$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: cdwWRNDY42QgafLVORlXCsUtYGawmaCorwRqW/kkqOo= Subject key identifier: 08:32:75:DD:A4:FE:B7:45:B2:41:BC:61:B9:9B:8B:56:B2:10:AF:8C Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 1DEF8460CF6E4DBE2EFBBB54099CF2F36E5D514A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 02F0 Signing time: Sat 06 Sep 2025 18:12:08 +0000 Manifest this update: Sat 06 Sep 2025 18:07:08 +0000 Manifest next update: Tue 09 Sep 2025 19:34:08 +0000 Files and hashes: 1: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: jyfDXZWr7WiHE5PEOwdxWCFCQYRM01aVH5qU9jCSciE=) 2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: KB67q4SCRzcFv43ZUJG/KADzbe2hXV8kny5lP7t0r80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 19:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ef:84:60:cf:6e:4d:be:2e:fb:bb:54:09:9c:f2:f3:6e:5d:51:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Sep 6 18:07:08 2025 GMT Not After : Sep 9 19:34:08 2025 GMT Subject: CN=083275DDA4FEB745B241BC61B99B8B56B210AF8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:d3:91:d3:50:69:43:2c:1b:42:fd:05:28: 77:9e:24:af:33:df:67:72:8b:eb:16:7d:70:2b:97: 8b:d0:5c:3b:57:af:3d:e3:cf:f2:eb:a7:ee:f3:1a: ad:b6:58:c7:d2:b5:1f:49:b4:69:59:57:3b:d5:9a: 2d:dd:69:7c:35:2b:f1:49:68:42:d7:25:01:98:74: ba:62:a7:13:78:c6:52:60:67:94:df:93:e5:b0:bb: b2:30:78:98:91:57:77:8f:b7:c3:f6:f1:ce:70:05: 94:d5:20:ee:4a:5c:e8:90:84:1a:3b:b8:6c:df:27: 1c:71:93:b9:56:73:da:8f:2c:e4:5b:b3:d1:f6:33: 62:ee:65:f3:f8:f7:d0:f7:9d:d6:6a:ea:a2:6a:5d: a3:db:52:c8:ea:18:fc:f4:d0:5d:66:3b:28:9c:8f: 26:5e:f3:f5:65:02:37:73:23:dd:49:ce:23:ca:52: 81:13:ee:de:d8:88:8d:c3:35:6b:4d:7e:38:4b:83: 1a:18:0b:66:94:e7:87:57:d1:20:ee:f3:f9:f4:26: 5e:80:12:e7:9e:3b:a7:86:f4:b5:d7:60:75:96:03: d6:9b:0c:fc:b3:80:38:9e:b1:d9:e2:35:d8:ff:43: 37:d4:08:97:1b:22:0c:46:8e:f0:4a:ac:70:d9:d6: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:32:75:DD:A4:FE:B7:45:B2:41:BC:61:B9:9B:8B:56:B2:10:AF:8C X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:bc:5a:f6:4f:1e:59:17:fb:18:ec:96:7f:3e:d9:f7:45:c2: 32:7d:77:61:3b:6a:3e:7e:a7:5f:03:29:5a:89:c7:2d:3c:e7: ce:e0:17:c6:d9:15:36:2e:bc:a2:7b:18:ea:bd:5e:53:8a:df: cf:65:97:6b:ca:cf:03:cb:18:58:8f:ce:37:16:46:e9:8e:08: fb:30:ce:8a:05:9a:72:04:d6:e5:2a:1c:81:17:7b:05:04:09: ff:d7:55:c7:12:e6:df:d1:f0:7a:1a:7f:8a:f0:75:84:09:64: 39:44:45:0f:50:22:c2:8b:8e:70:81:9b:4f:dc:49:2c:8d:18: 88:0f:d6:99:a7:4c:9c:97:ca:e8:51:18:d3:26:7f:91:58:9b: 02:30:8c:a4:2a:91:5b:49:4e:49:ae:39:ac:18:24:bd:1a:55: 47:2e:a5:8f:4a:a4:a4:55:9e:34:16:b3:df:0f:d4:9e:02:e4: 87:ba:3d:02:29:36:5e:ee:e1:63:30:aa:46:65:3d:26:a5:b6: cc:3f:5f:1c:17:4c:e4:43:8b:31:ec:88:68:41:d9:4d:80:11: a9:b2:ba:0f:31:db:66:e6:da:dc:8b:fd:f7:dc:89:0c:41:07: ce:86:c5:19:ba:74:1c:82:e4:69:05:9d:ce:fa:d6:91:b7:83: cb:d2:e3:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHe+EYM9uTb4u+7tUCZzy825dUUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNTA5MDYxODA3MDhaFw0yNTA5MDkxOTM0MDhaMDMxMTAvBgNV BAMTKDA4MzI3NUREQTRGRUI3NDVCMjQxQkM2MUI5OUI4QjU2QjIxMEFGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1dOR01BpQywbQv0FKHeeJK8z 32dyi+sWfXArl4vQXDtXrz3jz/Lrp+7zGq22WMfStR9JtGlZVzvVmi3daXw1K/FJ aELXJQGYdLpipxN4xlJgZ5Tfk+Wwu7IweJiRV3ePt8P28c5wBZTVIO5KXOiQhBo7 uGzfJxxxk7lWc9qPLORbs9H2M2LuZfP499D3ndZq6qJqXaPbUsjqGPz00F1mOyic jyZe8/VlAjdzI91JziPKUoET7t7YiI3DNWtNfjhLgxoYC2aU54dX0SDu8/n0Jl6A EueeO6eG9LXXYHWWA9abDPyzgDiesdniNdj/QzfUCJcbIgxGjvBKrHDZ1tnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCDJ13aT+t0WyQbxhuZuLVrIQr4wwHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEi8WvZPHlkX+xjsln8+2fdFwjJ9d2E7aj5+ p18DKVqJxy08587gF8bZFTYuvKJ7GOq9XlOK389ll2vKzwPLGFiPzjcWRumOCPsw zooFmnIE1uUqHIEXewUECf/XVccS5t/R8Hoaf4rwdYQJZDlERQ9QIsKLjnCBm0/c SSyNGIgP1pmnTJyXyuhRGNMmf5FYmwIwjKQqkVtJTkmuOawYJL0aVUcupY9KpKRV njQWs98P1J4C5Ie6PQIpNl7u4WMwqkZlPSaltsw/XxwXTORDizHsiGhB2U2AEamy ug8x22bm2tyL/ffciQxBB86GxRm6dByC5GkFnc761pG3g8vS44Q= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:45 2025 by rpki-client