$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: /E/2pKmA1gl1mdsdvs9gyzkQVj4Z47IPD8mKNOFy/Yc= Subject key identifier: 0A:7B:71:22:BE:6E:F5:AD:A1:7E:32:46:40:78:BE:0D:BB:7A:C9:71 Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 1E370596BB6D1E65AF39D492DA90662313D7E210 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 04D8 Signing time: Wed 04 Jun 2025 05:31:16 +0000 Manifest this update: Wed 04 Jun 2025 05:26:16 +0000 Manifest next update: Sat 07 Jun 2025 11:36:16 +0000 Files and hashes: 1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: LtScTHZoxOHSbHhuqbZIrkhW+lipK1u0xCr0E9aMFWE=) 2: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: rDQceZkEg/CitD9iYHK4wrHflGf6NOQThvZ6u4V3RhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:37:05:96:bb:6d:1e:65:af:39:d4:92:da:90:66:23:13:d7:e2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Jun 4 05:26:16 2025 GMT Not After : Jun 7 11:36:16 2025 GMT Subject: CN=0A7B7122BE6EF5ADA17E32464078BE0DBB7AC971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:c4:19:38:fd:d8:42:b6:d1:d7:4c:22:8f: db:85:b3:fd:41:86:ab:1a:ed:f7:8a:cb:6e:e5:82: 91:42:eb:f1:ee:cc:18:27:a0:9d:ec:a6:91:a6:ec: a3:4b:99:3f:fe:d3:ad:77:e4:42:0d:bd:98:45:5e: 36:97:14:34:98:8f:99:c6:ce:b1:1e:9b:1f:f2:45: b0:6e:2c:81:da:c8:fa:d1:ed:65:65:bd:34:42:73: 4f:d2:38:28:83:37:d4:b4:d3:bf:d2:38:6d:1e:58: 58:da:b1:cc:05:44:a8:67:06:4b:45:7c:67:07:62: e5:58:05:28:45:ff:88:cf:22:1e:8e:b7:79:bd:ff: 01:7e:d0:dc:4e:e1:a1:9e:c3:44:48:20:ad:4f:51: 3b:12:91:51:58:a1:51:a6:80:43:24:24:c7:28:95: ee:f9:63:21:21:cd:ae:90:a0:13:e9:0d:ad:c1:e6: 12:c5:a7:56:24:45:d8:9e:87:90:bf:ef:a5:66:d6: 3f:28:a7:dd:ec:0b:65:dc:e4:de:6d:32:d5:74:2d: f0:3a:29:c9:b1:cd:ca:3a:4c:54:29:42:c4:b2:ce: bb:70:34:8d:d5:d9:d7:04:ae:a9:49:3b:40:6a:9f: 1a:5e:3d:41:6a:ff:30:de:5b:fa:33:43:a6:e3:f5: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7B:71:22:BE:6E:F5:AD:A1:7E:32:46:40:78:BE:0D:BB:7A:C9:71 X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a0:06:51:ef:18:d4:c4:b5:a7:bb:ac:a3:b7:1b:00:6e:fb: 16:47:11:63:99:5d:f7:71:6b:b2:37:8c:fd:4d:1a:4f:59:55: f0:50:d0:7e:51:b5:2e:36:e8:43:42:a0:7e:e8:b7:ba:09:96: ee:b9:f6:32:b7:f1:2d:58:fc:4c:3f:3e:ff:1a:f0:27:38:34: e5:39:fb:59:0f:33:45:c7:d9:30:29:d8:0a:2e:53:00:f4:e2: ad:a3:a7:c4:17:0d:8c:55:e8:b9:b8:25:e3:1b:eb:f1:a3:4a: 23:b9:4e:f0:a4:b4:3d:68:2c:75:87:25:b9:e4:4b:7a:fb:0a: 7e:14:5f:c9:f5:29:8d:60:1c:b2:37:20:fc:fc:e4:51:55:46: e9:7a:1e:1e:0c:4f:5c:a4:c6:20:a6:4c:82:fe:32:0a:ba:d0: 67:23:dd:92:29:33:20:b4:99:60:b4:ef:04:6a:e7:46:5a:76: d2:56:3b:c6:dc:59:1c:ad:f5:10:73:bc:95:64:92:6b:66:81: b2:9f:01:00:d1:d7:f6:58:3d:55:6f:37:49:18:8b:b3:c3:0d: 7d:f1:66:6b:5b:0f:34:e9:6b:b2:4a:20:de:c3:ab:07:1e:ea: 81:10:7c:2b:9b:6a:74:08:72:0f:7c:a8:14:25:cb:87:fd:17: d9:6a:e2:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjcFlrttHmWvOdSS2pBmIxPX4hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNTA2MDQwNTI2MTZaFw0yNTA2MDcxMTM2MTZaMDMxMTAvBgNV BAMTKDBBN0I3MTIyQkU2RUY1QURBMTdFMzI0NjQwNzhCRTBEQkI3QUM5NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDcQZOP3YQrbR10wij9uFs/1B hqsa7feKy27lgpFC6/HuzBgnoJ3sppGm7KNLmT/+06135EINvZhFXjaXFDSYj5nG zrEemx/yRbBuLIHayPrR7WVlvTRCc0/SOCiDN9S007/SOG0eWFjascwFRKhnBktF fGcHYuVYBShF/4jPIh6Ot3m9/wF+0NxO4aGew0RIIK1PUTsSkVFYoVGmgEMkJMco le75YyEhza6QoBPpDa3B5hLFp1YkRdieh5C/76Vm1j8op93sC2Xc5N5tMtV0LfA6 Kcmxzco6TFQpQsSyzrtwNI3V2dcErqlJO0BqnxpePUFq/zDeW/ozQ6bj9RiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCntxIr5u9a2hfjJGQHi+Dbt6yXEwHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSgBlHvGNTEtae7rKO3GwBu+xZHEWOZXfdx a7I3jP1NGk9ZVfBQ0H5RtS426ENCoH7ot7oJlu659jK38S1Y/Ew/Pv8a8Cc4NOU5 +1kPM0XH2TAp2AouUwD04q2jp8QXDYxV6Lm4JeMb6/GjSiO5TvCktD1oLHWHJbnk S3r7Cn4UX8n1KY1gHLI3IPz85FFVRul6Hh4MT1ykxiCmTIL+Mgq60Gcj3ZIpMyC0 mWC07wRq50ZadtJWO8bcWRyt9RBzvJVkkmtmgbKfAQDR1/ZYPVVvN0kYi7PDDX3x ZmtbDzTpa7JKIN7Dqwce6oEQfCubanQIcg98qBQly4f9F9lq4vY= -----END CERTIFICATE-----Generated at Thu Jun 5 19:18:10 2025 by rpki-client