$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: L9esQaOT9rqLCgXLm1971NvgsuRyQUljGykS44P68kA= Subject key identifier: 23:3E:76:C2:7F:2F:4D:6D:21:32:BC:CF:A6:17:E9:24:33:91:3F:04 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 40614DE8B0A0075F290713BFB7E95CCD4964D28C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04AD Signing time: Thu 05 Jun 2025 01:40:47 +0000 Manifest this update: Thu 05 Jun 2025 01:35:47 +0000 Manifest next update: Sun 08 Jun 2025 03:10:47 +0000 Files and hashes: 1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: hy7MHDWEDjxGDvk+/qutfkgc+zuRrswWd+OhRhF5XYM=) 2: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: ss9MEfw5a/NQ1/FKy3L48LqhByLu1T9Xvp7IVtwirEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 03:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:61:4d:e8:b0:a0:07:5f:29:07:13:bf:b7:e9:5c:cd:49:64:d2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Jun 5 01:35:47 2025 GMT Not After : Jun 8 03:10:47 2025 GMT Subject: CN=233E76C27F2F4D6D2132BCCFA617E92433913F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:22:52:c3:55:b4:56:e6:0e:77:95:88:e6: 2f:b1:4f:17:7e:30:2e:b4:fe:85:ea:f6:6e:64:79: fd:41:33:1f:73:1b:4e:fc:65:be:7e:ea:99:25:43: 49:0a:11:10:e6:d9:a1:5f:7d:de:f7:bb:be:c6:84: e6:07:b9:ef:98:a4:01:34:3f:1b:87:98:48:95:f4: c4:32:b1:88:ef:a3:fa:bd:cf:2b:76:1f:99:c6:65: b6:a6:9f:e0:65:14:e2:e1:6d:d5:44:4f:ef:fa:cf: 79:bb:83:b3:89:13:d8:73:e4:5a:55:d3:f5:b7:3e: 29:a5:9d:18:b9:92:65:c2:14:6a:82:a5:a9:6a:b5: fe:25:ed:37:70:81:eb:49:24:2a:e6:7d:ac:9d:90: 4b:5a:30:b9:b6:a8:e1:63:29:69:e5:42:5a:52:0a: 8d:ba:2e:5b:7b:7f:7f:2e:6c:08:5e:1d:60:30:ac: 33:db:44:73:43:09:2b:14:1b:a8:fb:6d:7d:42:88: 41:eb:76:a1:ce:87:68:6e:2b:ee:13:d6:47:d1:9c: d7:4f:03:1f:43:2e:11:f7:42:75:36:05:2a:af:3c: 15:db:0b:e9:57:75:c3:da:32:9e:f1:cf:cb:51:e3: 60:66:7e:94:97:43:93:54:ee:28:86:9a:88:c8:31: b8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3E:76:C2:7F:2F:4D:6D:21:32:BC:CF:A6:17:E9:24:33:91:3F:04 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f3:0f:1d:74:5b:07:92:9f:27:84:9e:ab:0d:f5:8f:b0:ff: b3:ab:89:0e:7f:b5:fe:55:89:ed:c3:be:7c:2d:d4:f9:72:d6: 7c:f7:8c:f4:fe:07:86:ec:16:df:99:20:e2:f3:f6:59:fa:1e: 4c:a3:7a:77:53:d8:76:c6:dc:c0:ba:2b:a8:77:b6:40:ce:d8: ad:19:4d:ce:d5:a5:d2:65:89:84:0a:95:5e:92:9b:66:2b:ba: 7e:40:2a:79:e1:eb:28:d6:db:b8:cf:ac:59:df:9a:ec:42:8c: 6a:7a:1d:c6:65:3f:42:b4:5d:05:c0:7d:37:23:f3:35:f4:ce: f2:a5:6f:31:d2:5c:b9:e4:9d:e0:5f:d2:77:5f:41:e9:9e:ac: 90:d0:cd:8c:69:6d:d1:5e:50:79:86:aa:b2:cf:d2:e9:18:a2: a3:42:ea:75:35:76:d9:13:79:c6:39:ad:1a:e0:68:7c:ee:a6: 64:d1:02:b3:84:89:78:98:d6:d9:8a:aa:5d:d2:23:db:d0:a0: 6b:87:38:35:9a:6d:20:69:09:69:36:52:dd:1c:1b:16:ef:5d: 0b:e3:17:2a:27:f5:c8:9a:9e:7d:4b:da:83:3c:91:db:d8:7a: f8:bf:16:10:70:82:60:40:40:26:88:92:82:21:e1:7f:c4:ba: 28:31:5b:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGFN6LCgB18pBxO/t+lczUlk0owwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTA2MDUwMTM1NDdaFw0yNTA2MDgwMzEwNDdaMDMxMTAvBgNV BAMTKDIzM0U3NkMyN0YyRjRENkQyMTMyQkNDRkE2MTdFOTI0MzM5MTNGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf6SJSw1W0VuYOd5WI5i+xTxd+ MC60/oXq9m5kef1BMx9zG078Zb5+6pklQ0kKERDm2aFffd73u77GhOYHue+YpAE0 PxuHmEiV9MQysYjvo/q9zyt2H5nGZbamn+BlFOLhbdVET+/6z3m7g7OJE9hz5FpV 0/W3PimlnRi5kmXCFGqCpalqtf4l7TdwgetJJCrmfaydkEtaMLm2qOFjKWnlQlpS Co26Llt7f38ubAheHWAwrDPbRHNDCSsUG6j7bX1CiEHrdqHOh2huK+4T1kfRnNdP Ax9DLhH3QnU2BSqvPBXbC+lXdcPaMp7xz8tR42BmfpSXQ5NU7iiGmojIMbj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIz52wn8vTW0hMrzPphfpJDORPwQwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7zDx10WweSnyeEnqsN9Y+w/7OriQ5/tf5V ie3Dvnwt1Ply1nz3jPT+B4bsFt+ZIOLz9ln6HkyjendT2HbG3MC6K6h3tkDO2K0Z Tc7VpdJliYQKlV6Sm2Yrun5AKnnh6yjW27jPrFnfmuxCjGp6HcZlP0K0XQXAfTcj 8zX0zvKlbzHSXLnkneBf0ndfQemerJDQzYxpbdFeUHmGqrLP0ukYoqNC6nU1dtkT ecY5rRrgaHzupmTRArOEiXiY1tmKql3SI9vQoGuHODWabSBpCWk2Ut0cGxbvXQvj Fyon9ciann1L2oM8kdvYevi/FhBwgmBAQCaIkoIh4X/EuigxW1k= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:27 2025 by rpki-client