$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: HVIKE376jMWo9AKAGaGs9+6xc4eoVWoR+YCd9Hxhlts= Subject key identifier: 56:A8:5D:CB:2F:D5:F6:01:2E:E6:BA:08:29:8C:1B:6E:7A:91:65:9A Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 2F6215B79319A72FC9F58C985CB20D25CC822061 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: E5 Signing time: Mon 21 Jul 2025 03:42:03 +0000 Manifest this update: Mon 21 Jul 2025 03:37:03 +0000 Manifest next update: Thu 24 Jul 2025 05:33:03 +0000 Files and hashes: 1: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: GG1EK+gaQbmtLiAT3EQtC1WI0P6Y1lFZCGKEXhYty8M=) 2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 3: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 05:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:62:15:b7:93:19:a7:2f:c9:f5:8c:98:5c:b2:0d:25:cc:82:20:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Jul 21 03:37:03 2025 GMT Not After : Jul 24 05:33:03 2025 GMT Subject: CN=56A85DCB2FD5F6012EE6BA08298C1B6E7A91659A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:5d:86:01:19:81:cb:d4:8c:e4:61:1e:82: 0e:4e:cb:cf:26:66:b6:31:09:a2:f5:58:6f:d5:52: 3d:52:67:ae:5d:87:b0:29:a2:30:a0:6b:87:18:be: 1b:0d:c4:6e:db:cf:c7:fe:8a:1e:33:5e:db:5d:4f: 3e:ec:ce:05:5a:5d:de:ba:5a:a9:62:22:94:e9:05: 3c:34:ab:27:4e:74:19:bb:2b:a3:3a:44:10:37:19: 26:a9:32:26:5d:1b:df:c5:d0:fe:99:2d:af:2b:74: 7a:03:cb:68:cb:86:6d:8a:61:3e:c7:ac:b2:b0:35: 07:a5:28:65:fa:93:42:b8:f8:41:73:fc:51:1f:d7: ef:4a:ef:61:ef:d3:83:0b:46:0f:d9:a0:36:4b:71: ff:04:e2:d0:0c:a5:fc:29:ba:e2:da:0d:e7:7f:73: 85:12:24:39:46:f8:55:8a:29:69:1d:5c:1b:bc:cf: 53:36:d2:06:da:dc:9a:3f:51:e6:bf:f1:a4:43:92: 5b:53:8a:ec:07:9e:0b:57:ea:08:e2:36:63:22:41: b9:34:0f:e4:59:5d:4f:98:64:73:e6:12:84:ce:b7: 85:b8:cd:c8:45:e7:e1:52:97:d9:e0:c6:61:fd:fe: 41:45:64:40:55:0b:58:e8:f5:01:60:fc:11:7b:b1: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A8:5D:CB:2F:D5:F6:01:2E:E6:BA:08:29:8C:1B:6E:7A:91:65:9A X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f5:f6:1c:17:86:4a:39:5e:a6:be:b8:00:13:78:1f:7a:e8: 8c:dd:54:f0:d4:93:82:87:77:ee:85:d4:29:66:55:9a:26:40: 1f:53:83:6e:a6:86:2a:67:4f:7b:f4:48:c9:21:3b:dc:da:d9: 45:da:3c:a1:68:12:4e:d4:25:b9:6a:4d:ee:78:39:30:d9:86: 72:02:4d:66:a1:eb:2a:e0:4b:df:37:b5:0c:ce:7c:78:5d:ea: 80:ac:70:16:84:d8:3a:f5:87:a8:67:a2:e8:58:54:b3:60:c9: eb:0b:e5:d5:ba:b3:45:3b:a9:3b:f0:e9:40:5b:48:83:a5:79: 11:bd:8b:29:9f:ef:56:be:ab:fe:a0:df:2a:ac:94:a0:83:18: b2:a4:5a:4a:a6:1a:b6:09:c6:28:c1:f1:49:45:ca:0a:5a:11: a7:be:87:b4:4d:a5:87:df:ff:22:de:e0:3c:91:3e:39:a1:7c: b6:6a:6f:60:63:c0:23:5d:37:fc:de:84:b8:41:9e:03:5d:e9: c9:10:2f:50:99:55:c7:78:77:66:78:77:8d:be:53:45:48:7e: 12:76:ad:e3:19:07:85:c1:53:15:40:5d:2b:80:c6:ed:0e:88: a5:e9:35:80:83:c5:25:44:fe:22:89:84:79:a9:36:5f:d0:af: 9a:24:fd:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2IVt5MZpy/J9YyYXLINJcyCIGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTA3MjEwMzM3MDNaFw0yNTA3MjQwNTMzMDNaMDMxMTAvBgNV BAMTKDU2QTg1RENCMkZENUY2MDEyRUU2QkEwODI5OEMxQjZFN0E5MTY1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pl2GARmBy9SM5GEegg5Oy88m ZrYxCaL1WG/VUj1SZ65dh7ApojCga4cYvhsNxG7bz8f+ih4zXttdTz7szgVaXd66 WqliIpTpBTw0qydOdBm7K6M6RBA3GSapMiZdG9/F0P6ZLa8rdHoDy2jLhm2KYT7H rLKwNQelKGX6k0K4+EFz/FEf1+9K72Hv04MLRg/ZoDZLcf8E4tAMpfwpuuLaDed/ c4USJDlG+FWKKWkdXBu8z1M20gba3Jo/Uea/8aRDkltTiuwHngtX6gjiNmMiQbk0 D+RZXU+YZHPmEoTOt4W4zchF5+FSl9ngxmH9/kFFZEBVC1jo9QFg/BF7sWCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVqhdyy/V9gEu5roIKYwbbnqRZZowHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKT19hwXhko5Xqa+uAATeB966IzdVPDUk4KH d+6F1ClmVZomQB9Tg26mhipnT3v0SMkhO9za2UXaPKFoEk7UJblqTe54OTDZhnIC TWah6yrgS983tQzOfHhd6oCscBaE2Dr1h6hnouhYVLNgyesL5dW6s0U7qTvw6UBb SIOleRG9iymf71a+q/6g3yqslKCDGLKkWkqmGrYJxijB8UlFygpaEae+h7RNpYff /yLe4DyRPjmhfLZqb2BjwCNdN/zehLhBngNd6ckQL1CZVcd4d2Z4d42+U0VIfhJ2 reMZB4XBUxVAXSuAxu0OiKXpNYCDxSVE/iKJhHmpNl/Qr5ok/Zc= -----END CERTIFICATE-----Generated at Wed Jul 23 02:16:06 2025 by rpki-client