$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: O4/1QaeEQOKd/DyHZBlC4/T8q3/KykxW+0jYITP6eyc= Subject key identifier: 38:C5:5C:B5:91:4D:2E:4F:06:BC:20:0B:18:81:8D:B1:F8:76:6D:44 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 216B3516CE66DD1137135A02009D2CAFD56EE2E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 035E Signing time: Fri 05 Sep 2025 07:01:16 +0000 Manifest this update: Fri 05 Sep 2025 06:56:16 +0000 Manifest next update: Mon 08 Sep 2025 12:03:16 +0000 Files and hashes: 1: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: uHJ3+0fstl4uXikk4caUwfxcpY3dPzaeaBmydtL8ZeU=) 2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) 3: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 12:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6b:35:16:ce:66:dd:11:37:13:5a:02:00:9d:2c:af:d5:6e:e2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Sep 5 06:56:16 2025 GMT Not After : Sep 8 12:03:16 2025 GMT Subject: CN=38C55CB5914D2E4F06BC200B18818DB1F8766D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:66:b0:20:2c:2d:41:96:b7:29:eb:4c:85:f8: 56:65:ce:bc:eb:d9:43:ce:b8:a1:95:02:d4:54:1a: f9:1e:91:ad:d4:89:aa:fc:ea:90:43:85:bc:d6:5b: 22:3a:73:55:7a:50:9a:f2:66:cb:56:8b:67:85:af: 4a:4e:90:85:9e:d0:64:79:0a:43:a4:9b:d2:2b:89: f9:74:85:f0:3e:3e:56:aa:4a:8c:c7:fa:7c:da:a6: 89:4d:35:5b:34:26:82:9e:7d:b2:a1:35:0a:3f:f4: 04:57:0a:ad:4d:d9:dc:c4:be:8a:9f:f2:79:53:d5: e1:94:61:d6:a8:16:b7:50:e1:f8:06:07:42:f1:26: 79:80:27:1c:dd:f7:13:b8:06:56:0c:2a:61:77:1e: 63:05:30:b9:89:7b:fa:4b:96:b7:19:86:fa:46:95: ce:b2:41:e2:2f:22:69:7c:12:82:13:41:e2:16:47: 1a:3f:13:2c:84:36:3f:a9:1a:45:4d:0a:54:a2:18: 63:d3:dc:c3:93:98:da:4a:36:2f:7d:3e:cd:3b:72: da:df:53:75:fe:da:f9:cd:d4:ae:b7:f8:ab:a0:db: 5a:6e:3e:36:dc:df:1b:6d:c1:99:3e:25:10:eb:a3: b8:f6:17:8c:9f:ca:31:2b:ae:56:e5:22:ac:cc:69: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C5:5C:B5:91:4D:2E:4F:06:BC:20:0B:18:81:8D:B1:F8:76:6D:44 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2d:2e:6f:16:c0:1e:09:44:39:70:d1:9d:80:2a:9f:0a:41: e4:4d:7b:ed:0c:a4:c3:c3:a4:be:66:fe:31:53:5e:59:39:4a: d9:00:a6:aa:2f:12:80:6b:9b:ab:90:6a:89:40:5a:8e:1a:2f: 06:55:bb:e6:75:72:81:ec:87:7a:4d:66:cc:49:93:45:7c:30: 04:3d:ee:8a:ad:02:62:9d:7c:1d:d7:33:92:d4:84:40:46:62: 0e:2b:e8:cc:4f:07:42:22:d2:9a:93:f7:f0:de:f3:bd:1c:20: b6:99:25:4c:d1:4e:48:0d:8f:bc:02:7a:63:e1:86:13:64:bc: c4:82:09:cb:c2:49:26:63:5b:25:3e:ed:cf:08:44:a3:20:73: e5:bf:77:4f:0c:f0:9f:20:4c:55:39:2f:04:51:7d:15:02:1e: 75:77:b5:4b:39:c7:f2:2e:61:98:60:47:07:1f:1d:ec:2b:ec: eb:d1:13:dd:73:5c:74:75:0d:75:df:2b:11:97:b0:a5:6e:3d: 61:9b:67:dd:46:a5:5b:fb:4a:dc:23:ae:37:e6:8d:d4:74:d4: f7:29:56:88:0b:59:e1:e0:a0:88:23:65:1e:40:ed:bb:c6:44: d5:06:eb:3c:75:14:e0:fc:ce:59:3c:d5:79:54:f0:3d:56:bb: 33:45:25:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWs1Fs5m3RE3E1oCAJ0sr9Vu4uQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTA5MDUwNjU2MTZaFw0yNTA5MDgxMjAzMTZaMDMxMTAvBgNV BAMTKDM4QzU1Q0I1OTE0RDJFNEYwNkJDMjAwQjE4ODE4REIxRjg3NjZENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXZrAgLC1Blrcp60yF+FZlzrzr 2UPOuKGVAtRUGvkeka3Uiar86pBDhbzWWyI6c1V6UJryZstWi2eFr0pOkIWe0GR5 CkOkm9Irifl0hfA+PlaqSozH+nzapolNNVs0JoKefbKhNQo/9ARXCq1N2dzEvoqf 8nlT1eGUYdaoFrdQ4fgGB0LxJnmAJxzd9xO4BlYMKmF3HmMFMLmJe/pLlrcZhvpG lc6yQeIvIml8EoITQeIWRxo/EyyENj+pGkVNClSiGGPT3MOTmNpKNi99Ps07ctrf U3X+2vnN1K63+Kug21puPjbc3xttwZk+JRDro7j2F4yfyjErrlblIqzMaT0XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOMVctZFNLk8GvCALGIGNsfh2bUQwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQtLm8WwB4JRDlw0Z2AKp8KQeRNe+0MpMPD pL5m/jFTXlk5StkApqovEoBrm6uQaolAWo4aLwZVu+Z1coHsh3pNZsxJk0V8MAQ9 7oqtAmKdfB3XM5LUhEBGYg4r6MxPB0Ii0pqT9/De870cILaZJUzRTkgNj7wCemPh hhNkvMSCCcvCSSZjWyU+7c8IRKMgc+W/d08M8J8gTFU5LwRRfRUCHnV3tUs5x/Iu YZhgRwcfHewr7OvRE91zXHR1DXXfKxGXsKVuPWGbZ91GpVv7StwjrjfmjdR01Pcp VogLWeHgoIgjZR5A7bvGRNUG6zx1FOD8zlk81XlU8D1WuzNFJbY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:17 2025 by rpki-client