$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: LZIRb0S0QlmAR3pp6k5PhUXtjk73BUawyHYdAMC25QE= Subject key identifier: F3:DA:B8:F0:AC:89:55:BF:13:30:AB:F2:BB:C6:81:4F:8E:C5:6B:31 Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 370125A65CEAF79E3D56B89ECAB0E5CD5EAF0096 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 020D Signing time: Sat 06 Sep 2025 22:11:51 +0000 Manifest this update: Sat 06 Sep 2025 22:06:51 +0000 Manifest next update: Wed 10 Sep 2025 09:21:51 +0000 Files and hashes: 1: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: jwjqVQjBgbNBjI6GR2ZVr1SHaxBoXiu9oioCZFA0qRk=) 2: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=) 3: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=) 4: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=) 5: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 09:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:01:25:a6:5c:ea:f7:9e:3d:56:b8:9e:ca:b0:e5:cd:5e:af:00:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Sep 6 22:06:51 2025 GMT Not After : Sep 10 09:21:51 2025 GMT Subject: CN=F3DAB8F0AC8955BF1330ABF2BBC6814F8EC56B31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:76:1e:5c:95:20:bc:86:b7:17:08:44:c0: c6:fb:0e:6e:83:ee:ab:92:d2:0c:3a:7c:be:b7:1f: 8b:20:36:8e:55:e1:68:77:35:a6:c6:cb:b6:ea:47: e2:ee:7c:14:f0:2c:b5:55:c2:33:15:29:63:c2:1b: b1:b7:ba:0c:48:95:f5:18:92:09:a6:bd:b3:cd:79: 26:90:6e:a8:57:06:42:f0:18:68:ef:23:45:1a:d0: fe:fe:9b:49:b8:d0:d7:f1:11:51:eb:90:9e:c4:a8: bf:75:5c:43:24:f5:b1:a2:6b:03:7c:d2:f2:17:64: b0:e4:58:f8:0f:4f:d6:be:5c:5b:21:72:1e:13:e3: 25:0a:26:8b:65:2c:65:f0:21:b0:da:ac:de:5f:e0: 5d:bd:eb:04:f9:e9:dd:47:11:3c:23:aa:a9:55:a7: 6e:ea:9b:ea:b9:27:ea:4f:2c:01:c1:2b:a5:4c:5a: 4b:4a:0f:b8:7f:39:14:23:49:a3:f0:23:9b:56:6f: 18:03:09:e6:26:c6:a8:0e:03:f6:56:8a:e8:52:ca: 39:32:0a:85:81:db:c7:8a:9d:3e:7c:1f:7d:12:ea: 14:6e:c1:3b:5b:3e:0a:f1:7c:45:bc:dd:90:a1:95: 19:fe:60:7a:40:eb:d3:f5:c4:77:7b:a8:5d:49:6b: 9b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DA:B8:F0:AC:89:55:BF:13:30:AB:F2:BB:C6:81:4F:8E:C5:6B:31 X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:69:45:3c:19:60:73:fc:06:95:d1:3f:39:37:45:0d:f0:fa: c5:81:ae:41:60:e4:0e:8e:a8:a6:be:ae:33:19:ef:ad:00:e5: e9:b2:03:79:2b:23:03:8a:01:49:8a:26:30:19:d8:9a:17:03: 8a:9d:55:4d:71:65:e5:5d:8e:c1:ce:81:f3:4e:ce:0e:77:9c: 80:e6:d3:d9:47:a7:e9:e6:51:62:cd:3d:b2:73:ee:4a:0a:0b: 0f:8c:2e:d5:24:6e:35:5f:0f:6e:71:3d:28:d7:20:4f:c7:45: 00:a9:33:8a:54:31:75:a7:68:3b:69:9a:eb:fe:a9:f2:fc:93: 3c:22:bd:12:dc:05:7a:83:e1:69:ad:91:53:54:23:14:32:30: d4:66:9d:53:d9:ae:a4:0d:1d:44:6b:2b:b7:c7:d0:bb:8f:f0: 50:73:5e:69:af:dc:7f:57:1f:a1:28:70:ca:09:9f:f2:80:16: 01:0d:f2:ce:bb:dc:c8:e8:ca:6f:24:7a:6e:ad:3b:d1:1d:14: 9a:c2:f7:5a:81:e6:b6:39:60:2b:ee:dd:02:75:f3:68:2d:0e: fc:17:a2:80:9f:01:31:1d:94:c9:24:50:bc:97:a1:40:a7:b6: 6e:7b:cf:6a:72:6e:8c:64:f0:22:ea:5a:29:9b:22:92:32:e5: f5:42:a3:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwElplzq9549VrieyrDlzV6vAJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTA5MDYyMjA2NTFaFw0yNTA5MTAwOTIxNTFaMDMxMTAvBgNV BAMTKEYzREFCOEYwQUM4OTU1QkYxMzMwQUJGMkJCQzY4MTRGOEVDNTZCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHh3YeXJUgvIa3FwhEwMb7Dm6D 7quS0gw6fL63H4sgNo5V4Wh3NabGy7bqR+LufBTwLLVVwjMVKWPCG7G3ugxIlfUY kgmmvbPNeSaQbqhXBkLwGGjvI0Ua0P7+m0m40NfxEVHrkJ7EqL91XEMk9bGiawN8 0vIXZLDkWPgPT9a+XFshch4T4yUKJotlLGXwIbDarN5f4F296wT56d1HETwjqqlV p27qm+q5J+pPLAHBK6VMWktKD7h/ORQjSaPwI5tWbxgDCeYmxqgOA/ZWiuhSyjky CoWB28eKnT58H30S6hRuwTtbPgrxfEW83ZChlRn+YHpA69P1xHd7qF1Ja5sFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU89q48KyJVb8TMKvyu8aBT47FazEwHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElpRTwZYHP8BpXRPzk3RQ3w+sWBrkFg5A6O qKa+rjMZ760A5emyA3krIwOKAUmKJjAZ2JoXA4qdVU1xZeVdjsHOgfNOzg53nIDm 09lHp+nmUWLNPbJz7koKCw+MLtUkbjVfD25xPSjXIE/HRQCpM4pUMXWnaDtpmuv+ qfL8kzwivRLcBXqD4WmtkVNUIxQyMNRmnVPZrqQNHURrK7fH0LuP8FBzXmmv3H9X H6EocMoJn/KAFgEN8s673Mjoym8kem6tO9EdFJrC91qB5rY5YCvu3QJ182gtDvwX ooCfATEdlMkkULyXoUCntm57z2pyboxk8CLqWimbIpIy5fVCo2U= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:22 2025 by rpki-client