$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: xh2koMH1QuMJ0pkW0gHsG+bYTcBMShJa1sGbLPHtEX0= Subject key identifier: B1:46:6A:7C:93:47:19:B0:9E:E5:58:24:E2:C0:55:B6:91:B4:63:79 Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 0EFBF7D0D3E149D6660F9E1FE7FF6F981337F7D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: B5 Signing time: Fri 29 Aug 2025 10:22:21 +0000 Manifest this update: Fri 29 Aug 2025 10:17:21 +0000 Manifest next update: Mon 01 Sep 2025 15:30:21 +0000 Files and hashes: 1: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: aawZS1MtnTp8YbfWPpxVQZjfNyXZq3wcfURozJ/JyQc=) 2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 15:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fb:f7:d0:d3:e1:49:d6:66:0f:9e:1f:e7:ff:6f:98:13:37:f7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Aug 29 10:17:21 2025 GMT Not After : Sep 1 15:30:21 2025 GMT Subject: CN=B1466A7C934719B09EE55824E2C055B691B46379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8f:1f:26:46:10:6b:29:03:29:45:22:77:45: b4:66:77:3c:dc:52:97:36:03:2b:c3:39:c6:32:fa: 01:ad:eb:2f:ff:e9:4f:fa:3d:5a:e2:c3:d1:dd:3d: 4b:c2:f5:54:9a:e9:ff:02:6d:e2:0e:19:4d:73:30: 73:47:fe:d9:bc:81:83:b5:df:7e:66:ff:38:00:6c: 54:69:b0:64:a1:d3:dd:1c:ad:ee:c9:cd:07:74:99: 6b:97:56:c5:06:41:0b:64:07:11:d9:43:34:01:7d: de:6b:0e:35:2f:da:df:75:d2:4e:7f:b0:8b:35:e2: 6c:3d:ff:63:7c:a7:7d:34:c9:7d:70:60:83:11:1f: 69:62:43:a6:0d:01:ea:cc:25:4d:8c:df:e8:97:8d: 21:d1:36:e2:65:c4:29:64:b4:7a:2c:5f:21:16:81: e5:31:8c:7b:61:4b:96:7d:60:51:3c:89:b8:f3:b2: 08:f4:c0:2d:87:11:e3:9f:92:83:bd:db:3e:d1:dd: eb:05:4e:7c:06:65:00:7c:09:5d:12:f3:6e:fe:9c: 8f:f9:7c:62:dd:50:0b:82:7e:db:86:49:57:89:d8: 40:1c:7a:11:ee:17:3d:2a:f2:b2:c0:bd:03:c5:3c: 4d:ad:95:7b:54:94:d5:b9:b0:b6:45:79:04:b9:bc: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:46:6A:7C:93:47:19:B0:9E:E5:58:24:E2:C0:55:B6:91:B4:63:79 X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:82:50:30:cb:18:1a:6a:fe:4a:40:2b:9a:c7:02:8a:37:16: 6f:d7:2b:f2:a9:09:e5:57:62:36:5a:ff:31:3b:12:f8:d5:1a: 0d:2a:13:9f:31:eb:27:87:ae:ca:2d:84:94:41:46:6c:83:29: 31:f6:d0:64:5f:06:bb:bc:d3:81:25:32:1a:36:ce:bb:c7:c2: 40:42:a1:5d:7f:3c:1d:15:2f:33:6f:3d:9d:65:3b:4e:47:31: bc:67:ab:57:e4:3a:fe:b2:52:ef:34:29:6b:8d:0b:52:2c:71: 7b:8c:f6:07:11:e2:8e:2c:78:5c:91:a4:44:f9:cf:ed:b8:b8: e9:9e:06:72:76:ff:c0:85:e4:90:d8:64:38:14:94:ab:53:06: e2:0f:48:f3:4c:dc:30:c8:c3:34:3c:cb:71:53:04:78:32:a4: 3b:23:cd:38:35:99:cc:b6:7f:e2:9e:55:b0:63:c6:3d:ef:84: 9d:61:2a:97:54:15:93:d2:58:5d:12:a7:40:7b:ea:97:8a:b8: 70:5e:be:bc:12:16:c8:75:72:e1:f8:37:5d:d0:74:47:b9:45: cc:40:e1:cd:18:4b:9c:e0:0c:fa:10:d3:ce:bb:b2:3d:88:cf: 13:c1:a4:28:ea:c7:e7:f8:fd:a1:6d:75:8d:34:ac:49:d3:70: 86:88:77:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvv30NPhSdZmD54f5/9vmBM399AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNTA4MjkxMDE3MjFaFw0yNTA5MDExNTMwMjFaMDMxMTAvBgNV BAMTKEIxNDY2QTdDOTM0NzE5QjA5RUU1NTgyNEUyQzA1NUI2OTFCNDYzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjx8mRhBrKQMpRSJ3RbRmdzzc Upc2AyvDOcYy+gGt6y//6U/6PVriw9HdPUvC9VSa6f8CbeIOGU1zMHNH/tm8gYO1 335m/zgAbFRpsGSh090cre7JzQd0mWuXVsUGQQtkBxHZQzQBfd5rDjUv2t910k5/ sIs14mw9/2N8p300yX1wYIMRH2liQ6YNAerMJU2M3+iXjSHRNuJlxClktHosXyEW geUxjHthS5Z9YFE8ibjzsgj0wC2HEeOfkoO92z7R3esFTnwGZQB8CV0S827+nI/5 fGLdUAuCftuGSVeJ2EAcehHuFz0q8rLAvQPFPE2tlXtUlNW5sLZFeQS5vLgFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUZqfJNHGbCe5Vgk4sBVtpG0Y3kwHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiCUDDLGBpq/kpAK5rHAoo3Fm/XK/KpCeVX YjZa/zE7EvjVGg0qE58x6yeHrsothJRBRmyDKTH20GRfBru804ElMho2zrvHwkBC oV1/PB0VLzNvPZ1lO05HMbxnq1fkOv6yUu80KWuNC1IscXuM9gcR4o4seFyRpET5 z+24uOmeBnJ2/8CF5JDYZDgUlKtTBuIPSPNM3DDIwzQ8y3FTBHgypDsjzTg1mcy2 f+KeVbBjxj3vhJ1hKpdUFZPSWF0Sp0B76peKuHBevrwSFsh1cuH4N13QdEe5RcxA 4c0YS5zgDPoQ0867sj2IzxPBpCjqx+f4/aFtdY00rEnTcIaIdwU= -----END CERTIFICATE-----Generated at Sun Aug 31 02:17:49 2025 by rpki-client