$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft File: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json) Hash identifier: rYO6HybPGzRq+8oYbnZQEm39RgjjBQi28fl1pyNo9vs= Subject key identifier: 36:D2:C5:9B:5B:DB:39:C9:7E:88:68:10:B4:12:E1:FF:10:51:9B:78 Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 Certificate issuer: /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Certificate serial: 60ED3291C62A45F98C83F9405EB27650D68DFD41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject info access: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft Manifest number: 01F6 Signing time: Sat 06 Sep 2025 14:11:23 +0000 Manifest this update: Sat 06 Sep 2025 14:06:23 +0000 Manifest next update: Tue 09 Sep 2025 23:46:23 +0000 Files and hashes: 1: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: QZrvNrtpXCKPjhSgsC8kdyvVzWQ/ADZleC5w3ZKWFT4=) 2: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: 1NdQQueVPqepI+p7ToibcHUQEx7WGH/ijvp5U7wyzYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ed:32:91:c6:2a:45:f9:8c:83:f9:40:5e:b2:76:50:d6:8d:fd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Validity Not Before: Sep 6 14:06:23 2025 GMT Not After : Sep 9 23:46:23 2025 GMT Subject: CN=36D2C59B5BDB39C97E886810B412E1FF10519B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:93:1c:0b:05:67:51:e3:d4:35:ba:0f:4c: ab:1e:65:c6:be:a1:a9:52:39:fb:3c:f8:a2:70:06: 99:7a:eb:7b:03:14:dd:32:3c:5e:63:df:1a:a2:f2: a0:f9:d4:b8:cf:59:e1:74:1d:d2:98:10:82:53:0b: b8:77:04:84:3c:ac:4a:f6:3c:e9:d1:f0:e3:0c:8a: 66:a3:6d:77:15:25:12:e3:8d:76:e5:db:b0:3a:2f: f3:f1:d8:9b:ab:9d:54:09:cc:e5:4f:cd:b7:b0:05: b2:54:97:f2:de:f3:de:e3:cf:ac:4b:a4:71:4c:e5: 5d:49:a5:e5:94:fd:f7:37:c4:eb:6d:c9:1f:a5:12: 9f:72:d6:d3:31:7a:eb:36:cc:4f:36:b4:40:12:c9: 89:12:7e:c3:16:32:8e:5e:15:fc:c5:ef:d1:fb:8f: e9:93:5e:a0:45:bd:17:d1:20:5c:6a:de:8e:44:66: 56:c6:f2:87:8a:07:d7:42:55:d1:40:f5:06:b1:bf: b4:f9:e5:66:31:d2:87:bc:9e:45:a1:b8:ec:9d:bf: b3:36:0a:b8:d1:74:cd:fb:98:61:7e:95:0d:45:e8: 04:b6:65:34:b5:52:9e:5e:0f:52:2d:dd:cd:8f:b5: 93:ba:98:68:8b:43:60:84:bf:03:8e:4e:b1:2e:f8: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D2:C5:9B:5B:DB:39:C9:7E:88:68:10:B4:12:E1:FF:10:51:9B:78 X509v3 Authority Key Identifier: keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:11:a7:c1:44:b7:97:ca:9e:b3:14:63:d2:e4:69:9a:07:f5: 2f:3c:5b:b7:7d:59:5b:bb:f5:de:8b:b2:74:3e:49:a2:d9:14: ec:b5:35:ed:a2:74:3b:2b:8d:4e:bc:81:4f:29:4c:c3:e4:31: 01:09:2d:f2:5f:6e:b4:7a:a2:63:7c:ed:24:bc:a2:ef:d6:48: 3b:1e:40:39:94:c4:dd:60:6d:61:98:a5:9f:9f:62:c5:0d:85: 28:66:35:ed:76:b3:34:d0:6a:3f:9b:85:da:f7:ae:b9:d0:a9: f8:d0:01:63:27:0e:65:86:94:43:d3:27:81:58:1a:0f:cc:51: b2:f0:9a:d6:8f:36:d1:39:10:37:0c:2a:6b:3a:2a:4f:c7:5c: 3d:51:48:a9:12:74:b8:92:60:3e:43:1a:66:65:ef:9f:df:29: a8:5d:8b:52:23:40:f8:f0:55:b3:37:0f:8e:70:b1:23:61:fc: 77:8c:6d:98:45:bf:ae:9e:84:76:da:81:c1:d5:e4:30:ec:85: 43:28:0a:2b:db:b5:fb:5d:2b:54:2d:22:2b:a3:e4:3d:20:d1: 03:d3:d1:ee:66:3e:63:c8:62:0f:d5:93:fe:e9:c6:90:8a:78: e2:79:ec:b0:d2:10:a4:6d:03:74:10:91:19:11:37:88:81:86: dd:1a:e5:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYO0ykcYqRfmMg/lAXrJ2UNaN/UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZG MjAwRjYxMzAeFw0yNTA5MDYxNDA2MjNaFw0yNTA5MDkyMzQ2MjNaMDMxMTAvBgNV BAMTKDM2RDJDNTlCNUJEQjM5Qzk3RTg4NjgxMEI0MTJFMUZGMTA1MTlCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+ZMcCwVnUePUNboPTKseZca+ oalSOfs8+KJwBpl663sDFN0yPF5j3xqi8qD51LjPWeF0HdKYEIJTC7h3BIQ8rEr2 POnR8OMMimajbXcVJRLjjXbl27A6L/Px2JurnVQJzOVPzbewBbJUl/Le897jz6xL pHFM5V1JpeWU/fc3xOttyR+lEp9y1tMxeus2zE82tEASyYkSfsMWMo5eFfzF79H7 j+mTXqBFvRfRIFxq3o5EZlbG8oeKB9dCVdFA9Qaxv7T55WYx0oe8nkWhuOydv7M2 CrjRdM37mGF+lQ1F6AS2ZTS1Up5eD1It3c2PtZO6mGiLQ2CEvwOOTrEu+Hh9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNtLFm1vbOcl+iGgQtBLh/xBRm3gwHwYDVR0j BBgwFoAUPmSOaoYjxcXd8AFSbQ/cD/IA9hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjFmM2ZhZS1kMGNiLTRhMTctYTU0OC0xYmE2NjMxYjFlMDkvMC8zRTY0OEU2QTg2 MjNDNUM1RERGMDAxNTI2RDBGREMwRkYyMDBGNjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZGMjAw RjYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRD MEZGMjAwRjYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQRp8FEt5fKnrMUY9LkaZoH9S88W7d9WVu7 9d6LsnQ+SaLZFOy1Ne2idDsrjU68gU8pTMPkMQEJLfJfbrR6omN87SS8ou/WSDse QDmUxN1gbWGYpZ+fYsUNhShmNe12szTQaj+bhdr3rrnQqfjQAWMnDmWGlEPTJ4FY Gg/MUbLwmtaPNtE5EDcMKms6Kk/HXD1RSKkSdLiSYD5DGmZl75/fKahdi1IjQPjw VbM3D45wsSNh/HeMbZhFv66ehHbagcHV5DDshUMoCivbtftdK1QtIiuj5D0g0QPT 0e5mPmPIYg/Vk/7pxpCKeOJ57LDSEKRtA3QQkRkRN4iBht0a5d0= -----END CERTIFICATE-----Generated at Sun Sep 7 14:03:58 2025 by rpki-client