$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: 8aPCEnvSLIf9Pn+wHfIfgcyLChYmJdnTkG69+zXz3MY= Subject key identifier: 9F:00:3B:85:DE:2C:6D:8B:AC:87:BD:CB:CC:EC:55:AF:76:5C:14:E1 Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 5658B0DDFEB4D548E182FCD0E5D2A4CBBBC0549F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 02DA Signing time: Sun 20 Jul 2025 01:02:04 +0000 Manifest this update: Sun 20 Jul 2025 00:57:04 +0000 Manifest next update: Wed 23 Jul 2025 08:51:04 +0000 Files and hashes: 1: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: pZ9Wb/+ySO9548vMBT+JLEHucfTl/Zdwxfmz4EZXPaE=) 2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: P8Omv4YMdnsvaEIej+qb+BBba9eBf1ssCLAulJkcHdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:58:b0:dd:fe:b4:d5:48:e1:82:fc:d0:e5:d2:a4:cb:bb:c0:54:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Jul 20 00:57:04 2025 GMT Not After : Jul 23 08:51:04 2025 GMT Subject: CN=9F003B85DE2C6D8BAC87BDCBCCEC55AF765C14E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:5f:35:e8:7d:d0:b5:2a:50:0b:ce:52:4b: 9e:06:f8:39:75:e2:37:74:36:1a:a5:52:17:e1:9a: b2:57:c5:dc:63:c7:70:05:06:b4:32:23:f0:2d:59: 6c:2e:48:16:9d:18:55:b8:62:8f:d0:64:75:e4:76: b2:69:10:ae:35:b7:88:0d:f3:d7:3e:e2:b7:39:37: 60:10:48:8d:01:91:79:c9:85:f6:2c:b7:ac:f6:2b: 36:72:98:ca:e7:0f:da:4b:f7:1e:82:d7:fe:79:81: a4:93:d0:9d:ef:82:dc:06:b5:68:7a:24:36:8c:25: db:dd:64:92:82:1a:96:81:19:68:b7:dc:fd:86:9c: 2a:e9:2c:e7:7d:4b:01:db:6e:1a:23:c2:48:9b:b2: 08:29:16:f7:5d:05:64:8e:6a:95:f3:7a:56:2e:74: 61:91:f1:7d:66:42:d9:33:56:9a:03:17:05:e8:0c: 42:98:8d:b4:71:51:58:78:8b:9b:06:af:cb:a2:02: 3c:ec:99:c2:ad:e9:bf:2a:23:c3:55:4b:8e:24:af: 69:7f:4d:e9:44:fb:65:b8:ef:d7:3b:3c:41:c0:33: 0f:0f:f2:8a:03:e0:29:75:1b:81:95:21:e3:63:4e: 4d:3c:b7:7c:ed:27:cc:11:7d:4b:4f:63:e2:bb:58: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:00:3B:85:DE:2C:6D:8B:AC:87:BD:CB:CC:EC:55:AF:76:5C:14:E1 X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:30:fd:a4:a9:8c:bd:c8:c8:dd:a5:36:45:40:0c:4c:bd:0f: 3b:ce:c7:0d:68:c7:a3:04:13:37:06:a7:71:8b:d6:2e:d4:4b: 40:4a:68:bd:50:67:7f:a5:3e:75:df:3f:be:f2:dd:20:15:2f: 44:30:24:56:36:78:85:f4:ba:2f:83:ab:35:7f:9f:68:c8:60: 10:c4:bf:e0:75:e8:d0:f9:64:ef:12:10:15:20:26:43:a7:6e: f7:9a:02:6e:a1:48:72:18:ac:f0:4f:4e:c3:4d:85:2e:b1:08: 91:8d:42:69:c1:d6:fd:2f:04:5d:e5:4e:bf:2e:fd:49:93:22: bb:27:72:12:8d:eb:74:fc:85:78:b6:6c:fb:4c:6f:cc:90:18: 0d:1c:bd:49:64:cb:cc:f2:7d:92:d9:57:47:41:7b:6e:63:ab: 5d:89:7e:03:96:7b:55:5a:46:ac:8b:3d:09:c1:df:e9:21:d3: 7c:ef:d8:50:e3:06:ea:e8:f4:9b:be:fc:c5:f4:73:f9:7d:45: 03:cd:59:73:de:57:fa:cb:81:87:13:4d:56:e5:06:6c:52:bc: 16:78:1e:5b:e7:f2:59:6b:b8:52:dc:da:a9:6a:e1:02:6a:bd: 54:b9:74:72:d2:7d:26:b5:b5:e2:f6:df:49:d1:dd:fc:7d:f8: 9d:90:67:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVliw3f601UjhgvzQ5dKky7vAVJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNTA3MjAwMDU3MDRaFw0yNTA3MjMwODUxMDRaMDMxMTAvBgNV BAMTKDlGMDAzQjg1REUyQzZEOEJBQzg3QkRDQkNDRUM1NUFGNzY1QzE0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc9F816H3QtSpQC85SS54G+Dl1 4jd0NhqlUhfhmrJXxdxjx3AFBrQyI/AtWWwuSBadGFW4Yo/QZHXkdrJpEK41t4gN 89c+4rc5N2AQSI0BkXnJhfYst6z2KzZymMrnD9pL9x6C1/55gaST0J3vgtwGtWh6 JDaMJdvdZJKCGpaBGWi33P2GnCrpLOd9SwHbbhojwkibsggpFvddBWSOapXzelYu dGGR8X1mQtkzVpoDFwXoDEKYjbRxUVh4i5sGr8uiAjzsmcKt6b8qI8NVS44kr2l/ TelE+2W479c7PEHAMw8P8ooD4Cl1G4GVIeNjTk08t3ztJ8wRfUtPY+K7WBGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnwA7hd4sbYush73LzOxVr3ZcFOEwHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYw/aSpjL3IyN2lNkVADEy9DzvOxw1ox6ME EzcGp3GL1i7US0BKaL1QZ3+lPnXfP77y3SAVL0QwJFY2eIX0ui+DqzV/n2jIYBDE v+B16ND5ZO8SEBUgJkOnbveaAm6hSHIYrPBPTsNNhS6xCJGNQmnB1v0vBF3lTr8u /UmTIrsnchKN63T8hXi2bPtMb8yQGA0cvUlky8zyfZLZV0dBe25jq12JfgOWe1Va RqyLPQnB3+kh03zv2FDjBuro9Ju+/MX0c/l9RQPNWXPeV/rLgYcTTVblBmxSvBZ4 Hlvn8llruFLc2qlq4QJqvVS5dHLSfSa1teL230nR3fx9+J2QZ64= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:57 2025 by rpki-client