$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json) Hash identifier: yx5GaVDjyJQI8KMgKKwAIozOd7T5R2PJT7t4RTmrGjg= Subject key identifier: 1C:7B:D2:A6:38:7B:4E:4E:52:71:CD:44:FB:60:BE:54:4B:98:EA:EC Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 0BEA95F85041A0C19DE2120F2A3EB68EC04E1675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft Manifest number: 01EC Signing time: Wed 23 Jul 2025 03:10:57 +0000 Manifest this update: Wed 23 Jul 2025 03:05:57 +0000 Manifest next update: Sat 26 Jul 2025 13:34:57 +0000 Files and hashes: 1: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: 6pWVSpFXVKH6EqJrCt3rmPa2Bj+n9pO/wL1SNQ2qvtg=) 2: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: eEkexwsmwAc7ZE60b/qQArVV0CvqaQoDznEA5fqIhts=) 3: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: 5ODCvpJsl+XnXZcZjU6a9g5frNriLFm4lEWGxVY15JQ=) 4: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: YfWdCVoIH1DQu9Nb8zknsBq3gjAx6STdl7+GflAiVVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 13:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ea:95:f8:50:41:a0:c1:9d:e2:12:0f:2a:3e:b6:8e:c0:4e:16:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Jul 23 03:05:57 2025 GMT Not After : Jul 26 13:34:57 2025 GMT Subject: CN=1C7BD2A6387B4E4E5271CD44FB60BE544B98EAEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d3:35:8c:b1:26:0c:7b:aa:8f:c0:01:44:82: 9b:35:81:2f:e6:e1:ac:34:26:c2:3a:95:7b:35:aa: 9a:59:13:58:7d:48:28:cd:21:44:b6:dd:11:4b:51: 18:fa:3b:8d:04:67:6c:89:9d:19:61:18:d1:49:15: b3:bd:d2:5a:53:9e:95:40:a9:44:d9:0c:8a:b6:41: b1:44:20:e8:97:ac:be:14:b0:f4:37:a2:ec:58:2f: c7:d7:83:dd:62:ce:c2:cd:b4:0d:ed:17:06:a0:78: b1:e3:4d:00:36:16:7b:88:b0:e9:98:3a:71:34:96: 92:47:64:17:32:00:7a:9d:a2:35:c6:88:49:b1:12: d5:08:90:96:f2:4d:6e:ae:3e:41:dd:96:9f:89:97: cd:0a:e2:55:ec:a3:85:dc:58:ed:e4:7d:8d:a8:5e: a1:df:5d:49:b8:e9:a3:53:41:f7:fc:2d:96:a6:e2: 68:75:46:4b:81:9c:c2:13:0a:70:e3:c9:78:ec:83: 48:9a:1c:6c:10:58:b0:c4:52:f9:e5:04:20:f9:1b: 2f:f1:ad:7e:0e:da:b8:06:32:83:af:78:71:7b:a4: 39:37:c7:c5:9c:e2:8e:cd:a0:a5:ed:83:64:04:84: 16:04:84:d3:e9:47:46:9e:5b:f4:4e:3c:19:1b:90: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7B:D2:A6:38:7B:4E:4E:52:71:CD:44:FB:60:BE:54:4B:98:EA:EC X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5d:85:a7:d5:f5:3e:18:20:fa:c6:71:98:63:5a:5c:1a:7b: 5a:7e:bd:af:a4:4f:b5:2d:49:e4:26:ea:8b:9a:89:d4:20:e5: a4:2a:b5:ff:2f:28:a6:0e:9b:b2:f4:a1:ea:06:82:00:e8:29: db:ba:7f:32:f3:57:13:cb:cc:0d:9b:bc:c9:2e:5c:f2:34:3c: f4:5f:ab:e5:2e:38:63:fd:ba:e5:f3:e8:e1:f2:56:19:d6:e1: 61:49:18:59:6b:36:ac:ee:e4:f2:56:8e:14:9f:7d:f2:33:8e: 14:85:a8:29:17:e0:a7:5e:71:65:95:e8:46:64:59:cc:1e:cd: 70:09:15:56:09:91:91:bb:57:6a:18:be:c0:48:5b:3b:4b:3d: 26:4b:28:c9:97:a8:21:c9:c8:2e:c3:06:0a:5e:0f:5e:93:05: 48:f3:4e:4b:bf:d6:bb:bf:ea:f5:ba:39:72:fe:2c:7e:d7:16: bd:db:de:8b:d6:d9:08:f2:b7:c0:5d:c2:df:63:8d:e7:28:b7: 84:37:42:4e:b9:d4:cd:a0:db:c1:cf:78:33:95:52:3c:3d:3e: fe:88:3a:a1:69:f2:34:bb:81:81:43:55:a3:36:42:f7:71:f9: f7:f9:db:f0:40:52:bd:eb:c1:47:62:fa:33:e3:72:87:61:55: ad:41:64:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+qV+FBBoMGd4hIPKj62jsBOFnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNTA3MjMwMzA1NTdaFw0yNTA3MjYxMzM0NTdaMDMxMTAvBgNV BAMTKDFDN0JEMkE2Mzg3QjRFNEU1MjcxQ0Q0NEZCNjBCRTU0NEI5OEVBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0zWMsSYMe6qPwAFEgps1gS/m 4aw0JsI6lXs1qppZE1h9SCjNIUS23RFLURj6O40EZ2yJnRlhGNFJFbO90lpTnpVA qUTZDIq2QbFEIOiXrL4UsPQ3ouxYL8fXg91izsLNtA3tFwageLHjTQA2FnuIsOmY OnE0lpJHZBcyAHqdojXGiEmxEtUIkJbyTW6uPkHdlp+Jl80K4lXso4XcWO3kfY2o XqHfXUm46aNTQff8LZam4mh1RkuBnMITCnDjyXjsg0iaHGwQWLDEUvnlBCD5Gy/x rX4O2rgGMoOveHF7pDk3x8Wc4o7NoKXtg2QEhBYEhNPpR0aeW/ROPBkbkCtJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHHvSpjh7Tk5Scc1E+2C+VEuY6uwwHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBdhafV9T4YIPrGcZhjWlwae1p+va+kT7Ut SeQm6ouaidQg5aQqtf8vKKYOm7L0oeoGggDoKdu6fzLzVxPLzA2bvMkuXPI0PPRf q+UuOGP9uuXz6OHyVhnW4WFJGFlrNqzu5PJWjhSfffIzjhSFqCkX4KdecWWV6EZk WcwezXAJFVYJkZG7V2oYvsBIWztLPSZLKMmXqCHJyC7DBgpeD16TBUjzTku/1ru/ 6vW6OXL+LH7XFr3b3ovW2Qjyt8Bdwt9jjecot4Q3Qk651M2g28HPeDOVUjw9Pv6I OqFp8jS7gYFDVaM2Qvdx+ff52/BAUr3rwUdi+jPjcodhVa1BZDc= -----END CERTIFICATE-----Generated at Thu Jul 24 17:08:40 2025 by rpki-client