$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft File: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft (raw, json) Hash identifier: VyleNCtfBFxU1z6ZxvswFPZZ7C3yD50VfG2/k3dLBfM= Subject key identifier: 58:57:20:79:02:8E:D0:8A:86:1E:65:54:12:82:DF:74:B9:9C:49:C8 Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 Certificate issuer: /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Certificate serial: 45B4B828FA94A40219F9A8397E288C0528D38A64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft Manifest number: 010F Signing time: Sun 07 Sep 2025 01:11:17 +0000 Manifest this update: Sun 07 Sep 2025 01:06:17 +0000 Manifest next update: Wed 10 Sep 2025 02:59:17 +0000 Files and hashes: 1: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: YbG5Gw9xgbijBTbp7E/AZR+gn02wD0TeW2SCv/sSqKI=) 2: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: NjJcmD+G+kiFwmmP8zS7heQcwBVqq18Sis+HXMvM+ZY=) 3: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: SdfVlvgb41TvQfFCAAr6Hvu/iM3n38wFz7a+3vMqJi4=) 4: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl (hash: FvE85ErAIp8IkWB9FOMFuY7MmlHIC+LmBA8JQRABh6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b4:b8:28:fa:94:a4:02:19:f9:a8:39:7e:28:8c:05:28:d3:8a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Validity Not Before: Sep 7 01:06:17 2025 GMT Not After : Sep 10 02:59:17 2025 GMT Subject: CN=58572079028ED08A861E65541282DF74B99C49C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:04:8c:16:d0:fa:d2:3d:9f:45:73:e6:36: 8c:b8:eb:ca:e3:da:0b:86:a6:5f:42:62:f8:bd:c6: 12:ea:0a:0b:d0:09:a1:0c:c1:39:ab:ed:48:21:52: 3c:38:52:4a:cd:91:ed:c7:26:6a:b5:cb:1f:2c:a3: 10:33:e9:7c:72:34:22:b7:94:9e:ea:5f:36:7c:34: 2e:11:bf:e6:8b:b9:5c:94:41:49:38:ed:01:8a:43: b0:6f:15:a7:28:f9:7b:f1:95:77:dd:26:ec:63:22: c5:fe:72:43:b1:20:02:b6:26:ee:22:4d:14:9c:f9: 90:19:28:af:42:4b:0d:e5:62:2d:6d:68:12:d1:78: 5b:6c:e6:57:c8:a8:11:5d:68:80:7d:95:24:41:34: 03:f9:48:d6:16:ea:f7:94:cf:3f:04:26:72:b8:0d: 9e:4d:59:9d:e5:40:dd:88:72:2a:d1:17:66:82:75: a6:36:9c:b0:c1:c5:33:fb:6e:c7:a3:36:ae:12:7c: 79:34:a5:cf:6b:33:6b:8b:dd:9d:04:cb:bf:66:65: 93:23:7c:74:1f:83:c2:64:57:ea:06:15:92:c3:55: 30:77:7b:c8:f3:1e:04:e7:99:c7:4b:65:50:f4:88: 7d:97:1a:14:34:f1:9d:e0:dd:07:0e:1d:8a:8b:b0: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:57:20:79:02:8E:D0:8A:86:1E:65:54:12:82:DF:74:B9:9C:49:C8 X509v3 Authority Key Identifier: keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d1:34:80:2c:1e:06:d4:2b:fa:5e:05:5a:6a:10:f6:ac:b5: 1e:60:69:c9:95:ba:6d:a7:3b:59:78:b7:17:4f:95:0c:02:d0: 88:79:58:e5:2e:43:de:9e:e8:42:b4:d1:98:73:6e:09:bb:43: 9c:a4:fb:1b:e9:73:46:60:7d:e0:ee:85:30:1f:13:2e:c4:27: 74:50:69:41:a2:64:67:bb:cf:a6:c7:c4:98:62:f9:f8:a7:76: 8f:38:6a:39:1f:d4:7c:b2:05:e8:33:c7:ca:0e:c5:c5:6a:f8: 56:f6:88:6b:29:95:3d:18:bb:9a:44:2a:cf:22:11:37:8a:1f: 1d:42:ff:3b:51:20:67:a4:15:c0:66:e8:39:19:c1:94:2a:6d: b0:4b:1a:33:97:24:07:cc:f5:8b:56:33:9f:69:29:f2:07:d0: cc:ea:2e:68:76:fb:39:ec:5a:37:90:5a:40:d8:b1:18:61:4b: 46:8a:26:6e:c3:cc:ad:24:82:61:5f:e5:72:1b:b4:72:72:f1: 8c:ae:07:4f:0e:ba:e8:ed:fa:3e:bf:8c:3c:fe:0d:c6:a3:ed: c1:86:63:dd:de:e4:b1:8b:7b:c0:d1:3f:4b:3b:4c:c2:2e:22: 12:2e:8c:aa:81:e1:9e:59:73:0c:52:74:f1:68:9e:2c:59:1a: 67:d6:77:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbS4KPqUpAIZ+ag5fiiMBSjTimQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3 MjM3OEJGMzAeFw0yNTA5MDcwMTA2MTdaFw0yNTA5MTAwMjU5MTdaMDMxMTAvBgNV BAMTKDU4NTcyMDc5MDI4RUQwOEE4NjFFNjU1NDEyODJERjc0Qjk5QzQ5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5QSMFtD60j2fRXPmNoy468rj 2guGpl9CYvi9xhLqCgvQCaEMwTmr7UghUjw4UkrNke3HJmq1yx8soxAz6XxyNCK3 lJ7qXzZ8NC4Rv+aLuVyUQUk47QGKQ7BvFaco+XvxlXfdJuxjIsX+ckOxIAK2Ju4i TRSc+ZAZKK9CSw3lYi1taBLReFts5lfIqBFdaIB9lSRBNAP5SNYW6veUzz8EJnK4 DZ5NWZ3lQN2IcirRF2aCdaY2nLDBxTP7bsejNq4SfHk0pc9rM2uL3Z0Ey79mZZMj fHQfg8JkV+oGFZLDVTB3e8jzHgTnmcdLZVD0iH2XGhQ08Z3g3QcOHYqLsCN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWFcgeQKO0IqGHmVUEoLfdLmcScgwHwYDVR0j BBgwFoAUPguVe1gtiu+ZpJxkSPmZPHI3i/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWRjOWU0Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC8zRTBCOTU3QjU4 MkQ4QUVGOTlBNDlDNjQ0OEY5OTkzQzcyMzc4QkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3MjM3 OEJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw OGQtOGVlNWE4YTcwYTA1LzAvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5 M0M3MjM3OEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALRNIAsHgbUK/peBVpqEPastR5gacmVum2n O1l4txdPlQwC0Ih5WOUuQ96e6EK00Zhzbgm7Q5yk+xvpc0ZgfeDuhTAfEy7EJ3RQ aUGiZGe7z6bHxJhi+findo84ajkf1HyyBegzx8oOxcVq+Fb2iGsplT0Yu5pEKs8i ETeKHx1C/ztRIGekFcBm6DkZwZQqbbBLGjOXJAfM9YtWM59pKfIH0MzqLmh2+zns WjeQWkDYsRhhS0aKJm7DzK0kgmFf5XIbtHJy8YyuB08Ouujt+j6/jDz+Dcaj7cGG Y93e5LGLe8DRP0s7TMIuIhIujKqB4Z5ZcwxSdPFonixZGmfWd8E= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:13 2025 by rpki-client