$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: tNv1wQRW8LajmCpQRaF7106x9izYI7RkisdKnNT1158= Subject key identifier: 48:A2:F7:6F:0E:95:EA:2A:3A:19:42:26:25:97:1B:C9:97:40:05:7F Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 69451CA858DBF67A557AA699888BAF68C740DB1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 02B2 Signing time: Sat 06 Sep 2025 20:31:22 +0000 Manifest this update: Sat 06 Sep 2025 20:26:22 +0000 Manifest next update: Wed 10 Sep 2025 05:06:22 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: ixkWz59bpG+EoizWro6OgQwE04nyET1BLVyTLbas1UI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:45:1c:a8:58:db:f6:7a:55:7a:a6:99:88:8b:af:68:c7:40:db:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Sep 6 20:26:22 2025 GMT Not After : Sep 10 05:06:22 2025 GMT Subject: CN=48A2F76F0E95EA2A3A19422625971BC99740057F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:94:f8:93:59:ba:0c:0a:65:86:99:dd:7d: 6e:60:b6:76:0b:67:38:49:a0:e5:00:bf:78:5c:01: 3f:e4:4f:ac:97:73:3c:c1:03:a9:a4:eb:6c:59:52: 46:66:c8:ee:70:a7:19:b0:01:71:87:42:6f:6b:b3: 69:8a:36:28:9e:92:81:7a:8e:66:3d:d4:e9:b2:cf: cd:8d:d3:be:ab:cf:cd:6e:0d:02:4b:ef:46:3f:f6: b6:a4:ec:b6:ae:51:04:60:07:4b:f3:12:f5:ea:ef: 62:fe:f3:9c:db:e4:f8:d4:6f:45:e2:c9:57:20:2d: f2:99:81:17:cb:f9:a9:18:8a:b9:6c:53:b2:5e:6a: 7d:92:37:21:b6:52:79:92:dc:f3:e2:69:87:79:92: 93:7c:d5:38:f2:31:27:e5:ce:82:93:7d:ff:1a:30: a6:a5:69:c0:c2:10:ee:89:f7:58:c5:c1:d9:f0:5b: c8:37:c9:e3:a6:20:cb:3a:5c:81:4f:b0:34:60:7a: d5:0f:e6:63:c5:e9:bc:9f:d7:e7:db:89:63:18:41: 7a:87:d1:7f:fa:e4:37:49:e7:90:e0:14:39:9d:f2: e0:39:3e:98:91:94:5d:d4:35:3e:81:6c:1f:60:9b: 75:be:6e:82:dc:45:c8:24:21:f0:39:a7:5f:21:bd: fa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A2:F7:6F:0E:95:EA:2A:3A:19:42:26:25:97:1B:C9:97:40:05:7F X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:44:70:8b:75:5f:35:e9:9f:e8:37:44:c9:27:e7:4f:b1:27: 46:47:a8:22:bf:88:a4:b4:15:3d:39:fc:d7:32:18:12:4b:0d: f6:8b:84:ab:a2:b0:ee:31:99:10:3b:ce:f2:bd:0e:81:42:2c: c7:7c:4d:f7:2e:48:0d:ee:48:ab:42:9a:50:ee:e1:a7:70:31: c3:85:4e:a9:a3:84:14:71:05:08:62:9f:1a:a5:26:7d:c4:34: c9:09:6b:03:82:e8:96:46:76:d6:d3:16:2b:32:ed:8c:10:9f: 96:86:30:69:ee:59:dc:83:f8:2e:27:71:b5:3e:11:8a:3c:96: 82:19:87:8e:cf:75:3b:4f:43:55:25:25:17:e0:2f:01:db:db: 59:36:1a:08:cd:2c:e8:fe:96:6b:ef:34:e2:ab:7f:d8:59:16: 40:d3:dd:6c:d1:3a:5d:c4:28:18:89:36:55:ef:4f:40:3a:92: 18:24:29:32:77:92:77:36:a9:1e:56:2c:c3:2f:5e:b6:f8:4a: 73:1d:a6:5f:5c:21:c6:cd:18:55:4a:8f:9e:c6:a8:cd:10:ae: a0:8e:c1:62:f6:79:70:1f:d3:08:23:75:83:4b:cc:86:fd:e4: fd:9a:3d:36:5f:55:5b:e9:d7:7a:54:d0:ad:bd:9b:ff:2d:84: 51:7a:da:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUUcqFjb9npVeqaZiIuvaMdA2xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTA5MDYyMDI2MjJaFw0yNTA5MTAwNTA2MjJaMDMxMTAvBgNV BAMTKDQ4QTJGNzZGMEU5NUVBMkEzQTE5NDIyNjI1OTcxQkM5OTc0MDA1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaZT4k1m6DAplhpndfW5gtnYL ZzhJoOUAv3hcAT/kT6yXczzBA6mk62xZUkZmyO5wpxmwAXGHQm9rs2mKNiiekoF6 jmY91Omyz82N076rz81uDQJL70Y/9rak7LauUQRgB0vzEvXq72L+85zb5PjUb0Xi yVcgLfKZgRfL+akYirlsU7Jean2SNyG2UnmS3PPiaYd5kpN81TjyMSflzoKTff8a MKalacDCEO6J91jFwdnwW8g3yeOmIMs6XIFPsDRgetUP5mPF6byf1+fbiWMYQXqH 0X/65DdJ55DgFDmd8uA5PpiRlF3UNT6BbB9gm3W+boLcRcgkIfA5p18hvfp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKL3bw6V6io6GUImJZcbyZdABX8wHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlEcIt1XzXpn+g3RMkn50+xJ0ZHqCK/iKS0 FT05/NcyGBJLDfaLhKuisO4xmRA7zvK9DoFCLMd8TfcuSA3uSKtCmlDu4adwMcOF TqmjhBRxBQhinxqlJn3ENMkJawOC6JZGdtbTFisy7YwQn5aGMGnuWdyD+C4ncbU+ EYo8loIZh47PdTtPQ1UlJRfgLwHb21k2GgjNLOj+lmvvNOKrf9hZFkDT3WzROl3E KBiJNlXvT0A6khgkKTJ3knc2qR5WLMMvXrb4SnMdpl9cIcbNGFVKj57GqM0QrqCO wWL2eXAf0wgjdYNLzIb95P2aPTZfVVvp13pU0K29m/8thFF62j8= -----END CERTIFICATE-----Generated at Mon Sep 8 03:04:42 2025 by rpki-client