$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: F+pFLT4qNkoUhQW0oy8S/XQqqNKdTtZT8dS4xYnadSg= Subject key identifier: 3A:C9:A2:E7:04:5D:2A:73:BD:A6:75:E2:30:74:EB:95:CF:C1:D9:24 Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 1E70C487694D9AB4DEDE687A2F8159D9851C57DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 0501 Signing time: Thu 04 Sep 2025 15:41:17 +0000 Manifest this update: Thu 04 Sep 2025 15:36:17 +0000 Manifest next update: Sun 07 Sep 2025 17:28:17 +0000 Files and hashes: 1: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: bCVBRSwhxRGzHPXGo2gw42uQPGCoy3M5aT9/DB4D8M0=) 2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: LtScTHZoxOHSbHhuqbZIrkhW+lipK1u0xCr0E9aMFWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 17:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:70:c4:87:69:4d:9a:b4:de:de:68:7a:2f:81:59:d9:85:1c:57:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Sep 4 15:36:17 2025 GMT Not After : Sep 7 17:28:17 2025 GMT Subject: CN=3AC9A2E7045D2A73BDA675E23074EB95CFC1D924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:d4:9d:85:7d:c9:c5:49:64:5e:90:76:6b: 23:da:59:ba:9c:c8:a1:60:70:e5:74:b2:06:15:72: 8f:4e:b7:a7:60:2d:f0:9e:89:79:8e:f6:42:96:16: b4:f2:14:c2:8e:f4:25:48:50:75:bd:c9:90:62:c3: 7d:2c:64:87:38:07:65:cc:58:d3:dd:c2:6b:1f:d5: 60:c0:42:70:84:1b:5d:52:4f:5a:20:4e:30:93:14: 46:dc:f7:2e:f5:56:8d:91:6e:86:eb:1f:71:82:0f: c9:f8:e5:95:8e:e3:ba:73:37:55:81:f4:66:de:ab: 7c:ed:c5:bc:16:4b:de:ea:d2:f0:25:65:75:62:4b: 1f:54:4b:6a:a4:14:53:70:64:fc:a8:d6:9c:df:7b: 07:8d:d6:ea:e0:b8:ee:97:93:a6:37:9f:50:62:a3: c0:ec:cc:a6:55:1e:d5:dd:03:2a:98:f8:0b:16:71: ff:5e:df:15:f3:6c:25:17:62:89:a7:1a:15:72:94: 0a:9c:84:61:62:94:99:3b:0e:a2:2e:9d:56:fc:73: f5:8d:30:a8:52:94:e5:d0:e9:f1:d9:46:46:5d:49: 5c:28:38:92:1c:35:ee:aa:2b:49:4a:24:c2:83:70: b2:6c:39:92:c3:32:3f:f7:42:c4:aa:6b:09:67:e5: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C9:A2:E7:04:5D:2A:73:BD:A6:75:E2:30:74:EB:95:CF:C1:D9:24 X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:35:02:fb:42:6e:5a:a5:1a:46:f2:0c:09:c2:e5:10:0f:b7: 0f:bd:1e:a6:5f:ec:b9:27:31:73:50:b9:65:b5:74:f7:8e:07: 0e:b0:67:74:f9:81:28:fc:9c:e1:33:24:4c:cb:77:5a:92:c2: 0f:78:d6:ad:3e:99:df:62:0f:68:52:36:6e:47:2d:af:08:70: 20:df:d6:a8:36:10:5e:06:08:f7:96:5a:ac:4c:f9:ec:05:82: 45:98:52:96:1a:a0:e8:b6:5b:4e:16:01:ad:4c:88:02:05:9a: 33:7b:2b:86:e2:8e:07:ce:a5:f3:62:58:06:21:c8:6e:85:33: 59:b4:88:78:92:d7:48:ea:90:e4:fe:9d:f1:70:e1:b3:b8:6c: 0a:9b:80:8e:b1:c4:70:6f:82:a9:e5:dd:20:65:58:14:37:d8: 0f:b2:37:3a:d9:ce:8c:26:5d:2b:98:4b:8b:ab:c9:44:93:20: 75:5d:de:78:13:72:2c:71:b5:0e:c2:51:93:62:4c:15:fa:1e: 85:cd:e3:3c:9b:ea:17:8e:de:84:d5:0b:52:c3:1c:0b:fc:c1: 09:ee:a5:fa:d9:51:ab:0f:b2:fb:2a:04:e8:eb:c7:73:f6:40: 2e:9c:b4:34:2e:7a:0d:4a:f1:52:73:59:bb:7b:3e:c8:81:d0: d7:35:aa:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnDEh2lNmrTe3mh6L4FZ2YUcV9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNTA5MDQxNTM2MTdaFw0yNTA5MDcxNzI4MTdaMDMxMTAvBgNV BAMTKDNBQzlBMkU3MDQ1RDJBNzNCREE2NzVFMjMwNzRFQjk1Q0ZDMUQ5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vdSdhX3JxUlkXpB2ayPaWbqc yKFgcOV0sgYVco9Ot6dgLfCeiXmO9kKWFrTyFMKO9CVIUHW9yZBiw30sZIc4B2XM WNPdwmsf1WDAQnCEG11ST1ogTjCTFEbc9y71Vo2RbobrH3GCD8n45ZWO47pzN1WB 9Gbeq3ztxbwWS97q0vAlZXViSx9US2qkFFNwZPyo1pzfeweN1urguO6Xk6Y3n1Bi o8DszKZVHtXdAyqY+AsWcf9e3xXzbCUXYomnGhVylAqchGFilJk7DqIunVb8c/WN MKhSlOXQ6fHZRkZdSVwoOJIcNe6qK0lKJMKDcLJsOZLDMj/3QsSqawln5bLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOsmi5wRdKnO9pnXiMHTrlc/B2SQwHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY1AvtCblqlGkbyDAnC5RAPtw+9HqZf7Lkn MXNQuWW1dPeOBw6wZ3T5gSj8nOEzJEzLd1qSwg941q0+md9iD2hSNm5HLa8IcCDf 1qg2EF4GCPeWWqxM+ewFgkWYUpYaoOi2W04WAa1MiAIFmjN7K4bijgfOpfNiWAYh yG6FM1m0iHiS10jqkOT+nfFw4bO4bAqbgI6xxHBvgqnl3SBlWBQ32A+yNzrZzowm XSuYS4uryUSTIHVd3ngTcixxtQ7CUZNiTBX6HoXN4zyb6heO3oTVC1LDHAv8wQnu pfrZUasPsvsqBOjrx3P2QC6ctDQueg1K8VJzWbt7PsiB0Nc1qr4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:37 2025 by rpki-client