$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: QaUxsOyWaG1zijgDaH/6PIpEWHM+lgK1kq6FAD7cayw= Subject key identifier: 3D:8C:9A:5B:77:B4:38:DE:2F:B9:BC:09:9D:ED:F4:08:53:D0:40:F3 Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 0E70135AD507AC4D36796DF0F3AE40DAFE7E515E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 0344 Signing time: Tue 03 Jun 2025 11:34:01 +0000 Manifest this update: Tue 03 Jun 2025 11:29:01 +0000 Manifest next update: Fri 06 Jun 2025 16:06:01 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: lCYi+j1Z5UlcYV1+I3fUsecxmiMZzwpyJrv3nKCyKV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:70:13:5a:d5:07:ac:4d:36:79:6d:f0:f3:ae:40:da:fe:7e:51:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Jun 3 11:29:01 2025 GMT Not After : Jun 6 16:06:01 2025 GMT Subject: CN=3D8C9A5B77B438DE2FB9BC099DEDF40853D040F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:98:50:06:20:0a:2c:29:b4:62:02:2a:ec: a2:06:90:e1:83:ff:31:ad:bc:e1:4f:45:83:84:07: da:3f:9a:40:df:f8:f0:79:ba:44:ec:52:4a:21:a9: 8d:80:b6:18:1a:17:3c:4c:6e:24:4c:17:d6:3c:bc: d9:a3:24:66:0c:e9:b2:39:f1:c0:a5:4e:ce:d8:f3: e9:9c:93:c1:2d:53:2d:d4:a2:80:c5:d6:62:8f:90: 91:8a:57:55:df:a9:57:19:1e:8a:7c:ae:d2:c3:78: 6c:15:62:94:bd:e9:c8:02:41:52:9a:b5:4a:d1:9c: 10:79:4f:72:be:8b:ee:dd:77:27:2d:d0:8c:2e:1c: 04:e5:2e:58:be:ed:e4:3e:66:7a:fb:c7:c5:05:86: a3:6a:d5:b3:09:fa:3d:2c:88:36:9a:00:8f:ef:27: 92:a0:fc:71:f5:da:8c:01:fc:34:23:fe:d8:32:be: f0:4e:b2:a1:5a:9e:2b:17:08:4f:2b:e0:f6:bd:aa: 82:c6:3d:ba:4b:98:6e:5a:b6:c2:59:4c:92:0f:16: 8e:a5:e9:29:6b:e8:a1:97:e1:bf:5d:19:a5:76:16: 68:8c:c3:1b:cf:5a:77:1d:75:d6:0a:9b:18:a7:e5: 03:f0:45:d1:88:8a:f1:c8:ee:ea:a7:b1:f1:da:dd: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8C:9A:5B:77:B4:38:DE:2F:B9:BC:09:9D:ED:F4:08:53:D0:40:F3 X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:82:11:18:62:9c:5f:15:f8:0e:6e:3d:15:74:f5:a5:1c:f6: 1f:02:a1:5f:f7:f9:39:a0:8c:c6:fb:68:20:d0:e2:58:7a:b1: ea:a4:42:d2:14:83:9a:d3:3f:d2:de:a7:62:d1:d5:53:7f:05: f9:97:3b:d4:8f:5f:9c:21:72:f8:e2:6c:ed:a2:76:66:80:3b: 27:2d:03:03:ab:b0:5b:f5:a9:b2:05:71:95:b6:c7:7a:12:9b: 9c:32:ae:26:24:c6:ed:19:56:72:ff:26:21:b4:59:c4:9f:cf: b0:3b:5b:af:01:56:4d:f1:e9:20:bd:f1:86:bd:ee:6f:31:68: f7:de:86:f5:39:33:c7:59:23:84:1a:03:6e:38:92:d3:73:aa: b2:d7:69:82:12:cb:ce:db:91:fa:b7:03:5c:23:be:de:6e:88: 38:df:9d:1c:21:09:7e:4d:67:e5:86:b7:56:5e:de:26:80:be: f3:7a:3a:5d:3b:ee:bf:b2:5d:e3:33:4f:1f:91:c7:e7:17:fc: 1e:1d:b0:29:37:10:d4:aa:ec:e7:bb:fc:b6:a9:2b:e2:2a:df: cd:03:d4:e1:21:1f:83:05:43:da:35:26:c8:3a:a2:fa:06:c6: 56:38:cf:11:18:8f:d1:9a:c6:ac:16:a6:84:88:0b:ec:ff:9b: 5e:f2:7e:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnATWtUHrE02eW3w865A2v5+UV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTA2MDMxMTI5MDFaFw0yNTA2MDYxNjA2MDFaMDMxMTAvBgNV BAMTKDNEOEM5QTVCNzdCNDM4REUyRkI5QkMwOTlERURGNDA4NTNEMDQwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hJhQBiAKLCm0YgIq7KIGkOGD /zGtvOFPRYOEB9o/mkDf+PB5ukTsUkohqY2AthgaFzxMbiRMF9Y8vNmjJGYM6bI5 8cClTs7Y8+mck8EtUy3UooDF1mKPkJGKV1XfqVcZHop8rtLDeGwVYpS96cgCQVKa tUrRnBB5T3K+i+7ddyct0IwuHATlLli+7eQ+Znr7x8UFhqNq1bMJ+j0siDaaAI/v J5Kg/HH12owB/DQj/tgyvvBOsqFanisXCE8r4Pa9qoLGPbpLmG5atsJZTJIPFo6l 6Slr6KGX4b9dGaV2FmiMwxvPWncdddYKmxin5QPwRdGIivHI7uqnsfHa3TyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYyaW3e0ON4vubwJne30CFPQQPMwHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESCERhinF8V+A5uPRV09aUc9h8CoV/3+Tmg jMb7aCDQ4lh6seqkQtIUg5rTP9Lep2LR1VN/BfmXO9SPX5whcvjibO2idmaAOyct AwOrsFv1qbIFcZW2x3oSm5wyriYkxu0ZVnL/JiG0WcSfz7A7W68BVk3x6SC98Ya9 7m8xaPfehvU5M8dZI4QaA244ktNzqrLXaYISy87bkfq3A1wjvt5uiDjfnRwhCX5N Z+WGt1Ze3iaAvvN6Ol077r+yXeMzTx+Rx+cX/B4dsCk3ENSq7Oe7/LapK+Iq380D 1OEhH4MFQ9o1Jsg6ovoGxlY4zxEYj9GaxqwWpoSIC+z/m17yfoI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:51 2025 by rpki-client