$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: LUXzDGsM4B+3/KAwtXq6UTtZ6Q6kUEn9snjRRQJSxPA= Subject key identifier: 74:E3:E6:07:67:C7:50:D1:08:16:3D:9B:F6:A6:62:DC:D8:DA:F3:40 Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 7CD4526935F03AF3EAB7273C834D4091062D3205 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 01DF Signing time: Fri 04 Apr 2025 23:21:58 +0000 Manifest this update: Fri 04 Apr 2025 23:16:58 +0000 Manifest next update: Tue 08 Apr 2025 04:11:58 +0000 Files and hashes: 1: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=) 2: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=) 3: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=) 4: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=) 5: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: iiJwDrdG9sT0UFoodA/mTpEgi1mjhvJuRGEs3miXZAk=) 6: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=) 7: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=) 8: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d4:52:69:35:f0:3a:f3:ea:b7:27:3c:83:4d:40:91:06:2d:32:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Apr 4 23:16:58 2025 GMT Not After : Apr 8 04:11:58 2025 GMT Subject: CN=74E3E60767C750D108163D9BF6A662DCD8DAF340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:81:b7:0b:44:67:da:cc:74:c2:94:e3:6c:65: f4:8f:59:13:1c:3c:6f:c5:7d:c3:d9:b9:be:3c:a3: 2c:e7:4f:79:8c:33:45:0a:21:3f:3a:9c:dc:28:2c: 7e:59:ca:b2:80:bf:48:e1:3c:eb:5f:40:d9:3d:b2: 6c:e0:82:6e:db:7d:e0:92:d1:aa:d2:a4:1f:bc:0c: 23:47:db:73:87:98:ee:2f:29:10:45:8f:08:b4:a9: e7:4a:9f:f1:4d:52:1c:c6:3c:78:42:d1:48:65:a9: 49:f7:a2:8e:c5:8d:cf:08:88:cd:20:2e:6a:aa:a0: 43:a7:13:39:3b:64:03:0e:e5:06:c0:e0:4e:c0:22: 81:f7:2b:92:b6:d7:7e:67:55:87:22:0e:b0:ce:5e: 00:f2:7a:d4:49:51:2b:61:b2:2d:e2:3e:da:1a:c7: c0:c3:ec:fc:36:a3:59:a9:d0:10:b3:8e:24:c8:f1: a4:33:f9:01:0a:33:90:93:08:54:ff:7f:7e:28:0b: 0b:91:71:b0:bd:f0:4a:4d:c1:a6:e2:39:0a:4c:1b: cd:93:e3:0c:69:fa:07:4c:a7:31:25:58:5d:55:a2: 24:f7:a8:59:70:40:56:db:05:5e:61:fd:ad:62:64: c8:c4:34:4f:43:0f:9f:62:47:d4:40:42:68:92:36: 87:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:E6:07:67:C7:50:D1:08:16:3D:9B:F6:A6:62:DC:D8:DA:F3:40 X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:0e:cb:f6:bc:6c:19:11:ff:28:d4:4b:9d:81:e7:97:3b:89: 46:c0:30:3c:fb:eb:5f:9d:cb:c4:09:f4:64:c6:26:07:33:2c: b5:68:37:50:db:a5:2f:e3:0c:e4:4b:97:87:76:77:f1:d0:09: 1e:18:72:05:78:d8:54:64:cb:58:61:85:9c:98:c3:20:6a:91: 3b:36:37:99:af:c7:31:b2:0c:3d:3e:17:85:4a:6f:27:7d:73: 99:aa:72:a0:7d:c1:0c:a8:2b:77:ba:a4:d9:99:dd:c8:67:b4: 9d:87:2f:95:1e:31:d7:f6:44:42:f4:d8:8e:1b:a5:85:09:0c: 83:15:53:d1:b4:a4:b9:18:35:74:67:17:36:89:84:ee:af:d3: d6:31:81:6f:ac:47:30:37:36:1a:2f:38:2a:d4:61:ae:eb:ff: 88:6a:98:b3:06:4c:18:1a:85:16:92:7b:2b:93:f7:3c:4b:a3: 16:b3:06:82:9d:d0:d4:d4:bb:1e:96:bd:86:ea:a7:09:8e:ad: 45:8a:b5:80:eb:a3:4e:e8:94:f2:97:9d:4a:ca:56:88:7a:26: 80:d1:c1:f8:6b:9b:ef:08:23:56:51:ce:5e:db:19:b2:43:be: 56:93:a9:f6:d8:45:45:d1:02:8f:a5:bf:cc:d0:60:84:d8:41: b6:aa:4e:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNRSaTXwOvPqtyc8g01AkQYtMgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTA0MDQyMzE2NThaFw0yNTA0MDgwNDExNThaMDMxMTAvBgNV BAMTKDc0RTNFNjA3NjdDNzUwRDEwODE2M0Q5QkY2QTY2MkRDRDhEQUYzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3gbcLRGfazHTClONsZfSPWRMc PG/FfcPZub48oyznT3mMM0UKIT86nNwoLH5ZyrKAv0jhPOtfQNk9smzggm7bfeCS 0arSpB+8DCNH23OHmO4vKRBFjwi0qedKn/FNUhzGPHhC0UhlqUn3oo7Fjc8IiM0g LmqqoEOnEzk7ZAMO5QbA4E7AIoH3K5K2135nVYciDrDOXgDyetRJUSthsi3iPtoa x8DD7Pw2o1mp0BCzjiTI8aQz+QEKM5CTCFT/f34oCwuRcbC98EpNwabiOQpMG82T 4wxp+gdMpzElWF1VoiT3qFlwQFbbBV5h/a1iZMjENE9DD59iR9RAQmiSNoclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdOPmB2fHUNEIFj2b9qZi3Nja80AwHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkOy/a8bBkR/yjUS52B55c7iUbAMDz761+d y8QJ9GTGJgczLLVoN1DbpS/jDORLl4d2d/HQCR4YcgV42FRky1hhhZyYwyBqkTs2 N5mvxzGyDD0+F4VKbyd9c5mqcqB9wQyoK3e6pNmZ3chntJ2HL5UeMdf2REL02I4b pYUJDIMVU9G0pLkYNXRnFzaJhO6v09YxgW+sRzA3NhovOCrUYa7r/4hqmLMGTBga hRaSeyuT9zxLoxazBoKd0NTUux6WvYbqpwmOrUWKtYDro07olPKXnUrKVoh6JoDR wfhrm+8II1ZRzl7bGbJDvlaTqfbYRUXRAo+lv8zQYITYQbaqThI= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:15 2025 by rpki-client