$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: uecWYxdpt+34z7XM/WHmyfhesl4e+RVHtGAsJ+wNhAo= Subject key identifier: 83:F6:ED:16:8F:70:62:A8:82:82:29:B6:B6:94:20:15:41:6B:73:70 Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 0D2C6BB175F47CED0FF7B78F3394B4552987B5C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 01F3 Signing time: Sat 06 Sep 2025 09:01:59 +0000 Manifest this update: Sat 06 Sep 2025 08:56:59 +0000 Manifest next update: Tue 09 Sep 2025 13:11:59 +0000 Files and hashes: 1: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) 2: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) 3: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: 4B2u+Qk1y2Xs2EzpPsvnYP4uE3WN9QFLZEgXCth4bfI=) 4: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2c:6b:b1:75:f4:7c:ed:0f:f7:b7:8f:33:94:b4:55:29:87:b5:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Sep 6 08:56:59 2025 GMT Not After : Sep 9 13:11:59 2025 GMT Subject: CN=83F6ED168F7062A8828229B6B6942015416B7370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9b:81:61:90:25:bf:a1:9f:dd:01:f1:ba:eb: 06:2d:fd:80:47:34:7d:5d:f3:35:f0:01:32:ef:38: f2:c8:e5:fe:a2:b3:0e:2e:80:89:67:b5:8b:be:68: 7e:de:9a:af:88:9f:2c:40:cd:0b:df:d4:5e:e8:33: c8:a3:25:9c:ea:1b:2a:5f:be:54:f7:87:17:79:84: 73:3a:92:a5:2e:16:7d:7e:e3:d9:2c:e0:76:04:a3: b5:df:e7:d0:f8:38:c1:d2:53:33:7d:5c:8c:9e:8d: 44:96:57:a0:bd:0a:2b:29:db:b7:9a:ee:1e:f6:67: 0f:6a:ac:97:37:4d:30:60:dd:7f:58:ed:4d:1f:4c: 23:67:26:38:b9:71:62:b4:98:b4:f9:eb:b6:d1:5b: 20:6c:11:90:53:3c:01:6e:64:b9:3a:b2:2b:17:64: 73:f2:fe:85:6a:88:3a:33:0f:48:ed:61:36:8a:60: 1b:06:47:ad:f4:a0:55:d5:82:58:16:9e:db:f0:28: 4b:a4:1b:39:a3:af:e8:f6:48:a6:f6:3f:c7:45:08: 40:7c:17:4b:bf:6a:b9:ec:ae:e9:76:e2:59:22:17: be:2b:b3:93:ec:f6:8f:1d:9a:34:23:9e:4d:82:d2: 0b:7d:90:75:bc:46:3a:46:d8:b4:8a:ac:b4:29:5d: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F6:ED:16:8F:70:62:A8:82:82:29:B6:B6:94:20:15:41:6B:73:70 X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:69:fb:55:78:a4:1e:ed:14:3e:b5:12:ea:5e:75:2e:b7:43: 52:20:29:c6:1a:57:d2:3c:01:b6:56:60:0c:d0:60:da:b9:bb: ec:f7:f0:d1:c7:10:e2:e8:fe:f3:2c:f3:bc:e9:83:40:f1:0e: 95:c2:ad:e8:63:b7:f2:b2:21:38:f1:d8:76:56:29:7b:dc:97: 5f:d9:76:8a:1b:3b:15:35:35:61:c0:3c:a1:99:a5:d0:3d:c9: 4b:d4:24:15:e9:b7:af:02:95:33:a5:f1:a2:dc:f4:20:16:41: 3a:a8:7d:4a:8c:9c:71:cc:30:6e:23:b1:9b:75:ee:bd:08:d4: 28:75:d7:9e:51:73:0f:f4:a0:59:36:bf:80:05:87:99:2e:9f: 90:48:70:6c:11:16:54:e7:14:b5:6c:27:39:b4:3e:ff:be:ad: dc:a8:89:30:78:2a:f3:05:c4:35:54:f7:52:4b:2c:78:43:e9: 00:1f:e3:22:5b:cf:14:5f:1b:e3:c0:e4:42:72:d4:e9:41:05: bc:95:29:ba:2b:6b:06:06:3c:6c:0d:1b:b1:3a:68:d6:81:25: f7:52:68:2f:be:be:4b:56:4e:a6:9d:08:ac:a1:d1:b1:e0:2c: 51:e0:20:d5:39:33:e8:bb:ca:7e:a7:3a:ad:3e:e1:0e:a5:92: a7:ab:1b:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSxrsXX0fO0P97ePM5S0VSmHtcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTA5MDYwODU2NTlaFw0yNTA5MDkxMzExNTlaMDMxMTAvBgNV BAMTKDgzRjZFRDE2OEY3MDYyQTg4MjgyMjlCNkI2OTQyMDE1NDE2QjczNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDem4FhkCW/oZ/dAfG66wYt/YBH NH1d8zXwATLvOPLI5f6isw4ugIlntYu+aH7emq+InyxAzQvf1F7oM8ijJZzqGypf vlT3hxd5hHM6kqUuFn1+49ks4HYEo7Xf59D4OMHSUzN9XIyejUSWV6C9Cisp27ea 7h72Zw9qrJc3TTBg3X9Y7U0fTCNnJji5cWK0mLT567bRWyBsEZBTPAFuZLk6sisX ZHPy/oVqiDozD0jtYTaKYBsGR630oFXVglgWntvwKEukGzmjr+j2SKb2P8dFCEB8 F0u/arnsrul24lkiF74rs5Ps9o8dmjQjnk2C0gt9kHW8RjpG2LSKrLQpXf/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/btFo9wYqiCgim2tpQgFUFrc3AwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5p+1V4pB7tFD61EupedS63Q1IgKcYaV9I8 AbZWYAzQYNq5u+z38NHHEOLo/vMs87zpg0DxDpXCrehjt/KyITjx2HZWKXvcl1/Z doobOxU1NWHAPKGZpdA9yUvUJBXpt68ClTOl8aLc9CAWQTqofUqMnHHMMG4jsZt1 7r0I1Ch1155Rcw/0oFk2v4AFh5kun5BIcGwRFlTnFLVsJzm0Pv++rdyoiTB4KvMF xDVU91JLLHhD6QAf4yJbzxRfG+PA5EJy1OlBBbyVKborawYGPGwNG7E6aNaBJfdS aC++vktWTqadCKyh0bHgLFHgINU5M+i7yn6nOq0+4Q6lkqerG8U= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:48 2025 by rpki-client