$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: dmOiOM/V5OpIyr0Wyl9VuMthpXo0qOSJcilKu4aNRio= Subject key identifier: 42:64:BF:F3:C1:CC:64:06:F6:71:88:E2:E4:01:C3:CD:C0:19:F9:BA Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 2CC1877FA283888820E57AC62831FAA4452CFCFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 0276 Signing time: Thu 04 Sep 2025 23:11:51 +0000 Manifest this update: Thu 04 Sep 2025 23:06:51 +0000 Manifest next update: Mon 08 Sep 2025 08:03:51 +0000 Files and hashes: 1: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk=) 2: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: 4sS0AswMegad8Nq5qAk7kEmvmnEbkyCjrnEi7Zg+91Q=) 3: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: biBc3b6GGx2dUj7YnQWOhcGsodIKTbyhZn9FTYFEG1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 08:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c1:87:7f:a2:83:88:88:20:e5:7a:c6:28:31:fa:a4:45:2c:fc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Sep 4 23:06:51 2025 GMT Not After : Sep 8 08:03:51 2025 GMT Subject: CN=4264BFF3C1CC6406F67188E2E401C3CDC019F9BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:2e:c3:ff:c1:4a:2e:68:19:1e:69:8d:4e:af: bb:7d:e5:91:69:57:3a:13:8a:27:6f:33:0f:53:75: 61:68:e0:99:10:18:00:fc:c0:f1:df:30:04:f3:af: 37:9a:04:7b:7e:fc:ca:d1:45:ea:6f:ce:91:8c:ca: c1:ef:8c:91:71:96:c0:e8:e6:57:8a:17:56:cd:4e: b6:df:fc:29:aa:cf:e9:8e:84:c6:e7:59:54:ad:ec: 7c:ca:dc:d9:cf:a1:80:de:70:ce:f9:a7:37:a2:8f: 3d:e0:9f:d2:d3:fa:88:28:b9:fa:a6:25:66:ec:0b: 8d:ad:32:8a:cf:4e:e8:7e:f0:49:39:bf:8a:52:b1: 01:b9:ec:8b:19:8d:d5:a8:3d:ce:39:f8:68:e9:d2: 54:da:dd:9a:9f:c2:09:a3:a4:20:0e:63:e0:24:7f: 87:91:cf:b7:b6:ad:79:d7:de:3b:9d:62:6f:5f:1c: dd:4a:29:71:6c:dc:7b:c0:19:48:c4:bf:44:75:e8: ea:29:db:8e:c1:8d:c8:f6:63:13:32:42:71:ef:e8: c0:6f:3e:7f:71:e7:d1:86:3b:d7:25:f6:b9:2f:57: bf:7a:3b:e1:54:af:66:23:41:35:93:f8:b0:37:50: 57:d0:ba:b3:40:56:36:b7:f4:3d:93:f5:f1:cc:1d: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:64:BF:F3:C1:CC:64:06:F6:71:88:E2:E4:01:C3:CD:C0:19:F9:BA X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:58:99:6c:33:b6:26:32:04:2a:51:14:96:42:dc:73:56:89: 4f:25:98:36:f7:ca:78:30:48:78:f2:5b:ad:82:87:ac:ff:f0: 32:80:24:c5:2e:26:61:88:51:96:97:ea:29:13:b0:47:33:8c: b6:0e:56:77:5f:66:f4:a9:d2:d8:88:ab:8c:18:44:04:b6:90: 17:b7:df:d0:d4:eb:50:6a:8c:7b:ea:7f:52:81:96:4f:da:6d: ed:0c:4e:fe:88:6f:ea:ba:fc:4e:d0:45:04:09:ae:90:28:50: eb:19:79:61:97:25:c4:8c:20:a9:6b:9b:ba:70:58:96:30:62: 01:8f:32:f9:dd:61:1d:c9:ab:42:f6:68:ef:16:30:d8:e5:e3: 19:3d:9b:a0:c5:ec:f4:5f:74:d4:b2:c2:84:26:7a:2e:58:f6: 5f:9e:b4:56:b1:f8:26:b5:a9:9f:a2:22:13:d3:a0:e3:5f:8d: 88:b7:60:1d:7b:3e:22:48:a4:2c:44:47:d0:18:0e:2a:80:ca: d1:05:db:1d:46:ec:a0:d5:b2:9d:82:f3:e7:8a:81:3c:23:8a: df:cd:cd:91:21:62:78:b0:1b:f3:b5:2f:fc:a5:63:89:4e:22: fc:88:7f:26:6b:b8:79:e5:40:78:1c:a7:67:21:c3:d4:0a:d2: 4d:37:51:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMGHf6KDiIgg5XrGKDH6pEUs/PswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTA5MDQyMzA2NTFaFw0yNTA5MDgwODAzNTFaMDMxMTAvBgNV BAMTKDQyNjRCRkYzQzFDQzY0MDZGNjcxODhFMkU0MDFDM0NEQzAxOUY5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/LsP/wUouaBkeaY1Or7t95ZFp VzoTiidvMw9TdWFo4JkQGAD8wPHfMATzrzeaBHt+/MrRRepvzpGMysHvjJFxlsDo 5leKF1bNTrbf/Cmqz+mOhMbnWVSt7HzK3NnPoYDecM75pzeijz3gn9LT+ogoufqm JWbsC42tMorPTuh+8Ek5v4pSsQG57IsZjdWoPc45+Gjp0lTa3ZqfwgmjpCAOY+Ak f4eRz7e2rXnX3judYm9fHN1KKXFs3HvAGUjEv0R16Oop247Bjcj2YxMyQnHv6MBv Pn9x59GGO9cl9rkvV796O+FUr2YjQTWT+LA3UFfQurNAVja39D2T9fHMHQUjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmS/88HMZAb2cYji5AHDzcAZ+bowHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlYmWwztiYyBCpRFJZC3HNWiU8lmDb3yngw SHjyW62Ch6z/8DKAJMUuJmGIUZaX6ikTsEczjLYOVndfZvSp0tiIq4wYRAS2kBe3 39DU61BqjHvqf1KBlk/abe0MTv6Ib+q6/E7QRQQJrpAoUOsZeWGXJcSMIKlrm7pw WJYwYgGPMvndYR3Jq0L2aO8WMNjl4xk9m6DF7PRfdNSywoQmei5Y9l+etFax+Ca1 qZ+iIhPToONfjYi3YB17PiJIpCxER9AYDiqAytEF2x1G7KDVsp2C8+eKgTwjit/N zZEhYniwG/O1L/ylY4lOIvyIfyZruHnlQHgcp2chw9QK0k03URM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:35 2025 by rpki-client