$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: fT/NiLrcl4VNB2Jfvfq67IETYOQQrfrIx1ywNyLLeL4= Subject key identifier: 5F:EE:B9:D3:D2:E3:47:A3:3B:B9:03:77:3F:84:12:2A:C0:8D:8F:37 Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 18BAC6D6F508D42E9F46E598F170891A1A404A12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 01E7 Signing time: Sat 19 Jul 2025 14:50:05 +0000 Manifest this update: Sat 19 Jul 2025 14:45:05 +0000 Manifest next update: Tue 22 Jul 2025 20:18:05 +0000 Files and hashes: 1: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: nPbiqCvH5YWhG+QkmRu8Adac1iTPOZi9JJd9oWRTlww=) 2: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ba:c6:d6:f5:08:d4:2e:9f:46:e5:98:f1:70:89:1a:1a:40:4a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Jul 19 14:45:05 2025 GMT Not After : Jul 22 20:18:05 2025 GMT Subject: CN=5FEEB9D3D2E347A33BB903773F84122AC08D8F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:b5:b4:69:eb:8c:07:e8:7d:63:f3:65:00: a6:4a:7f:ec:49:4a:04:9b:a1:4c:60:d9:52:7e:d9: 1c:c3:b4:be:f6:79:f1:a1:ab:53:b3:42:bf:b0:f0: b3:39:cc:3f:b8:04:e5:d2:12:0f:3e:b8:06:12:e9: 42:94:af:36:18:6d:d9:f0:bc:ba:66:ef:55:d3:9a: 68:51:75:3e:d4:7e:60:8c:ae:cf:e2:ce:08:6b:32: 80:3b:2b:94:57:c3:6e:93:bc:39:29:92:01:2e:19: cf:f9:ac:f4:e9:59:24:6b:36:de:5f:cb:35:64:84: 9f:db:9e:37:2c:1a:5c:f2:4b:d3:6b:2c:75:bc:0f: 90:15:24:e5:84:7e:0c:65:d5:82:36:84:24:46:3d: 3d:14:81:ab:7d:8d:dd:84:a8:51:7d:db:8c:08:58: c3:ee:be:13:42:02:fe:0a:c6:fb:4f:06:fd:47:d4: 3a:88:1b:88:de:83:76:76:3f:25:34:ec:4d:8e:d1: 5c:d2:21:71:0d:3d:53:ee:73:a7:8c:52:e0:d6:fd: f9:2c:cd:83:69:63:f3:e0:fd:19:b9:77:28:05:fa: 5d:c0:7e:85:ea:1c:16:18:e2:0f:fe:9c:ec:15:dd: f7:43:21:0f:c8:24:c0:8a:13:2a:5e:13:6c:f8:b4: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:B9:D3:D2:E3:47:A3:3B:B9:03:77:3F:84:12:2A:C0:8D:8F:37 X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:23:46:49:fd:58:eb:57:4f:57:a0:be:5e:bd:f2:de:6c:6f: e9:60:9c:23:17:ac:8e:26:a5:47:d7:08:ef:e8:a3:d8:b1:5b: 51:87:19:7c:cb:c4:9d:ef:24:ab:5b:cc:7e:56:34:2d:c1:3e: 1d:57:c8:e8:21:75:45:33:61:c1:75:91:77:74:b7:51:64:5c: 38:bb:8b:0e:5a:f8:09:f8:35:16:2d:dc:7a:d1:07:de:d6:b8: ef:30:ea:fd:f0:50:b7:cd:c9:93:ad:47:46:2c:16:d7:78:ec: 1b:38:86:7c:be:00:ab:2f:1a:27:6e:06:a3:56:07:8c:90:7c: 21:fd:cd:bc:86:fd:94:7d:cd:f9:76:b6:49:96:aa:70:df:61: 3b:0d:60:a0:58:9c:78:62:4d:4b:40:1b:b8:60:c2:3b:47:c4: 1f:a5:27:41:db:e7:68:c5:a3:c1:a8:d6:7c:9f:53:83:c8:1f: 8f:9a:00:b1:76:56:53:a7:52:86:a9:db:2d:de:c5:e3:bf:7d: 88:98:96:11:1c:02:6d:52:33:69:f1:2d:05:ab:f0:b1:13:db: 8d:e1:08:b1:d4:04:ed:f5:06:7d:e7:94:98:47:6b:76:dd:23: a8:ef:c6:c1:34:f0:b6:0c:5d:67:d8:3e:94:51:08:59:5c:92: 4c:d9:de:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGLrG1vUI1C6fRuWY8XCJGhpAShIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTA3MTkxNDQ1MDVaFw0yNTA3MjIyMDE4MDVaMDMxMTAvBgNV BAMTKDVGRUVCOUQzRDJFMzQ3QTMzQkI5MDM3NzNGODQxMjJBQzA4RDhGMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaT7W0aeuMB+h9Y/NlAKZKf+xJ SgSboUxg2VJ+2RzDtL72efGhq1OzQr+w8LM5zD+4BOXSEg8+uAYS6UKUrzYYbdnw vLpm71XTmmhRdT7UfmCMrs/izghrMoA7K5RXw26TvDkpkgEuGc/5rPTpWSRrNt5f yzVkhJ/bnjcsGlzyS9NrLHW8D5AVJOWEfgxl1YI2hCRGPT0Ugat9jd2EqFF924wI WMPuvhNCAv4KxvtPBv1H1DqIG4jeg3Z2PyU07E2O0VzSIXENPVPuc6eMUuDW/fks zYNpY/Pg/Rm5dygF+l3AfoXqHBYY4g/+nOwV3fdDIQ/IJMCKEypeE2z4tDfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX+6509LjR6M7uQN3P4QSKsCNjzcwHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsjRkn9WOtXT1egvl698t5sb+lgnCMXrI4m pUfXCO/oo9ixW1GHGXzLxJ3vJKtbzH5WNC3BPh1XyOghdUUzYcF1kXd0t1FkXDi7 iw5a+An4NRYt3HrRB97WuO8w6v3wULfNyZOtR0YsFtd47Bs4hny+AKsvGiduBqNW B4yQfCH9zbyG/ZR9zfl2tkmWqnDfYTsNYKBYnHhiTUtAG7hgwjtHxB+lJ0Hb52jF o8Go1nyfU4PIH4+aALF2VlOnUoap2y3exeO/fYiYlhEcAm1SM2nxLQWr8LET243h CLHUBO31Bn3nlJhHa3bdI6jvxsE08LYMXWfYPpRRCFlckkzZ3js= -----END CERTIFICATE-----Generated at Mon Jul 21 12:58:54 2025 by rpki-client