$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: UNvuvjoyrh3VJXwg6TREvrbkCrX/JZ8FWmVcVI83NQM= Subject key identifier: 5A:B8:69:9F:9F:59:C3:C1:AC:F8:28:C4:2E:8E:CD:3C:C2:6F:9C:19 Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 75254EB0971F1AB4D2D69BA62795627689D7B256 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 04D0 Signing time: Wed 03 Sep 2025 04:02:02 +0000 Manifest this update: Wed 03 Sep 2025 03:57:02 +0000 Manifest next update: Sat 06 Sep 2025 13:35:02 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: zlUAPUItn5N72T29LOf1obhH0JDko0gw8Ub4VDSAll4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 13:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:25:4e:b0:97:1f:1a:b4:d2:d6:9b:a6:27:95:62:76:89:d7:b2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: Sep 3 03:57:02 2025 GMT Not After : Sep 6 13:35:02 2025 GMT Subject: CN=5AB8699F9F59C3C1ACF828C42E8ECD3CC26F9C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:12:dd:f0:39:f8:90:70:26:66:ff:5e:56: 76:7f:d0:be:92:b6:17:93:be:42:04:0c:ec:c1:f4: a2:3a:de:df:51:fa:7b:17:b0:5e:68:f8:fb:d5:bd: a5:50:fe:b0:72:29:6d:04:23:05:1f:c7:b6:7f:08: a1:96:d3:71:37:f9:b8:aa:47:b2:88:a5:a9:81:f6: 47:15:37:e1:14:06:9c:7c:67:5f:f9:d5:53:fe:8d: e9:21:c5:57:4c:5f:ce:4b:46:6f:97:2a:00:95:99: 9c:83:e7:c4:70:7a:2a:b3:93:84:03:96:36:ff:19: 03:27:b9:d7:fc:07:d5:05:9e:5d:fd:07:ad:51:3d: 59:3a:87:54:26:40:04:c6:f9:3c:8f:3e:06:de:70: dc:58:c1:13:23:fc:29:74:d8:3a:f8:06:aa:0c:fe: 71:51:8d:a7:ea:45:9d:0a:86:ba:56:ed:b5:36:19: dc:81:4f:7c:9b:ba:23:f4:35:0d:5e:72:9d:ef:ef: 06:6f:0c:a6:71:0e:03:97:91:cb:50:66:15:1e:4b: b4:c7:d4:86:36:d8:6b:bc:05:20:b8:33:1d:de:aa: 4e:50:b3:cc:db:d8:95:03:b3:dd:7c:fc:17:4a:cd: 0e:1c:12:e2:9a:9f:f8:84:e5:a6:2f:32:de:fb:4c: b7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B8:69:9F:9F:59:C3:C1:AC:F8:28:C4:2E:8E:CD:3C:C2:6F:9C:19 X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a2:d9:d2:76:0a:06:74:c7:39:8c:e1:48:32:90:76:5d:63: 0e:73:f5:bf:15:e6:67:cf:1c:fa:7b:d8:8b:5d:d1:f0:f2:11: 01:3a:60:28:37:6d:80:76:aa:c8:02:73:fe:ec:5a:ea:2c:93: 3a:44:44:e4:b8:b7:ab:4b:86:1e:18:b0:c4:70:6a:1e:3a:54: 3d:9e:13:c6:b9:2c:9a:8e:46:f3:ba:ee:d3:2d:e0:bf:db:02: 53:21:e8:7f:42:15:5c:85:25:ad:5c:e5:2a:fc:eb:69:52:44: 08:04:6e:3e:a5:00:66:78:0f:08:81:37:53:9e:4c:2b:4d:e8: 2a:d9:86:cf:45:37:1d:1d:ec:51:50:24:b6:34:e2:0b:fe:01: 80:15:44:a2:0b:33:34:24:4b:a0:58:5c:87:13:b7:5c:dc:a5: 7b:7e:22:12:71:02:d4:61:c7:39:45:f7:a4:a0:8b:da:65:f6: f0:36:aa:d9:dc:9e:da:70:4d:03:95:ba:fa:95:09:9c:a4:36: f1:c3:31:fa:ef:eb:43:ba:d1:c1:a5:b7:a8:0a:a3:a6:74:84: ae:b3:14:a2:72:ca:58:f3:80:12:94:40:5b:f2:9e:7b:fb:90: 8a:58:0e:8c:d3:49:c2:aa:e9:b8:c0:42:9c:eb:7c:79:ec:59: 2b:62:0a:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdSVOsJcfGrTS1pumJ5VidonXslYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNTA5MDMwMzU3MDJaFw0yNTA5MDYxMzM1MDJaMDMxMTAvBgNV BAMTKDVBQjg2OTlGOUY1OUMzQzFBQ0Y4MjhDNDJFOEVDRDNDQzI2RjlDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwhLd8Dn4kHAmZv9eVnZ/0L6S theTvkIEDOzB9KI63t9R+nsXsF5o+PvVvaVQ/rByKW0EIwUfx7Z/CKGW03E3+biq R7KIpamB9kcVN+EUBpx8Z1/51VP+jekhxVdMX85LRm+XKgCVmZyD58Rweiqzk4QD ljb/GQMnudf8B9UFnl39B61RPVk6h1QmQATG+TyPPgbecNxYwRMj/Cl02Dr4BqoM /nFRjafqRZ0KhrpW7bU2GdyBT3ybuiP0NQ1ecp3v7wZvDKZxDgOXkctQZhUeS7TH 1IY22Gu8BSC4Mx3eqk5Qs8zb2JUDs918/BdKzQ4cEuKan/iE5aYvMt77TLf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWrhpn59Zw8Gs+CjELo7NPMJvnBkwHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmi2dJ2CgZ0xzmM4UgykHZdYw5z9b8V5mfP HPp72Itd0fDyEQE6YCg3bYB2qsgCc/7sWuoskzpEROS4t6tLhh4YsMRwah46VD2e E8a5LJqORvO67tMt4L/bAlMh6H9CFVyFJa1c5Sr862lSRAgEbj6lAGZ4DwiBN1Oe TCtN6CrZhs9FNx0d7FFQJLY04gv+AYAVRKILMzQkS6BYXIcTt1zcpXt+IhJxAtRh xzlF96Sgi9pl9vA2qtncntpwTQOVuvqVCZykNvHDMfrv60O60cGlt6gKo6Z0hK6z FKJyyljzgBKUQFvynnv7kIpYDozTScKq6bjAQpzrfHnsWStiChI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:09 2025 by rpki-client