$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: GC8i2WZhO70HogbewG+0RGc7EL8KRAW74rZML7m1p7c= Subject key identifier: 16:0D:51:2A:F8:BA:AB:4E:2F:CC:F2:B2:6F:E9:4C:46:17:BA:61:C0 Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 614895E379BFDC013F2944CE5ACAE8B479EF784F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 01AA Signing time: Sun 20 Jul 2025 17:51:20 +0000 Manifest this update: Sun 20 Jul 2025 17:46:20 +0000 Manifest next update: Wed 23 Jul 2025 19:59:20 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: GcwCkoeMHzZ582Sfu8hp+/khifidjDwsJ5n6Z14tK0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 19:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:48:95:e3:79:bf:dc:01:3f:29:44:ce:5a:ca:e8:b4:79:ef:78:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Jul 20 17:46:20 2025 GMT Not After : Jul 23 19:59:20 2025 GMT Subject: CN=160D512AF8BAAB4E2FCCF2B26FE94C4617BA61C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:5e:37:74:14:98:95:5f:fe:f5:40:6c:86: 6f:05:d3:c9:2b:88:44:73:5f:45:b1:75:e3:59:fb: c2:f8:68:a2:21:4f:b2:77:f5:a2:cf:22:67:6a:1e: 95:e8:01:4b:63:d4:00:64:b3:06:11:b2:6d:25:81: 4f:ec:54:49:da:f6:a3:37:27:57:0e:b8:be:aa:e4: c0:00:5f:14:7e:e5:ac:14:c2:e5:b3:dd:cb:6a:07: 23:4d:22:30:06:ec:5a:16:80:e4:5e:8a:15:96:9f: 23:80:0b:36:cd:7d:49:cf:4b:41:3e:56:21:9a:bf: 03:07:1e:a0:35:f1:90:f8:cd:e9:79:d2:be:08:eb: 3e:03:17:3b:83:8d:b2:fa:18:02:72:32:a0:b8:66: de:c2:d9:54:d3:ab:90:bf:8c:df:cb:34:4c:75:7c: 3a:e2:0a:c0:2e:eb:49:46:ba:e7:0f:3d:55:c2:be: 53:b6:3d:2b:2c:e6:58:8c:d4:17:c9:4b:73:a8:38: 94:a5:5a:2d:f7:cf:8c:72:13:42:44:7f:5d:c0:62: 30:55:a8:63:d1:83:cb:ca:6d:58:39:23:37:4a:af: 42:c1:5c:0c:6c:3a:67:65:ce:7b:3c:b0:b6:92:96: 92:fd:7b:64:c1:05:47:bf:ce:9e:c3:05:cd:4b:3a: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0D:51:2A:F8:BA:AB:4E:2F:CC:F2:B2:6F:E9:4C:46:17:BA:61:C0 X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:17:9e:0e:06:64:a8:06:ac:12:3b:b9:76:fc:e1:eb:cb:81: 7f:35:f2:b0:73:65:c8:a7:5f:f3:79:7b:46:0e:2b:c6:e5:40: b2:87:29:02:ac:d4:5f:6f:5a:61:18:6b:04:52:d5:ff:cb:d8: 36:f5:34:fb:ea:a4:48:5a:88:e8:14:bf:b3:88:d3:3d:c5:a2: 6f:9c:9f:31:77:2c:6d:64:89:b9:cc:57:30:5a:f3:a8:d3:63: e4:04:f1:20:46:fc:71:03:48:a5:65:a2:d3:5b:c1:fb:0f:76: a0:de:05:ce:a3:a1:8e:a2:5c:35:0f:95:d7:28:9e:d6:c8:82: 9d:9b:38:9d:db:3c:1d:23:9b:52:b6:f5:dc:98:09:6f:89:b7: 29:28:ba:9c:54:db:90:6b:ae:3e:68:e0:73:cb:16:f7:0f:c2: df:14:44:fd:85:1b:d5:80:f6:a3:11:08:4f:ae:91:8a:70:f4: c7:bb:9f:ac:62:59:a8:8c:d4:c6:61:f8:07:93:68:59:f8:55: 18:ca:50:a5:20:f9:9b:d8:51:91:73:5c:16:27:5d:ba:eb:ca: da:0b:56:87:9d:47:5a:0c:b1:14:1f:c7:f2:12:8c:22:e9:05: 34:79:5b:e2:a8:d6:4e:24:88:65:d3:18:73:82:32:39:1e:f8: ae:5e:88:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUiV43m/3AE/KUTOWsrotHnveE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNTA3MjAxNzQ2MjBaFw0yNTA3MjMxOTU5MjBaMDMxMTAvBgNV BAMTKDE2MEQ1MTJBRjhCQUFCNEUyRkNDRjJCMjZGRTk0QzQ2MTdCQTYxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCskl43dBSYlV/+9UBshm8F08kr iERzX0WxdeNZ+8L4aKIhT7J39aLPImdqHpXoAUtj1ABkswYRsm0lgU/sVEna9qM3 J1cOuL6q5MAAXxR+5awUwuWz3ctqByNNIjAG7FoWgOReihWWnyOACzbNfUnPS0E+ ViGavwMHHqA18ZD4zel50r4I6z4DFzuDjbL6GAJyMqC4Zt7C2VTTq5C/jN/LNEx1 fDriCsAu60lGuucPPVXCvlO2PSss5liM1BfJS3OoOJSlWi33z4xyE0JEf13AYjBV qGPRg8vKbVg5IzdKr0LBXAxsOmdlzns8sLaSlpL9e2TBBUe/zp7DBc1LOk8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFg1RKvi6q04vzPKyb+lMRhe6YcAwHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIXng4GZKgGrBI7uXb84evLgX818rBzZcin X/N5e0YOK8blQLKHKQKs1F9vWmEYawRS1f/L2Db1NPvqpEhaiOgUv7OI0z3Fom+c nzF3LG1kibnMVzBa86jTY+QE8SBG/HEDSKVlotNbwfsPdqDeBc6joY6iXDUPldco ntbIgp2bOJ3bPB0jm1K29dyYCW+JtykoupxU25Brrj5o4HPLFvcPwt8URP2FG9WA 9qMRCE+ukYpw9Me7n6xiWaiM1MZh+AeTaFn4VRjKUKUg+ZvYUZFzXBYnXbrrytoL VoedR1oMsRQfx/ISjCLpBTR5W+Ko1k4kiGXTGHOCMjke+K5eiKc= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:32 2025 by rpki-client