$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: cuAHlI94SdxZqYrdBmXNIxcUAh3O/qnHgGc1Z51iO+4= Subject key identifier: C9:FC:B6:35:5E:5C:ED:E1:60:D4:8A:63:34:E7:D4:A4:47:85:5F:6D Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 29A6EECC1DCB2B3F3CFD451C5977180B10FAAE78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: 8C Signing time: Sun 07 Sep 2025 05:30:53 +0000 Manifest this update: Sun 07 Sep 2025 05:25:53 +0000 Manifest next update: Wed 10 Sep 2025 14:42:53 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: nrQE4irOLiTaj2BraPF2ueuc9st85vjRWvs4VI4JKgg=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: 6pByXgAQ6YR6dUDH4dJy61wrtOMRHMSvLiETBeP3xAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a6:ee:cc:1d:cb:2b:3f:3c:fd:45:1c:59:77:18:0b:10:fa:ae:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Sep 7 05:25:53 2025 GMT Not After : Sep 10 14:42:53 2025 GMT Subject: CN=C9FCB6355E5CEDE160D48A6334E7D4A447855F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:8e:59:cb:01:5f:2b:be:72:87:84:f5:27: e1:d3:82:6f:d0:c1:30:d1:b8:15:3a:2b:c5:c1:d2: d5:7d:e3:d5:52:49:5d:a1:70:19:1c:6e:1b:ae:f8: 51:bc:1f:d1:14:75:93:a6:2a:a6:0f:7f:d5:2c:bb: d2:03:9a:a3:62:f2:87:21:8c:72:e2:7f:d3:f3:f1: 99:fe:6f:c5:08:06:a4:0b:44:45:39:03:4f:cf:cc: d6:eb:cd:9c:b6:f6:fd:8a:c1:ed:7d:d8:0f:bb:06: 04:85:cf:8e:20:ce:a7:39:e1:00:e4:40:81:34:de: e5:bd:a0:de:73:2d:ce:37:44:64:d7:05:ab:59:89: 8e:3f:58:32:d2:7c:6c:d6:3c:30:be:b5:73:15:d9: 7f:99:7a:59:49:af:e7:51:5d:1b:75:b9:53:3a:f4: 66:e2:ff:98:41:3a:f5:cf:e1:4d:6a:c5:fe:50:e0: 06:c7:d0:2a:06:26:a8:0a:75:f4:1d:4e:08:cf:2e: c4:aa:49:3b:31:00:1d:ba:90:41:74:2d:3f:69:72: be:f2:7c:74:f3:20:c8:4a:c8:af:c1:1f:2c:09:0f: f5:71:f9:71:14:89:88:22:bc:19:e7:ab:b9:1f:30: 7d:96:73:29:7d:e4:f3:b3:fa:fd:bf:e4:08:8f:c0: b1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FC:B6:35:5E:5C:ED:E1:60:D4:8A:63:34:E7:D4:A4:47:85:5F:6D X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:fd:cf:d2:0f:6d:ed:83:cf:cc:78:af:ab:00:cb:3e:ad:01: 43:b3:db:a1:20:ef:54:bf:e9:1b:ef:24:49:18:fa:72:f7:e9: d5:b4:b7:75:f8:d8:42:70:de:4b:eb:52:0c:cf:01:ff:32:25: be:2c:fe:17:5e:27:14:2c:12:65:89:04:7f:a7:69:01:de:2d: 1b:bc:c7:6c:10:5f:c7:96:74:24:8f:dc:74:41:1b:d0:27:d6: 92:00:29:e8:25:3e:a2:73:f5:55:f1:2f:06:70:68:2a:75:b3: 71:72:69:85:3f:a1:7e:a9:0c:b8:f4:0c:27:46:18:c0:f8:61: de:da:6f:89:c8:5b:e3:1f:d6:d1:14:24:0a:37:74:be:79:7a: 2f:20:d1:e6:b7:96:a2:e7:17:5e:fd:c3:8e:f0:cd:fd:48:f7: ba:be:9e:a7:d8:1a:5c:dd:ea:33:6a:e2:19:c2:de:c0:60:42: 85:ae:aa:81:52:ac:2e:6b:9c:4b:0b:90:a5:54:0a:12:67:18: bd:88:2b:c5:8d:1e:0b:3c:6f:d6:ef:6e:dd:7c:57:db:d0:a1: be:60:17:80:16:4b:b8:91:d5:36:ec:05:f1:11:19:e3:d6:19: 01:56:4e:af:14:da:d3:49:17:a6:72:fd:c7:59:3b:5e:26:36: 58:39:bd:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKabuzB3LKz88/UUcWXcYCxD6rngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNTA5MDcwNTI1NTNaFw0yNTA5MTAxNDQyNTNaMDMxMTAvBgNV BAMTKEM5RkNCNjM1NUU1Q0VERTE2MEQ0OEE2MzM0RTdENEE0NDc4NTVGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotI5ZywFfK75yh4T1J+HTgm/Q wTDRuBU6K8XB0tV949VSSV2hcBkcbhuu+FG8H9EUdZOmKqYPf9Usu9IDmqNi8och jHLif9Pz8Zn+b8UIBqQLREU5A0/PzNbrzZy29v2Kwe192A+7BgSFz44gzqc54QDk QIE03uW9oN5zLc43RGTXBatZiY4/WDLSfGzWPDC+tXMV2X+ZellJr+dRXRt1uVM6 9Gbi/5hBOvXP4U1qxf5Q4AbH0CoGJqgKdfQdTgjPLsSqSTsxAB26kEF0LT9pcr7y fHTzIMhKyK/BHywJD/Vx+XEUiYgivBnnq7kfMH2Wcyl95POz+v2/5AiPwLGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyfy2NV5c7eFg1IpjNOfUpEeFX20wHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALP9z9IPbe2Dz8x4r6sAyz6tAUOz26Eg71S/ 6RvvJEkY+nL36dW0t3X42EJw3kvrUgzPAf8yJb4s/hdeJxQsEmWJBH+naQHeLRu8 x2wQX8eWdCSP3HRBG9An1pIAKeglPqJz9VXxLwZwaCp1s3FyaYU/oX6pDLj0DCdG GMD4Yd7ab4nIW+Mf1tEUJAo3dL55ei8g0ea3lqLnF179w47wzf1I97q+nqfYGlzd 6jNq4hnC3sBgQoWuqoFSrC5rnEsLkKVUChJnGL2IK8WNHgs8b9bvbt18V9vQob5g F4AWS7iR1TbsBfERGePWGQFWTq8U2tNJF6Zy/cdZO14mNlg5vag= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:06 2025 by rpki-client