$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: 0dZVXK7H8Z3sv7IbtJ2TF3UlDai8nvt2JGzB9paUVzw= Subject key identifier: BB:B1:FC:2F:7F:C5:05:9C:30:DA:2F:26:D5:40:E5:52:A0:CE:DC:7B Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 3AE15F0F5FC55DAF88912D1D239896E04B57E75F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04D6 Signing time: Fri 05 Sep 2025 13:50:46 +0000 Manifest this update: Fri 05 Sep 2025 13:45:46 +0000 Manifest next update: Mon 08 Sep 2025 14:24:46 +0000 Files and hashes: 1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) 2: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: 545hRrkezvSh7hCGgrjhXSQhuUjqnasfHHzgtVKGl48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e1:5f:0f:5f:c5:5d:af:88:91:2d:1d:23:98:96:e0:4b:57:e7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Sep 5 13:45:46 2025 GMT Not After : Sep 8 14:24:46 2025 GMT Subject: CN=BBB1FC2F7FC5059C30DA2F26D540E552A0CEDC7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:ff:0d:d7:c2:aa:0a:2e:3f:18:a5:91:d5: 14:fe:45:52:a4:78:26:b4:cf:31:f5:26:6e:f0:5f: a4:c8:85:00:94:5f:13:70:89:c8:28:91:bf:d5:2c: d9:ae:ef:37:8d:90:0f:23:33:e3:33:c3:49:2e:cb: 64:05:d5:14:51:8f:00:6f:1c:3a:6b:8b:13:63:60: 2c:07:45:e3:76:df:1b:f8:fe:3f:8b:ed:5c:2e:bd: ac:02:e9:d6:0c:a8:fc:f4:28:b6:00:9a:04:3f:9d: 61:c7:7b:54:58:cf:75:5f:71:cd:62:84:61:88:fb: fa:d2:f4:1d:c9:20:44:05:c7:c6:6c:e8:30:86:d5: 99:d2:61:9b:8f:3f:1c:a1:66:06:7a:33:02:b1:4a: 6f:20:2a:30:90:9b:1a:a7:1b:ed:16:b1:00:4e:04: a5:5c:4c:f2:b4:a2:76:5a:fe:20:d8:db:98:7a:92: 83:6b:66:27:92:ea:24:a7:56:b0:b3:2f:e8:1a:45: 82:c7:08:06:fd:a5:87:8a:33:5e:93:df:9d:ec:0d: 3f:e7:1c:d7:f7:3a:ce:f1:62:93:37:b4:be:53:3a: 68:c2:c1:fa:1a:4e:ac:d2:f3:14:3f:87:54:c8:16: 02:79:da:9e:11:3d:f5:73:ef:94:49:82:27:c5:45: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B1:FC:2F:7F:C5:05:9C:30:DA:2F:26:D5:40:E5:52:A0:CE:DC:7B X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d8:49:24:6e:0b:36:e3:da:21:c0:3b:f5:4e:0c:83:21:e8: 13:c7:e1:5a:d4:78:70:4d:a4:ff:00:21:f3:d7:94:ee:03:c7: 87:99:3c:06:c1:aa:6d:64:0a:1e:f9:76:26:a6:73:96:e5:67: 22:13:e7:8f:18:6e:72:a5:73:52:e3:6d:7d:45:54:78:47:fb: 6a:49:41:bb:22:dc:a2:ff:8b:d7:3e:7a:2c:11:24:ca:b5:df: 87:73:83:80:00:5b:af:65:fa:d2:ca:56:fc:f4:7d:a1:ce:5f: ca:12:9a:ae:b9:b6:10:49:c7:85:40:9d:1f:5c:62:d0:f1:dc: 4f:fc:b3:b7:6b:29:66:6d:d4:c4:d2:be:e5:fc:78:47:3f:e3: ea:47:e4:25:05:76:23:b6:33:03:f1:f4:11:aa:c4:5b:94:95: c4:37:dd:a9:f6:3c:53:eb:d1:26:b9:54:23:cc:19:ca:be:bb: 85:bc:59:7f:3b:66:ef:1d:02:fe:bf:24:96:d9:b3:06:95:65: ff:1d:75:93:08:9f:f8:f7:d7:ed:4f:d0:50:80:9d:d0:0e:7c: 96:fd:e4:63:8b:c8:ba:b8:d9:7e:a1:74:5d:13:1c:72:30:43: fc:5d:99:f1:17:61:93:71:df:3b:e1:3b:5f:d6:26:7c:20:c3: 26:71:c5:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuFfD1/FXa+IkS0dI5iW4EtX518wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTA5MDUxMzQ1NDZaFw0yNTA5MDgxNDI0NDZaMDMxMTAvBgNV BAMTKEJCQjFGQzJGN0ZDNTA1OUMzMERBMkYyNkQ1NDBFNTUyQTBDRURDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4f8N18KqCi4/GKWR1RT+RVKk eCa0zzH1Jm7wX6TIhQCUXxNwicgokb/VLNmu7zeNkA8jM+Mzw0kuy2QF1RRRjwBv HDprixNjYCwHReN23xv4/j+L7VwuvawC6dYMqPz0KLYAmgQ/nWHHe1RYz3Vfcc1i hGGI+/rS9B3JIEQFx8Zs6DCG1ZnSYZuPPxyhZgZ6MwKxSm8gKjCQmxqnG+0WsQBO BKVcTPK0onZa/iDY25h6koNrZieS6iSnVrCzL+gaRYLHCAb9pYeKM16T353sDT/n HNf3Os7xYpM3tL5TOmjCwfoaTqzS8xQ/h1TIFgJ52p4RPfVz75RJgifFRaYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu7H8L3/FBZww2i8m1UDlUqDO3HswHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnYSSRuCzbj2iHAO/VODIMh6BPH4VrUeHBN pP8AIfPXlO4Dx4eZPAbBqm1kCh75diamc5blZyIT548YbnKlc1LjbX1FVHhH+2pJ Qbsi3KL/i9c+eiwRJMq134dzg4AAW69l+tLKVvz0faHOX8oSmq65thBJx4VAnR9c YtDx3E/8s7drKWZt1MTSvuX8eEc/4+pH5CUFdiO2MwPx9BGqxFuUlcQ33an2PFPr 0Sa5VCPMGcq+u4W8WX87Zu8dAv6/JJbZswaVZf8ddZMIn/j31+1P0FCAndAOfJb9 5GOLyLq42X6hdF0THHIwQ/xdmfEXYZNx3zvhO1/WJnwgwyZxxS0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:19 2025 by rpki-client