$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: 0N9BtDugBizkFp70N49x6G6zZseIuG2xjN7vqk6smPY= Subject key identifier: 43:57:9D:27:93:6A:60:14:D0:C2:A1:A5:38:DB:51:28:6C:25:C2:BE Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 52905275FDAB0DA090BA8732B0D9398ED5C5F610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 0291 Signing time: Tue 22 Jul 2025 05:32:17 +0000 Manifest this update: Tue 22 Jul 2025 05:27:17 +0000 Manifest next update: Fri 25 Jul 2025 07:19:17 +0000 Files and hashes: 1: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: zxy18An7w/KIMS3mYNQrforyeazQ50gSG64088S5yQ8=) 2: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: tNCrkyzG4AciCmgimqvIw2bQeulAylk5FoXAJrDEuic=) 3: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: HpSArK9wKsGD/4QjsHQDEChpbO5zQMtEgV2WhSH9EBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 07:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:90:52:75:fd:ab:0d:a0:90:ba:87:32:b0:d9:39:8e:d5:c5:f6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Jul 22 05:27:17 2025 GMT Not After : Jul 25 07:19:17 2025 GMT Subject: CN=43579D27936A6014D0C2A1A538DB51286C25C2BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:61:dc:9b:b0:3a:be:f0:f4:4f:c9:ef:27: 6d:9d:95:27:d0:ec:86:cc:ba:ed:55:38:24:de:26: 06:1c:18:d9:d1:8f:b4:fb:ac:b4:16:6e:43:df:c4: e6:fa:56:15:64:e4:67:e0:c4:f4:8c:1b:7e:71:32: 7a:d0:7f:86:17:7c:78:95:57:ef:be:b4:88:de:5f: f7:d9:b0:59:b9:57:a9:99:19:f0:01:88:3f:e8:af: 0d:16:c5:d5:c4:44:f3:86:79:f8:af:9d:78:55:9c: 7d:c7:f9:c0:3f:50:41:e2:c9:70:98:47:aa:86:34: 4f:a0:21:e1:1e:f4:da:f8:63:3d:eb:b1:6b:1c:80: c4:02:59:49:c9:da:15:8e:e2:d0:b9:64:47:39:a0: ae:78:0b:c5:07:f6:25:fd:dc:4c:84:52:2f:26:6d: c6:94:eb:31:17:3b:63:62:d2:24:f6:9f:df:b2:ab: 8b:68:78:37:1f:e3:53:07:35:c4:c2:3f:24:87:5a: bf:c1:c9:e7:d4:08:55:41:24:27:c7:09:b4:2e:26: ad:e3:79:49:e9:76:9f:3a:c2:74:67:b8:32:f6:89: 43:2c:a7:58:19:82:24:f8:f4:bc:d1:17:a0:c7:29: 9c:af:ed:1e:c3:3b:b3:cc:3d:b8:f7:61:02:93:9e: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:57:9D:27:93:6A:60:14:D0:C2:A1:A5:38:DB:51:28:6C:25:C2:BE X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6d:ec:49:63:52:a8:fb:d7:50:a2:96:78:5b:17:ef:0f:7a: bc:77:fa:b6:67:da:6b:e0:dc:5a:fd:a2:a1:c4:90:6a:fa:0d: 15:81:a9:bb:dd:fd:37:cd:3f:9c:f2:7c:f9:b4:54:f7:2c:5e: b9:f5:f1:81:5a:9d:0e:a8:6d:05:a6:cd:bf:4c:40:3b:bb:52: 50:26:ce:50:60:28:9b:62:bd:b3:d8:2b:86:f3:62:cf:d7:7f: e6:5d:4f:33:9b:02:9f:1b:36:33:89:8c:40:e8:c1:30:d5:bb: b1:76:81:38:ac:ab:0c:50:18:35:37:38:b9:e4:42:d9:ef:24: 89:0a:ad:79:b4:f0:7b:55:b6:23:53:66:e4:68:ce:25:a6:36: 7f:1d:30:72:93:f6:11:5c:f8:8a:9a:a2:6d:e1:b1:9f:2e:1e: 44:43:67:30:4d:80:47:59:4f:dd:0c:72:98:37:18:39:4a:fd: 37:9c:a7:c5:9f:fb:3c:43:df:7c:5f:5f:5e:d1:74:b3:d7:a8: e1:40:0a:4e:73:5c:71:65:9b:3b:f6:d2:af:1f:e8:60:e8:58: 55:be:6c:b3:db:f3:57:f6:5f:f9:d0:e9:4a:41:28:84:d7:5a: 19:a2:f4:aa:f8:4d:76:2f:c8:af:47:34:77:8f:89:c0:da:de: 91:4e:6e:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpBSdf2rDaCQuocysNk5jtXF9hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNTA3MjIwNTI3MTdaFw0yNTA3MjUwNzE5MTdaMDMxMTAvBgNV BAMTKDQzNTc5RDI3OTM2QTYwMTREMEMyQTFBNTM4REI1MTI4NkMyNUMyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3WHcm7A6vvD0T8nvJ22dlSfQ 7IbMuu1VOCTeJgYcGNnRj7T7rLQWbkPfxOb6VhVk5GfgxPSMG35xMnrQf4YXfHiV V+++tIjeX/fZsFm5V6mZGfABiD/orw0WxdXERPOGefivnXhVnH3H+cA/UEHiyXCY R6qGNE+gIeEe9Nr4Yz3rsWscgMQCWUnJ2hWO4tC5ZEc5oK54C8UH9iX93EyEUi8m bcaU6zEXO2Ni0iT2n9+yq4toeDcf41MHNcTCPySHWr/ByefUCFVBJCfHCbQuJq3j eUnpdp86wnRnuDL2iUMsp1gZgiT49LzRF6DHKZyv7R7DO7PMPbj3YQKTnrM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ1edJ5NqYBTQwqGlONtRKGwlwr4wHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtt7EljUqj711CilnhbF+8Perx3+rZn2mvg 3Fr9oqHEkGr6DRWBqbvd/TfNP5zyfPm0VPcsXrn18YFanQ6obQWmzb9MQDu7UlAm zlBgKJtivbPYK4bzYs/Xf+ZdTzObAp8bNjOJjEDowTDVu7F2gTisqwxQGDU3OLnk QtnvJIkKrXm08HtVtiNTZuRoziWmNn8dMHKT9hFc+Iqaom3hsZ8uHkRDZzBNgEdZ T90Mcpg3GDlK/Tecp8Wf+zxD33xfX17RdLPXqOFACk5zXHFlmzv20q8f6GDoWFW+ bLPb81f2X/nQ6UpBKITXWhmi9Kr4TXYvyK9HNHePicDa3pFObuc= -----END CERTIFICATE-----Generated at Thu Jul 24 05:00:32 2025 by rpki-client