$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: nkm/5x+Fol2JMSRVgbuT13hN34NYl+NkJjLLAc7M9Gw= Subject key identifier: A9:4F:20:1C:5F:62:DE:3B:53:4E:B8:A0:5E:85:C2:00:62:4C:BA:6F Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 790CFDFFE76CA579E4CF652ECDAB3F28EA0A70EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 01C8 Signing time: Sat 05 Apr 2025 11:31:49 +0000 Manifest this update: Sat 05 Apr 2025 11:26:49 +0000 Manifest next update: Tue 08 Apr 2025 13:26:49 +0000 Files and hashes: 1: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: 4PYE9D9EgZCT5EPnFePIqOrBOOpIniHdq0RQu5rO9AY=) 2: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: 8y5JK94ZhR3xgyaECM453KUX1kpdfDuJgnhaIAM+DdY=) 3: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: XWnh1VykZqMD04Gqe6UZfKtVzo0XPT3InbmErZuC12M=) 4: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: R94Jhrt2peQ9VoyHvkm97VBfx7MWEw69Cox/hXCe3MY=) 5: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: j+xMG0Mja1vgbHDmB6Mk1vqe3c5PuIR+QXfVG/S4zas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0c:fd:ff:e7:6c:a5:79:e4:cf:65:2e:cd:ab:3f:28:ea:0a:70:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Apr 5 11:26:49 2025 GMT Not After : Apr 8 13:26:49 2025 GMT Subject: CN=A94F201C5F62DE3B534EB8A05E85C200624CBA6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:8c:65:fa:b2:1a:bf:20:19:f5:e5:15:9c: dc:95:75:d7:b4:cf:d3:94:a4:9d:33:e9:9c:0a:41: 30:32:63:f7:9d:0f:82:33:bb:7d:ed:31:a9:d9:ea: e6:4b:de:57:85:67:31:03:1c:0e:41:6d:cc:1d:28: b0:cd:5a:0f:4f:5c:f5:aa:46:cc:46:73:6a:5a:1d: 39:b2:9d:9b:2e:d2:30:ee:02:01:99:1f:5a:cb:05: 0e:25:a1:0b:a2:d3:45:04:a1:b4:65:87:53:5b:7d: ce:c8:e7:99:fe:c3:20:f6:70:dd:24:29:6b:af:c5: ca:f8:87:f8:c5:68:e3:3b:00:16:67:e6:e9:47:0d: c5:c1:0e:a8:d8:f4:fb:f1:11:51:9a:37:e2:0f:8a: 4b:8f:94:1c:17:f0:4f:c4:7e:07:35:b0:22:b9:20: 5c:ab:80:7a:e8:9e:d0:19:5b:2e:07:ec:0c:8a:d2: db:af:9e:48:d9:4c:b6:8a:00:8a:54:d9:18:81:29: 91:c8:62:38:c3:97:d2:41:ba:51:03:58:9e:0f:37: 29:e5:43:b0:b8:8e:f0:47:0e:39:ee:27:d8:16:62: 14:73:ad:7b:90:4c:58:cc:a2:ba:4b:c6:29:95:12: 73:d9:b5:5d:f5:54:ae:7d:74:2e:b4:6c:5e:fc:20: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4F:20:1C:5F:62:DE:3B:53:4E:B8:A0:5E:85:C2:00:62:4C:BA:6F X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6d:49:19:6f:7e:d8:ff:d8:bf:ca:ca:79:2d:b1:cc:13:d7: c8:f5:fc:fb:9c:25:91:3b:01:50:de:45:51:9e:05:dc:a3:00: e4:ce:6f:18:4c:2b:fe:4f:a3:16:48:05:bf:75:fd:6f:f4:c6: 6c:5c:41:3b:4e:a6:31:42:36:2b:fc:2e:5d:79:92:1f:b9:a3: 66:32:f3:f2:9e:55:f6:24:a7:a4:1a:d2:b8:8f:2f:5d:5f:33: 4a:f5:56:cc:bc:c0:bf:2f:89:f9:b4:98:84:79:31:61:51:c8: 58:be:03:55:c1:28:6c:61:7b:7d:61:7d:e1:38:9d:a8:c6:90: a9:3d:5a:14:97:f2:7e:bb:45:5b:55:80:cf:2b:1c:64:53:44: 7a:43:ed:13:f4:0f:bb:49:02:12:26:27:8e:00:8f:ba:72:a8: 30:9b:ab:0f:ad:98:5a:58:a4:23:6a:01:25:3a:8a:49:42:2d: dc:f5:57:ec:80:cf:04:8a:c1:10:99:f0:ba:38:82:0c:0a:7b: 88:e0:43:ac:86:9c:29:29:2c:a2:7d:54:d5:1d:95:24:e0:01: 61:a0:f3:bb:bb:5d:4c:44:47:d5:76:2f:ab:db:ac:2b:fa:d2: c6:64:d0:c5:c2:8d:c8:4f:b8:5e:c4:f9:53:dd:fe:f9:ff:53: 11:61:17:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQz9/+dspXnkz2Uuzas/KOoKcOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTA0MDUxMTI2NDlaFw0yNTA0MDgxMzI2NDlaMDMxMTAvBgNV BAMTKEE5NEYyMDFDNUY2MkRFM0I1MzRFQjhBMDVFODVDMjAwNjI0Q0JBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQoxl+rIavyAZ9eUVnNyVdde0 z9OUpJ0z6ZwKQTAyY/edD4Izu33tManZ6uZL3leFZzEDHA5BbcwdKLDNWg9PXPWq RsxGc2paHTmynZsu0jDuAgGZH1rLBQ4loQui00UEobRlh1Nbfc7I55n+wyD2cN0k KWuvxcr4h/jFaOM7ABZn5ulHDcXBDqjY9PvxEVGaN+IPikuPlBwX8E/Efgc1sCK5 IFyrgHrontAZWy4H7AyK0tuvnkjZTLaKAIpU2RiBKZHIYjjDl9JBulEDWJ4PNynl Q7C4jvBHDjnuJ9gWYhRzrXuQTFjMorpLximVEnPZtV31VK59dC60bF78IPAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqU8gHF9i3jtTTrigXoXCAGJMum8wHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNtSRlvftj/2L/KynktscwT18j1/PucJZE7 AVDeRVGeBdyjAOTObxhMK/5PoxZIBb91/W/0xmxcQTtOpjFCNiv8Ll15kh+5o2Yy 8/KeVfYkp6Qa0riPL11fM0r1Vsy8wL8vifm0mIR5MWFRyFi+A1XBKGxhe31hfeE4 najGkKk9WhSX8n67RVtVgM8rHGRTRHpD7RP0D7tJAhImJ44Aj7pyqDCbqw+tmFpY pCNqASU6iklCLdz1V+yAzwSKwRCZ8Lo4ggwKe4jgQ6yGnCkpLKJ9VNUdlSTgAWGg 87u7XUxER9V2L6vbrCv60sZk0MXCjchPuF7E+VPd/vn/UxFhF58= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:36 2025 by rpki-client