$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: xzQtCZqm3INhWZR5uzBvMUyC0wn4qDR/lxDto8uZ2XY= Subject key identifier: 19:A7:79:C8:27:EF:80:40:74:CA:B3:7F:BD:9E:0F:12:C9:D8:45:D6 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 5A0929091D9B5FCFD29275BB2A99EBEA12335EC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 016B Signing time: Sun 20 Jul 2025 09:32:13 +0000 Manifest this update: Sun 20 Jul 2025 09:27:13 +0000 Manifest next update: Wed 23 Jul 2025 14:30:13 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: wxHP5cAWu/keWKVK1SwqOtNPyiAppzkxzxfRX6erYyQ=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:09:29:09:1d:9b:5f:cf:d2:92:75:bb:2a:99:eb:ea:12:33:5e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Jul 20 09:27:13 2025 GMT Not After : Jul 23 14:30:13 2025 GMT Subject: CN=19A779C827EF804074CAB37FBD9E0F12C9D845D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:df:45:72:7e:1c:f4:fd:38:23:b2:95:9a: 1a:3b:f1:b1:3d:d4:b9:35:c0:11:de:42:d8:fb:d3: dc:bc:82:e0:02:56:e9:c8:be:c6:9e:67:12:0b:53: 6a:43:e6:65:bd:63:bd:54:47:19:6f:88:30:c1:cc: 97:cc:17:82:e4:a1:3d:c6:f5:39:fe:f6:88:f4:ff: 63:53:67:8b:6b:01:13:42:3d:5c:12:c8:20:c4:dc: 59:72:19:35:df:2d:d1:19:20:b9:da:77:d1:57:57: 93:d6:f3:22:ab:05:13:fc:85:51:f9:1a:8b:48:26: 03:d8:e4:a5:93:3a:a9:38:08:ab:2b:9d:de:d3:5a: 97:d2:4a:74:54:4a:ae:f7:6f:98:e0:9b:1b:72:1a: c6:4b:f4:34:d0:78:3d:c4:a9:fb:9b:4d:53:5c:6c: 2e:57:44:55:48:4e:64:95:ae:37:5e:e0:a2:a3:b0: de:37:e2:25:68:96:37:25:18:0f:45:c2:35:65:1e: 7a:ce:2d:df:30:e7:52:dd:90:b3:3f:6c:d7:d9:39: b3:f6:19:94:61:e8:85:28:16:8a:22:37:d2:93:38: ac:e9:1b:33:b8:cd:00:95:05:26:32:17:7d:c9:bd: 43:32:a1:0e:1f:5b:b9:c8:14:15:b9:c4:b8:ef:ed: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A7:79:C8:27:EF:80:40:74:CA:B3:7F:BD:9E:0F:12:C9:D8:45:D6 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:d4:22:fa:07:2d:bf:42:cb:bd:df:b8:7f:15:43:46:7e:ea: 7e:29:1b:a5:7e:f1:02:c7:22:1c:13:46:0a:b9:28:38:1f:9e: 61:bc:84:02:d4:77:62:64:79:1e:6a:82:c3:fb:a1:1f:02:f7: cc:2e:e7:0d:cb:51:67:80:63:d0:e3:c8:62:a9:74:31:ea:26: 84:7a:f4:24:4d:43:62:1b:4e:91:c0:eb:07:ec:cb:d4:79:37: 17:b2:f6:8f:00:03:f0:fb:56:c5:cd:69:40:aa:c0:d0:37:48: 0b:9c:56:f8:39:05:d2:80:10:83:dc:52:02:83:9b:7f:69:7a: de:9c:99:c7:0d:8c:d4:03:db:4e:39:9f:c6:a5:40:38:20:41: e2:bc:01:16:43:80:eb:41:94:57:af:6e:75:18:21:4e:ba:dc: 3c:46:62:11:fc:59:8e:8b:29:bb:30:8e:28:be:dc:35:0c:8c: f9:e9:a0:8a:65:d0:22:73:55:79:62:fa:36:07:14:7b:dd:2f: 78:61:54:d2:9b:3c:ee:db:fd:14:9b:ec:f6:26:be:8c:9c:bc: 39:12:2a:ae:46:9f:9e:d7:3c:86:26:bb:c1:b3:5d:fb:e1:af: 8f:49:2b:c3:0b:bf:f0:04:51:76:22:23:16:3a:0a:93:ef:dc: a6:9a:7d:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWgkpCR2bX8/SknW7Kpnr6hIzXsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTA3MjAwOTI3MTNaFw0yNTA3MjMxNDMwMTNaMDMxMTAvBgNV BAMTKDE5QTc3OUM4MjdFRjgwNDA3NENBQjM3RkJEOUUwRjEyQzlEODQ1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZd9Fcn4c9P04I7KVmho78bE9 1Lk1wBHeQtj709y8guACVunIvsaeZxILU2pD5mW9Y71URxlviDDBzJfMF4LkoT3G 9Tn+9oj0/2NTZ4trARNCPVwSyCDE3FlyGTXfLdEZILnad9FXV5PW8yKrBRP8hVH5 GotIJgPY5KWTOqk4CKsrnd7TWpfSSnRUSq73b5jgmxtyGsZL9DTQeD3EqfubTVNc bC5XRFVITmSVrjde4KKjsN434iVoljclGA9FwjVlHnrOLd8w51LdkLM/bNfZObP2 GZRh6IUoFooiN9KTOKzpGzO4zQCVBSYyF33JvUMyoQ4fW7nIFBW5xLjv7dHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGad5yCfvgEB0yrN/vZ4PEsnYRdYwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjUIvoHLb9Cy73fuH8VQ0Z+6n4pG6V+8QLH IhwTRgq5KDgfnmG8hALUd2JkeR5qgsP7oR8C98wu5w3LUWeAY9DjyGKpdDHqJoR6 9CRNQ2IbTpHA6wfsy9R5Nxey9o8AA/D7VsXNaUCqwNA3SAucVvg5BdKAEIPcUgKD m39pet6cmccNjNQD2045n8alQDggQeK8ARZDgOtBlFevbnUYIU663DxGYhH8WY6L Kbswjii+3DUMjPnpoIpl0CJzVXli+jYHFHvdL3hhVNKbPO7b/RSb7PYmvoycvDkS Kq5Gn57XPIYmu8GzXfvhr49JK8MLv/AEUXYiIxY6CpPv3KaafVs= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:22 2025 by rpki-client