$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json) Hash identifier: 1oqJjIOBeDJldLUfz14fyOEGhQdLgUJNzjIyl1M2ssE= Subject key identifier: D1:70:D4:12:20:DD:12:54:38:3F:27:FA:4D:7F:DC:9F:64:B6:FE:D8 Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Certificate serial: 42447BD4ECE0202DC25F899278B6EE00D1080CDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft Manifest number: 039E Signing time: Fri 05 Sep 2025 10:21:10 +0000 Manifest this update: Fri 05 Sep 2025 10:16:10 +0000 Manifest next update: Mon 08 Sep 2025 16:58:10 +0000 Files and hashes: 1: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: AxYoQWecQDEA9FWlIA+I8efGy3t+vLMoj/m5+8lBU/4=) 2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: GKVVkkXboxeT4WcoJCcUdHA/7DHycn3Kvf/vm4KqRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:44:7b:d4:ec:e0:20:2d:c2:5f:89:92:78:b6:ee:00:d1:08:0c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Validity Not Before: Sep 5 10:16:10 2025 GMT Not After : Sep 8 16:58:10 2025 GMT Subject: CN=D170D41220DD1254383F27FA4D7FDC9F64B6FED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:ab:08:5f:23:8b:f2:6e:47:a2:fe:40:86: 30:36:d9:df:a3:f7:c9:2e:49:e1:52:57:10:32:00: 0a:fc:e2:f4:73:d4:1a:77:33:57:b0:53:58:94:3d: 6d:b0:7c:65:f7:d1:88:5d:e0:1b:d2:7a:ef:c0:5c: d1:c5:a5:ce:3f:94:69:6b:f7:29:52:09:8c:80:85: c9:68:98:61:6c:7d:14:5b:1d:f6:cd:cb:79:b7:50: 09:3a:c2:80:50:48:36:b1:21:0a:45:12:ca:39:8a: bc:f1:eb:d8:d7:47:02:89:20:f9:62:a2:4f:76:31: 3d:a2:9e:3d:10:a2:e9:e0:fe:ed:a6:11:8b:e2:b5: 35:ee:97:9d:6b:52:81:61:c2:c3:09:ca:5b:90:3d: d0:cc:c5:13:d4:5e:32:94:93:66:2f:c1:e3:e4:ce: 85:9f:e6:b0:aa:de:df:37:51:36:07:21:9c:0c:28: b5:f3:25:1a:c9:3b:d0:a6:77:b7:cb:bb:65:52:04: 03:07:31:16:55:44:30:27:c5:3d:55:93:56:ed:80: f3:9e:dc:f9:f5:ed:fa:d2:4f:cb:35:57:d3:c0:76: a9:80:11:08:db:f0:b9:50:77:37:eb:85:22:42:ac: 54:82:5f:14:d4:4f:c6:62:08:3b:c1:06:05:44:1f: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:70:D4:12:20:DD:12:54:38:3F:27:FA:4D:7F:DC:9F:64:B6:FE:D8 X509v3 Authority Key Identifier: keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:95:01:6c:f2:4f:8d:04:d0:f9:9c:05:08:bb:31:82:4f:20: ff:1d:f6:54:35:8f:3d:46:cc:68:c4:58:f7:e0:68:c7:21:1f: 52:54:36:a4:51:f4:26:67:39:73:59:7b:29:b8:f5:ea:6d:7b: 03:14:91:e2:fc:9e:e8:3d:de:ad:3f:00:11:f8:0a:bf:58:05: 33:1f:ff:01:68:46:5d:ed:3f:0e:f3:ac:29:73:c9:e7:bf:22: 1d:a9:6f:6e:66:09:45:be:cd:67:c6:21:6d:06:f0:69:0a:6c: 5c:71:2a:20:4a:f6:5c:20:d8:4c:9b:99:0d:1a:a1:24:82:f6: 05:20:1a:15:84:b7:89:41:9f:1f:e7:8c:6e:b3:80:a0:fb:c1: f1:81:bc:74:22:1b:39:e5:f8:94:67:57:8f:e1:8f:c3:76:1d: 4f:5f:6d:fe:97:b2:39:a8:aa:c9:19:d8:1a:56:07:b4:21:be: f0:7b:0c:2f:a2:17:8d:7c:11:48:3b:7e:b9:64:22:3a:a0:72: a6:b5:19:e3:d3:0d:95:eb:5a:90:36:62:bf:7c:33:4f:81:5d: a4:dd:03:f8:2a:63:02:f7:57:77:32:8c:c1:b0:b6:cd:a8:16: cf:4a:58:de:63:29:af:bc:25:cc:fa:7c:6c:81:3e:e6:92:f3: ff:78:da:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkR71OzgIC3CX4mSeLbuANEIDN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC QzY0MzUyNTAeFw0yNTA5MDUxMDE2MTBaFw0yNTA5MDgxNjU4MTBaMDMxMTAvBgNV BAMTKEQxNzBENDEyMjBERDEyNTQzODNGMjdGQTREN0ZEQzlGNjRCNkZFRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yasIXyOL8m5Hov5AhjA22d+j 98kuSeFSVxAyAAr84vRz1Bp3M1ewU1iUPW2wfGX30Yhd4BvSeu/AXNHFpc4/lGlr 9ylSCYyAhclomGFsfRRbHfbNy3m3UAk6woBQSDaxIQpFEso5irzx69jXRwKJIPli ok92MT2inj0Qoung/u2mEYvitTXul51rUoFhwsMJyluQPdDMxRPUXjKUk2YvwePk zoWf5rCq3t83UTYHIZwMKLXzJRrJO9Cmd7fLu2VSBAMHMRZVRDAnxT1Vk1btgPOe 3Pn17frST8s1V9PAdqmAEQjb8LlQdzfrhSJCrFSCXxTUT8ZiCDvBBgVEHzlXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0XDUEiDdElQ4Pyf6TX/cn2S2/tgwHwYDVR0j BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0 MzUyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJG MkNCQzY0MzUyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqVAWzyT40E0PmcBQi7MYJPIP8d9lQ1jz1G zGjEWPfgaMchH1JUNqRR9CZnOXNZeym49eptewMUkeL8nug93q0/ABH4Cr9YBTMf /wFoRl3tPw7zrClzyee/Ih2pb25mCUW+zWfGIW0G8GkKbFxxKiBK9lwg2EybmQ0a oSSC9gUgGhWEt4lBnx/njG6zgKD7wfGBvHQiGznl+JRnV4/hj8N2HU9fbf6Xsjmo qskZ2BpWB7QhvvB7DC+iF418EUg7frlkIjqgcqa1GePTDZXrWpA2Yr98M0+BXaTd A/gqYwL3V3cyjMGwts2oFs9KWN5jKa+8Jcz6fGyBPuaS8/942u8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:25 2025 by rpki-client