$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: 9G04/CnB1jS8S0KBsN2/hxLgcd4wRRwYzpDCICdBqtg= Subject key identifier: C1:EF:90:48:09:4A:D3:0F:74:BA:83:21:F4:81:C7:E7:54:5A:41:C0 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 7DE46B926DA3F43A681913EC5AA3C6E475131BB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 04F1 Signing time: Mon 21 Jul 2025 07:00:02 +0000 Manifest this update: Mon 21 Jul 2025 06:55:02 +0000 Manifest next update: Thu 24 Jul 2025 08:07:02 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: yRgJhQWbyTkFFkg1jt6/uC0eo8XJd3NR/iCfRvvVviQ=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e4:6b:92:6d:a3:f4:3a:68:19:13:ec:5a:a3:c6:e4:75:13:1b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Jul 21 06:55:02 2025 GMT Not After : Jul 24 08:07:02 2025 GMT Subject: CN=C1EF9048094AD30F74BA8321F481C7E7545A41C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:22:89:5c:9f:b6:7a:9d:ef:9c:00:3f:52: 46:ee:af:78:b3:58:8f:4a:5c:c5:fe:39:b4:5f:1a: cb:84:4e:75:75:82:f6:1d:4c:99:e5:12:67:d4:37: 92:7b:13:fb:55:6d:12:b9:80:7a:17:59:f8:34:af: 3f:a0:bb:bc:d6:73:9f:0e:84:2d:36:b0:da:af:0a: 1b:29:12:6b:2c:e7:3e:d1:3f:c5:30:af:be:51:12: de:a6:d2:05:a0:42:c3:d5:66:06:2c:19:34:ef:24: 18:49:b5:a6:23:f4:c8:b4:5d:19:e8:63:23:54:dc: 0e:75:ce:3a:ce:7b:c5:4b:3f:49:ae:6b:53:15:f7: 69:b6:57:f1:36:21:a7:0a:8c:5b:39:c6:b4:c6:aa: fb:93:02:91:36:d8:69:29:03:bf:4d:64:58:14:50: 33:e1:dd:64:40:2f:08:c6:7a:d5:7b:c8:fe:bd:63: 5e:df:59:ed:ad:e3:bd:d2:7b:97:5a:69:de:89:ac: 34:7a:67:70:c3:61:6f:b2:d5:13:d1:12:e1:f3:92: 7f:61:91:82:46:12:c6:b1:4d:80:12:61:f1:be:46: ad:f1:17:76:45:a7:04:52:b2:70:72:b8:2c:23:32: 3e:6d:ab:7e:31:27:27:77:97:74:02:4b:07:09:d6: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EF:90:48:09:4A:D3:0F:74:BA:83:21:F4:81:C7:E7:54:5A:41:C0 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b4:ab:10:c9:c5:85:42:54:af:80:32:32:e1:b6:2e:a9:07: bb:ee:b4:f4:ec:6a:f4:85:78:17:76:8a:a9:15:f3:51:14:16: ca:8f:bf:fa:b1:b0:73:6c:ad:68:54:4b:6c:44:7e:97:7f:bc: 04:6f:2d:41:4b:d5:ba:93:6b:97:fa:a4:dd:07:67:8e:3e:53: 1f:49:f4:50:6d:1c:d8:a4:4f:e3:84:9d:e3:3b:b7:ef:59:1f: 1c:91:db:55:8e:8e:73:50:49:8b:8f:49:76:b9:54:59:89:b3: 25:90:2a:e2:a4:ed:29:a0:41:2d:6b:29:2f:b1:ea:71:7e:bc: be:91:05:8e:9c:d2:93:08:41:be:74:ec:d3:ae:78:00:57:45: 82:8d:8b:5b:ba:15:07:fe:35:06:07:de:51:37:25:9c:a8:70: a6:11:5f:25:47:3a:49:7a:36:9d:4e:e7:c8:2d:5f:8d:98:4d: 08:02:3e:40:20:ba:f7:6e:fb:16:d3:ca:1d:1a:99:4d:5e:2a: 68:53:87:b9:f7:4a:4b:70:9b:61:82:49:c4:26:09:66:65:a1: 80:ea:94:31:57:88:b8:96:15:df:92:fe:96:0b:04:b2:6c:b3: 81:85:94:bb:b8:33:8b:3e:99:b9:f8:db:26:7f:15:33:d2:ca: b9:82:4f:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeRrkm2j9DpoGRPsWqPG5HUTG7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTA3MjEwNjU1MDJaFw0yNTA3MjQwODA3MDJaMDMxMTAvBgNV BAMTKEMxRUY5MDQ4MDk0QUQzMEY3NEJBODMyMUY0ODFDN0U3NTQ1QTQxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDixyKJXJ+2ep3vnAA/Ukbur3iz WI9KXMX+ObRfGsuETnV1gvYdTJnlEmfUN5J7E/tVbRK5gHoXWfg0rz+gu7zWc58O hC02sNqvChspEmss5z7RP8Uwr75REt6m0gWgQsPVZgYsGTTvJBhJtaYj9Mi0XRno YyNU3A51zjrOe8VLP0mua1MV92m2V/E2IacKjFs5xrTGqvuTApE22GkpA79NZFgU UDPh3WRALwjGetV7yP69Y17fWe2t473Se5daad6JrDR6Z3DDYW+y1RPREuHzkn9h kYJGEsaxTYASYfG+Rq3xF3ZFpwRSsnByuCwjMj5tq34xJyd3l3QCSwcJ1sn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwe+QSAlK0w90uoMh9IHH51RaQcAwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy0qxDJxYVCVK+AMjLhti6pB7vutPTsavSF eBd2iqkV81EUFsqPv/qxsHNsrWhUS2xEfpd/vARvLUFL1bqTa5f6pN0HZ44+Ux9J 9FBtHNikT+OEneM7t+9ZHxyR21WOjnNQSYuPSXa5VFmJsyWQKuKk7SmgQS1rKS+x 6nF+vL6RBY6c0pMIQb507NOueABXRYKNi1u6FQf+NQYH3lE3JZyocKYRXyVHOkl6 Np1O58gtX42YTQgCPkAguvdu+xbTyh0amU1eKmhTh7n3Sktwm2GCScQmCWZloYDq lDFXiLiWFd+S/pYLBLJss4GFlLu4M4s+mbn42yZ/FTPSyrmCT1k= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:46 2025 by rpki-client