$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: dV5kJbLGOkdlqWVUCMOVc9BKwPoK1r1BpPqnlN1yR3Q= Subject key identifier: 39:EB:E7:34:D8:D0:2E:E4:19:0B:8D:65:AA:F0:A9:AE:46:78:43:8E Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 6E980A601D23992F12DB84EC4DAE0DB72674ABC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 0506 Signing time: Sun 07 Sep 2025 01:50:36 +0000 Manifest this update: Sun 07 Sep 2025 01:45:36 +0000 Manifest next update: Wed 10 Sep 2025 04:45:36 +0000 Files and hashes: 1: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 2: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: 4gARDRK7Agw/DE3JjEXAh/yD7KEbggL73T5Qz6Tkpyg=) 3: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) 4: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:98:0a:60:1d:23:99:2f:12:db:84:ec:4d:ae:0d:b7:26:74:ab:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Sep 7 01:45:36 2025 GMT Not After : Sep 10 04:45:36 2025 GMT Subject: CN=39EBE734D8D02EE4190B8D65AAF0A9AE4678438E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:70:f1:da:ae:b4:76:02:18:3b:6b:d2:5a: a4:1f:d3:3f:ee:a9:d7:35:62:ed:8e:af:f2:1b:ef: 47:61:31:36:71:5c:7c:79:ab:cd:7f:3d:a4:fb:fc: bb:a9:73:f5:ab:04:44:45:10:1d:59:de:1f:c2:2a: 42:59:eb:b8:aa:4d:e3:2e:c6:83:fb:e8:63:83:b9: 7e:2f:12:e4:7d:24:a6:5d:e3:82:61:b2:7f:cd:0a: 6f:36:9e:f2:02:78:b2:15:1d:6b:f9:bc:7e:25:12: 64:52:d7:f7:40:af:7e:1c:8f:ef:1b:66:b0:83:c0: b9:e5:4e:d5:b1:b6:e7:78:63:55:66:46:38:83:d0: 73:b1:08:fc:76:25:07:ad:d2:1c:1a:53:46:e6:47: 7c:5b:8b:ff:8d:58:69:8d:1a:79:45:80:ab:83:ca: 9b:cf:4f:9f:32:2b:51:11:8c:0a:80:ec:1b:c8:87: 7a:85:ca:67:cd:6a:77:b5:56:11:2d:6a:ed:27:b9: d4:e5:ea:13:71:79:2d:ae:02:9e:76:12:7e:f9:df: 67:fe:5c:8f:3c:5f:c7:7f:d4:b2:31:60:01:41:5f: bf:84:6d:81:5e:98:e7:db:a1:17:9a:00:dd:55:63: 6b:7a:e9:0c:07:d1:17:29:f8:90:41:80:5a:df:e8: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EB:E7:34:D8:D0:2E:E4:19:0B:8D:65:AA:F0:A9:AE:46:78:43:8E X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:10:52:b9:5a:33:c0:75:74:a1:39:9f:0d:b7:c7:4b:3f:cb: 60:18:f4:19:b8:3c:36:a7:23:cc:f9:20:8c:62:95:00:de:c0: cf:1b:a1:c1:28:aa:8f:e2:22:af:b8:58:2a:f3:8f:30:e3:41: c4:5c:d3:4e:cb:22:98:a8:21:12:ed:cd:92:3f:fc:e7:d3:9c: 71:48:bd:e7:83:66:c0:40:c3:d7:10:eb:db:e9:69:9a:98:06: 2a:20:c0:04:15:d4:fc:f0:c9:74:de:a4:59:42:3a:5e:5e:6f: 5d:64:97:a2:af:05:9d:7c:56:8a:b8:bb:e1:11:af:9b:80:54: f5:0f:2f:d0:9c:6f:92:2d:96:34:4a:5a:d6:68:ff:25:f2:58: 79:e6:14:85:ea:a7:75:02:5e:8c:f6:2a:02:84:9c:74:38:0f: 1b:b9:86:21:95:f4:6e:14:3c:2f:20:a3:73:06:1f:55:98:35: 9a:1b:c2:34:4a:eb:fc:5b:88:55:90:94:32:21:d8:eb:e6:7a: a7:2c:34:18:1a:aa:bc:3b:cb:3f:59:91:23:22:8f:a6:00:e4: 02:99:60:ec:e5:e8:36:d2:8f:8a:fb:dd:ae:14:69:11:35:d7: 23:d6:c6:8b:9b:1b:77:bc:d2:95:23:e0:94:a3:78:5d:bc:66: d1:0a:61:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpgKYB0jmS8S24TsTa4NtyZ0q8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTA5MDcwMTQ1MzZaFw0yNTA5MTAwNDQ1MzZaMDMxMTAvBgNV BAMTKDM5RUJFNzM0RDhEMDJFRTQxOTBCOEQ2NUFBRjBBOUFFNDY3ODQzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zHDx2q60dgIYO2vSWqQf0z/u qdc1Yu2Or/Ib70dhMTZxXHx5q81/PaT7/Lupc/WrBERFEB1Z3h/CKkJZ67iqTeMu xoP76GODuX4vEuR9JKZd44Jhsn/NCm82nvICeLIVHWv5vH4lEmRS1/dAr34cj+8b ZrCDwLnlTtWxtud4Y1VmRjiD0HOxCPx2JQet0hwaU0bmR3xbi/+NWGmNGnlFgKuD ypvPT58yK1ERjAqA7BvIh3qFymfNane1VhEtau0nudTl6hNxeS2uAp52En7532f+ XI88X8d/1LIxYAFBX7+EbYFemOfboReaAN1VY2t66QwH0Rcp+JBBgFrf6Kj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOevnNNjQLuQZC41lqvCprkZ4Q44wHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsQUrlaM8B1dKE5nw23x0s/y2AY9Bm4PDan I8z5IIxilQDewM8bocEoqo/iIq+4WCrzjzDjQcRc007LIpioIRLtzZI//OfTnHFI veeDZsBAw9cQ69vpaZqYBiogwAQV1PzwyXTepFlCOl5eb11kl6KvBZ18Voq4u+ER r5uAVPUPL9Ccb5ItljRKWtZo/yXyWHnmFIXqp3UCXoz2KgKEnHQ4Dxu5hiGV9G4U PC8go3MGH1WYNZobwjRK6/xbiFWQlDIh2OvmeqcsNBgaqrw7yz9ZkSMij6YA5AKZ YOzl6DbSj4r73a4UaRE11yPWxoubG3e80pUj4JSjeF28ZtEKYSM= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:47 2025 by rpki-client