$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: Trf96lX5BIxoclOgs+EbRVb8QAQ4sAnB10JBkLcosnk= Subject key identifier: 92:7E:DE:5A:28:1E:BB:62:1F:50:72:A4:91:24:23:CC:75:FB:B3:E2 Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 72B827AC7C5C55F111A9EE67D82FDF019CC7781E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: 62 Signing time: Tue 03 Jun 2025 16:32:18 +0000 Manifest this update: Tue 03 Jun 2025 16:27:18 +0000 Manifest next update: Fri 06 Jun 2025 18:01:18 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: Me4QSCWqszcMtGqwYTllup3+a/zsKxnyqVsRpFxQLC8=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: 6pByXgAQ6YR6dUDH4dJy61wrtOMRHMSvLiETBeP3xAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b8:27:ac:7c:5c:55:f1:11:a9:ee:67:d8:2f:df:01:9c:c7:78:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Jun 3 16:27:18 2025 GMT Not After : Jun 6 18:01:18 2025 GMT Subject: CN=927EDE5A281EBB621F5072A4912423CC75FBB3E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:8a:f2:01:eb:a1:0a:bf:8d:8b:db:a4:20: c7:47:f7:27:e8:38:54:35:b7:c0:b2:55:4d:c0:4e: 57:32:7a:78:77:6e:99:f0:de:33:a6:81:29:e5:65: f8:68:33:ee:17:61:60:ae:76:5c:fd:c4:ae:c3:7d: 85:2c:2d:94:1f:3b:f7:38:b6:8e:08:ce:9e:34:13: 61:05:dd:cc:08:aa:35:68:a3:36:a6:c3:af:a7:9e: fb:ee:48:a5:50:ae:27:cc:34:cb:fe:88:67:26:8d: d5:e3:80:90:72:e3:64:19:65:c1:29:91:d8:08:26: 45:8e:05:c8:68:25:4a:99:09:30:23:31:f6:ca:24: 68:76:0b:a1:5c:cf:36:71:1e:a4:8b:a0:41:3c:65: d1:6d:3c:14:92:8c:b7:7d:14:dd:77:79:40:3f:9f: 20:bf:9b:a9:a4:b3:56:93:77:08:b0:b4:88:59:36: 25:10:dc:8b:2a:5d:90:b9:b3:d7:e6:5d:de:79:ac: 0b:2b:4f:83:51:c4:b7:d5:74:3c:ae:bd:c3:a0:d1: d6:ad:56:8c:43:04:85:98:0b:e6:0f:92:ed:83:8b: f2:b5:ba:cb:45:32:4c:29:c9:0c:f3:21:1d:5e:ad: 1e:71:bb:77:e7:51:89:ba:8e:e6:6e:a3:00:4a:2d: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7E:DE:5A:28:1E:BB:62:1F:50:72:A4:91:24:23:CC:75:FB:B3:E2 X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e7:71:41:a5:1c:53:d1:05:94:9b:5b:47:ff:3b:a4:eb:50: 64:c7:80:5a:91:a1:9f:cf:72:31:cc:ff:44:1f:b0:f4:de:53: 57:9b:23:66:a8:35:61:1d:c1:39:52:d8:88:07:c8:b4:b5:ae: 44:bc:9f:7e:a6:e4:57:b0:b2:d8:74:cd:1e:85:39:30:37:18: 45:d2:12:49:f6:ff:ab:cb:56:b4:b4:ad:31:b1:fe:ab:95:a1: d3:bf:34:f2:7e:e0:6d:cc:99:60:a8:78:31:f6:28:91:36:5e: c4:4b:b9:b8:85:7f:71:9a:f8:6b:1d:79:ac:df:12:a1:3c:98: dc:81:bf:41:1e:c8:dd:96:08:fe:bc:cf:30:4a:12:75:ba:ba: f5:97:c9:0a:e3:24:b1:1b:ca:bc:e7:68:e9:71:b3:ef:15:0f: 9a:a1:48:55:44:11:97:0e:78:c9:25:ac:57:93:a3:0a:28:b2: 0f:6a:6a:30:6f:39:b2:bb:10:dc:fd:8a:47:07:69:d3:07:1d: a6:02:c6:de:83:20:5f:a1:9d:9b:b7:a5:1a:f7:4b:6a:93:30: 77:05:8a:b8:b3:b9:16:a6:92:1a:32:e7:2c:e1:68:e6:ff:f1: 55:12:bf:fe:81:ee:1c:11:51:5c:36:0a:b6:6d:73:31:b3:8c: fa:db:61:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrgnrHxcVfERqe5n2C/fAZzHeB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNTA2MDMxNjI3MThaFw0yNTA2MDYxODAxMThaMDMxMTAvBgNV BAMTKDkyN0VERTVBMjgxRUJCNjIxRjUwNzJBNDkxMjQyM0NDNzVGQkIzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtIryAeuhCr+Ni9ukIMdH9yfo OFQ1t8CyVU3ATlcyenh3bpnw3jOmgSnlZfhoM+4XYWCudlz9xK7DfYUsLZQfO/c4 to4Izp40E2EF3cwIqjVoozamw6+nnvvuSKVQrifMNMv+iGcmjdXjgJBy42QZZcEp kdgIJkWOBchoJUqZCTAjMfbKJGh2C6FczzZxHqSLoEE8ZdFtPBSSjLd9FN13eUA/ nyC/m6mks1aTdwiwtIhZNiUQ3IsqXZC5s9fmXd55rAsrT4NRxLfVdDyuvcOg0dat VoxDBIWYC+YPku2Di/K1ustFMkwpyQzzIR1erR5xu3fnUYm6juZuowBKLXgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkn7eWigeu2IfUHKkkSQjzHX7s+IwHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTncUGlHFPRBZSbW0f/O6TrUGTHgFqRoZ/P cjHM/0QfsPTeU1ebI2aoNWEdwTlS2IgHyLS1rkS8n36m5Fewsth0zR6FOTA3GEXS Ekn2/6vLVrS0rTGx/quVodO/NPJ+4G3MmWCoeDH2KJE2XsRLubiFf3Ga+Gsdeazf EqE8mNyBv0EeyN2WCP68zzBKEnW6uvWXyQrjJLEbyrznaOlxs+8VD5qhSFVEEZcO eMklrFeTowoosg9qajBvObK7ENz9ikcHadMHHaYCxt6DIF+hnZu3pRr3S2qTMHcF irizuRamkhoy5yzhaOb/8VUSv/6B7hwRUVw2CrZtczGzjPrbYa0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:40 2025 by rpki-client