$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: pyYyC/0bi4wWZqB6sZPGS5wSRGuAfbEV3qDNUNQ/bZE= Subject key identifier: 3F:5C:CB:33:3E:E4:14:18:6F:49:C4:2B:2F:C2:34:A7:61:67:BB:11 Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 381238A9A566A2777382AE92900C01B52286F0AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 0223 Signing time: Wed 03 Sep 2025 05:01:03 +0000 Manifest this update: Wed 03 Sep 2025 04:56:03 +0000 Manifest next update: Sat 06 Sep 2025 12:12:03 +0000 Files and hashes: 1: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: FctECYe/TOViLnHL9hp42yRxMydfJOoQYSQ4HbxkoBo=) 2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 12:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:12:38:a9:a5:66:a2:77:73:82:ae:92:90:0c:01:b5:22:86:f0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Sep 3 04:56:03 2025 GMT Not After : Sep 6 12:12:03 2025 GMT Subject: CN=3F5CCB333EE414186F49C42B2FC234A76167BB11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:63:61:89:df:72:ef:20:6a:26:f5:57:31: a1:36:ea:87:2d:44:75:b4:7f:35:8e:1c:3f:08:d1: 2a:29:ed:23:d8:53:e6:28:6a:e8:51:fc:5a:f2:d8: 4e:ad:ca:62:59:82:cd:d5:01:ab:ce:c9:dc:c3:38: f3:2f:3f:17:3d:ad:10:e4:3d:c7:95:b8:14:b9:e7: 98:ee:8c:ec:a2:12:de:96:4b:9b:d5:8d:02:a1:8c: b0:b1:a0:ec:d3:38:54:9a:dc:eb:43:14:3d:5d:22: aa:ea:10:cc:a6:0c:91:de:9f:83:b3:95:55:8a:1a: a5:38:16:13:1d:f2:b5:35:cc:0d:49:70:63:13:24: 9c:ae:cb:6d:a9:cb:39:38:1b:fd:52:47:04:2f:a6: 0a:84:2a:6a:e3:a5:2b:66:c5:36:eb:10:fe:54:c4: fb:2a:7e:49:6f:61:d2:b7:8a:6b:1e:dd:d6:98:8a: 73:ef:05:73:24:62:e4:d2:6e:76:68:e2:fa:46:c9: 15:39:c1:37:95:e9:e2:df:9a:25:93:b4:e3:12:b5: 41:5e:ae:a6:7d:38:14:7e:f9:33:9b:7f:6e:76:58: a5:7a:19:08:7a:0c:30:00:79:2c:0b:46:3e:89:dd: ea:32:d6:0d:82:ec:07:99:2d:37:1f:fe:45:e2:67: fc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5C:CB:33:3E:E4:14:18:6F:49:C4:2B:2F:C2:34:A7:61:67:BB:11 X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:07:cd:66:2e:5e:0c:1f:99:63:e5:ec:77:00:fa:d7:16:1b: 79:93:e9:6b:00:15:2b:28:ec:73:15:f5:a3:91:0e:30:11:92: 36:0c:42:1b:0f:a9:d3:d9:14:3c:bc:6a:44:51:db:1a:fc:59: 1f:6a:52:8d:fc:6f:4a:5a:cc:ae:56:f3:ad:1d:08:2e:52:f4: f8:8d:ea:97:8e:0d:ff:dd:ec:b1:e5:6a:d9:a2:92:b5:86:63: 67:76:8d:8b:32:8a:47:89:df:58:93:c1:98:f5:85:ea:37:87: ac:05:86:32:d7:14:02:c3:1e:4b:31:35:21:49:fc:3e:ca:b4: 52:e1:6f:26:cb:8d:f6:45:28:6f:c4:48:b3:a2:05:72:1b:c1: 8b:5c:25:76:01:84:ac:67:90:11:53:f6:2d:21:70:df:d7:34: 4f:24:b1:21:7d:93:6d:03:5d:59:ec:20:d2:7e:54:d5:ed:f9: 3e:b3:cc:71:ef:a7:13:ac:e0:34:93:94:3f:50:23:e8:87:f3: 9f:72:f4:5d:46:46:3a:2b:a8:01:79:98:7b:44:3a:63:d7:84: 24:a1:4c:15:74:b6:8e:4f:29:fc:f7:27:ea:2a:ad:4e:21:88: 43:78:6e:83:6b:37:fa:c1:f4:a2:04:ab:a6:0a:e8:04:dd:bf: 06:6d:cd:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBI4qaVmondzgq6SkAwBtSKG8K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTA5MDMwNDU2MDNaFw0yNTA5MDYxMjEyMDNaMDMxMTAvBgNV BAMTKDNGNUNDQjMzM0VFNDE0MTg2RjQ5QzQyQjJGQzIzNEE3NjE2N0JCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdGNhid9y7yBqJvVXMaE26oct RHW0fzWOHD8I0Sop7SPYU+YoauhR/Fry2E6tymJZgs3VAavOydzDOPMvPxc9rRDk PceVuBS555jujOyiEt6WS5vVjQKhjLCxoOzTOFSa3OtDFD1dIqrqEMymDJHen4Oz lVWKGqU4FhMd8rU1zA1JcGMTJJyuy22pyzk4G/1SRwQvpgqEKmrjpStmxTbrEP5U xPsqfklvYdK3imse3daYinPvBXMkYuTSbnZo4vpGyRU5wTeV6eLfmiWTtOMStUFe rqZ9OBR++TObf252WKV6GQh6DDAAeSwLRj6J3eoy1g2C7AeZLTcf/kXiZ/wlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP1zLMz7kFBhvScQrL8I0p2FnuxEwHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoHzWYuXgwfmWPl7HcA+tcWG3mT6WsAFSso 7HMV9aORDjARkjYMQhsPqdPZFDy8akRR2xr8WR9qUo38b0pazK5W860dCC5S9PiN 6peODf/d7LHlatmikrWGY2d2jYsyikeJ31iTwZj1heo3h6wFhjLXFALDHksxNSFJ /D7KtFLhbybLjfZFKG/ESLOiBXIbwYtcJXYBhKxnkBFT9i0hcN/XNE8ksSF9k20D XVnsINJ+VNXt+T6zzHHvpxOs4DSTlD9QI+iH859y9F1GRjorqAF5mHtEOmPXhCSh TBV0to5PKfz3J+oqrU4hiEN4boNrN/rB9KIEq6YK6ATdvwZtzU0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:11 2025 by rpki-client