$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft File: 3E08DEC2AE0EB41653597023376671331769A43E.mft (raw, json) Hash identifier: x0dc9AJ+/YuiMGdjxk70TEn+q9V46qhhFg6RGsieFQI= Subject key identifier: 8E:9A:98:1D:63:2E:98:C3:4D:05:5F:46:38:3A:6C:5E:2C:02:01:2F Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E Certificate issuer: /CN=3E08DEC2AE0EB41653597023376671331769A43E Certificate serial: 349A1FE8D998E17D430DA5C872AD4440FDA1DBC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft Manifest number: 7F Signing time: Sat 06 Sep 2025 21:31:32 +0000 Manifest this update: Sat 06 Sep 2025 21:26:32 +0000 Manifest next update: Wed 10 Sep 2025 04:01:32 +0000 Files and hashes: 1: 3E08DEC2AE0EB41653597023376671331769A43E.crl (hash: 9aUb2LbzA3REclziYdPr+uW7B2otpZRKps/Qo1wmcKI=) 2: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: 0OT1N5Rf9ROOY/Zt+fSYDh8hyIpfNlFvEpZdIjJrZrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9a:1f:e8:d9:98:e1:7d:43:0d:a5:c8:72:ad:44:40:fd:a1:db:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E Validity Not Before: Sep 6 21:26:32 2025 GMT Not After : Sep 10 04:01:32 2025 GMT Subject: CN=8E9A981D632E98C34D055F46383A6C5E2C02012F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:4b:0c:39:bf:bb:9b:bd:33:59:ff:b3:21: 86:b2:2b:23:64:51:02:54:0c:49:b5:13:20:47:af: 0c:49:7f:41:d7:d8:06:dd:90:c5:cf:6c:4f:62:5c: c6:c4:56:6c:6c:71:18:35:da:3d:0d:00:3a:91:c2: 17:ce:9c:84:a7:a4:37:05:1e:21:9e:b9:fa:ea:58: 54:c9:09:7d:85:51:a8:02:a5:37:b1:15:42:f1:8d: b0:2d:ed:8c:62:00:27:5e:e8:ec:02:8f:01:e3:9a: 4d:ca:ce:6a:af:c6:52:17:85:b3:e7:81:da:4d:1c: d6:3d:62:83:b5:f7:97:94:d9:ca:77:54:85:e8:c1: 61:6e:47:ca:7c:4b:89:90:ed:6c:1c:81:9b:bf:ea: 26:97:45:49:f5:41:d6:29:99:59:6c:ef:89:3c:be: d5:86:92:2c:02:b3:6e:17:0e:7d:11:bd:9f:9a:12: 7f:03:ff:a0:23:58:d8:eb:21:36:ab:95:fa:a8:20: ad:ec:2c:50:53:aa:12:8e:6a:c2:f9:21:58:59:42: 82:cc:fc:ea:40:cb:c0:f8:52:fd:e2:65:e3:8b:58: 9b:9e:90:03:43:55:8a:f7:55:63:7a:bf:1a:61:a2: ca:1f:67:43:b3:14:eb:6d:ae:62:e2:3d:e0:32:ec: 19:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9A:98:1D:63:2E:98:C3:4D:05:5F:46:38:3A:6C:5E:2C:02:01:2F X509v3 Authority Key Identifier: keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:81:02:ec:17:24:4a:e7:2e:2f:30:82:ca:0c:eb:74:60:c1: 20:2c:9a:d6:28:a2:7d:cf:a8:30:66:90:3a:57:99:cb:8e:8b: 6b:28:0d:ec:74:13:49:57:70:76:42:ba:64:8c:a6:67:d9:14: 67:44:f1:dc:8f:c8:47:6a:3a:14:83:e9:f3:50:cd:c3:07:ee: 68:07:d6:93:ca:85:a4:6b:a6:8c:1a:f1:f5:7c:bb:1f:89:82: d0:80:a4:73:7b:35:8c:e1:c6:a9:44:83:14:0a:a4:79:a5:77: 66:2d:d4:da:61:64:54:24:54:1e:fa:12:26:74:bd:c6:1d:54: 75:16:64:e9:1d:f8:d6:1e:39:05:83:55:46:b7:4f:18:67:77: 10:e8:8d:88:c9:f8:7e:d6:53:d5:4e:c0:cb:a9:cd:85:8f:9d: 5e:f8:f4:de:ca:d5:ed:03:98:03:ce:4f:b9:81:36:ea:13:b0: d7:37:f4:7d:18:ea:7f:3b:f5:2d:e1:68:69:65:7d:16:cc:08: 7a:45:6a:08:05:01:a0:ba:0e:a9:df:5e:8f:72:e0:b1:db:05: 1d:c6:49:92:de:a1:64:2a:23:9a:ed:65:93:02:66:23:ef:61: 25:60:cd:6c:3a:ed:a4:ed:74:8a:ed:70:15:c6:57:dd:bd:40: fe:3b:5e:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJof6NmY4X1DDaXIcq1EQP2h28kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMx NzY5QTQzRTAeFw0yNTA5MDYyMTI2MzJaFw0yNTA5MTAwNDAxMzJaMDMxMTAvBgNV BAMTKDhFOUE5ODFENjMyRTk4QzM0RDA1NUY0NjM4M0E2QzVFMkMwMjAxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCccEsMOb+7m70zWf+zIYayKyNk UQJUDEm1EyBHrwxJf0HX2AbdkMXPbE9iXMbEVmxscRg12j0NADqRwhfOnISnpDcF HiGeufrqWFTJCX2FUagCpTexFULxjbAt7YxiACde6OwCjwHjmk3KzmqvxlIXhbPn gdpNHNY9YoO195eU2cp3VIXowWFuR8p8S4mQ7WwcgZu/6iaXRUn1QdYpmVls74k8 vtWGkiwCs24XDn0RvZ+aEn8D/6AjWNjrITarlfqoIK3sLFBTqhKOasL5IVhZQoLM /OpAy8D4Uv3iZeOLWJuekANDVYr3VWN6vxphosofZ0OzFOttrmLiPeAy7Bk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjpqYHWMumMNNBV9GODpsXiwCAS8wHwYDVR0j BBgwFoAUPgjewq4OtBZTWXAjN2ZxMxdppD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjgxOWJhOS01ZjQ0LTQxMjUtOGI4Yy1mYzE2NGI1NGQ3M2EvMC8zRTA4REVDMkFF MEVCNDE2NTM1OTcwMjMzNzY2NzEzMzE3NjlBNDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMxNzY5 QTQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI4MTliYTktNWY0NC00MTI1LThi OGMtZmMxNjRiNTRkNzNhLzAvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2Njcx MzMxNzY5QTQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuBAuwXJErnLi8wgsoM63RgwSAsmtYoon3P qDBmkDpXmcuOi2soDex0E0lXcHZCumSMpmfZFGdE8dyPyEdqOhSD6fNQzcMH7mgH 1pPKhaRrpowa8fV8ux+JgtCApHN7NYzhxqlEgxQKpHmld2Yt1NphZFQkVB76EiZ0 vcYdVHUWZOkd+NYeOQWDVUa3TxhndxDojYjJ+H7WU9VOwMupzYWPnV749N7K1e0D mAPOT7mBNuoTsNc39H0Y6n879S3haGllfRbMCHpFaggFAaC6DqnfXo9y4LHbBR3G SZLeoWQqI5rtZZMCZiPvYSVgzWw67aTtdIrtcBXGV929QP47Xm0= -----END CERTIFICATE-----Generated at Mon Sep 8 05:08:59 2025 by rpki-client