$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: GUTTYNAQg+WMMe881m0asbVuB0cNDkLGzJoA+7isFow= Subject key identifier: C7:68:76:4D:5F:EB:15:E8:4F:8D:02:F7:8C:74:EA:CC:DA:99:C4:A4 Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 7BE58064EB2D7DB7043A90CFC8877CCA73D3E690 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: FC Signing time: Sat 19 Jul 2025 03:21:08 +0000 Manifest this update: Sat 19 Jul 2025 03:16:08 +0000 Manifest next update: Tue 22 Jul 2025 10:50:08 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: 3itX+ymyow7H7caAXiukwM3grs63J+aLAJiSSwb1VfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 10:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e5:80:64:eb:2d:7d:b7:04:3a:90:cf:c8:87:7c:ca:73:d3:e6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Jul 19 03:16:08 2025 GMT Not After : Jul 22 10:50:08 2025 GMT Subject: CN=C768764D5FEB15E84F8D02F78C74EACCDA99C4A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:5e:91:a4:b8:46:23:be:38:93:82:f0:84: ae:89:6d:60:ad:b4:92:b1:93:fe:5c:d7:fa:e0:0f: 92:bb:c6:e2:5f:a9:f4:a3:74:d2:17:dc:9a:c3:76: 57:7c:ea:70:07:5a:0b:ef:68:83:5a:0f:a2:a9:a7: e1:a4:42:6a:eb:4d:c9:ed:e1:ee:8a:14:92:65:53: c9:36:7d:66:5b:39:43:9b:36:0d:97:82:c9:a9:fe: 1b:86:52:d9:a1:cf:b3:75:7d:6d:3d:c6:49:13:e6: 8b:75:cd:03:25:ab:e2:f3:ad:83:ad:5f:bc:45:37: 5e:6d:fe:d1:fa:ad:6c:e6:c1:94:7d:f6:44:e6:f2: 90:ca:41:c2:60:7f:9c:c5:1c:48:9d:6e:e3:38:56: f0:9a:87:0f:e1:5f:88:7e:aa:cb:7a:e2:ed:a5:a7: 77:06:77:ee:7d:11:27:f0:13:70:60:ce:ab:22:9d: 46:fe:55:8a:3c:89:51:6f:6e:7f:d9:64:11:d6:1c: 96:77:ac:9c:91:41:4f:cf:cb:fe:c0:40:c6:dc:f9: 0e:4e:0b:50:cb:1f:4c:d9:f4:dc:5f:08:e6:f7:d7: 08:11:56:b7:0b:11:f1:ac:18:ad:6c:10:ac:c1:fb: a1:9e:c8:da:56:bf:69:aa:75:1e:b4:ad:a1:e3:f5: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:68:76:4D:5F:EB:15:E8:4F:8D:02:F7:8C:74:EA:CC:DA:99:C4:A4 X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a6:f9:6d:d9:53:9e:48:f7:3d:2a:bf:87:7b:91:79:ba:20: d9:5f:20:c3:73:56:90:4a:04:52:e9:71:78:77:96:80:57:bc: fb:c0:e3:a4:7e:87:5e:a8:46:34:39:d7:78:9a:d9:3d:2d:f6: 96:ce:c9:3e:75:1e:01:0f:10:e2:0f:b5:15:b7:43:97:44:48: 31:cc:cf:d7:ad:02:53:d0:55:c7:3c:e8:e1:05:78:84:4d:18: 4c:14:3c:b0:24:50:42:1a:ee:83:f1:7c:31:18:ac:f1:94:e2: cc:87:99:18:3d:dd:03:58:11:c0:6d:05:bd:73:00:91:de:e1: 78:99:a8:50:a9:03:0a:5a:43:53:bb:d3:43:56:b3:dd:39:61: 13:8e:6c:e4:07:98:45:44:c1:ea:88:5d:12:e0:ac:0a:9c:51: 14:d5:0f:b4:cd:bb:72:8d:bc:ce:8f:27:62:ce:e7:37:1b:5f: 5a:4b:be:6d:b2:e4:b3:5e:31:ce:0d:ad:fb:b7:c8:df:19:53: 5a:f1:be:3e:ed:ad:53:76:47:fe:e0:e9:8a:14:b3:ac:1a:9c: e7:3d:29:be:87:4c:16:04:52:78:23:b2:85:d3:3a:42:58:45: 04:a1:7b:0b:26:19:a2:5b:82:3d:07:af:f4:71:e0:1c:17:78: 5c:51:5b:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+WAZOstfbcEOpDPyId8ynPT5pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTA3MTkwMzE2MDhaFw0yNTA3MjIxMDUwMDhaMDMxMTAvBgNV BAMTKEM3Njg3NjRENUZFQjE1RTg0RjhEMDJGNzhDNzRFQUNDREE5OUM0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1F6RpLhGI744k4LwhK6JbWCt tJKxk/5c1/rgD5K7xuJfqfSjdNIX3JrDdld86nAHWgvvaINaD6Kpp+GkQmrrTcnt 4e6KFJJlU8k2fWZbOUObNg2Xgsmp/huGUtmhz7N1fW09xkkT5ot1zQMlq+LzrYOt X7xFN15t/tH6rWzmwZR99kTm8pDKQcJgf5zFHEidbuM4VvCahw/hX4h+qst64u2l p3cGd+59ESfwE3BgzqsinUb+VYo8iVFvbn/ZZBHWHJZ3rJyRQU/Py/7AQMbc+Q5O C1DLH0zZ9NxfCOb31wgRVrcLEfGsGK1sEKzB+6GeyNpWv2mqdR60raHj9dF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx2h2TV/rFehPjQL3jHTqzNqZxKQwHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABum+W3ZU55I9z0qv4d7kXm6INlfIMNzVpBK BFLpcXh3loBXvPvA46R+h16oRjQ513ia2T0t9pbOyT51HgEPEOIPtRW3Q5dESDHM z9etAlPQVcc86OEFeIRNGEwUPLAkUEIa7oPxfDEYrPGU4syHmRg93QNYEcBtBb1z AJHe4XiZqFCpAwpaQ1O700NWs905YROObOQHmEVEweqIXRLgrAqcURTVD7TNu3KN vM6PJ2LO5zcbX1pLvm2y5LNeMc4Nrfu3yN8ZU1rxvj7trVN2R/7g6YoUs6wanOc9 Kb6HTBYEUngjsoXTOkJYRQShewsmGaJbgj0Hr/Rx4BwXeFxRW7I= -----END CERTIFICATE-----Generated at Mon Jul 21 08:32:19 2025 by rpki-client