$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: psW3gOIxGYiXnPRywQToD23KXhefprEKmZU4C+UCcRg= Subject key identifier: A5:DE:87:DB:A5:13:2C:F0:1E:79:FC:E6:67:71:5B:B8:EF:F1:21:12 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 56F277D940D06BF0561F31757830C7C00A9DD223 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: 018E Signing time: Sat 05 Apr 2025 02:01:36 +0000 Manifest this update: Sat 05 Apr 2025 01:56:36 +0000 Manifest next update: Tue 08 Apr 2025 07:28:36 +0000 Files and hashes: 1: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: hO+tX65rx/F6f0xsTDB/SMB6PKN//lOria3N9pC2xPA=) 2: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: f4mlj6WVkyFeaaLH9aybOm9Xb5biRZ9xz41w+irFc4Y=) 3: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: 7T58fOq0DPMtcC4WYKEb/YqZbz0lw8nZtLVxYnso2b8=) 4: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=) 5: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=) 6: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: PjOq+FNFeb3w0yAtv/+Tz1G1o/STxOGd/kpIjtd+xeA=) 7: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=) 8: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=) 9: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 07:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f2:77:d9:40:d0:6b:f0:56:1f:31:75:78:30:c7:c0:0a:9d:d2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Apr 5 01:56:36 2025 GMT Not After : Apr 8 07:28:36 2025 GMT Subject: CN=A5DE87DBA5132CF01E79FCE667715BB8EFF12112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:04:aa:c9:7a:e1:18:61:55:ed:63:6d:3b: a5:ee:42:1f:2e:59:a4:f4:5f:b1:1a:fb:24:ae:2e: 2d:24:eb:52:8b:1e:10:2b:78:9c:70:6a:2e:9d:fe: 7b:db:1e:00:b4:34:3e:3a:de:75:dd:74:57:c5:e1: 55:e2:45:97:e1:64:b5:85:81:7a:7b:33:fc:e0:6d: f1:b3:e8:14:b5:7d:22:fa:45:ca:24:51:2a:6d:49: 8d:ca:d9:d6:7d:67:7f:78:3f:f2:19:87:30:2a:54: 82:6a:12:03:ec:c1:6e:80:66:3b:f5:b9:b8:73:a1: 40:72:48:60:59:a5:e6:5f:d7:e7:25:7b:1f:66:39: 5c:d0:d8:05:49:1c:06:4b:01:52:81:a8:25:d0:67: 2f:0e:2d:92:f5:94:b7:f3:78:aa:5b:44:6a:6e:72: 15:00:35:31:14:70:c9:38:24:7f:3d:ba:31:80:e9: 51:ba:cf:9a:8a:63:5b:60:53:8c:75:e9:f2:cb:21: 8a:31:46:c5:17:06:c9:8c:61:66:62:65:d1:3a:29: d9:7f:96:7e:71:fb:97:0e:b6:f3:ab:fe:47:c4:3d: cc:3f:3e:e4:5c:1c:12:a0:eb:70:c5:36:99:49:14: 43:67:b2:93:f2:fb:d7:07:35:1a:bb:10:f9:3e:bd: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DE:87:DB:A5:13:2C:F0:1E:79:FC:E6:67:71:5B:B8:EF:F1:21:12 X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fa:a7:6b:a5:06:56:49:ce:5d:7a:40:9c:95:d7:67:96:9d: 91:4d:29:25:72:b9:92:fd:25:9c:9d:20:52:f5:2b:d9:72:e1: 56:4c:27:af:46:97:a9:93:46:48:33:3c:64:83:4a:2b:4d:2e: 07:eb:68:ca:35:24:ba:59:3f:ff:e4:c6:4f:6b:3c:33:78:58: 30:1c:fb:18:21:89:77:e1:e2:b1:84:7f:06:10:f1:d0:6d:6f: ae:15:3e:aa:fd:7f:6b:89:e5:c5:1c:96:d0:8a:6f:6f:45:28: 35:b8:a7:c1:8e:c4:d0:84:2d:8c:83:4b:c9:7e:b5:5d:49:38: bb:27:da:5b:e4:80:66:0e:2f:b4:13:82:3b:72:d5:66:0f:e7: 9c:7d:c0:0e:98:95:e4:5d:98:3f:63:08:4a:dc:8c:63:89:6a: a8:b1:47:4d:6a:35:73:03:bc:d8:e3:8c:ec:73:25:e7:2f:2e: e2:0f:92:f0:f1:05:8f:c7:75:56:30:a4:b1:9f:c0:e4:e8:77: 19:ef:ea:ad:0c:2e:f8:5e:d5:93:c9:b2:4a:e5:2f:f1:73:e9: 76:c3:e7:7a:4e:66:00:6c:6e:8c:c9:85:8b:64:64:e6:61:9b: b3:f5:ea:9c:a2:8e:f8:43:1b:6c:83:dd:a8:3d:88:ae:73:a2: db:22:41:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvJ32UDQa/BWHzF1eDDHwAqd0iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTA0MDUwMTU2MzZaFw0yNTA0MDgwNzI4MzZaMDMxMTAvBgNV BAMTKEE1REU4N0RCQTUxMzJDRjAxRTc5RkNFNjY3NzE1QkI4RUZGMTIxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRlASqyXrhGGFV7WNtO6XuQh8u WaT0X7Ea+ySuLi0k61KLHhAreJxwai6d/nvbHgC0ND463nXddFfF4VXiRZfhZLWF gXp7M/zgbfGz6BS1fSL6RcokUSptSY3K2dZ9Z394P/IZhzAqVIJqEgPswW6AZjv1 ubhzoUBySGBZpeZf1+clex9mOVzQ2AVJHAZLAVKBqCXQZy8OLZL1lLfzeKpbRGpu chUANTEUcMk4JH89ujGA6VG6z5qKY1tgU4x16fLLIYoxRsUXBsmMYWZiZdE6Kdl/ ln5x+5cOtvOr/kfEPcw/PuRcHBKg63DFNplJFENnspPy+9cHNRq7EPk+vZYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpd6H26UTLPAeefzmZ3FbuO/xIRIwHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb6p2ulBlZJzl16QJyV12eWnZFNKSVyuZL9 JZydIFL1K9ly4VZMJ69Gl6mTRkgzPGSDSitNLgfraMo1JLpZP//kxk9rPDN4WDAc +xghiXfh4rGEfwYQ8dBtb64VPqr9f2uJ5cUcltCKb29FKDW4p8GOxNCELYyDS8l+ tV1JOLsn2lvkgGYOL7QTgjty1WYP55x9wA6YleRdmD9jCErcjGOJaqixR01qNXMD vNjjjOxzJecvLuIPkvDxBY/HdVYwpLGfwOTodxnv6q0MLvhe1ZPJskrlL/Fz6XbD 53pOZgBsbozJhYtkZOZhm7P16pyijvhDG2yD3ag9iK5zotsiQQY= -----END CERTIFICATE-----Generated at Sun Apr 6 08:33:01 2025 by rpki-client