$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: S2DUGeRP2Fpy0c9i81yZ92HghDXvcYNydnATy4jNGDg= Subject key identifier: 0A:71:6B:76:AB:45:57:8B:72:DD:9D:37:C7:B2:CE:80:84:F7:61:E7 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 44AFA86ED9996680F3ED1FEA04C392715E4E083D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: F9 Signing time: Thu 04 Sep 2025 23:11:56 +0000 Manifest this update: Thu 04 Sep 2025 23:06:56 +0000 Manifest next update: Mon 08 Sep 2025 10:00:56 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: UI8lQMl8NTYzbA9ojG+T/+9O3VoMpM9G/VtiVey3w5s=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:af:a8:6e:d9:99:66:80:f3:ed:1f:ea:04:c3:92:71:5e:4e:08:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Sep 4 23:06:56 2025 GMT Not After : Sep 8 10:00:56 2025 GMT Subject: CN=0A716B76AB45578B72DD9D37C7B2CE8084F761E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2d:18:c7:35:95:85:b9:78:a2:74:92:7f:a5: dd:a4:d2:d9:73:0a:39:6e:52:55:a8:2e:80:7b:9e: 4c:19:99:86:a2:c9:73:da:0f:08:d3:04:af:db:bf: eb:65:e4:e4:26:e1:47:fa:4f:b6:9e:35:5e:50:93: 84:79:95:44:cb:c7:97:6d:db:f0:c0:75:10:1b:b1: 1e:1e:8b:ea:75:e5:82:45:54:a7:c7:6d:fd:bb:44: df:ac:fb:71:50:2b:5f:cc:4f:2c:f5:54:04:9c:5f: 7b:2b:94:8a:39:cd:46:9b:26:e4:b3:7d:24:32:c9: 1b:77:c6:d6:19:1f:a0:d7:a5:77:60:13:f6:23:c3: d3:21:f8:35:f1:9d:c2:de:0b:af:69:08:7c:54:b9: 0d:b0:6d:e9:74:98:6d:d3:ea:ef:58:6c:bc:18:4f: 3d:4e:b1:84:dd:4d:e1:25:9b:ab:fe:17:83:83:18: c4:35:04:0a:51:2a:00:d5:69:66:f8:cf:b3:39:63: e2:bd:42:b2:1a:2a:8c:dd:15:5d:00:e1:70:02:ba: fb:bf:2b:f6:91:c6:92:8a:82:e1:3e:e6:93:d0:5c: 38:88:d4:02:0f:f9:29:45:00:5e:d5:6d:f8:17:91: 1e:04:33:92:c2:e8:f5:7d:ee:a8:22:f8:4c:e1:d3: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:71:6B:76:AB:45:57:8B:72:DD:9D:37:C7:B2:CE:80:84:F7:61:E7 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6d:47:5e:62:28:e6:f6:a8:ba:de:0c:df:d2:98:53:38:80: 05:43:1e:eb:b5:b3:a2:f2:cf:d9:7d:c1:96:26:fb:80:33:8f: b0:ea:52:f6:c8:e8:33:da:ce:0c:96:0c:0b:e1:a1:40:8a:55: 81:5f:6e:af:ca:8e:50:9a:31:c5:53:36:03:de:a5:45:72:64: 0a:7d:60:6d:22:2b:41:e3:85:53:7a:e0:39:c9:86:d1:8f:8d: 87:ea:a8:a6:82:37:bf:94:6f:c3:72:8e:cd:e7:b5:9c:ed:69: 32:11:bd:c3:ab:a2:12:a2:f2:2f:ee:03:86:a1:fd:0d:a0:b2: 61:ef:38:05:26:70:bd:88:54:3b:d8:13:86:72:fb:d6:1c:ec: c7:89:f5:fe:63:61:1e:e6:85:a9:0c:ae:da:5d:4b:d1:11:fc: ac:8d:be:ed:bb:e2:bc:2b:a1:da:f2:97:02:d6:b9:60:c5:78: 61:35:30:f8:86:6f:ce:d7:ef:9e:cb:bd:1c:82:dd:6e:91:9d: 5f:d2:c4:9c:69:81:c1:9d:51:bf:f6:1d:fb:cf:49:32:15:63: aa:6d:a0:9b:55:1b:19:8f:9b:69:35:37:06:c0:1a:8f:91:d1: 84:7b:2d:df:44:eb:13:e9:76:9a:f8:07:28:e6:85:1c:c3:6b: b8:5a:00:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURK+obtmZZoDz7R/qBMOScV5OCD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTA5MDQyMzA2NTZaFw0yNTA5MDgxMDAwNTZaMDMxMTAvBgNV BAMTKDBBNzE2Qjc2QUI0NTU3OEI3MkREOUQzN0M3QjJDRTgwODRGNzYxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVLRjHNZWFuXiidJJ/pd2k0tlz CjluUlWoLoB7nkwZmYaiyXPaDwjTBK/bv+tl5OQm4Uf6T7aeNV5Qk4R5lUTLx5dt 2/DAdRAbsR4ei+p15YJFVKfHbf27RN+s+3FQK1/MTyz1VAScX3srlIo5zUabJuSz fSQyyRt3xtYZH6DXpXdgE/Yjw9Mh+DXxncLeC69pCHxUuQ2wbel0mG3T6u9YbLwY Tz1OsYTdTeElm6v+F4ODGMQ1BApRKgDVaWb4z7M5Y+K9QrIaKozdFV0A4XACuvu/ K/aRxpKKguE+5pPQXDiI1AIP+SlFAF7VbfgXkR4EM5LC6PV97qgi+Ezh011FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCnFrdqtFV4ty3Z03x7LOgIT3YecwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZtR15iKOb2qLreDN/SmFM4gAVDHuu1s6Ly z9l9wZYm+4Azj7DqUvbI6DPazgyWDAvhoUCKVYFfbq/KjlCaMcVTNgPepUVyZAp9 YG0iK0HjhVN64DnJhtGPjYfqqKaCN7+Ub8Nyjs3ntZztaTIRvcOrohKi8i/uA4ah /Q2gsmHvOAUmcL2IVDvYE4Zy+9Yc7MeJ9f5jYR7mhakMrtpdS9ER/KyNvu274rwr odrylwLWuWDFeGE1MPiGb87X757LvRyC3W6RnV/SxJxpgcGdUb/2HfvPSTIVY6pt oJtVGxmPm2k1NwbAGo+R0YR7Ld9E6xPpdpr4ByjmhRzDa7haAA4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:10 2025 by rpki-client