$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: VIGVT7AS+vdVD5t3k0qJ6Uuu+vk/r8yyMQAy8uSuKyY= Subject key identifier: EC:DA:0A:9B:0A:71:0D:44:45:CA:74:86:6C:F8:BA:FA:C5:6A:65:D3 Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 4B091A658FF5055707BAD9FDF6BBF7978A983B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 01B0 Signing time: Mon 01 Sep 2025 08:20:41 +0000 Manifest this update: Mon 01 Sep 2025 08:15:41 +0000 Manifest next update: Thu 04 Sep 2025 14:52:41 +0000 Files and hashes: 1: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: Eu2Eoir7djyKvObnmDTI6gDz3FvbkMaidlOlTCibu9w=) 2: 3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa (hash: V7RFCHjDQmX/bycVf9vGUXwZyU+bAqqIJro21SU5i0w=) 3: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 14:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:09:1a:65:8f:f5:05:57:07:ba:d9:fd:f6:bb:f7:97:8a:98:3b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Sep 1 08:15:41 2025 GMT Not After : Sep 4 14:52:41 2025 GMT Subject: CN=ECDA0A9B0A710D4445CA74866CF8BAFAC56A65D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:d4:11:a7:3d:23:eb:38:a2:af:0a:b0:92: 29:92:0e:a6:a8:64:97:14:03:c0:71:e7:c6:e3:89: 53:0e:cd:d3:11:7a:92:78:50:21:cf:d4:9c:83:87: 50:95:90:8b:df:49:bf:5b:a8:f1:02:40:78:28:77: 64:2b:39:81:87:c5:0f:93:d6:06:f0:d6:0d:e0:c2: 7b:ae:76:a1:95:de:5a:6c:29:ce:6a:2f:df:6f:44: ed:45:11:d5:a1:23:71:25:05:ba:c1:59:6d:9a:c6: e6:0c:e8:9b:c9:ac:b6:fa:56:7d:b5:2a:63:94:c7: f8:8f:3f:c5:9b:85:48:05:3a:7e:26:ad:bf:ed:cd: f2:b8:bb:d9:68:31:2d:55:12:d7:c3:26:c0:19:1b: 93:0f:6b:36:64:78:8b:1b:72:ee:f4:34:77:20:2c: f5:85:ec:54:d3:78:ca:04:a7:61:50:15:94:ba:d7: e1:79:51:54:40:0d:77:11:ec:23:7b:93:0e:2f:11: 1f:18:f2:62:6a:1f:fc:5c:68:9b:d1:36:1a:5b:b1: 33:31:fe:90:b7:0c:41:17:1c:4c:48:50:76:cd:bf: 62:59:81:91:4b:33:46:f6:3d:a3:3f:d0:f8:80:cf: 71:76:57:18:59:79:f1:e4:7e:15:ff:79:0d:1b:e6: df:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DA:0A:9B:0A:71:0D:44:45:CA:74:86:6C:F8:BA:FA:C5:6A:65:D3 X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:78:33:58:f5:d6:26:f5:39:d0:f9:03:3c:d9:9b:84:88:49: 7e:dc:8a:98:e7:09:28:94:9a:a6:45:b2:6a:43:48:03:be:1b: 2c:eb:0b:cd:08:1f:3f:fe:db:89:23:99:67:03:3d:ed:d7:a8: 86:10:04:1f:cb:e3:53:2b:30:2e:c6:13:63:10:31:15:c9:29: 6a:fe:5c:b9:03:bc:c2:15:21:1e:b6:7c:eb:df:88:c0:e7:5d: 30:92:1d:eb:4e:e6:b4:ea:35:d3:3b:f1:60:0a:e0:04:43:3e: d4:81:63:d5:46:ec:be:0c:cf:0d:53:fe:f4:f0:14:50:30:34: 74:25:70:5c:2d:c8:24:f0:61:05:5d:dd:e4:bf:90:9c:41:de: de:89:99:de:f7:55:9c:9a:e9:d4:48:71:86:be:7d:25:a8:71: 43:97:91:da:f0:a6:fc:75:02:4b:51:4c:4c:9f:82:98:b2:76: 20:d6:69:0f:41:11:7a:39:1a:4f:a8:8f:3c:c6:8e:c6:79:41: 46:f4:b1:8d:b0:22:8a:63:ba:db:eb:4c:96:74:08:50:ef:60: 83:ea:d8:d2:82:0a:24:3b:08:4a:78:f9:a3:34:f5:c0:f1:af: ad:6e:67:14:63:20:2c:af:c1:90:9e:51:34:1c:e2:05:e5:dd: ff:84:23:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwkaZY/1BVcHutn99rv3l4qYOzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNTA5MDEwODE1NDFaFw0yNTA5MDQxNDUyNDFaMDMxMTAvBgNV BAMTKEVDREEwQTlCMEE3MTBENDQ0NUNBNzQ4NjZDRjhCQUZBQzU2QTY1RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RdQRpz0j6ziirwqwkimSDqao ZJcUA8Bx58bjiVMOzdMRepJ4UCHP1JyDh1CVkIvfSb9bqPECQHgod2QrOYGHxQ+T 1gbw1g3gwnuudqGV3lpsKc5qL99vRO1FEdWhI3ElBbrBWW2axuYM6JvJrLb6Vn21 KmOUx/iPP8WbhUgFOn4mrb/tzfK4u9loMS1VEtfDJsAZG5MPazZkeIsbcu70NHcg LPWF7FTTeMoEp2FQFZS61+F5UVRADXcR7CN7kw4vER8Y8mJqH/xcaJvRNhpbsTMx /pC3DEEXHExIUHbNv2JZgZFLM0b2PaM/0PiAz3F2VxhZefHkfhX/eQ0b5t8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7NoKmwpxDURFynSGbPi6+sVqZdMwHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx4M1j11ib1OdD5AzzZm4SISX7cipjnCSiU mqZFsmpDSAO+GyzrC80IHz/+24kjmWcDPe3XqIYQBB/L41MrMC7GE2MQMRXJKWr+ XLkDvMIVIR62fOvfiMDnXTCSHetO5rTqNdM78WAK4ARDPtSBY9VG7L4Mzw1T/vTw FFAwNHQlcFwtyCTwYQVd3eS/kJxB3t6Jmd73VZya6dRIcYa+fSWocUOXkdrwpvx1 AktRTEyfgpiydiDWaQ9BEXo5Gk+ojzzGjsZ5QUb0sY2wIopjutvrTJZ0CFDvYIPq 2NKCCiQ7CEp4+aM09cDxr61uZxRjICyvwZCeUTQc4gXl3f+EIwk= -----END CERTIFICATE-----Generated at Wed Sep 3 10:08:27 2025 by rpki-client