$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: Wn6w3z8aTeNAI/uUO+Rn0rIrp6CayMFLPAUODhtOtlw= Subject key identifier: E0:5A:8B:ED:63:26:72:F6:86:53:27:86:7F:A3:F5:59:04:23:4C:2E Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 387FFF15D9E8454CA72D69DEE09B2E00F6FD092A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 01F9 Signing time: Tue 03 Jun 2025 12:16:29 +0000 Manifest this update: Tue 03 Jun 2025 12:11:29 +0000 Manifest next update: Fri 06 Jun 2025 20:34:29 +0000 Files and hashes: 1: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=) 2: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=) 3: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=) 4: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=) 5: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: pMf5exq2Lp+u+UV6+/oa2KbppnLRWMqY8sjkljXgMEg=) 6: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=) 7: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=) 8: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7f:ff:15:d9:e8:45:4c:a7:2d:69:de:e0:9b:2e:00:f6:fd:09:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Jun 3 12:11:29 2025 GMT Not After : Jun 6 20:34:29 2025 GMT Subject: CN=E05A8BED632672F6865327867FA3F55904234C2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:69:e9:ab:74:e0:00:40:38:fe:32:5a:42: 05:fb:07:33:5a:1d:93:15:bb:d1:f2:d6:45:9a:b5: 6e:4d:e8:e3:30:42:47:45:fd:63:6d:ef:91:fc:78: b6:eb:fe:a8:b2:30:fe:06:7d:16:9a:bb:4a:33:a2: 5a:92:3f:3a:55:d1:fc:fc:79:ba:64:d9:bb:db:06: 94:63:93:44:0a:2f:42:0e:91:a8:fe:ee:1f:53:dc: 39:c7:59:1d:8a:6d:b2:3b:e0:7d:70:9d:df:42:58: 75:89:8c:c9:57:7e:56:20:3e:1b:21:42:51:32:c3: 93:b6:fc:89:06:87:49:5f:31:7c:93:80:41:30:3c: 1c:85:ed:95:d6:1c:02:d3:9c:fe:e1:66:59:a9:3d: 9f:b8:8a:60:5e:bf:07:09:7c:dc:7b:b4:ac:30:54: a1:12:53:57:e3:5b:2f:f1:69:93:6f:f6:68:e1:b8: 84:df:7b:17:e5:73:3a:a8:81:98:73:12:54:64:cd: f0:74:a4:ab:e1:6e:10:f5:45:7d:64:db:d0:c3:3f: c7:04:f7:45:48:3e:d8:52:10:13:5e:4f:b0:62:7a: 10:5d:6b:0a:e3:48:84:58:c2:da:4c:e8:75:c8:ba: 3d:63:be:43:cc:cf:ac:fe:dd:71:3c:8a:9e:8e:8a: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5A:8B:ED:63:26:72:F6:86:53:27:86:7F:A3:F5:59:04:23:4C:2E X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:05:0c:df:56:d7:fb:a7:aa:af:e0:a8:85:7d:87:61:7e:c4: 9d:45:28:dc:62:66:94:46:21:24:4f:b5:ff:9e:94:07:8b:ae: de:94:dc:1f:a4:2e:39:bd:b8:b9:fb:7a:ac:02:a7:17:64:e4: 07:4e:8c:6d:39:05:5d:6b:72:08:30:c6:be:03:c8:97:87:34: 09:f3:82:ec:c3:84:ee:0a:b5:ca:65:2d:b9:0f:d0:e7:cc:51: 23:cc:f7:bd:51:ce:bb:e3:f7:e3:f0:23:9c:8e:62:67:0a:b6: 09:78:cf:a6:54:92:16:de:ba:68:1f:9e:3f:1b:0d:16:e3:f5: ce:1f:fd:29:98:d8:7a:c8:5d:dd:c7:f3:d8:28:7e:eb:17:08: ff:2a:65:8e:e5:95:f7:8c:54:68:c8:46:f5:8e:74:0a:22:eb: 9d:9c:31:69:7b:10:e8:2f:cd:6b:d1:76:9b:4a:f0:74:ef:9a: ff:a6:ec:38:36:40:61:ed:fd:c9:8c:05:27:2d:26:6e:79:81: a3:2f:e6:79:f7:0e:c0:e2:69:ea:58:d1:01:6c:50:f7:aa:0d: 85:2e:25:38:2c:43:68:5b:f4:41:12:74:ce:84:db:b9:db:9f: 8a:fe:70:e9:10:c6:c0:28:83:ad:cf:cf:bb:32:25:8e:8d:b4: c6:d3:09:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOH//FdnoRUynLWne4JsuAPb9CSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTA2MDMxMjExMjlaFw0yNTA2MDYyMDM0MjlaMDMxMTAvBgNV BAMTKEUwNUE4QkVENjMyNjcyRjY4NjUzMjc4NjdGQTNGNTU5MDQyMzRDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhGnpq3TgAEA4/jJaQgX7BzNa HZMVu9Hy1kWatW5N6OMwQkdF/WNt75H8eLbr/qiyMP4GfRaau0ozolqSPzpV0fz8 ebpk2bvbBpRjk0QKL0IOkaj+7h9T3DnHWR2KbbI74H1wnd9CWHWJjMlXflYgPhsh QlEyw5O2/IkGh0lfMXyTgEEwPByF7ZXWHALTnP7hZlmpPZ+4imBevwcJfNx7tKww VKESU1fjWy/xaZNv9mjhuITfexflczqogZhzElRkzfB0pKvhbhD1RX1k29DDP8cE 90VIPthSEBNeT7BiehBdawrjSIRYwtpM6HXIuj1jvkPMz6z+3XE8ip6OirwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4FqL7WMmcvaGUyeGf6P1WQQjTC4wHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIFDN9W1/unqq/gqIV9h2F+xJ1FKNxiZpRG ISRPtf+elAeLrt6U3B+kLjm9uLn7eqwCpxdk5AdOjG05BV1rcggwxr4DyJeHNAnz guzDhO4KtcplLbkP0OfMUSPM971Rzrvj9+PwI5yOYmcKtgl4z6ZUkhbeumgfnj8b DRbj9c4f/SmY2HrIXd3H89gofusXCP8qZY7llfeMVGjIRvWOdAoi652cMWl7EOgv zWvRdptK8HTvmv+m7Dg2QGHt/cmMBSctJm55gaMv5nn3DsDiaepY0QFsUPeqDYUu JTgsQ2hb9EESdM6E27nbn4r+cOkQxsAog63Pz7syJY6NtMbTCas= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:00 2025 by rpki-client