$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json) Hash identifier: ax9THVjYyhJMLoEAhUg5EiH9Zyx8SYeIPJDQBcR/tO8= Subject key identifier: F5:6F:F1:C1:24:6A:3C:60:7B:83:B1:41:82:4A:BC:8D:F3:53:C2:14 Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Certificate serial: 24A036E8F04AF63E6BE3FB0C15ED956B201249F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft Manifest number: 01D5 Signing time: Fri 05 Sep 2025 00:50:04 +0000 Manifest this update: Fri 05 Sep 2025 00:45:04 +0000 Manifest next update: Mon 08 Sep 2025 04:08:04 +0000 Files and hashes: 1: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: mZzWMkkkRMEby0VyA0/hfsXx5twdVH93i1TwSvhsT3o=) 2: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 2pmnEjpV6xKfD9pUClZgIAGRZy9Yz1iTckvB+l+9+U4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 04:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a0:36:e8:f0:4a:f6:3e:6b:e3:fb:0c:15:ed:95:6b:20:12:49:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Validity Not Before: Sep 5 00:45:04 2025 GMT Not After : Sep 8 04:08:04 2025 GMT Subject: CN=F56FF1C1246A3C607B83B141824ABC8DF353C214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:a9:d7:6d:3d:80:a1:c1:e1:23:9a:6c:2e: 7b:27:7c:c4:34:be:bd:7c:74:95:02:be:81:ea:15: ae:3d:02:f4:a2:09:8a:3d:75:0e:dc:91:fa:b1:8d: a7:8f:a5:5e:2b:a2:21:3f:95:c2:c3:92:79:cb:e0: ab:7e:21:31:49:f6:d0:5d:42:51:dc:c7:a9:36:63: 3a:f1:14:51:b9:06:05:a2:5f:ac:3e:76:09:8b:0f: f6:73:c0:45:4f:aa:94:49:02:81:44:3b:e1:20:58: 17:cd:8b:71:12:f0:6a:c9:8e:7f:c5:18:4e:d4:f0: 08:8c:1f:5b:8f:41:1a:54:62:41:b1:60:55:cb:92: ec:da:9c:6a:8b:d8:81:3b:74:8e:26:29:6f:22:44: ad:3c:14:11:21:13:23:f1:5f:91:29:10:8a:83:41: e7:33:79:ec:ba:a4:19:a4:7f:2d:04:d9:3c:aa:62: e5:9a:cb:d7:96:e1:8d:1a:13:b4:6e:70:f3:5a:03: 3a:25:51:b8:9a:62:14:fc:9d:f0:ee:9f:ce:64:59: b5:d3:c6:33:9e:0d:7e:76:cb:95:82:72:01:76:54: 1f:95:92:41:39:3a:fc:b1:18:37:91:5e:d1:69:75: 7a:a4:75:9e:4c:72:f3:41:e3:49:46:5d:d9:cc:69: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6F:F1:C1:24:6A:3C:60:7B:83:B1:41:82:4A:BC:8D:F3:53:C2:14 X509v3 Authority Key Identifier: keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9b:06:e8:3d:19:e6:e4:cf:49:cb:a8:ed:ed:d7:f3:78:40: 09:45:1b:8e:cc:56:43:b6:67:49:01:82:36:b6:8b:f4:de:44: 68:f2:23:1c:09:b9:09:1c:d4:d5:42:92:29:39:06:2c:b7:0e: e7:77:6c:3d:b2:af:90:bb:d8:d9:19:cc:3e:4a:a7:e5:c8:de: db:6e:52:ee:33:25:a1:ed:08:60:02:fc:52:9a:fd:57:60:cb: 83:4b:b6:f6:8f:c5:45:e4:2a:10:dc:12:b5:77:a7:eb:5c:c2: 02:4c:79:6a:18:20:df:6b:c9:b5:24:32:c1:e8:d0:82:ee:96: 9d:ad:de:9f:b5:27:86:ef:2b:81:01:7b:3f:a1:e7:d9:03:7d: a8:01:ca:95:96:01:2c:5a:f4:29:c3:17:2d:19:a6:6b:d2:50: 1e:8f:04:bc:90:db:86:36:9d:c4:8a:f4:29:16:19:77:f2:a6: 9d:b9:07:72:ab:3a:ea:09:7e:fa:f2:cc:c0:d7:c6:bc:d4:ae: 00:64:49:8f:cd:7e:3c:28:ed:dd:31:2a:b9:ca:c3:d1:0f:42: 12:50:1c:e6:7a:e4:e5:9a:02:22:25:ef:3d:77:e3:2b:62:bc: 5d:2f:dc:1b:c0:b1:e9:31:eb:85:0d:2e:61:19:b0:49:38:01: 09:1a:b4:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKA26PBK9j5r4/sMFe2VayASSfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4 QjQzRjcyNzAeFw0yNTA5MDUwMDQ1MDRaFw0yNTA5MDgwNDA4MDRaMDMxMTAvBgNV BAMTKEY1NkZGMUMxMjQ2QTNDNjA3QjgzQjE0MTgyNEFCQzhERjM1M0MyMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncKnXbT2AocHhI5psLnsnfMQ0 vr18dJUCvoHqFa49AvSiCYo9dQ7ckfqxjaePpV4roiE/lcLDknnL4Kt+ITFJ9tBd QlHcx6k2YzrxFFG5BgWiX6w+dgmLD/ZzwEVPqpRJAoFEO+EgWBfNi3ES8GrJjn/F GE7U8AiMH1uPQRpUYkGxYFXLkuzanGqL2IE7dI4mKW8iRK08FBEhEyPxX5EpEIqD Qeczeey6pBmkfy0E2TyqYuWay9eW4Y0aE7RucPNaAzolUbiaYhT8nfDun85kWbXT xjOeDX52y5WCcgF2VB+VkkE5OvyxGDeRXtFpdXqkdZ5McvNB40lGXdnMaXK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9W/xwSRqPGB7g7FBgkq8jfNTwhQwHwYDVR0j BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz RjcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAz RTQ4QjQzRjcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICbBug9Gebkz0nLqO3t1/N4QAlFG47MVkO2 Z0kBgja2i/TeRGjyIxwJuQkc1NVCkik5Biy3Dud3bD2yr5C72NkZzD5Kp+XI3ttu Uu4zJaHtCGAC/FKa/Vdgy4NLtvaPxUXkKhDcErV3p+tcwgJMeWoYIN9rybUkMsHo 0ILulp2t3p+1J4bvK4EBez+h59kDfagBypWWASxa9CnDFy0ZpmvSUB6PBLyQ24Y2 ncSK9CkWGXfypp25B3KrOuoJfvryzMDXxrzUrgBkSY/Nfjwo7d0xKrnKw9EPQhJQ HOZ65OWaAiIl7z134ytivF0v3BvAsekx64UNLmEZsEk4AQkatJ4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:34 2025 by rpki-client