$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: cjriaHbmI9DoMeYMpsvliZqElG697QMKE1uNKuinArM= Subject key identifier: A8:3D:23:15:98:47:65:C1:D6:04:99:96:79:27:30:40:EE:62:9D:E0 Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 27E52C32801019CEA7F2D1553D7681EC6742105E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 0178 Signing time: Thu 04 Sep 2025 10:51:51 +0000 Manifest this update: Thu 04 Sep 2025 10:46:51 +0000 Manifest next update: Sun 07 Sep 2025 12:29:51 +0000 Files and hashes: 1: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) 2: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: eso2WbwQI08i24372WOeBa1JZ2rZA4At39qOyjPHU+o=) 3: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e5:2c:32:80:10:19:ce:a7:f2:d1:55:3d:76:81:ec:67:42:10:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Sep 4 10:46:51 2025 GMT Not After : Sep 7 12:29:51 2025 GMT Subject: CN=A83D2315984765C1D604999679273040EE629DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:fe:c4:34:d9:35:d3:63:33:53:e2:3c:8f: fb:00:59:bf:38:4f:a9:95:5e:30:6f:8e:de:06:e6: 3f:21:f1:a1:30:fb:02:cf:a5:e5:5b:9b:cf:7e:c7: 29:d2:8a:80:d6:e7:e7:69:d7:a3:a1:3c:28:0d:96: 35:59:78:00:7e:6d:ca:ce:36:c9:d3:22:78:a0:0f: 14:7e:1f:0d:84:27:4c:6c:56:cf:d7:11:63:96:86: 94:c7:f5:09:1b:66:c2:36:e5:4f:fe:a4:d9:c1:ee: 41:b2:50:d5:4b:aa:b2:c7:0d:21:54:d8:2c:ac:f2: 61:7b:65:81:32:b4:1e:a2:c9:e1:cb:99:7d:f1:69: 93:46:67:bb:56:dc:f6:d8:a9:98:3a:1c:ee:18:9b: c3:63:8b:02:80:52:cf:c8:06:40:40:b9:d6:40:5e: 8d:c2:77:c7:ff:06:bc:25:4c:25:2f:2a:f5:14:d3: df:3e:53:ec:53:e1:48:6d:41:4a:2e:5a:b3:f6:80: 19:b7:4f:27:ce:7f:c5:57:81:08:aa:d7:88:84:70: 8a:5f:b1:a6:a5:6e:89:64:c8:24:9c:02:67:1d:05: 3f:b0:69:7b:dd:a9:e8:97:85:27:a4:cd:62:dd:fd: 23:29:a1:16:88:03:e1:17:62:bb:93:aa:ce:06:04: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3D:23:15:98:47:65:C1:D6:04:99:96:79:27:30:40:EE:62:9D:E0 X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:18:bf:8e:a2:04:02:b3:f7:e0:bb:40:81:74:36:3a:c0:ac: ae:57:1c:c3:dc:84:b4:72:c1:b8:1d:04:5e:27:0d:0b:e3:c4: 83:89:dd:62:dd:38:53:c5:f0:10:0e:df:e3:dc:b4:b9:a1:41: 1f:0f:0f:a5:7a:2a:a2:bf:8a:04:bd:1b:98:52:4f:7b:63:62: 21:fb:fd:43:f2:cd:04:10:8f:07:d4:bf:c5:98:fb:41:9d:0f: 0e:83:66:59:79:5a:57:4f:db:d6:a8:8c:b8:e8:d7:6e:02:98: a4:fa:fe:9a:c9:51:41:0f:60:8a:02:67:ce:9d:0c:b3:e1:b6: 83:e1:9a:df:b3:54:25:48:9a:fb:ee:33:f3:d8:d9:20:ac:d4: 3e:c8:bb:b7:ec:eb:8c:bd:1f:69:9d:53:04:20:10:32:19:59: 49:d6:b3:63:db:41:07:c5:dc:bb:3d:6e:58:5d:0b:70:c7:48: 2f:1c:e4:45:fd:aa:4d:8a:3d:72:14:95:56:c8:4a:11:59:8d: f5:7b:89:28:12:72:a4:72:6b:2e:8f:48:7f:82:c7:2c:d3:1c: 05:c2:d0:bf:12:b3:22:c7:19:29:b1:57:82:a4:72:d9:6b:1f: ba:e9:89:30:e3:33:cc:e3:88:3e:3e:87:99:0f:a3:b8:7e:5d: 59:67:7a:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+UsMoAQGc6n8tFVPXaB7GdCEF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTA5MDQxMDQ2NTFaFw0yNTA5MDcxMjI5NTFaMDMxMTAvBgNV BAMTKEE4M0QyMzE1OTg0NzY1QzFENjA0OTk5Njc5MjczMDQwRUU2MjlERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYif7ENNk102MzU+I8j/sAWb84 T6mVXjBvjt4G5j8h8aEw+wLPpeVbm89+xynSioDW5+dp16OhPCgNljVZeAB+bcrO NsnTInigDxR+Hw2EJ0xsVs/XEWOWhpTH9QkbZsI25U/+pNnB7kGyUNVLqrLHDSFU 2Cys8mF7ZYEytB6iyeHLmX3xaZNGZ7tW3PbYqZg6HO4Ym8NjiwKAUs/IBkBAudZA Xo3Cd8f/BrwlTCUvKvUU098+U+xT4UhtQUouWrP2gBm3TyfOf8VXgQiq14iEcIpf saalbolkyCScAmcdBT+waXvdqeiXhSekzWLd/SMpoRaIA+EXYruTqs4GBJV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqD0jFZhHZcHWBJmWeScwQO5ineAwHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMYv46iBAKz9+C7QIF0NjrArK5XHMPchLRy wbgdBF4nDQvjxIOJ3WLdOFPF8BAO3+PctLmhQR8PD6V6KqK/igS9G5hST3tjYiH7 /UPyzQQQjwfUv8WY+0GdDw6DZll5WldP29aojLjo124CmKT6/prJUUEPYIoCZ86d DLPhtoPhmt+zVCVImvvuM/PY2SCs1D7Iu7fs64y9H2mdUwQgEDIZWUnWs2PbQQfF 3Ls9blhdC3DHSC8c5EX9qk2KPXIUlVbIShFZjfV7iSgScqRyay6PSH+CxyzTHAXC 0L8SsyLHGSmxV4KkctlrH7rpiTDjM8zjiD4+h5kPo7h+XVlnesE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:14:54 2025 by rpki-client