$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json) Hash identifier: HOwvNfVEv9UlGHlGJlCPAgX0V9YLpRXgA6Tij8MPTis= Subject key identifier: D2:74:93:79:E4:E7:04:25:BE:A7:A8:AC:87:DC:97:B8:17:91:EF:EB Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Certificate serial: 5B8485DD3430208BAB4E7F480BFA4836F5B91B25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft Manifest number: 01BF Signing time: Fri 18 Jul 2025 21:20:04 +0000 Manifest this update: Fri 18 Jul 2025 21:15:04 +0000 Manifest next update: Mon 21 Jul 2025 23:58:04 +0000 Files and hashes: 1: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: XcGp7ypRIjCrrz2ZlpbT4Kw1Xg8DfR8gu9Z0oSXRJS8=) 2: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: DXeZrzrGfPCiHMsIEmkJOcw442MA8KIxHGLWlDgD2e4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 23:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:84:85:dd:34:30:20:8b:ab:4e:7f:48:0b:fa:48:36:f5:b9:1b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Validity Not Before: Jul 18 21:15:04 2025 GMT Not After : Jul 21 23:58:04 2025 GMT Subject: CN=D2749379E4E70425BEA7A8AC87DC97B81791EFEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:89:f5:c4:73:e2:74:ad:32:14:06:30:8c: b4:bc:c9:9c:d4:8b:56:a2:67:37:2e:d5:f6:0c:8d: c0:f5:59:b5:03:7a:48:97:c0:55:24:53:e9:de:57: 30:4d:fd:bc:4a:0f:4a:d4:8f:c6:04:61:1e:fa:c1: c4:da:cf:68:15:3c:dd:e3:2c:6b:45:f6:b8:56:a1: 3e:14:9c:61:3a:74:78:74:dd:2c:20:73:c9:0e:93: 1b:81:78:4e:db:04:28:0f:70:24:50:d2:b1:36:11: 08:f5:56:7d:af:3e:da:f0:2a:55:aa:94:86:f9:1a: b7:26:74:7e:86:d3:2e:18:0f:28:2c:cf:43:c3:d3: a7:e6:87:f0:37:56:23:1b:07:c1:bf:e8:43:97:c4: 2f:5c:1f:cd:7f:47:bf:ab:7d:91:25:b4:0f:ba:bb: e8:91:a7:d3:cb:81:37:6c:1e:94:1e:d0:f8:19:eb: 81:c7:b5:1a:41:e5:4f:dc:50:10:9f:46:db:99:4e: 86:13:60:17:e0:b6:22:94:8c:f6:a5:05:d2:a5:15: 07:f6:ba:44:40:48:5c:6b:33:92:f4:6d:20:87:e9: c4:6e:f5:3b:57:f9:03:e5:5f:5a:ff:30:1a:82:2b: a5:2f:29:3d:6e:3d:8e:61:9e:98:1b:ca:ef:12:14: 78:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:74:93:79:E4:E7:04:25:BE:A7:A8:AC:87:DC:97:B8:17:91:EF:EB X509v3 Authority Key Identifier: keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7e:d3:bf:aa:7c:de:ca:42:f0:99:55:2a:67:9e:df:21:72: 95:bd:58:4b:a7:b0:47:13:f8:b8:6f:b1:fe:be:50:fa:71:0e: c5:57:ee:dd:15:d0:8e:53:63:f5:ec:67:ff:ee:b6:7e:92:7a: 9a:1c:15:28:bc:ae:6d:df:e0:b0:68:5e:eb:fc:4f:3e:8e:dc: 86:a6:78:b8:fa:89:3e:f5:54:9e:38:92:13:7a:26:d8:19:c0: d4:66:00:57:b1:b6:97:85:81:f3:39:50:c0:91:c1:5b:33:e5: 78:71:b6:67:89:36:97:b1:58:ba:76:e0:08:1a:f8:61:24:84: ae:ba:2c:cb:c7:bc:da:e1:53:75:78:a4:2a:33:d1:e5:a4:43: 31:9d:7d:60:e5:b8:cf:ea:68:c9:40:80:4a:09:9c:59:66:ce: b4:33:a8:96:72:b2:9a:0f:f7:89:82:26:da:90:17:af:33:4e: 60:2c:a1:13:b7:86:6d:7a:75:a3:07:19:21:3b:28:7a:64:cb: 64:7d:0c:3e:cf:81:ee:17:a0:c7:a7:01:0f:1c:bc:e6:18:0b: b1:d1:db:65:b8:82:4d:5d:aa:f6:e6:38:59:fc:a7:8e:8b:c3: ed:92:29:8a:75:17:1d:73:c7:5b:5a:cc:0e:eb:1e:0a:4a:d7: 11:e5:6d:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4SF3TQwIIurTn9IC/pINvW5GyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4 QjQzRjcyNzAeFw0yNTA3MTgyMTE1MDRaFw0yNTA3MjEyMzU4MDRaMDMxMTAvBgNV BAMTKEQyNzQ5Mzc5RTRFNzA0MjVCRUE3QThBQzg3REM5N0I4MTc5MUVGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQYn1xHPidK0yFAYwjLS8yZzU i1aiZzcu1fYMjcD1WbUDekiXwFUkU+neVzBN/bxKD0rUj8YEYR76wcTaz2gVPN3j LGtF9rhWoT4UnGE6dHh03Swgc8kOkxuBeE7bBCgPcCRQ0rE2EQj1Vn2vPtrwKlWq lIb5GrcmdH6G0y4YDygsz0PD06fmh/A3ViMbB8G/6EOXxC9cH81/R7+rfZEltA+6 u+iRp9PLgTdsHpQe0PgZ64HHtRpB5U/cUBCfRtuZToYTYBfgtiKUjPalBdKlFQf2 ukRASFxrM5L0bSCH6cRu9TtX+QPlX1r/MBqCK6UvKT1uPY5hnpgbyu8SFHilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0nSTeeTnBCW+p6ish9yXuBeR7+swHwYDVR0j BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz RjcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAz RTQ4QjQzRjcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5+07+qfN7KQvCZVSpnnt8hcpW9WEunsEcT +Lhvsf6+UPpxDsVX7t0V0I5TY/XsZ//utn6SepocFSi8rm3f4LBoXuv8Tz6O3Iam eLj6iT71VJ44khN6JtgZwNRmAFextpeFgfM5UMCRwVsz5XhxtmeJNpexWLp24Aga +GEkhK66LMvHvNrhU3V4pCoz0eWkQzGdfWDluM/qaMlAgEoJnFlmzrQzqJZyspoP 94mCJtqQF68zTmAsoRO3hm16daMHGSE7KHpky2R9DD7Pge4XoMenAQ8cvOYYC7HR 22W4gk1dqvbmOFn8p46Lw+2SKYp1Fx1zx1tazA7rHgpK1xHlbQU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:22 2025 by rpki-client