:19:98:5d:b2:8c:5f:0d:92:cd:48:09:61:b6: 79:71:9d:fe:8c:e9:31:6b:81:f0:59:ba:15:5f:da: 6d:cb:e6:e5:54:04:72:e8:60:4b:b0:f7:71:94:e1: 5a:bf:fb:aa:7c:b6:cc:5c:79:e3:7f:7f:b3:6d:21: 01:ba:18:39:01:1b:1d:40:c3:a8:38:4c:cd:bf:9c: b6:50:61:b8:a3:98:0f:4a:a1:15:f2:18:31:73:74: 9d:2b:65:c3:aa:9d:8a:ff:14:2e:97:56:c6:76:40: de:2e:0f:f0:09:4f:67:a7:bc:0a:b9:c6:7e:ac:e9: 56:34:5e:36:c0:d1:ce:94:dc:14:49:9c:fd:30:04: ce:a5:72:c9:9d:99:9e:69:8e:c9:ee:54:13:b2:e9: ba:76:60:74:49:e7:70:cc:71:0f:14:2f:55:f6:27: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3C:A6:28:97:7F:9D:3B:DB:E6:DB:DC:6D:80:A7:6E:42:05:6F:C8 X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f5:a6:82:53:4f:85:fa:ec:6b:b5:65:31:ec:11:d9:38:51: de:62:1c:be:f3:8c:77:a7:27:33:40:b0:27:89:13:55:8b:0c: 7a:3e:25:b3:fa:57:05:8e:f2:ec:b5:4f:f6:17:e6:44:f6:e3: 67:14:a9:00:34:1a:30:77:79:2f:52:0a:1b:3b:47:3c:df:a8: 70:7f:68:79:8c:c3:66:ef:e7:9e:ec:93:d8:af:ab:91:55:8b: bc:e4:51:51:b8:5b:a2:a2:18:f4:57:33:84:1a:5d:ed:39:d2: d0:e7:a8:35:19:47:84:5d:bf:36:9b:55:d5:16:0a:00:58:fd: c3:65:14:ba:ee:17:b2:26:c1:1f:22:76:85:a9:41:3c:fb:7c: 15:b0:a6:9a:fd:c6:5b:4a:7a:47:1b:db:26:e2:d5:65:01:84: 34:f2:27:37:6d:dd:bf:26:4b:56:c7:80:58:a6:26:50:e8:a7: 8c:4d:91:59:70:dd:45:28:bc:a6:88:50:7c:cc:d6:a3:72:2b: 47:73:65:03:27:e6:b9:41:a3:29:bd:e3:6b:27:08:e6:c9:7f: c4:34:54:57:cc:67:44:62:28:a9:23:8e:6f:1a:29:fc:d4:65: 84:14:ab:50:8e:d5:9d:92:7e:6a:56:43:97:47:a7:37:cf:30: b2:02:9b:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsxhpt2+wgx5+Ox3ONoPafAkV6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNTA3MjEwMjQ1NTlaFw0yNTA3MjQwOTUyNTlaMDMxMTAvBgNV BAMTKEY2M0NBNjI4OTc3RjlEM0JEQkU2REJEQzZEODBBNzZFNDIwNTZGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTm8tuYJm0T7hfw0TQhuwF8w+j wZZmU2j3c3RIrCpQsZDqW2RA+51AEVP0/xxQbbvcP7KiDqye+hgoWtgD8cXSoUnY KtjT8+yhZJTiKJ8aR6Nz5CZO+NdHFua6GZhdsoxfDZLNSAlhtnlxnf6M6TFrgfBZ uhVf2m3L5uVUBHLoYEuw93GU4Vq/+6p8tsxceeN/f7NtIQG6GDkBGx1Aw6g4TM2/ nLZQYbijmA9KoRXyGDFzdJ0rZcOqnYr/FC6XVsZ2QN4uD/AJT2envAq5xn6s6VY0 XjbA0c6U3BRJnP0wBM6lcsmdmZ5pjsnuVBOy6bp2YHRJ53DMcQ8UL1X2J6wNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9jymKJd/nTvb5tvcbYCnbkIFb8gwHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFE NEM1MDg1MkE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJr1poJTT4X67Gu1ZTHsEdk4Ud5iHL7zjHen JzNAsCeJE1WLDHo+JbP6VwWO8uy1T/YX5kT242cUqQA0GjB3eS9SChs7RzzfqHB/ aHmMw2bv557sk9ivq5FVi7zkUVG4W6KiGPRXM4QaXe050tDnqDUZR4RdvzabVdUW CgBY/cNlFLruF7ImwR8idoWpQTz7fBWwppr9xltKekcb2ybi1WUBhDTyJzdt3b8m S1bHgFimJlDop4xNkVlw3UUovKaIUHzM1qNyK0dzZQMn5rlBoym942snCObJf8Q0 VFfMZ0RiKKkjjm8aKfzUZYQUq1CO1Z2SfmpWQ5dHpzfPMLICm2c= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:29 2025 by rpki-client