$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: /laYfHjQE+UPrSvHz59soXvuPKIw3XdUAetqDV+WJoQ= Subject key identifier: 40:D5:8A:6D:B3:AB:21:1F:44:9C:C4:BA:EB:1D:55:87:52:B4:B8:48 Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 2A424F3AFF32725B026E5D9B2675C3E2023CC8C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 0111 Signing time: Thu 04 Sep 2025 23:51:09 +0000 Manifest this update: Thu 04 Sep 2025 23:46:09 +0000 Manifest next update: Mon 08 Sep 2025 10:43:09 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: NHiJQgEwec4B9zhC5FnDHrVJO0tdcV21anLchDcDDa0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:42:4f:3a:ff:32:72:5b:02:6e:5d:9b:26:75:c3:e2:02:3c:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Sep 4 23:46:09 2025 GMT Not After : Sep 8 10:43:09 2025 GMT Subject: CN=40D58A6DB3AB211F449CC4BAEB1D558752B4B848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:be:47:9a:45:4c:bd:5a:23:9b:af:34:03: 73:b5:e3:66:ae:88:10:e0:17:b9:e5:93:d6:5e:b9: d9:c5:ec:3c:a7:7b:32:ce:b3:cd:ca:3b:74:7c:cf: 5e:c0:c7:03:61:bb:e4:f1:ba:24:a9:49:2e:4b:d4: a7:6c:31:41:34:f6:f0:f2:30:e0:a7:f4:53:e8:ad: 1f:9a:b6:d9:2a:69:d1:59:79:65:31:dd:90:9a:f5: c7:86:3f:a8:bc:0c:0b:b4:f5:c4:8c:50:4e:42:38: a5:50:a8:51:e0:aa:a4:b7:5d:82:de:64:58:ae:f8: 9e:b4:2b:09:e9:e0:5b:7a:66:00:2a:4c:e2:8f:15: 5f:f6:42:a3:85:ae:2a:bf:19:87:3a:c0:33:3a:27: 91:7b:f3:49:c7:c4:d6:d9:2d:1f:a0:ca:5e:93:0e: a5:8b:44:9f:de:1b:36:0b:00:56:27:d4:10:88:30: 1e:94:48:91:3d:05:93:2b:31:9e:d0:26:40:1e:11: 16:3f:61:bd:50:a5:51:ca:e9:5b:68:ca:10:c2:93: 93:b2:ce:e8:c4:2b:e7:de:68:58:36:04:4a:1a:ee: 1c:8a:89:c1:69:00:70:85:b4:fb:9f:7b:43:20:76: f4:ea:d7:44:19:13:46:16:05:b0:58:60:78:8f:2a: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D5:8A:6D:B3:AB:21:1F:44:9C:C4:BA:EB:1D:55:87:52:B4:B8:48 X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:18:f5:3e:71:22:9f:4d:e6:81:48:f2:6c:5b:06:9c:89:b6: 41:7d:4a:2f:f4:77:a4:76:72:a0:b4:f1:c7:be:d3:ee:5b:e9: 88:3f:13:9c:1d:b5:0c:7f:76:88:a7:24:db:11:22:0c:a3:53: 9a:bd:97:6d:d6:45:83:02:f1:61:fd:9b:fc:15:6c:8f:8a:e2: 2f:20:23:6e:1e:bd:b4:7f:9e:99:a7:bf:8a:9b:b0:94:e9:5f: c6:0c:47:f1:f6:cf:eb:c1:23:95:fc:dc:95:9a:1c:96:47:45: 49:75:52:7b:78:bb:57:b8:00:62:11:73:82:b7:8d:d2:6e:f0: 18:2f:40:f2:6b:cd:2f:ff:b9:b4:ec:93:66:db:f8:ea:fa:6e: 78:68:46:14:74:46:3e:33:33:f7:f2:a4:b7:6f:99:f8:cf:6b: 25:99:9f:aa:de:98:89:5e:2b:5e:1b:38:15:9c:67:17:3f:76: 04:03:f0:78:22:82:17:73:6e:d7:ac:07:e0:5f:19:8d:b5:16: 02:3a:72:80:5b:bf:2a:2d:ab:cc:8b:52:bb:0f:5e:0b:1b:ad: b8:8c:b1:47:37:d2:a2:52:de:ba:9f:66:cb:01:de:66:3f:2f: e6:59:26:12:51:2b:31:1f:29:87:5b:78:31:50:09:9d:31:7f: 14:ca:49:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkJPOv8yclsCbl2bJnXD4gI8yMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTA5MDQyMzQ2MDlaFw0yNTA5MDgxMDQzMDlaMDMxMTAvBgNV BAMTKDQwRDU4QTZEQjNBQjIxMUY0NDlDQzRCQUVCMUQ1NTg3NTJCNEI4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tb5HmkVMvVojm680A3O142au iBDgF7nlk9ZeudnF7DynezLOs83KO3R8z17AxwNhu+TxuiSpSS5L1KdsMUE09vDy MOCn9FPorR+attkqadFZeWUx3ZCa9ceGP6i8DAu09cSMUE5COKVQqFHgqqS3XYLe ZFiu+J60Kwnp4Ft6ZgAqTOKPFV/2QqOFriq/GYc6wDM6J5F780nHxNbZLR+gyl6T DqWLRJ/eGzYLAFYn1BCIMB6USJE9BZMrMZ7QJkAeERY/Yb1QpVHK6VtoyhDCk5Oy zujEK+feaFg2BEoa7hyKicFpAHCFtPufe0MgdvTq10QZE0YWBbBYYHiPKhntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQNWKbbOrIR9EnMS66x1Vh1K0uEgwHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8Y9T5xIp9N5oFI8mxbBpyJtkF9Si/0d6R2 cqC08ce+0+5b6Yg/E5wdtQx/doinJNsRIgyjU5q9l23WRYMC8WH9m/wVbI+K4i8g I24evbR/npmnv4qbsJTpX8YMR/H2z+vBI5X83JWaHJZHRUl1Unt4u1e4AGIRc4K3 jdJu8BgvQPJrzS//ubTsk2bb+Or6bnhoRhR0Rj4zM/fypLdvmfjPayWZn6remIle K14bOBWcZxc/dgQD8HgighdzbtesB+BfGY21FgI6coBbvyotq8yLUrsPXgsbrbiM sUc30qJS3rqfZssB3mY/L+ZZJhJRKzEfKYdbeDFQCZ0xfxTKSYI= -----END CERTIFICATE-----Generated at Fri Sep 5 12:13:56 2025 by rpki-client