$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: ifEOKa+Rq4GnoQtFinyRyh74J4qcqpk1HyJ17PIttqk= Subject key identifier: 2E:BA:1D:C1:E1:F0:A5:5A:2B:D5:92:C4:7B:6C:D0:E6:EC:33:36:92 Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 4981AC7A31B7DA9FA6EB524D923154C41086E9C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 01FC Signing time: Fri 05 Sep 2025 12:00:05 +0000 Manifest this update: Fri 05 Sep 2025 11:55:05 +0000 Manifest next update: Mon 08 Sep 2025 18:34:05 +0000 Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) 2: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: 0HaGuQTseeFziBLplgCIZkWYBwA+S5BSP/1sfe7lDl4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 18:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:81:ac:7a:31:b7:da:9f:a6:eb:52:4d:92:31:54:c4:10:86:e9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Sep 5 11:55:05 2025 GMT Not After : Sep 8 18:34:05 2025 GMT Subject: CN=2EBA1DC1E1F0A55A2BD592C47B6CD0E6EC333692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cf:98:7b:2a:af:36:48:bf:94:c1:25:c1:b2: 05:35:99:09:20:08:76:ae:ca:ab:10:1c:9b:86:1d: 31:29:af:c7:c1:fa:5c:ed:81:0f:43:ca:f4:01:71: be:cb:34:33:54:ba:01:f7:0b:c4:3f:a6:ce:0b:6b: e5:1f:54:ed:06:56:b3:99:8a:ef:63:3a:19:f2:81: 6b:0c:76:a6:2f:7c:98:95:3c:73:e8:4a:2e:63:46: 6e:9a:c5:3c:7c:a7:8f:12:d9:20:2d:49:7f:23:32: aa:f9:16:d8:7d:e9:d4:10:5f:2b:e2:9c:7e:44:a0: 50:5e:01:be:48:f8:40:c0:49:ab:34:5a:29:10:ca: 3e:b8:1d:6c:02:a4:9c:06:db:f2:cd:87:98:9f:73: 2f:f4:1b:06:75:fa:f7:89:1a:b9:72:f0:b5:87:66: 5c:87:44:fb:96:63:19:98:70:94:6e:2c:8c:9f:b9: ce:26:47:bd:8b:f8:ef:c4:bb:11:5a:d4:b7:b4:07: 0e:7a:36:6d:d3:ef:ae:d2:4e:cb:65:cc:52:5e:c2: 23:bb:29:82:bc:1c:51:65:4a:a6:32:0d:f5:fa:77: b5:61:59:f6:b5:b0:70:c0:9d:3a:e8:ed:36:3d:1e: 86:59:d9:ea:df:73:bc:73:5a:f8:63:47:f4:09:41: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BA:1D:C1:E1:F0:A5:5A:2B:D5:92:C4:7B:6C:D0:E6:EC:33:36:92 X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:18:22:ca:f6:de:10:56:97:16:df:32:01:03:dc:53:a5:dd: 7c:ae:05:6a:e1:e3:12:d2:04:83:ac:5e:21:fa:e4:a7:f0:bf: 1d:a5:f9:88:25:a7:ee:81:10:7d:9a:71:fe:75:ab:1e:95:ea: cc:69:c8:a0:db:b3:bd:4f:a7:54:94:c7:3c:a8:a1:43:09:63: 15:8e:67:71:f5:eb:06:2d:e0:f3:d3:ad:8b:2a:88:e4:6a:7b: f7:94:ef:0e:c2:02:56:37:11:d4:25:de:29:b1:8f:b0:ce:21: b9:cb:5c:47:18:98:17:a5:56:3c:36:05:40:56:be:48:3a:96: 3e:14:78:0f:e1:de:b4:37:69:e8:d8:fd:ac:b9:c6:d9:7a:6a: b4:4e:64:7b:98:41:31:98:4a:e9:2e:4e:c7:85:25:f9:bb:94: 6c:ac:23:b2:d4:2e:b0:7d:3d:37:98:bd:2e:ec:b4:b8:7b:0e: ff:12:47:75:22:02:de:c2:d4:36:57:04:e0:b3:1b:24:85:36: a9:b3:37:13:f5:0e:b4:ec:cf:8e:b8:2a:b5:d8:80:80:f5:fd: 61:27:66:25:7f:f4:4a:50:d9:2d:34:34:6f:39:f0:8a:b3:40: 2d:9b:1f:7b:40:6f:24:03:92:b9:64:05:b5:c9:76:c7:a6:b0: 77:e4:0d:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSYGsejG32p+m61JNkjFUxBCG6cIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTA5MDUxMTU1MDVaFw0yNTA5MDgxODM0MDVaMDMxMTAvBgNV BAMTKDJFQkExREMxRTFGMEE1NUEyQkQ1OTJDNDdCNkNEMEU2RUMzMzM2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9z5h7Kq82SL+UwSXBsgU1mQkg CHauyqsQHJuGHTEpr8fB+lztgQ9DyvQBcb7LNDNUugH3C8Q/ps4La+UfVO0GVrOZ iu9jOhnygWsMdqYvfJiVPHPoSi5jRm6axTx8p48S2SAtSX8jMqr5Fth96dQQXyvi nH5EoFBeAb5I+EDASas0WikQyj64HWwCpJwG2/LNh5ifcy/0GwZ1+veJGrly8LWH ZlyHRPuWYxmYcJRuLIyfuc4mR72L+O/EuxFa1Le0Bw56Nm3T767STstlzFJewiO7 KYK8HFFlSqYyDfX6d7VhWfa1sHDAnTro7TY9HoZZ2erfc7xzWvhjR/QJQeVDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULrodweHwpVor1ZLEe2zQ5uwzNpIwHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAYIsr23hBWlxbfMgED3FOl3XyuBWrh4xLS BIOsXiH65Kfwvx2l+Yglp+6BEH2acf51qx6V6sxpyKDbs71Pp1SUxzyooUMJYxWO Z3H16wYt4PPTrYsqiORqe/eU7w7CAlY3EdQl3imxj7DOIbnLXEcYmBelVjw2BUBW vkg6lj4UeA/h3rQ3aejY/ay5xtl6arROZHuYQTGYSukuTseFJfm7lGysI7LULrB9 PTeYvS7stLh7Dv8SR3UiAt7C1DZXBOCzGySFNqmzNxP1DrTsz464KrXYgID1/WEn ZiV/9EpQ2S00NG858IqzQC2bH3tAbyQDkrlkBbXJdsemsHfkDUk= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:12 2025 by rpki-client