$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft File: 3D93688202931D72322A7EE0053964A2DD8EB457.mft (raw, json) Hash identifier: SNykSx+Urce3+/Davzs/923f8rCNvYkLnszXLih1QUY= Subject key identifier: 95:59:F6:46:D0:E1:EB:38:12:96:43:91:AB:51:1E:5F:F7:C4:21:83 Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457 Certificate serial: 368FDCAF30D683325C182C4A2738051BB069191E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft Manifest number: 0233 Signing time: Wed 03 Sep 2025 22:22:16 +0000 Manifest this update: Wed 03 Sep 2025 22:17:16 +0000 Manifest next update: Sun 07 Sep 2025 07:47:16 +0000 Files and hashes: 1: 3D93688202931D72322A7EE0053964A2DD8EB457.crl (hash: lZv7ftwvk76vVixvjB4YxDrviks1kYgR0+03lfHxtro=) 2: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: DkL978cCjpD0PQ0XgknN+Mz9vJLe59QDx419VcnHPIA=) 3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: eaULz+kMsRSSqy6h3V303twAaR4RcVJjEt3EXFQ5l2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 07:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8f:dc:af:30:d6:83:32:5c:18:2c:4a:27:38:05:1b:b0:69:19:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457 Validity Not Before: Sep 3 22:17:16 2025 GMT Not After : Sep 7 07:47:16 2025 GMT Subject: CN=9559F646D0E1EB3812964391AB511E5FF7C42183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2e:7a:5b:01:2b:09:fa:70:64:31:cb:6e:10: 04:20:8a:b0:73:60:2a:fe:ad:e0:e8:28:23:3e:de: 85:9e:8f:e1:5f:12:33:f5:41:4c:83:34:26:53:de: f4:7a:e3:4a:58:a1:84:2d:6e:66:f7:39:c6:ac:41: 55:7a:5f:74:68:59:66:03:8c:1b:3e:64:82:10:19: 62:13:aa:54:ba:04:03:e3:1d:36:0a:ea:8e:83:42: 70:39:36:2c:77:50:97:8c:05:da:83:11:25:f9:3d: e7:62:3d:02:45:c0:22:26:d5:69:81:19:13:97:cd: 4e:b7:54:ca:68:28:fa:35:ec:f9:69:dd:ff:f0:ce: 06:6c:15:78:16:8e:68:05:29:06:2d:2c:74:ac:a7: 61:03:2e:41:33:4b:05:b7:1f:07:98:7b:74:46:a9: 9a:7d:2c:c5:a8:ef:df:b2:f6:2c:79:f6:4d:c0:da: 34:db:84:dd:61:5e:95:14:fe:ac:b6:ba:53:e7:7c: 8b:5a:cc:a2:0c:0c:7e:d5:53:2b:66:f9:f3:24:59: d1:a8:d1:1f:90:e9:82:e8:9f:5b:44:71:66:42:e2: da:17:15:0d:37:c0:61:90:af:4e:25:8b:97:8f:ff: 8f:de:fc:1c:c9:71:31:fa:5d:e9:8a:62:ee:85:24: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:59:F6:46:D0:E1:EB:38:12:96:43:91:AB:51:1E:5F:F7:C4:21:83 X509v3 Authority Key Identifier: keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b5:f5:43:4b:e7:df:b4:b0:15:8e:58:11:c0:c6:93:02:80: 01:ab:19:3f:b9:77:20:db:6c:f8:a3:44:f7:75:cd:1f:32:17: d6:b2:d2:0e:4e:06:6e:39:5d:9f:7e:71:7d:b5:e9:c4:b8:02: e6:9a:68:94:f4:f8:84:95:08:62:b3:96:49:8d:e4:70:4a:ce: 2a:5c:10:20:9f:8b:5b:39:a5:1a:e2:84:3d:fe:f0:be:e1:5a: 4c:84:49:08:9f:6b:c0:66:2b:71:7c:d2:46:31:bf:ef:1a:0d: b7:f0:90:c8:41:75:2d:fb:22:02:d0:c8:c7:41:c4:51:71:2c: 0d:3b:94:ae:09:a4:6f:2e:54:39:9e:20:a1:a0:b8:3b:3c:94: 9c:c8:49:45:cf:fa:b6:8d:1e:b2:d0:29:00:c4:42:cc:8d:6d: 16:ac:81:32:d2:26:67:e9:8e:e6:ce:ca:ee:5d:32:7a:de:f8: 81:e2:3b:8d:0a:da:af:84:03:7f:69:e9:ea:92:cf:d0:89:d9: 7a:3b:d0:1f:c5:c2:e1:4a:03:2f:ae:a1:a8:0a:c5:d8:62:57: ce:be:dc:d4:05:05:bc:6c:63:70:3e:1e:fa:60:3d:4f:b1:9b: 4d:4f:92:02:21:62:fb:aa:82:79:d1:b3:c4:79:cc:73:4e:93: 24:2f:6d:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNo/crzDWgzJcGCxKJzgFG7BpGR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE RDhFQjQ1NzAeFw0yNTA5MDMyMjE3MTZaFw0yNTA5MDcwNzQ3MTZaMDMxMTAvBgNV BAMTKDk1NTlGNjQ2RDBFMUVCMzgxMjk2NDM5MUFCNTExRTVGRjdDNDIxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLnpbASsJ+nBkMctuEAQgirBz YCr+reDoKCM+3oWej+FfEjP1QUyDNCZT3vR640pYoYQtbmb3OcasQVV6X3RoWWYD jBs+ZIIQGWITqlS6BAPjHTYK6o6DQnA5Nix3UJeMBdqDESX5PediPQJFwCIm1WmB GROXzU63VMpoKPo17Plp3f/wzgZsFXgWjmgFKQYtLHSsp2EDLkEzSwW3HweYe3RG qZp9LMWo79+y9ix59k3A2jTbhN1hXpUU/qy2ulPnfItazKIMDH7VUytm+fMkWdGo 0R+Q6YLon1tEcWZC4toXFQ03wGGQr04li5eP/4/e/BzJcTH6XemKYu6FJGnNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlVn2RtDh6zgSlkORq1EeX/fEIYMwHwYDVR0j BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF QjQ1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0 QTJERDhFQjQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+19UNL59+0sBWOWBHAxpMCgAGrGT+5dyDb bPijRPd1zR8yF9ay0g5OBm45XZ9+cX216cS4AuaaaJT0+ISVCGKzlkmN5HBKzipc ECCfi1s5pRrihD3+8L7hWkyESQifa8BmK3F80kYxv+8aDbfwkMhBdS37IgLQyMdB xFFxLA07lK4JpG8uVDmeIKGguDs8lJzISUXP+raNHrLQKQDEQsyNbRasgTLSJmfp jubOyu5dMnre+IHiO40K2q+EA39p6eqSz9CJ2Xo70B/FwuFKAy+uoagKxdhiV86+ 3NQFBbxsY3A+HvpgPU+xm01PkgIhYvuqgnnRs8R5zHNOkyQvbck= -----END CERTIFICATE-----Generated at Fri Sep 5 10:14:56 2025 by rpki-client