$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: qh9ks7xPsy86oC/mbxhirCn5zcNGlLydmRKi8+h3mT4= Subject key identifier: 02:4C:10:AE:BF:44:F5:2B:40:B1:DE:B5:44:36:8E:E8:DA:1F:16:A6 Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 70DF3EA7854927513B8C9F2BD7E766B267095840 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 014E Signing time: Mon 02 Jun 2025 09:51:51 +0000 Manifest this update: Mon 02 Jun 2025 09:46:51 +0000 Manifest next update: Thu 05 Jun 2025 18:21:51 +0000 Files and hashes: 1: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) 2: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) 3: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: 5ilBiZKJ8MjgzshCc0HcBOujgcx+lTJbl5F+h2OzVS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 18:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:df:3e:a7:85:49:27:51:3b:8c:9f:2b:d7:e7:66:b2:67:09:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Jun 2 09:46:51 2025 GMT Not After : Jun 5 18:21:51 2025 GMT Subject: CN=024C10AEBF44F52B40B1DEB544368EE8DA1F16A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:bf:ee:a6:bb:5f:cc:e1:92:99:2e:16:5f: 8d:36:48:10:bc:cc:23:26:f7:e3:45:20:98:9c:94: f6:37:6b:74:82:6d:df:7a:41:cb:c8:f0:a5:5c:41: cd:ce:5d:de:74:f0:a8:6d:07:18:4b:db:dc:43:fa: 71:00:16:46:dc:9f:15:4d:5e:24:88:dd:e2:b9:5b: 96:92:ec:d8:3b:e5:db:2b:34:57:1b:64:b3:9d:40: 15:3e:14:bc:23:a9:5f:16:78:f6:7e:36:15:b8:b0: 19:e7:92:49:db:6c:d7:a9:e3:27:56:84:97:87:38: f5:07:3c:b0:1f:f9:9a:6e:23:46:31:e5:b4:e8:8b: e0:c2:d6:f6:11:99:2d:ae:02:00:f0:8f:be:c5:4f: 56:87:1d:c4:1e:05:6a:5e:22:b3:24:9d:24:96:0c: 93:e4:3e:5c:92:fe:74:4b:e1:4c:51:24:d1:4f:e1: 44:14:8d:84:fd:4f:02:8e:ff:9c:7c:ce:90:41:6a: 40:00:62:6a:60:b2:a0:f9:fd:b0:2a:ed:17:c4:a1: 2f:b1:0b:b1:b6:37:97:96:08:f4:5f:34:9e:8f:93: e0:80:bb:4e:5a:20:e9:a0:52:5c:ae:03:0a:9c:db: 02:e7:3c:0a:26:51:e3:2e:d0:49:75:c7:f9:15:30: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4C:10:AE:BF:44:F5:2B:40:B1:DE:B5:44:36:8E:E8:DA:1F:16:A6 X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:03:19:37:95:56:23:cd:2a:40:2d:bf:8f:21:3e:1e:76:cd: 5b:8f:f5:2e:af:be:e0:76:db:57:70:be:ae:5d:e9:9d:66:b5: 6d:29:1a:86:0c:77:b7:83:82:7e:25:b8:eb:b7:8c:66:db:cc: 2a:87:35:70:d0:fc:1b:eb:ef:95:b0:c1:12:9c:64:d1:5b:ef: 37:8a:99:0a:91:12:f3:11:13:b9:1e:05:6c:8d:6a:eb:7b:52: 24:1d:47:50:5e:6e:c1:f2:f7:f2:af:05:e3:47:d3:56:69:92: e4:4f:25:37:b7:12:e0:b9:9f:66:15:fa:5f:c0:7f:54:53:e8: 09:4f:fd:bb:6e:79:d9:01:b8:95:2a:41:4f:f5:89:0a:ba:1f: f6:ae:7a:4f:38:02:63:d9:43:27:ab:68:e2:d4:c1:35:ab:8e: 69:f9:d4:9b:c6:08:5d:8e:36:4f:43:fc:4f:2c:b2:4b:92:d4: 58:89:9f:3b:b4:af:2d:32:af:55:d5:8c:77:8f:82:c6:f6:d2: 08:4d:55:30:fa:0d:6e:27:b5:67:73:c7:f8:cc:29:2f:12:3b: f7:fc:d4:ee:e8:eb:05:08:54:eb:6f:18:67:03:94:88:b2:85: bf:14:ea:5c:71:13:e8:8a:7c:d9:ba:df:84:b8:ce:22:38:aa: 85:be:2b:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcN8+p4VJJ1E7jJ8r1+dmsmcJWEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTA2MDIwOTQ2NTFaFw0yNTA2MDUxODIxNTFaMDMxMTAvBgNV BAMTKDAyNEMxMEFFQkY0NEY1MkI0MEIxREVCNTQ0MzY4RUU4REExRjE2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVq7/uprtfzOGSmS4WX402SBC8 zCMm9+NFIJiclPY3a3SCbd96QcvI8KVcQc3OXd508KhtBxhL29xD+nEAFkbcnxVN XiSI3eK5W5aS7Ng75dsrNFcbZLOdQBU+FLwjqV8WePZ+NhW4sBnnkknbbNep4ydW hJeHOPUHPLAf+ZpuI0Yx5bToi+DC1vYRmS2uAgDwj77FT1aHHcQeBWpeIrMknSSW DJPkPlyS/nRL4UxRJNFP4UQUjYT9TwKO/5x8zpBBakAAYmpgsqD5/bAq7RfEoS+x C7G2N5eWCPRfNJ6Pk+CAu05aIOmgUlyuAwqc2wLnPAomUeMu0El1x/kVMGANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAkwQrr9E9StAsd61RDaO6NofFqYwHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABADGTeVViPNKkAtv48hPh52zVuP9S6vvuB2 21dwvq5d6Z1mtW0pGoYMd7eDgn4luOu3jGbbzCqHNXDQ/Bvr75WwwRKcZNFb7zeK mQqREvMRE7keBWyNaut7UiQdR1BebsHy9/KvBeNH01ZpkuRPJTe3EuC5n2YV+l/A f1RT6AlP/btuedkBuJUqQU/1iQq6H/auek84AmPZQyeraOLUwTWrjmn51JvGCF2O Nk9D/E8sskuS1FiJnzu0ry0yr1XVjHePgsb20ghNVTD6DW4ntWdzx/jMKS8SO/f8 1O7o6wUIVOtvGGcDlIiyhb8U6lxxE+iKfNm634S4ziI4qoW+K90= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:39 2025 by rpki-client