$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: /FnqWHuOkSfVtJ93lTKj7/JhkOLQsXfxLE8sbJtHkCc= Subject key identifier: DF:19:0E:D6:26:CB:93:E1:00:90:0F:C6:6E:84:8E:92:71:6E:3E:18 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 1689A073F9AD764094A868FA0467DE63D9E7D586 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 0180 Signing time: Fri 05 Sep 2025 15:12:15 +0000 Manifest this update: Fri 05 Sep 2025 15:07:15 +0000 Manifest next update: Tue 09 Sep 2025 01:49:15 +0000 Files and hashes: 1: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) 2: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: j92IOoSHAC/j5IUfSsUpopIufsOhi0jrp04t1Ec1Uco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:89:a0:73:f9:ad:76:40:94:a8:68:fa:04:67:de:63:d9:e7:d5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Sep 5 15:07:15 2025 GMT Not After : Sep 9 01:49:15 2025 GMT Subject: CN=DF190ED626CB93E100900FC66E848E92716E3E18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:43:0a:7f:15:e5:30:d9:4d:12:b1:64:78:52: b8:d6:6c:7f:72:4d:e6:18:13:76:63:d9:b9:53:e1: b4:85:7b:bc:f8:31:9d:81:5f:e9:6d:07:d5:12:a2: df:45:f1:5e:d6:f6:bd:83:95:10:ee:3b:18:7d:0a: 92:bb:8e:dc:f0:36:ab:85:b1:0f:67:0f:8d:5b:40: 2d:fc:5e:a3:86:3f:ca:df:71:bc:f2:6e:c5:25:9f: 8c:27:d9:c9:f1:31:f0:08:9f:28:a2:ce:d1:15:9a: 28:04:a3:29:ce:09:6d:01:49:a1:cf:ff:7d:9b:f9: dd:45:ba:ed:b2:da:43:6c:94:3e:71:fe:21:e3:82: cc:68:54:97:2e:3b:b2:52:18:f7:7b:0b:0d:59:20: 8f:43:01:c1:49:13:9f:6b:55:cc:73:fd:8c:cc:07: 0b:7f:5b:64:43:28:ad:97:4f:49:f9:0a:69:91:e2: 05:fa:bd:a7:7d:23:50:aa:a9:b3:37:e4:5f:bf:fb: 31:44:05:0f:cc:02:99:b2:16:bf:0f:12:aa:e0:f1: 80:30:ab:3e:b1:79:0a:03:0c:4e:18:9f:06:78:9a: fb:07:74:60:80:c0:ee:94:ef:4b:a5:3a:6f:71:f2: cd:fe:85:3e:80:a6:41:4b:ef:d5:60:8a:8f:85:9f: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:19:0E:D6:26:CB:93:E1:00:90:0F:C6:6E:84:8E:92:71:6E:3E:18 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a6:4a:11:ca:f6:87:4e:c3:5c:37:93:b9:7c:fb:0d:b9:72: dd:37:51:61:07:cf:97:85:08:11:0e:92:2b:ca:0c:3e:ea:48: 95:ac:27:ca:cb:df:42:df:df:b5:f4:b2:aa:5b:4c:64:c9:76: 03:a7:a8:48:c4:1c:93:bb:f2:01:ab:29:b0:9a:1c:a5:d6:6c: c2:bb:ca:1b:45:e0:12:7a:33:d4:54:3f:b7:56:dc:9b:33:7c: 72:cd:86:eb:4d:a1:dc:2d:4c:b9:ef:ce:52:36:09:ad:99:c6: 0f:e2:bc:3a:71:87:98:18:4c:52:3a:d9:ff:a0:c2:78:07:00: a6:0e:70:2b:c2:b7:5f:00:96:2b:36:4c:a7:d6:0b:23:07:c1: eb:1e:a8:55:d5:2e:40:1b:71:de:da:47:48:a3:fc:de:2b:a1: 22:de:85:68:ee:97:86:1f:4d:df:24:78:ae:1d:b5:52:64:cc: 2b:68:59:1c:a0:e0:73:9d:1c:81:7b:db:14:4e:85:a1:7a:5f: dd:22:a5:ce:c6:8f:74:ab:53:c8:07:c6:d9:6f:41:69:c9:be: ed:70:b7:3c:8e:18:f7:4a:2b:a8:7a:1c:88:45:07:2d:96:57: b9:10:2c:8b:04:3e:6a:94:78:da:0e:8e:e1:58:5f:24:b7:3e: 42:de:25:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFomgc/mtdkCUqGj6BGfeY9nn1YYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTA5MDUxNTA3MTVaFw0yNTA5MDkwMTQ5MTVaMDMxMTAvBgNV BAMTKERGMTkwRUQ2MjZDQjkzRTEwMDkwMEZDNjZFODQ4RTkyNzE2RTNFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQwp/FeUw2U0SsWR4UrjWbH9y TeYYE3Zj2blT4bSFe7z4MZ2BX+ltB9USot9F8V7W9r2DlRDuOxh9CpK7jtzwNquF sQ9nD41bQC38XqOGP8rfcbzybsUln4wn2cnxMfAInyiiztEVmigEoynOCW0BSaHP /32b+d1Fuu2y2kNslD5x/iHjgsxoVJcuO7JSGPd7Cw1ZII9DAcFJE59rVcxz/YzM Bwt/W2RDKK2XT0n5CmmR4gX6vad9I1CqqbM35F+/+zFEBQ/MApmyFr8PEqrg8YAw qz6xeQoDDE4YnwZ4mvsHdGCAwO6U70ulOm9x8s3+hT6ApkFL79Vgio+Fny/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3xkO1ibLk+EAkA/GboSOknFuPhgwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2mShHK9odOw1w3k7l8+w25ct03UWEHz5eF CBEOkivKDD7qSJWsJ8rL30Lf37X0sqpbTGTJdgOnqEjEHJO78gGrKbCaHKXWbMK7 yhtF4BJ6M9RUP7dW3JszfHLNhutNodwtTLnvzlI2Ca2Zxg/ivDpxh5gYTFI62f+g wngHAKYOcCvCt18Alis2TKfWCyMHweseqFXVLkAbcd7aR0ij/N4roSLehWjul4Yf Td8keK4dtVJkzCtoWRyg4HOdHIF72xROhaF6X90ipc7Gj3SrU8gHxtlvQWnJvu1w tzyOGPdKK6h6HIhFBy2WV7kQLIsEPmqUeNoOjuFYXyS3PkLeJZQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:39 2025 by rpki-client