$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: sRY9n1SUcDZJNtkDgPRj2ujfmO4LwVAyhM85fCmKKPc= Subject key identifier: 45:83:6A:53:05:D3:35:A8:A7:BA:39:A8:18:6D:96:5D:24:52:DA:13 Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 3EAFA1F17CF10B063394A39FEE461707336C881E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 029C Signing time: Sat 19 Jul 2025 21:31:16 +0000 Manifest this update: Sat 19 Jul 2025 21:26:16 +0000 Manifest next update: Wed 23 Jul 2025 00:40:16 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: Wiu/VadaU1VRFj8Gcw8Bp6+5M3sJhp6rI3Oe/oOk3hM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:af:a1:f1:7c:f1:0b:06:33:94:a3:9f:ee:46:17:07:33:6c:88:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Jul 19 21:26:16 2025 GMT Not After : Jul 23 00:40:16 2025 GMT Subject: CN=45836A5305D335A8A7BA39A8186D965D2452DA13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:06:92:58:36:ea:fc:bb:57:0e:a2:01:ba: 77:bb:30:93:76:4b:81:3d:b0:f1:af:72:fa:0d:0a: 8a:6d:67:0e:34:0b:51:98:5d:29:2e:a5:15:78:2d: a5:d6:7e:56:be:e7:53:34:43:11:96:04:ef:73:b4: d6:da:c1:55:5a:13:19:98:f3:42:3d:1b:12:7e:79: 9f:a9:82:ad:26:21:d0:11:35:ba:35:98:63:7e:2a: 7d:4a:3f:44:a0:30:f8:3e:3a:43:94:da:8e:ff:7c: 68:41:25:7e:41:f0:af:85:d9:59:37:02:bc:03:42: ec:65:1e:96:49:38:8c:b3:6b:e7:4f:a6:4c:25:8d: ff:b9:19:0e:67:21:93:da:5a:fa:22:29:22:63:e7: 01:7d:c9:7d:98:eb:32:56:22:c6:97:28:c1:e2:0c: 39:ef:e3:48:2a:b8:44:f6:ce:b3:f8:62:5e:e4:48: 95:04:26:df:32:10:65:7c:eb:f6:bb:b1:12:14:97: 5c:63:8b:8c:ae:f6:cd:5f:96:c6:a2:cb:b5:7e:63: 3b:ad:3a:5f:2e:c7:b6:e6:b9:4f:d6:3b:a3:62:c0: 7a:dd:36:b7:ab:69:42:e5:6f:b9:fa:f1:08:ff:8f: c2:23:27:97:86:53:fe:44:65:aa:0a:dc:3f:eb:a8: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:83:6A:53:05:D3:35:A8:A7:BA:39:A8:18:6D:96:5D:24:52:DA:13 X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:71:56:9e:9a:c1:46:b6:35:71:4f:40:95:04:e3:79:75:f7: 92:4d:5e:97:28:d7:36:52:58:1a:43:b5:d5:01:a4:83:c3:24: a2:60:ce:6d:53:37:ce:95:2b:06:ef:75:b4:ca:62:ab:3f:c0: 7c:ba:4e:cb:0d:4c:cd:35:0d:93:47:ca:27:97:bd:d0:1b:e2: ff:59:4d:69:58:14:b2:50:31:71:f8:0e:29:b6:64:85:f2:a4: c7:3b:da:d1:5b:f1:73:1e:8e:6c:36:31:1c:60:9a:72:9d:95: 4f:e9:bd:a0:93:6e:81:bf:73:84:5d:06:4f:9c:59:2d:26:9c: 58:00:d4:ca:38:b6:99:19:6b:bc:fe:ca:b9:bc:ce:65:eb:9f: 14:de:8d:72:28:1a:00:89:67:ea:de:b9:33:29:80:e0:c4:19: 89:5c:ab:b8:52:b4:26:24:d3:0e:e7:53:7b:12:61:7d:3b:fe: 86:0f:ec:01:75:bb:0e:54:a1:b7:f4:f8:fb:39:1b:43:9d:f3: 11:e1:59:ab:84:a4:74:06:ae:ea:62:53:76:3c:2c:62:d3:c8: 2f:ab:96:92:ed:c0:84:76:9b:7c:bc:9e:40:c3:fd:4d:e4:b5: 4c:04:ed:52:47:19:b8:09:64:e6:12:bc:77:c3:81:33:62:3b: 5a:5b:92:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPq+h8XzxCwYzlKOf7kYXBzNsiB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTA3MTkyMTI2MTZaFw0yNTA3MjMwMDQwMTZaMDMxMTAvBgNV BAMTKDQ1ODM2QTUzMDVEMzM1QThBN0JBMzlBODE4NkQ5NjVEMjQ1MkRBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rQaSWDbq/LtXDqIBune7MJN2 S4E9sPGvcvoNCoptZw40C1GYXSkupRV4LaXWfla+51M0QxGWBO9ztNbawVVaExmY 80I9GxJ+eZ+pgq0mIdARNbo1mGN+Kn1KP0SgMPg+OkOU2o7/fGhBJX5B8K+F2Vk3 ArwDQuxlHpZJOIyza+dPpkwljf+5GQ5nIZPaWvoiKSJj5wF9yX2Y6zJWIsaXKMHi DDnv40gquET2zrP4Yl7kSJUEJt8yEGV86/a7sRIUl1xji4yu9s1flsaiy7V+Yzut Ol8ux7bmuU/WO6NiwHrdNreraULlb7n68Qj/j8IjJ5eGU/5EZaoK3D/rqIb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYNqUwXTNainujmoGG2WXSRS2hMwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINxVp6awUa2NXFPQJUE43l195JNXpco1zZS WBpDtdUBpIPDJKJgzm1TN86VKwbvdbTKYqs/wHy6TssNTM01DZNHyieXvdAb4v9Z TWlYFLJQMXH4Dim2ZIXypMc72tFb8XMejmw2MRxgmnKdlU/pvaCTboG/c4RdBk+c WS0mnFgA1Mo4tpkZa7z+yrm8zmXrnxTejXIoGgCJZ+reuTMpgODEGYlcq7hStCYk 0w7nU3sSYX07/oYP7AF1uw5Uobf0+Ps5G0Od8xHhWauEpHQGrupiU3Y8LGLTyC+r lpLtwIR2m3y8nkDD/U3ktUwE7VJHGbgJZOYSvHfDgTNiO1pbktg= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:56 2025 by rpki-client