$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: B1JU2QlnWE0qldYLFAI2pciP1FC/ZaUO2vWtwZHU118= Subject key identifier: 25:E3:27:4D:C7:56:84:C6:34:8A:7F:95:C3:15:F4:DE:39:FD:3A:89 Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 3C327C561A7A91B95770E50C2B5DBBD0643C0951 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 01BF Signing time: Fri 05 Sep 2025 14:51:20 +0000 Manifest this update: Fri 05 Sep 2025 14:46:20 +0000 Manifest next update: Mon 08 Sep 2025 22:54:20 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: ZVVfK/NqUbwSPb58N5u2CmI299zAmkJhlu7f530ekH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 22:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:32:7c:56:1a:7a:91:b9:57:70:e5:0c:2b:5d:bb:d0:64:3c:09:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Sep 5 14:46:20 2025 GMT Not After : Sep 8 22:54:20 2025 GMT Subject: CN=25E3274DC75684C6348A7F95C315F4DE39FD3A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:86:92:d3:2e:2b:39:e6:cd:a9:45:3b:6a: 7d:4f:38:57:2b:8b:98:2f:fe:dc:1c:a3:b6:4b:b1: fb:5e:d9:38:72:10:8f:0a:df:04:07:06:5c:63:c0: b4:e8:90:30:6a:b9:c4:13:8d:48:87:ff:f2:d5:bd: de:2a:01:5f:6d:19:5f:fa:40:59:2b:f8:8c:e9:8e: 76:e0:9e:78:62:bf:b4:a0:1b:4c:e7:f1:6e:5a:24: af:6a:39:5b:3f:c2:61:f3:a1:28:2d:51:5a:25:e1: c8:c1:5a:a8:cd:47:a4:7c:00:c9:d4:1e:ea:15:26: 2a:3b:dc:82:f2:04:8b:3b:10:37:74:49:81:77:a0: 03:c5:32:e1:84:76:4b:bf:7e:b2:a4:33:39:55:7c: 56:ba:c8:6a:22:6d:e2:6e:b3:c7:84:d9:90:a2:48: 85:5f:5e:f3:dc:66:64:b6:54:50:1a:be:4c:3e:a4: 02:f1:61:3a:e0:a6:b0:ba:5d:e7:2e:7a:42:50:37: 85:c0:6b:87:9c:9d:91:4e:10:d2:f0:ee:5b:66:1d: 6e:e7:e9:22:ac:22:67:1b:81:90:65:ce:67:74:63: 12:0b:b2:99:86:37:72:3d:7a:26:6c:f7:7d:cc:48: 6c:2c:3a:94:dc:de:7b:5b:c8:7c:10:ca:8a:4f:c2: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E3:27:4D:C7:56:84:C6:34:8A:7F:95:C3:15:F4:DE:39:FD:3A:89 X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6f:a7:c2:4d:01:b1:78:2a:a9:08:11:f4:2a:2f:4e:b2:28: e8:a2:ec:be:c9:b0:5f:73:03:b4:69:81:e1:62:8e:c2:eb:d6: e9:0e:2f:e2:53:d8:2a:42:c8:16:27:48:71:df:bb:6c:93:ec: fe:ec:9d:38:33:d2:49:b9:f8:db:a2:d1:c1:03:93:ae:d7:24: b4:42:c0:73:05:22:5e:a7:a7:02:6d:45:e3:72:04:8d:91:05: 6d:53:7c:cf:4a:8a:e9:13:95:2e:24:cd:6d:13:a1:2b:0b:96: 1b:47:77:1b:b8:57:9b:b0:e0:08:f4:56:c1:fa:f6:bb:d2:9e: 99:4c:4c:59:64:c9:3c:cd:0c:60:9c:f7:5c:e8:db:9d:09:25: a7:8e:cf:5a:48:e8:54:32:87:7d:30:d9:4f:cc:cc:8d:06:b6: 55:20:6d:7b:6a:b6:be:1e:81:2a:d6:b5:18:7d:27:a0:31:25: 80:73:1d:c0:74:22:8c:7c:5d:af:ca:2a:e0:ac:18:1a:d4:23: 82:4a:15:e4:48:30:c7:57:4e:1f:dd:65:fc:a2:86:5f:c8:62: e8:c0:a7:a4:b8:3d:2f:a7:38:b1:73:ad:c2:b4:e7:31:75:c6: 6d:68:4c:07:15:4b:7c:b7:98:8e:ce:3c:ee:58:5f:f8:ab:38: 57:1c:1f:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDJ8Vhp6kblXcOUMK1270GQ8CVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNTA5MDUxNDQ2MjBaFw0yNTA5MDgyMjU0MjBaMDMxMTAvBgNV BAMTKDI1RTMyNzREQzc1Njg0QzYzNDhBN0Y5NUMzMTVGNERFMzlGRDNBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSVoaS0y4rOebNqUU7an1POFcr i5gv/twco7ZLsfte2ThyEI8K3wQHBlxjwLTokDBqucQTjUiH//LVvd4qAV9tGV/6 QFkr+Izpjnbgnnhiv7SgG0zn8W5aJK9qOVs/wmHzoSgtUVol4cjBWqjNR6R8AMnU HuoVJio73ILyBIs7EDd0SYF3oAPFMuGEdku/frKkMzlVfFa6yGoibeJus8eE2ZCi SIVfXvPcZmS2VFAavkw+pALxYTrgprC6XecuekJQN4XAa4ecnZFOENLw7ltmHW7n 6SKsImcbgZBlzmd0YxILspmGN3I9eiZs933MSGwsOpTc3ntbyHwQyopPwnTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJeMnTcdWhMY0in+VwxX03jn9OokwHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtvp8JNAbF4KqkIEfQqL06yKOii7L7JsF9z A7RpgeFijsLr1ukOL+JT2CpCyBYnSHHfu2yT7P7snTgz0km5+Nui0cEDk67XJLRC wHMFIl6npwJtReNyBI2RBW1TfM9KiukTlS4kzW0ToSsLlhtHdxu4V5uw4Aj0VsH6 9rvSnplMTFlkyTzNDGCc91zo250JJaeOz1pI6FQyh30w2U/MzI0GtlUgbXtqtr4e gSrWtRh9J6AxJYBzHcB0Iox8Xa/KKuCsGBrUI4JKFeRIMMdXTh/dZfyihl/IYujA p6S4PS+nOLFzrcK05zF1xm1oTAcVS3y3mI7OPO5YX/irOFccHys= -----END CERTIFICATE-----Generated at Sun Sep 7 13:55:50 2025 by rpki-client