$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: Iztzu+zC0uuDJyZnIM3xngZZJxMgdlQSs0UfqtebpnA= Subject key identifier: A5:20:07:D2:22:AF:77:BB:C4:83:A6:C9:41:1C:1C:7D:3A:32:5F:30 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 28213B36FC27C1E04B308951C92A36BF7B4692BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 0204 Signing time: Sat 06 Sep 2025 13:01:34 +0000 Manifest this update: Sat 06 Sep 2025 12:56:34 +0000 Manifest next update: Tue 09 Sep 2025 14:36:34 +0000 Files and hashes: 1: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: MVf5j45UdgjM1cHyvg4duEWHdDYWJYlA5xDJOtBkdJA=) 2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:21:3b:36:fc:27:c1:e0:4b:30:89:51:c9:2a:36:bf:7b:46:92:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Sep 6 12:56:34 2025 GMT Not After : Sep 9 14:36:34 2025 GMT Subject: CN=A52007D222AF77BBC483A6C9411C1C7D3A325F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:ce:7f:00:df:82:74:f4:b4:a3:8d:45:28: 3f:86:47:1f:3f:ff:d8:09:0a:27:72:f9:50:11:e9: 5b:54:77:df:e9:cd:ed:02:be:91:2a:e4:38:84:46: 5b:00:9f:e0:4a:2f:51:c6:ad:c8:54:00:b9:e0:4f: bc:d0:69:0c:51:d0:67:96:02:e5:d0:60:ec:d0:d4: 21:b1:6b:a3:ee:fa:e9:a4:b6:0b:ec:83:6f:bf:e8: a6:06:96:1d:bd:a3:8a:d4:f2:09:92:b1:0f:f6:45: 4f:75:3c:4a:63:07:6f:fc:8e:54:b0:09:b5:64:f4: e3:6d:bc:6a:a8:f6:5c:1d:7e:b4:13:46:00:2f:1d: 37:5a:69:e4:3c:06:a3:6d:45:ed:c5:68:d9:9f:74: fe:bb:3a:39:6f:80:8b:f7:a1:7d:a2:f4:e4:9d:a9: 68:4a:86:ee:98:e1:21:40:59:bd:a8:84:95:b1:7c: 00:d9:c3:46:f7:b8:11:a0:4e:65:ff:20:63:cb:d4: a7:f0:fb:8c:d7:37:96:f8:3b:d3:74:42:dd:2c:30: c1:39:a8:c8:fc:63:eb:d5:bf:2c:b8:af:90:be:e8: a8:b2:5a:cf:07:c8:04:3d:e5:98:70:a3:d4:b0:85: 0e:57:d6:fd:77:16:51:56:da:e1:02:88:a7:6a:f1: 70:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:20:07:D2:22:AF:77:BB:C4:83:A6:C9:41:1C:1C:7D:3A:32:5F:30 X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c7:90:0b:27:c7:c2:a3:31:38:0e:6d:68:05:f3:d0:0e:af: 65:30:38:1f:63:f2:44:28:3b:6a:23:cd:b7:90:30:19:20:95: 4f:5d:35:6f:9d:fc:5c:0b:a9:c1:50:07:f6:f9:1c:70:dc:1f: c3:7d:66:03:ab:f6:75:0e:f8:ee:14:8c:b9:34:a5:9c:10:82: 57:c4:48:ff:f1:22:fd:9a:0a:f4:43:39:e5:e8:81:91:c5:f3: 8c:c1:58:d8:34:1f:5d:18:ce:b0:d7:7a:34:c3:dd:6f:16:b8: 02:84:f9:9d:79:d5:b0:bc:47:02:e2:b5:88:a0:36:24:e9:b3: 6d:53:07:3e:e3:4c:4c:89:1f:55:ee:53:17:b4:78:41:62:b2: 08:53:16:55:60:07:25:bd:88:cd:2e:23:fd:78:43:e7:43:76: 1c:35:ca:27:57:3f:37:d6:95:dc:0f:14:ab:7d:6f:02:2a:77: 18:b2:d3:03:87:e6:81:0e:a6:9b:cd:da:33:8c:cc:05:e8:1e: 9d:e1:85:22:54:4f:10:28:49:b4:0e:ad:bd:99:d5:db:07:2f: 65:44:a7:fd:0f:61:76:ca:fb:d2:58:ea:1a:0f:10:c0:9a:10: 34:ef:b1:18:62:94:ae:47:45:bf:a3:10:d4:e9:02:43:33:94: 59:ec:33:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCE7NvwnweBLMIlRySo2v3tGkr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTA5MDYxMjU2MzRaFw0yNTA5MDkxNDM2MzRaMDMxMTAvBgNV BAMTKEE1MjAwN0QyMjJBRjc3QkJDNDgzQTZDOTQxMUMxQzdEM0EzMjVGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ks5/AN+CdPS0o41FKD+GRx8/ /9gJCidy+VAR6VtUd9/pze0CvpEq5DiERlsAn+BKL1HGrchUALngT7zQaQxR0GeW AuXQYOzQ1CGxa6Pu+umktgvsg2+/6KYGlh29o4rU8gmSsQ/2RU91PEpjB2/8jlSw CbVk9ONtvGqo9lwdfrQTRgAvHTdaaeQ8BqNtRe3FaNmfdP67OjlvgIv3oX2i9OSd qWhKhu6Y4SFAWb2ohJWxfADZw0b3uBGgTmX/IGPL1Kfw+4zXN5b4O9N0Qt0sMME5 qMj8Y+vVvyy4r5C+6KiyWs8HyAQ95Zhwo9SwhQ5X1v13FlFW2uECiKdq8XCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpSAH0iKvd7vEg6bJQRwcfToyXzAwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXHkAsnx8KjMTgObWgF89AOr2UwOB9j8kQo O2ojzbeQMBkglU9dNW+d/FwLqcFQB/b5HHDcH8N9ZgOr9nUO+O4UjLk0pZwQglfE SP/xIv2aCvRDOeXogZHF84zBWNg0H10YzrDXejTD3W8WuAKE+Z151bC8RwLitYig NiTps21TBz7jTEyJH1XuUxe0eEFisghTFlVgByW9iM0uI/14Q+dDdhw1yidXPzfW ldwPFKt9bwIqdxiy0wOH5oEOppvN2jOMzAXoHp3hhSJUTxAoSbQOrb2Z1dsHL2VE p/0PYXbK+9JY6hoPEMCaEDTvsRhilK5HRb+jENTpAkMzlFnsM9w= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:47 2025 by rpki-client