$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: 5mKrWe2XPSHoOwiUo46KRNPeybLf6C7dL6PF2KK01rY= Subject key identifier: 40:7A:8C:E6:55:CF:18:1F:48:1A:47:96:51:17:6A:8C:52:0F:0E:09 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 0B141F05B553BAEF27B0D155F6FAF049633987DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 0507 Signing time: Mon 08 Sep 2025 19:30:03 +0000 Manifest this update: Mon 08 Sep 2025 19:25:03 +0000 Manifest next update: Fri 12 Sep 2025 03:16:03 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: Mi4gHYFdp/jZSjxS/EvhjyAsRGkiV7svHURfbqztX34=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:14:1f:05:b5:53:ba:ef:27:b0:d1:55:f6:fa:f0:49:63:39:87:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Sep 8 19:25:03 2025 GMT Not After : Sep 12 03:16:03 2025 GMT Subject: CN=407A8CE655CF181F481A479651176A8C520F0E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:29:86:52:11:4c:04:8b:df:1e:08:45:a5: 05:c3:fd:a0:ce:6e:dc:ab:24:98:45:1e:00:e7:b4: 14:d0:79:b6:81:f8:3b:14:64:a3:bb:ee:bb:96:55: 2c:f8:53:82:c4:79:f5:80:ae:9e:7a:6f:bd:c6:fc: 89:e0:ac:69:7b:33:65:d9:4c:5b:ed:ba:c4:3f:1f: 30:e0:ad:3c:e9:d6:e6:16:b7:f1:31:c7:c5:bd:45: b9:a7:db:4d:11:cd:6f:fc:ba:d8:5d:5a:31:07:22: 48:45:f1:6c:c6:1b:2f:28:21:ad:c8:b0:2a:be:7d: 10:e2:26:35:63:27:a5:7b:f6:7e:4d:5d:46:9c:e7: b0:3c:48:ee:df:de:ba:b9:c2:5e:4a:3d:54:03:64: d5:f0:1d:a0:ad:f6:96:cb:18:f4:e6:89:32:10:30: ca:57:4d:98:b6:cc:20:09:b9:1c:9b:71:f3:89:c7: 6c:3b:e5:c2:e1:ee:54:64:7a:fe:c1:7a:3f:c0:0c: 3e:29:40:0c:2c:0f:4f:4e:45:7b:24:6d:2f:78:46: 45:ed:8c:ca:15:d2:ea:78:56:2b:97:92:db:5f:99: ba:74:8b:ba:36:ea:bb:9c:2e:a8:bf:07:63:b4:e7: c0:07:54:f9:46:d2:94:1e:24:a8:fb:35:aa:0b:2f: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7A:8C:E6:55:CF:18:1F:48:1A:47:96:51:17:6A:8C:52:0F:0E:09 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:58:df:b8:08:d5:f0:39:13:ac:e1:c5:e1:a5:f8:7b:f3:ab: c2:0e:3e:e0:ef:2e:8f:66:8c:7e:f1:5c:1c:80:c4:a1:15:77: b4:d0:1a:04:e0:72:4b:2e:09:90:fa:a1:61:fb:67:91:c5:ca: f3:87:3b:aa:3c:b1:d8:32:80:a0:0f:2d:6f:8f:0f:73:9f:21: 06:90:50:89:79:8b:a2:a6:4b:a6:00:f9:db:97:fd:48:ce:96: cd:11:5e:a9:90:7c:68:3f:66:7a:68:b8:62:3b:ff:d3:93:4e: 8b:d8:75:2d:6b:04:b2:7b:2f:8e:57:0a:44:86:1b:6a:77:9f: 34:79:5e:f3:96:93:30:62:94:81:8e:96:82:61:26:2d:b9:48: bc:af:63:c8:2f:88:92:ae:7c:43:e4:0a:c1:1a:75:d8:c5:0c: c3:48:a4:24:c7:86:f2:b8:a3:f7:83:25:3a:12:9d:55:58:1a: 55:d6:e8:97:7a:89:dc:39:e4:bf:16:f3:c7:cd:39:83:37:23: 07:12:1d:0d:57:44:69:33:d9:8c:86:7e:d8:f1:a2:d8:ad:c3: ef:78:50:80:d5:fe:dc:af:c9:fd:62:56:10:33:83:0a:4a:17: 40:5e:ab:81:a2:71:20:4c:61:23:45:c7:30:1f:4b:69:ed:5f: 9d:50:14:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxQfBbVTuu8nsNFV9vrwSWM5h9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTA5MDgxOTI1MDNaFw0yNTA5MTIwMzE2MDNaMDMxMTAvBgNV BAMTKDQwN0E4Q0U2NTVDRjE4MUY0ODFBNDc5NjUxMTc2QThDNTIwRjBFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUCmGUhFMBIvfHghFpQXD/aDO btyrJJhFHgDntBTQebaB+DsUZKO77ruWVSz4U4LEefWArp56b73G/IngrGl7M2XZ TFvtusQ/HzDgrTzp1uYWt/Exx8W9Rbmn200RzW/8uthdWjEHIkhF8WzGGy8oIa3I sCq+fRDiJjVjJ6V79n5NXUac57A8SO7f3rq5wl5KPVQDZNXwHaCt9pbLGPTmiTIQ MMpXTZi2zCAJuRybcfOJx2w75cLh7lRkev7Bej/ADD4pQAwsD09ORXskbS94RkXt jMoV0up4ViuXkttfmbp0i7o26rucLqi/B2O058AHVPlG0pQeJKj7NaoLL+TvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQHqM5lXPGB9IGkeWURdqjFIPDgkwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9Y37gI1fA5E6zhxeGl+Hvzq8IOPuDvLo9m jH7xXByAxKEVd7TQGgTgcksuCZD6oWH7Z5HFyvOHO6o8sdgygKAPLW+PD3OfIQaQ UIl5i6KmS6YA+duX/UjOls0RXqmQfGg/ZnpouGI7/9OTTovYdS1rBLJ7L45XCkSG G2p3nzR5XvOWkzBilIGOloJhJi25SLyvY8gviJKufEPkCsEaddjFDMNIpCTHhvK4 o/eDJToSnVVYGlXW6Jd6idw55L8W88fNOYM3IwcSHQ1XRGkz2YyGftjxotitw+94 UIDV/tyvyf1iVhAzgwpKF0Beq4GicSBMYSNFxzAfS2ntX51QFIw= -----END CERTIFICATE-----Generated at Tue Sep 9 01:26:27 2025 by rpki-client