$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: BHiWAh1RdK4nw8zPEcmAN6Q+8B46ZdnTEyX01RbRWOY= Subject key identifier: E9:E6:AD:E5:D6:DD:B7:0A:DB:90:C1:11:93:3E:60:6C:F6:71:B6:5C Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 757EABB10C44000E015AA396763CFDB0F88D0513 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 0109 Signing time: Fri 05 Sep 2025 10:20:42 +0000 Manifest this update: Fri 05 Sep 2025 10:15:42 +0000 Manifest next update: Mon 08 Sep 2025 16:22:42 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: jqkgPNZQKQXrFEijmK4nHwIMU5a5lXuhzG6ZAQbqcZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7e:ab:b1:0c:44:00:0e:01:5a:a3:96:76:3c:fd:b0:f8:8d:05:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Sep 5 10:15:42 2025 GMT Not After : Sep 8 16:22:42 2025 GMT Subject: CN=E9E6ADE5D6DDB70ADB90C111933E606CF671B65C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:b8:15:90:e2:5b:85:3c:c6:0a:c2:50:12: ee:99:d3:81:d6:2c:6b:1c:ae:0b:ee:45:11:a6:7a: 14:23:c5:c8:ca:bc:1e:c9:c1:ac:a3:14:ec:12:1a: c0:eb:17:4c:6d:3f:8d:4c:de:9d:f8:ce:c2:5f:f9: e4:a3:69:5b:34:71:3a:ae:84:44:09:3f:27:82:aa: 2c:20:89:d3:e4:6d:18:02:f3:9f:8e:ea:47:14:bd: ad:74:ec:51:ec:d7:5a:fe:c1:25:6d:4e:32:07:59: 4b:d6:ad:13:94:df:3b:16:88:1d:1e:0f:03:c1:ca: 64:f1:41:db:0a:b1:82:81:ca:ea:70:86:46:53:be: 91:03:77:af:b7:d0:8b:8c:fc:92:1d:98:b4:03:9f: b8:0a:e9:62:e1:e8:3a:07:6d:53:21:56:2c:ba:7e: c7:cc:62:56:2f:34:57:91:3c:55:52:93:96:81:db: 9a:2c:96:e6:87:ee:aa:8a:21:5b:4e:98:98:d1:4f: c1:8f:4c:4a:71:09:84:b0:10:07:ff:3c:e8:b0:2c: 2d:10:25:29:11:c7:fe:59:a4:6c:c7:ef:a2:66:10: b7:06:7e:82:ab:44:1d:e1:eb:20:cc:f0:f9:2e:23: 84:24:2e:d6:0e:82:a7:f1:93:0e:4d:54:9e:f9:34: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E6:AD:E5:D6:DD:B7:0A:DB:90:C1:11:93:3E:60:6C:F6:71:B6:5C X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:20:23:5d:19:b1:81:2d:cd:1b:c6:7d:46:71:28:d8:44:f3: ed:d3:98:7c:ca:10:f3:84:67:2e:bd:0d:26:70:fb:f0:2c:34: 5d:61:5d:53:50:68:4a:6b:ad:e0:24:0c:ee:77:89:d6:5b:37: 4e:c4:2d:7d:5e:ad:17:4d:73:99:86:40:42:2c:89:85:c4:f6: bf:da:b8:65:a9:cd:f6:55:66:ff:ad:7f:75:cb:6c:74:52:e3: ad:b8:26:23:2e:a8:8f:20:30:e8:df:12:4a:46:d7:c1:ca:cd: 04:ce:21:93:ac:99:83:ee:10:97:27:28:e5:f5:5b:59:90:52: 52:6d:7b:7a:47:b6:57:c2:8f:cc:2d:a8:3e:da:94:77:e1:60: 77:b5:34:62:46:4e:da:3c:00:af:dd:03:da:f5:2a:87:b9:94: 70:55:c5:52:c3:d1:16:43:7f:c1:cd:24:3f:c8:6a:c8:ae:b7: bc:a7:10:2d:ce:16:b3:56:a2:c2:4f:f3:1a:4b:20:e7:82:94: bf:08:3e:dd:48:cf:29:48:88:25:4b:05:47:2a:af:61:c0:69: 87:2e:ff:ff:15:04:33:71:76:4d:82:e0:4d:67:d0:7c:dc:d8: c1:ed:3c:74:5d:9a:9f:b6:d9:b7:f4:61:54:c9:0d:30:08:2a: 0a:6b:cd:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdX6rsQxEAA4BWqOWdjz9sPiNBRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTA5MDUxMDE1NDJaFw0yNTA5MDgxNjIyNDJaMDMxMTAvBgNV BAMTKEU5RTZBREU1RDZEREI3MEFEQjkwQzExMTkzM0U2MDZDRjY3MUI2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+7gVkOJbhTzGCsJQEu6Z04HW LGscrgvuRRGmehQjxcjKvB7JwayjFOwSGsDrF0xtP41M3p34zsJf+eSjaVs0cTqu hEQJPyeCqiwgidPkbRgC85+O6kcUva107FHs11r+wSVtTjIHWUvWrROU3zsWiB0e DwPBymTxQdsKsYKByupwhkZTvpEDd6+30IuM/JIdmLQDn7gK6WLh6DoHbVMhViy6 fsfMYlYvNFeRPFVSk5aB25osluaH7qqKIVtOmJjRT8GPTEpxCYSwEAf/POiwLC0Q JSkRx/5ZpGzH76JmELcGfoKrRB3h6yDM8PkuI4QkLtYOgqfxkw5NVJ75NCW1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6eat5dbdtwrbkMERkz5gbPZxtlwwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYgI10ZsYEtzRvGfUZxKNhE8+3TmHzKEPOE Zy69DSZw+/AsNF1hXVNQaEprreAkDO53idZbN07ELX1erRdNc5mGQEIsiYXE9r/a uGWpzfZVZv+tf3XLbHRS4624JiMuqI8gMOjfEkpG18HKzQTOIZOsmYPuEJcnKOX1 W1mQUlJte3pHtlfCj8wtqD7alHfhYHe1NGJGTto8AK/dA9r1Koe5lHBVxVLD0RZD f8HNJD/Iasiut7ynEC3OFrNWosJP8xpLIOeClL8IPt1IzylIiCVLBUcqr2HAaYcu //8VBDNxdk2C4E1n0Hzc2MHtPHRdmp+22bf0YVTJDTAIKgprzYw= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:06 2025 by rpki-client