$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: vCCfdYkzrC/1RCrDFnlxu8ipCXJKlh8+vTQkcXOoPXw= Subject key identifier: EB:50:20:98:92:FD:F8:24:C5:E9:89:FB:95:D6:85:B0:B6:7A:46:E7 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 339AAB93BDEA856BEE385510393603076C832C21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0349 Signing time: Sat 19 Jul 2025 15:01:17 +0000 Manifest this update: Sat 19 Jul 2025 14:56:17 +0000 Manifest next update: Tue 22 Jul 2025 20:30:17 +0000 Files and hashes: 1: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) 2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) 3: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: Uy3hOGC1HSGYQfUGYLExRmsKpZARUgGPMn13MgwgGbc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9a:ab:93:bd:ea:85:6b:ee:38:55:10:39:36:03:07:6c:83:2c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Jul 19 14:56:17 2025 GMT Not After : Jul 22 20:30:17 2025 GMT Subject: CN=EB50209892FDF824C5E989FB95D685B0B67A46E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:4e:1f:de:75:56:0f:97:42:11:c7:54:84: 36:9f:43:25:9f:05:d1:43:1b:87:15:3e:c2:78:44: a8:45:03:2a:f7:2e:c0:04:75:7d:d2:02:25:0c:50: 69:3d:ea:4d:80:7a:e7:ad:cd:d1:55:8c:58:66:ad: e2:51:f6:51:c9:69:e8:10:23:5c:ed:af:f0:16:74: bb:1c:3c:f8:81:f2:51:eb:79:80:40:34:52:a3:e6: 83:49:ce:e5:f0:73:a9:7a:11:5a:69:60:5c:5c:90: 89:47:4c:bc:51:31:a3:ca:03:d4:d1:d1:05:08:5c: ba:96:b9:4e:4e:fe:9e:fb:a9:5e:29:c0:42:fc:55: ee:22:3f:65:b9:46:77:c4:bb:fb:0b:b3:4c:06:a5: b7:0b:5e:78:e2:02:b0:7d:42:f5:96:71:61:1f:3e: af:5d:b3:38:b8:a1:d2:a2:31:c0:0f:26:20:b2:71: 6f:42:bf:b4:47:ce:ef:6b:53:06:92:a8:f0:95:61: df:b5:c7:43:49:5a:bd:f9:53:05:a1:b4:03:ee:6e: 7c:c1:c7:99:3f:1b:2b:b7:37:54:ff:4a:50:3a:d5: d0:4c:35:0c:f8:b4:ea:27:aa:1c:5e:b4:72:27:52: 66:de:a3:c5:db:2a:9a:27:a7:4c:3a:d7:ec:2a:c3: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:50:20:98:92:FD:F8:24:C5:E9:89:FB:95:D6:85:B0:B6:7A:46:E7 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b1:46:cd:3e:42:00:98:2f:e5:a6:b8:7b:b9:32:d1:99:16: 18:50:80:1f:60:7f:10:0f:a2:ce:05:d1:6a:07:eb:02:52:69: 1f:3b:10:08:9b:98:0a:8e:1e:ea:fd:cf:1a:a4:94:c2:4b:e4: 68:25:8c:6d:8b:9c:5f:a9:5d:66:af:2c:88:79:e4:3e:31:7a: 79:dd:29:82:63:0a:2a:a3:b8:85:e7:65:5c:d4:1c:9b:06:dd: d4:12:b1:ac:78:01:2f:83:24:e6:eb:85:6d:5b:e6:84:45:58: 67:b5:90:f7:52:cb:56:68:70:2f:10:48:da:32:a5:11:d4:6a: 75:76:59:7b:64:e1:ac:17:e0:83:21:0c:ec:23:cc:02:13:94: 9c:ca:95:e9:8c:65:7b:71:c5:5a:08:e9:9d:1e:3d:a5:bf:fb: ad:93:e8:92:d3:07:ff:f7:b8:28:83:38:26:5f:4d:63:ac:a2: b4:04:b4:8f:5c:2c:b8:a9:e5:b8:98:04:a2:04:55:dc:e0:bd: 01:1d:2b:33:53:be:6a:05:c9:12:8f:4f:7f:7a:3e:28:48:17: 03:22:fd:b3:d4:3e:63:32:7f:0e:d5:0b:40:2a:6e:51:44:e4: 2d:7d:dc:2a:e2:24:88:5e:1e:d1:30:6b:11:2f:9d:99:6d:55: 08:53:75:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5qrk73qhWvuOFUQOTYDB2yDLCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTA3MTkxNDU2MTdaFw0yNTA3MjIyMDMwMTdaMDMxMTAvBgNV BAMTKEVCNTAyMDk4OTJGREY4MjRDNUU5ODlGQjk1RDY4NUIwQjY3QTQ2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDx04f3nVWD5dCEcdUhDafQyWf BdFDG4cVPsJ4RKhFAyr3LsAEdX3SAiUMUGk96k2AeuetzdFVjFhmreJR9lHJaegQ I1ztr/AWdLscPPiB8lHreYBANFKj5oNJzuXwc6l6EVppYFxckIlHTLxRMaPKA9TR 0QUIXLqWuU5O/p77qV4pwEL8Ve4iP2W5RnfEu/sLs0wGpbcLXnjiArB9QvWWcWEf Pq9dszi4odKiMcAPJiCycW9Cv7RHzu9rUwaSqPCVYd+1x0NJWr35UwWhtAPubnzB x5k/Gyu3N1T/SlA61dBMNQz4tOonqhxetHInUmbeo8XbKponp0w61+wqw38/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU61AgmJL9+CTF6Yn7ldaFsLZ6RucwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqxRs0+QgCYL+WmuHu5MtGZFhhQgB9gfxAP os4F0WoH6wJSaR87EAibmAqOHur9zxqklMJL5GgljG2LnF+pXWavLIh55D4xennd KYJjCiqjuIXnZVzUHJsG3dQSsax4AS+DJObrhW1b5oRFWGe1kPdSy1ZocC8QSNoy pRHUanV2WXtk4awX4IMhDOwjzAITlJzKlemMZXtxxVoI6Z0ePaW/+62T6JLTB//3 uCiDOCZfTWOsorQEtI9cLLip5biYBKIEVdzgvQEdKzNTvmoFyRKPT396PihIFwMi /bPUPmMyfw7VC0AqblFE5C193CriJIheHtEwaxEvnZltVQhTdYA= -----END CERTIFICATE-----Generated at Mon Jul 21 08:58:12 2025 by rpki-client