$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: nvIoIIY1a4kk+7o4aoRMZJcae/jSPMpYxq151t/rDcA= Subject key identifier: 1F:1F:F1:37:CB:C8:8F:EF:62:AE:C9:58:38:0B:BC:ED:78:A7:CD:70 Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 7976AAD21375AA064C8CBA57512C7D47DECAF373 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: 018D Signing time: Tue 22 Jul 2025 09:40:42 +0000 Manifest this update: Tue 22 Jul 2025 09:35:42 +0000 Manifest next update: Fri 25 Jul 2025 12:51:42 +0000 Files and hashes: 1: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: bY09S58JuRMnRZFg/qJz8l2GALj8CEukiohA16BsJD4=) 2: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: k/oOhva4u0+uUmnQy4RzSuHAXdMPro7ciSJANhFg1no=) 3: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: woe8wTOCkgzw1AhZmS0qc2WfDSk5Txn9xI0A9rGDrdg=) 4: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: fEJQJx/Txzr+vMmd8tCh4JvmoJuakGNPJHf3zsUQTcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 12:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:76:aa:d2:13:75:aa:06:4c:8c:ba:57:51:2c:7d:47:de:ca:f3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Jul 22 09:35:42 2025 GMT Not After : Jul 25 12:51:42 2025 GMT Subject: CN=1F1FF137CBC88FEF62AEC958380BBCED78A7CD70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:4d:1b:e0:3e:86:f5:f1:e2:95:4a:47:ab: ff:13:8e:be:81:7b:43:d6:01:25:7e:45:23:83:24: 14:3e:85:0e:71:b3:a5:41:e8:8c:71:44:9b:a6:11: cd:f2:37:83:9f:a3:a2:c2:71:5b:22:92:d5:a1:d8: 93:f5:59:fa:ce:dd:a4:3b:13:62:aa:cf:9e:df:b5: ac:9b:c4:49:ef:47:1f:a8:a0:b6:fa:01:b6:82:cb: 69:9e:b7:25:09:2a:4e:aa:dc:1e:1e:e2:33:ec:e1: 30:b8:90:7f:ee:6b:a8:0b:c8:6b:cd:08:c6:b4:6d: 16:32:6d:f8:ed:8c:d4:f7:91:f0:58:58:d5:13:f3: 72:1c:8e:c5:2a:10:ef:e6:d8:32:b2:47:75:f5:5a: 3b:c2:70:4d:0f:2a:bf:73:b7:d1:7d:80:0c:5c:7d: 3b:31:75:43:aa:4b:54:a9:2f:ba:54:ab:a0:da:61: 56:45:2a:ad:d2:2a:f2:12:a9:72:fe:ef:73:52:1b: c5:05:fa:08:20:8f:13:5f:8f:45:56:a0:b3:7c:8d: bb:ef:8d:89:2d:7f:dd:5e:ac:2b:f4:04:68:dc:dd: f2:21:79:35:b2:46:18:df:e1:e5:67:15:d4:fc:44: ab:af:d8:3f:f9:be:74:99:7c:c0:da:e9:21:bc:39: 33:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1F:F1:37:CB:C8:8F:EF:62:AE:C9:58:38:0B:BC:ED:78:A7:CD:70 X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:49:f3:51:5d:50:ca:39:85:fd:77:d3:cc:7f:5c:54:c6:e8: 11:c5:a7:fd:f5:9d:62:2f:2e:3a:84:f7:5c:6b:6a:23:7f:b8: 88:13:36:07:6a:31:22:58:b1:e4:d3:7b:a3:9f:08:5c:f2:08: 54:e9:86:f1:20:63:19:75:23:be:c4:a7:54:3f:a2:c2:1d:1d: 6a:7c:f7:4f:56:dd:06:d8:86:49:21:84:3f:5b:18:7a:74:cf: c9:f2:26:3f:89:5e:b7:81:0f:3c:09:69:48:3b:b8:df:17:a9: cf:07:a4:4e:0b:4f:f8:3f:4a:53:ba:6b:87:44:42:b0:6a:d9: 59:cc:57:49:b6:c9:df:1e:dd:a7:59:eb:33:91:30:c8:2a:44: e6:88:b4:05:17:bc:22:94:46:16:1f:c2:c1:5a:cd:cc:22:d5: 71:62:90:56:a7:54:6c:4c:57:6c:b0:35:6a:c0:31:74:76:3c: a2:76:58:28:cc:25:b6:cd:43:64:4a:0f:94:fa:28:5d:47:47: 40:e8:93:20:53:37:12:cd:3f:fa:33:72:36:0d:fb:aa:99:17: 53:76:d6:14:cb:cd:58:19:48:cc:3a:71:ec:f4:8b:8f:85:3e: 2f:d4:e3:3b:1e:62:29:1f:ec:7e:35:04:fc:82:15:d9:b6:e3: 3c:bb:a2:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXaq0hN1qgZMjLpXUSx9R97K83MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNTA3MjIwOTM1NDJaFw0yNTA3MjUxMjUxNDJaMDMxMTAvBgNV BAMTKDFGMUZGMTM3Q0JDODhGRUY2MkFFQzk1ODM4MEJCQ0VENzhBN0NENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBU0b4D6G9fHilUpHq/8Tjr6B e0PWASV+RSODJBQ+hQ5xs6VB6IxxRJumEc3yN4Ofo6LCcVsiktWh2JP1WfrO3aQ7 E2Kqz57ftaybxEnvRx+ooLb6AbaCy2metyUJKk6q3B4e4jPs4TC4kH/ua6gLyGvN CMa0bRYybfjtjNT3kfBYWNUT83IcjsUqEO/m2DKyR3X1WjvCcE0PKr9zt9F9gAxc fTsxdUOqS1SpL7pUq6DaYVZFKq3SKvISqXL+73NSG8UF+gggjxNfj0VWoLN8jbvv jYktf91erCv0BGjc3fIheTWyRhjf4eVnFdT8RKuv2D/5vnSZfMDa6SG8OTNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHx/xN8vIj+9irslYOAu87XinzXAwHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZJ81FdUMo5hf1308x/XFTG6BHFp/31nWIv LjqE91xraiN/uIgTNgdqMSJYseTTe6OfCFzyCFTphvEgYxl1I77Ep1Q/osIdHWp8 909W3QbYhkkhhD9bGHp0z8nyJj+JXreBDzwJaUg7uN8Xqc8HpE4LT/g/SlO6a4dE QrBq2VnMV0m2yd8e3adZ6zORMMgqROaItAUXvCKURhYfwsFazcwi1XFikFanVGxM V2ywNWrAMXR2PKJ2WCjMJbbNQ2RKD5T6KF1HR0DokyBTNxLNP/ozcjYN+6qZF1N2 1hTLzVgZSMw6cez0i4+FPi/U4zseYikf7H41BPyCFdm24zy7ov4= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:57 2025 by rpki-client