$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json) Hash identifier: jxPFim8qLMRJeIusdFYqyT8Loa6WqbGwEjeKVMom3QY= Subject key identifier: 1B:DB:61:A4:F1:CC:8E:5C:94:39:CB:C3:FB:C9:3A:83:AB:25:75:34 Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 3FD84F0CEE74500B9C3B85F25CCABAA6E9E665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft Manifest number: 01CE Signing time: Fri 05 Sep 2025 16:21:43 +0000 Manifest this update: Fri 05 Sep 2025 16:16:43 +0000 Manifest next update: Mon 08 Sep 2025 22:29:43 +0000 Files and hashes: 1: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: GQbGwj8/3pFXSYNr52t6SKb3/O8bij4qIjKoYgJR2e8=) 2: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZSgY5OMesKAVjFXk2K7xGan10euYjEFEbhi4eeTqUI4=) 3: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: c6BbZqskhId1bW3l6aSuRQLjcbQNOmGBaOGbC28FTXg=) 4: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: ScSmGFPgPwQZGAb2gb3fqHh9TbyFijAoo3qrl5yD3xY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 22:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d8:4f:0c:ee:74:50:0b:9c:3b:85:f2:5c:ca:ba:a6:e9:e6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: Sep 5 16:16:43 2025 GMT Not After : Sep 8 22:29:43 2025 GMT Subject: CN=1BDB61A4F1CC8E5C9439CBC3FBC93A83AB257534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:20:df:86:a3:f4:7a:62:cb:68:60:df:2d:a7: 5b:5c:e5:0b:f6:60:a4:c8:89:ce:19:85:a8:16:76: b4:28:71:b7:1d:10:09:66:13:09:bb:26:74:c7:7d: 21:12:f3:64:10:3b:0b:43:0b:6f:dc:c3:96:dd:90: b6:b2:d7:e4:00:ee:1f:31:64:4d:09:ed:c0:cd:9d: ef:cb:39:8e:b1:14:cb:4a:cc:22:79:26:18:ff:8f: 8f:b1:6c:78:ff:80:29:d4:d6:7b:d1:7f:75:b8:d7: 48:dc:9c:3c:60:55:9e:4f:82:83:ce:a9:60:55:5a: 3b:b0:c5:f1:5b:24:26:33:99:75:60:0e:a6:2a:9c: dd:75:46:f1:2e:71:e6:83:13:6f:3b:bf:02:94:f8: 24:d7:b1:2b:c4:ef:bc:dc:78:0a:51:ff:01:85:6a: 8d:70:d3:22:5a:19:12:e7:45:b9:58:43:26:db:f4: d0:24:b1:fc:78:11:e5:4a:7c:cf:fa:ef:70:65:7b: 9d:7e:d8:77:53:bb:1c:62:b4:a7:b1:25:5e:12:8b: 9a:8c:bf:9a:df:c4:04:31:71:4e:bb:9f:88:a6:7e: e6:3a:a9:84:8a:07:5b:c8:f0:30:a0:80:65:02:4b: db:52:c2:de:96:da:53:d4:bd:c0:90:18:61:a2:4c: 02:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DB:61:A4:F1:CC:8E:5C:94:39:CB:C3:FB:C9:3A:83:AB:25:75:34 X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:45:10:a3:44:93:b7:d6:0f:07:f3:9b:8f:bb:b7:d6:9e:40: 6a:e8:ae:ef:6c:f0:f5:95:0d:e7:7f:80:4c:08:24:1d:c2:93: 56:30:a4:6c:0a:c2:c2:66:06:b4:aa:1b:24:71:fd:51:2a:52: