$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: hO/hbRWQ+NsuetpkCVTVhP2ioJ46yrm/t9yovxWVr7A= Subject key identifier: 55:89:E5:E3:9B:93:A4:B5:5F:D2:9A:64:40:F6:3D:0E:36:A4:90:52 Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 3F1EA173D5DF04DFDA0104BB328937FFE74F04AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 04BE Signing time: Sun 06 Apr 2025 23:41:14 +0000 Manifest this update: Sun 06 Apr 2025 23:36:14 +0000 Manifest next update: Thu 10 Apr 2025 02:03:14 +0000 Files and hashes: 1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: bYiP/gT3tssmEshWDR+uWvBdHdyDVEshU6H8/AUYQ8o=) 2: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: hGkdz3vHJsJisScuu5wdcxlJFdsFct5VUaSOWjbgFfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1e:a1:73:d5:df:04:df:da:01:04:bb:32:89:37:ff:e7:4f:04:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Apr 6 23:36:14 2025 GMT Not After : Apr 10 02:03:14 2025 GMT Subject: CN=5589E5E39B93A4B55FD29A6440F63D0E36A49052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:73:5e:e4:0f:93:4a:c3:0e:60:98:11:b6: f6:03:5f:7a:f2:6b:9e:ca:bc:f5:82:fc:75:2c:94: 22:07:69:92:d7:09:97:3e:cd:4f:a2:d3:b7:cc:42: 3e:60:56:ba:3c:a8:2c:a0:8f:a6:f8:f3:ab:ef:45: 97:68:89:2e:12:10:dc:4b:0f:04:b3:96:b7:39:ff: 3b:14:0c:a3:cb:e0:b4:92:4e:32:a0:b1:61:b8:ef: b9:23:bc:5c:85:1f:0f:e2:09:8c:51:0c:f2:18:cd: 0c:9a:8d:64:16:f1:4c:76:06:51:4b:15:73:b2:5b: 3a:16:ee:1c:f0:4d:5c:7b:d1:9c:25:e9:21:ff:ac: 6b:65:f3:f9:c0:eb:73:05:64:fd:53:4b:b3:0c:c0: 28:d7:ae:da:51:bb:46:37:e7:43:17:78:4d:88:0c: de:72:28:eb:f1:3e:63:2f:5c:d8:e4:dc:10:cf:19: 15:68:7c:fc:e9:c6:f6:a5:4b:ff:48:58:05:ac:b9: 67:d2:d6:90:3c:8a:3b:65:9f:a7:b7:f9:9b:48:f4: 47:77:a4:b4:0a:76:cf:36:0f:21:4c:ba:a4:21:cc: b7:f2:10:1c:91:e2:a4:d7:5e:a6:63:84:27:77:2a: 6f:42:d9:40:f5:82:20:61:fc:0b:ac:4e:5d:04:5d: 52:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:89:E5:E3:9B:93:A4:B5:5F:D2:9A:64:40:F6:3D:0E:36:A4:90:52 X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8a:6d:85:59:11:08:2a:83:71:95:30:00:14:39:6b:b1:34: 5b:9e:c1:ad:40:d6:b4:bc:8f:1c:e5:c5:58:ea:c0:83:2a:6b: 29:2e:a2:09:d9:66:78:54:43:3b:d8:91:a5:de:04:63:18:1f: d4:10:b5:f2:f1:20:3a:65:39:90:8a:ef:4e:01:ef:a6:bc:77: 93:74:87:d0:71:18:66:2d:e3:6a:1b:35:e2:ed:2b:2a:07:2e: b2:6c:fb:33:05:01:3c:59:06:09:53:93:9d:50:71:e8:b4:24: 28:be:9b:30:01:e2:41:be:3e:f4:65:68:e7:93:64:22:9a:cc: 54:19:bc:fd:b7:02:05:d8:b1:cc:d5:3b:9d:e1:de:ac:a8:ba: d5:bc:0b:9b:7d:0e:78:2f:ca:fd:dc:4b:3e:d1:59:d7:66:8f: a9:be:d5:de:87:47:d5:e3:ee:b2:38:0d:a7:ce:4d:90:1d:29: dd:60:7d:e4:76:27:20:92:92:f8:6e:08:47:43:63:74:c8:78: 88:a8:74:0c:96:d9:86:c7:7f:5f:7f:4e:cc:51:6d:a4:da:f7: e9:7a:73:66:7e:e4:38:8c:df:de:43:09:79:ab:87:20:95:cd: c5:61:6b:1f:5e:13:e2:d6:3f:0a:d9:cc:0c:43:a0:a3:3b:28: 4d:30:9c:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPx6hc9XfBN/aAQS7Mok3/+dPBKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNTA0MDYyMzM2MTRaFw0yNTA0MTAwMjAzMTRaMDMxMTAvBgNV BAMTKDU1ODlFNUUzOUI5M0E0QjU1RkQyOUE2NDQwRjYzRDBFMzZBNDkwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWdHNe5A+TSsMOYJgRtvYDX3ry a57KvPWC/HUslCIHaZLXCZc+zU+i07fMQj5gVro8qCygj6b486vvRZdoiS4SENxL DwSzlrc5/zsUDKPL4LSSTjKgsWG477kjvFyFHw/iCYxRDPIYzQyajWQW8Ux2BlFL FXOyWzoW7hzwTVx70Zwl6SH/rGtl8/nA63MFZP1TS7MMwCjXrtpRu0Y350MXeE2I DN5yKOvxPmMvXNjk3BDPGRVofPzpxvalS/9IWAWsuWfS1pA8ijtln6e3+ZtI9Ed3 pLQKds82DyFMuqQhzLfyEByR4qTXXqZjhCd3Km9C2UD1giBh/AusTl0EXVKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYnl45uTpLVf0ppkQPY9DjakkFIwHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaKbYVZEQgqg3GVMAAUOWuxNFuewa1A1rS8 jxzlxVjqwIMqaykuognZZnhUQzvYkaXeBGMYH9QQtfLxIDplOZCK704B76a8d5N0 h9BxGGYt42obNeLtKyoHLrJs+zMFATxZBglTk51Qcei0JCi+mzAB4kG+PvRlaOeT ZCKazFQZvP23AgXYsczVO53h3qyoutW8C5t9Dngvyv3cSz7RWddmj6m+1d6HR9Xj 7rI4DafOTZAdKd1gfeR2JyCSkvhuCEdDY3TIeIiodAyW2YbHf19/TsxRbaTa9+l6 c2Z+5DiM395DCXmrhyCVzcVhax9eE+LWPwrZzAxDoKM7KE0wnPs= -----END CERTIFICATE-----Generated at Mon Apr 7 07:35:39 2025 by rpki-client