$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json) Hash identifier: eH64kOuTqgdlGA5Ij4eG1mWm83QEObNHJeGM0GFLNyM= Subject key identifier: E7:26:AC:6E:43:C7:52:68:77:D7:FB:82:28:C9:49:C3:8A:18:83:D8 Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 5A5DB29A706C5EB3F87247F30652175C595E1413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft Manifest number: 01B8 Signing time: Fri 18 Jul 2025 22:21:42 +0000 Manifest this update: Fri 18 Jul 2025 22:16:42 +0000 Manifest next update: Tue 22 Jul 2025 07:44:42 +0000 Files and hashes: 1: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: rVYcAL9tGn4UC0mGQBFmlbDt4p4/r+P7L0F6CWCZ9cs=) 2: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZsYKQLKtHkVTslRdGYlW0kXwJ9gapNRm2k1uNrTnTX0=) 3: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: c6BbZqskhId1bW3l6aSuRQLjcbQNOmGBaOGbC28FTXg=) 4: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: FkjuZkviekb7VaMyMmuCMchrVU1yZ527lgE1cprIhiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5d:b2:9a:70:6c:5e:b3:f8:72:47:f3:06:52:17:5c:59:5e:14:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: Jul 18 22:16:42 2025 GMT Not After : Jul 22 07:44:42 2025 GMT Subject: CN=E726AC6E43C7526877D7FB8228C949C38A1883D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e5:15:8b:32:6a:fd:4e:38:8f:78:38:6c:6d: 02:c0:b6:5f:8e:bf:80:a7:81:8d:ba:3c:b2:3a:54: 59:86:1f:4c:43:3d:b1:d0:66:f7:77:e4:5f:42:48: ca:e8:4d:80:28:07:73:a4:77:a6:21:d4:ab:e1:3b: 8d:7a:90:7f:f2:f7:95:04:89:29:5a:2c:b2:3b:71: bf:e7:40:3a:b7:5f:c4:ef:62:c5:19:d3:2c:5d:83: 84:ce:76:80:a9:f8:ce:19:ad:a3:0c:97:b9:9f:bc: b8:80:24:da:09:81:14:8c:be:69:e2:b0:1a:b5:a5: 1c:de:56:11:c1:27:d1:4e:10:b7:7e:55:44:f3:fd: e1:49:9a:e1:a2:76:cf:e1:96:e2:3a:55:72:07:ed: d2:65:8e:0e:8e:86:3f:4c:97:25:4c:c2:17:af:89: c7:60:b0:36:b1:e0:cd:de:85:4d:93:39:be:d3:ef: 45:bb:4a:2e:42:c3:96:9e:f0:a2:29:9a:10:bd:0b: d0:22:3b:9c:5b:77:e9:d4:4b:86:bd:c0:d7:05:66: 19:b7:1c:6c:4e:6f:a6:e7:ed:d6:8a:63:7b:a4:5e: c8:13:b9:42:f5:59:a5:bb:fe:7b:f4:53:af:bf:3c: a8:b8:d8:d3:6a:4b:6a:38:d3:01:86:17:67:b9:33: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:26:AC:6E:43:C7:52:68:77:D7:FB:82:28:C9:49:C3:8A:18:83:D8 X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:00:bd:50:f3:f0:2f:bd:20:08:ad:38:da:77:fe:b6:ea:30: aa:1e:72:41:32:fc:92:f1:2a:e8:db:98:72:a8:c3:7d:45:ec: 0b:b4:58:75:a3:a0:13:ef:05:06:4b:b3:f0:e7:56:cc:db:f3: b2:eb:b5:d4:cf:67:bb:85:d5:9f:74:3e:f0:f8:4e:7e:b0:7e: e7:26:a9:ff:f5:d2:c6:ed:ea:e5:ed:32:7b:1e:b1:1c:9e:95: 01:20:da:2e:2d:f9:fb:d2:14:97:d8:03:fc:d6:3b:d5:a2:64: 4c:c5:76:d2:35:db:9a:bf:57:ba:71:28:e0:6c:1c:24:de:39: 74:86:07:14:c3:7a:d2:c2:ef:59:78:42:89:b2:88:dc:66:67: 88:48:95:4d:cd:5f:c9:54:f4:2c:8d:6c:48:00:3f:0b:b5:80: 1c:e0:8f:9e:4e:88:c4:e3:94:8e:f2:d0:ff:09:36:45:43:08: a3:04:85:03:5b:b3:14:8b:4b:1a:f9:58:66:c2:f9:91:59:79: ac:d7:c8:87:b1:83:12:fa:1a:5e:f0:88:33:e4:df:da:f1:81: 2a:cb:13:4d:c8:56:fd:6c:af:9a:cf:89:95:d6:46:0f:7f:d2: 0a:8d:36:ac:b0:0a:e8:ef:49:f2:45:06:de:7a:3c:38:7e:2f: b4:2d:18:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWl2ymnBsXrP4ckfzBlIXXFleFBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVC NkMyMUM3NzAeFw0yNTA3MTgyMjE2NDJaFw0yNTA3MjIwNzQ0NDJaMDMxMTAvBgNV BAMTKEU3MjZBQzZFNDNDNzUyNjg3N0Q3RkI4MjI4Qzk0OUMzOEExODgzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj5RWLMmr9TjiPeDhsbQLAtl+O v4CngY26PLI6VFmGH0xDPbHQZvd35F9CSMroTYAoB3Okd6Yh1KvhO416kH/y95UE iSlaLLI7cb/nQDq3X8TvYsUZ0yxdg4TOdoCp+M4ZraMMl7mfvLiAJNoJgRSMvmni sBq1pRzeVhHBJ9FOELd+VUTz/eFJmuGids/hluI6VXIH7dJljg6Ohj9MlyVMwhev icdgsDax4M3ehU2TOb7T70W7Si5Cw5ae8KIpmhC9C9AiO5xbd+nUS4a9wNcFZhm3 HGxOb6bn7daKY3ukXsgTuUL1WaW7/nv0U6+/PKi42NNqS2o40wGGF2e5M4WRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5yasbkPHUmh31/uCKMlJw4oYg9gwHwYDVR0j BBgwFoAUPSBSK1GuqkH1lJDi1Vw23rbCHHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTYxZTVhZS1lNDVmLTRlZTMtOGY2Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUx QUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIxQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVCNkMy MUM3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2 REVCNkMyMUM3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYAvVDz8C+9IAitONp3/rbqMKoeckEy/JLx KujbmHKow31F7Au0WHWjoBPvBQZLs/DnVszb87LrtdTPZ7uF1Z90PvD4Tn6wfucm qf/10sbt6uXtMnsesRyelQEg2i4t+fvSFJfYA/zWO9WiZEzFdtI125q/V7pxKOBs HCTeOXSGBxTDetLC71l4QomyiNxmZ4hIlU3NX8lU9CyNbEgAPwu1gBzgj55OiMTj lI7y0P8JNkVDCKMEhQNbsxSLSxr5WGbC+ZFZeazXyIexgxL6Gl7wiDPk39rxgSrL E03IVv1sr5rPiZXWRg9/0gqNNqywCujvSfJFBt56PDh+L7QtGIo= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:43 2025 by rpki-client