$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json) Hash identifier: WKq3liuotenF6yFNFRh131hBOHb7G1NUoMuFndUGkAw= Subject key identifier: 72:CB:D4:CC:B0:BF:B7:BC:6F:9B:B2:09:9F:86:A3:4B:26:D8:4B:D1 Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 23883163B7491FC5E4C2B2424423AB5163A4CD18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft Manifest number: E9 Signing time: Sat 30 Aug 2025 06:10:54 +0000 Manifest this update: Sat 30 Aug 2025 06:05:54 +0000 Manifest next update: Tue 02 Sep 2025 12:46:54 +0000 Files and hashes: 1: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: gfWNy9lIc/MVIMgNjSxC32IkW0PrSYj/0GoqdaAmvtI=) 2: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: Ia6N9L/lUqrNRXDhrWCsmwNqNtSOIP+tTM6qrOdf+z8=) 3: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: uyjSRskgL9BJCMKxVifWZ7TJaXQpE36bCbtIhaZsOr4=) 4: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: YasvvxbCzsiYxjm39PQuEFNka/y9AUBvJZG9vLwVOCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:88:31:63:b7:49:1f:c5:e4:c2:b2:42:44:23:ab:51:63:a4:cd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Aug 30 06:05:54 2025 GMT Not After : Sep 2 12:46:54 2025 GMT Subject: CN=72CBD4CCB0BFB7BC6F9BB2099F86A34B26D84BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:75:0d:46:ca:2c:d4:16:10:42:48:94:e2: 3b:ad:ed:8b:53:a3:0d:7c:a9:89:24:89:b9:06:e7: 7d:8a:3c:db:93:a7:2a:c0:73:7c:19:b0:d7:ea:a7: e6:9b:18:41:d1:a9:b4:b8:36:94:1d:f1:16:ba:1a: 64:e7:b0:65:ef:ec:85:f3:48:10:46:b9:a6:e2:07: a7:29:11:40:1c:e8:ac:ba:53:62:15:fa:21:78:43: 46:93:e3:af:12:92:a8:2f:f1:91:70:94:25:2b:ba: c0:3a:2d:e0:c1:7b:29:fe:7b:fc:3c:fe:45:d2:d2: da:34:33:59:37:4f:c1:63:d5:ec:bf:65:dc:9c:0b: ea:0a:4b:82:de:3b:67:f2:4a:a3:70:40:42:2e:2f: 5a:95:27:e1:29:b7:9d:13:27:49:0a:5f:ef:61:ba: 53:ba:94:aa:5e:1b:b9:0d:5b:9d:ea:56:68:ee:40: 39:41:3a:47:19:e0:ed:62:eb:22:3c:b0:92:f4:e4: ab:91:ae:27:11:8c:bd:50:e0:fd:04:b5:10:c5:cc: 83:b1:03:c7:41:d7:09:ca:cb:ea:24:02:14:ad:4e: f5:7a:9c:6d:cc:5a:aa:2b:00:69:ad:3e:79:b1:60: 0b:8a:90:c9:95:0e:6a:d5:f7:aa:72:00:44:ad:94: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CB:D4:CC:B0:BF:B7:BC:6F:9B:B2:09:9F:86:A3:4B:26:D8:4B:D1 X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7e:5e:43:8f:0d:42:29:c6:ac:80:8d:9a:64:d8:8c:6a:60: 98:39:d6:a5:a2:0c:9f:b6:2d:e5:a4:60:c6:58:c4:02:f5:ea: 4a:ee:41:db:68:16:14:03:bd:8c:7c:f9:85:28:78:ef:aa:3e: a8:28:7f:cf:c4:e8:b7:72:78:a3:3d:42:a4:da:20:59:3e:15: 38:83:0d:70:3e:31:67:1a:55:b0:3c:b2:a6:6e:23:84:76:a6: 14:ce:91:b8:76:9b:40:e5:6a:2e:e1:8d:fc:03:45:50:d0:52: 88:2a:f4:b0:62:a7:d8:c7:87:59:0e:c5:4c:80:db:9f:76:6e: 7f:3d:59:c2:13:9a:a9:cc:b9:30:25:75:1c:d1:d0:34:83:92: cc:de:74:f2:0d:ee:ce:bc:18:77:91:dd:d7:bf:5f:85:5f:b2: 6e:6a:cf:33:9f:00:ec:e4:b3:57:18:b8:25:4a:04:4e:5d:61: cf:a6:7a:55:ce:4e:1e:bd:5b:2d:4c:79:1e:3f:f4:2f:05:1d: 4d:67:3a:59:76:23:60:a9:98:b9:eb:f3:ae:96:a5:5f:05:3c: da:24:1f:de:c3:10:3b:54:72:0b:ae:bd:91:c0:5f:4a:08:bd: 59:95:b2:78:b6:ad:2a:c6:3f:48:02:5f:f4:4e:07:0a:ca:48: c6:17:2a:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4gxY7dJH8XkwrJCRCOrUWOkzRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNTA4MzAwNjA1NTRaFw0yNTA5MDIxMjQ2NTRaMDMxMTAvBgNV BAMTKDcyQ0JENENDQjBCRkI3QkM2RjlCQjIwOTlGODZBMzRCMjZEODRCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLnUNRsos1BYQQkiU4jut7YtT ow18qYkkibkG532KPNuTpyrAc3wZsNfqp+abGEHRqbS4NpQd8Ra6GmTnsGXv7IXz SBBGuabiB6cpEUAc6Ky6U2IV+iF4Q0aT468Skqgv8ZFwlCUrusA6LeDBeyn+e/w8 /kXS0to0M1k3T8Fj1ey/ZdycC+oKS4LeO2fySqNwQEIuL1qVJ+Ept50TJ0kKX+9h ulO6lKpeG7kNW53qVmjuQDlBOkcZ4O1i6yI8sJL05KuRricRjL1Q4P0EtRDFzIOx A8dB1wnKy+okAhStTvV6nG3MWqorAGmtPnmxYAuKkMmVDmrV96pyAEStlC+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcsvUzLC/t7xvm7IJn4ajSybYS9EwHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5+XkOPDUIpxqyAjZpk2IxqYJg51qWiDJ+2 LeWkYMZYxAL16kruQdtoFhQDvYx8+YUoeO+qPqgof8/E6LdyeKM9QqTaIFk+FTiD DXA+MWcaVbA8sqZuI4R2phTOkbh2m0Dlai7hjfwDRVDQUogq9LBip9jHh1kOxUyA 2592bn89WcITmqnMuTAldRzR0DSDkszedPIN7s68GHeR3de/X4Vfsm5qzzOfAOzk s1cYuCVKBE5dYc+melXOTh69Wy1MeR4/9C8FHU1nOll2I2CpmLnr866WpV8FPNok H97DEDtUcguuvZHAX0oIvVmVsni2rSrGP0gCX/ROBwrKSMYXKmg= -----END CERTIFICATE-----Generated at Sun Aug 31 11:36:14 2025 by rpki-client