c6:a2:2b:a1:de:ee:54:42:1c:37:c3:51:21:0b:c2:8d:cb:e7: 86:a8:6a:33:c6:08:11:a6:46:dc:16:9a:d3:11:cc:d8:2a:85: 77:ab:3b:68:fb:3d:cf:02:47:36:f5:fd:7d:8b:8a:bf:9c:7b: 53:e3:b5:8f:1f:9a:1b:5b:44:69:2e:40:56:10:68:d3:4a:f6: 25:07:14:61:df:f8:c6:34:1f:fc:00:90:e2:13:5c:5d:73:c1: 41:ca:e5:d3:0e:ba:b8:a7:a0:87:ca:d5:9d:bb:b3:a6:bc:9d: ed:27:e1:85:b5:21:50:fe:d7:dc:51:97:2c:b2:e9:84:ce:e5: f3:0c:da:7c:fc:0a:f3:1f:72:60:3f:ee:4c:46:a3:39:5f:13: cc:6f:9d:67:92:cc:27:02:5f:37:29:69:c7:ca:16:d5:65:fb: 57:53:ce:6e:51:2c:ea:99:18:ab:b0:95:9f:5a:b2:24:e7:f3: 2e:7f:38:59:a0:1b:42:5c:c9:2f:f2:1a:fc:68:e1:9a:8d:0e: 70:b7:e3:6c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITP9hPDO50UAucO4XyXMq6punmZTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzRDIwNTIyQjUxQUVBQTQxRjU5NDkwRTJENTVDMzZERUI2 QzIxQzc3MB4XDTI1MDkwNTE2MTY0M1oXDTI1MDkwODIyMjk0M1owMzExMC8GA1UE AxMoMUJEQjYxQTRGMUNDOEU1Qzk0MzlDQkMzRkJDOTNBODNBQjI1NzUzNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANsg34aj9Hpiy2hg3y2nW1zlC/Zg pMiJzhmFqBZ2tChxtx0QCWYTCbsmdMd9IRLzZBA7C0MLb9zDlt2QtrLX5ADuHzFk TQntwM2d78s5jrEUy0rMInkmGP+Pj7FseP+AKdTWe9F/dbjXSNycPGBVnk+Cg86p YFVaO7DF8VskJjOZdWAOpiqc3XVG8S5x5oMTbzu/ApT4JNexK8TvvNx4ClH/AYVq jXDTIloZEudFuVhDJtv00CSx/HgR5Up8z/rvcGV7nX7Yd1O7HGK0p7ElXhKLmoy/ mt/EBDFxTrufiKZ+5jqphIoHW8jwMKCAZQJL21LC3pbaU9S9wJAYYaJMAlMCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQb22Gk8cyOXJQ5y8P7yTqDqyV1NDAfBgNVHSME GDAWgBQ9IFIrUa6qQfWUkOLVXDbetsIcdzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Vl NjFlNWFlLWU0NWYtNGVlMy04ZjZiLTdjYjU5ZDYxNzgzYi8wLzNEMjA1MjJCNTFB RUFBNDFGNTk0OTBFMkQ1NUMzNkRFQjZDMjFDNzcuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8zRDIwNTIyQjUxQUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIx Qzc3LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9lZTYxZTVhZS1lNDVmLTRlZTMtOGY2 Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUxQUVBQTQxRjU5NDkwRTJENTVDMzZE RUI2QzIxQzc3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAj0UQo0STt9YPB/Obj7u31p5Aauiu72zw9ZUN 53+ATAgkHcKTVjCkbArCwmYGtKobJHH9USpSxqIrod7uVEIcN8NRIQvCjcvnhqhq M8YIEaZG3Baa0xHM2CqFd6s7aPs9zwJHNvX9fYuKv5x7U+O1jx+aG1tEaS5AVhBo 00r2JQcUYd/4xjQf/ACQ4hNcXXPBQcrl0w66uKegh8rVnbuzpryd7SfhhbUhUP7X 3FGXLLLphM7l8wzafPwK8x9yYD/uTEajOV8TzG+dZ5LMJwJfNylpx8oW1WX7V1PO blEs6pkYq7CVn1qyJOfzLn84WaAbQlzJL/Ia/Gjhmo0OcLfjbA== -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:40 2025 by rpki-client