$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: FZBBSVHhCX5rZovXvUnh0tKDXJutEJ3KdeWFxoI5oW4= Subject key identifier: 2C:D9:18:0B:33:74:A8:08:75:10:9D:98:23:40:41:D8:2A:48:3E:96 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 234F3DCFE74BA0659F09F58269FF892435823765 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: CE Signing time: Sun 01 Jun 2025 14:11:58 +0000 Manifest this update: Sun 01 Jun 2025 14:06:58 +0000 Manifest next update: Thu 05 Jun 2025 00:25:58 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: RHfZwxMdxXtTBM90PDSE4E7udX1iby2vx6SA9DLuSP8=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 00:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4f:3d:cf:e7:4b:a0:65:9f:09:f5:82:69:ff:89:24:35:82:37:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Jun 1 14:06:58 2025 GMT Not After : Jun 5 00:25:58 2025 GMT Subject: CN=2CD9180B3374A80875109D98234041D82A483E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:83:80:33:22:6f:d7:47:57:b8:64:a9:ab: 1e:cf:e7:ce:00:2d:a6:57:88:e4:07:54:d5:1d:9c: 49:92:09:47:63:4e:6f:6d:2e:e9:1a:8a:db:a0:9c: 83:6d:f9:49:ab:b2:6b:e6:5a:7a:88:e6:f5:fa:e7: 1b:9f:e3:71:ff:ca:1d:64:4f:20:cf:b9:e4:b0:83: 05:e4:7c:45:be:60:e2:5f:1a:6b:3a:7e:1a:c0:18: 1d:cb:22:5e:0e:27:de:1c:d8:7d:78:ac:ec:6a:2b: d4:d5:31:a7:bc:25:74:c9:b5:d9:62:8d:8a:1f:ab: df:8f:6e:89:9f:81:6f:40:60:b4:5d:68:52:80:48: 15:0d:10:d2:84:73:8b:fc:f7:05:e9:7a:de:49:84: ab:f4:0f:68:98:25:a7:5d:b5:9c:3a:f6:32:20:f8: 99:35:04:da:44:50:3e:93:51:2a:55:c5:6c:db:9a: 7d:35:c5:ef:ce:5c:21:75:f0:04:1a:a5:55:e6:07: 65:25:d0:24:b5:6e:19:e7:f9:49:73:1a:92:2c:13: 9a:0d:b9:57:fc:14:9f:e8:8a:6f:9b:18:fb:bf:44: f1:63:57:c6:49:18:94:86:1f:fc:c1:0f:31:2f:71: a2:48:26:f4:50:fe:0d:90:47:6f:f9:48:a1:fe:ce: aa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D9:18:0B:33:74:A8:08:75:10:9D:98:23:40:41:D8:2A:48:3E:96 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2a:17:91:a1:bd:6a:92:24:09:23:be:a9:1d:44:f3:5a:c1: 45:16:9d:98:d6:80:c2:b9:9c:99:2b:8a:02:a2:6e:3e:68:89: 9f:3f:fb:11:4b:20:84:5d:bc:c7:92:b5:5f:af:6b:c4:88:45: d0:23:63:79:da:e9:38:8c:d8:67:01:c2:9b:0a:a5:1b:c9:6f: 89:d8:55:de:00:e3:15:25:2c:3a:f3:19:18:cb:cc:92:ec:d8: e4:15:f0:2a:72:07:30:05:48:23:59:4b:bb:43:fc:fc:8b:e0: 8e:e2:a8:0b:8b:45:f7:6b:b5:a7:eb:00:f1:75:4b:64:10:33: 31:55:5f:d5:8b:a6:54:b4:a0:ec:e2:a7:77:bb:57:a9:d7:f4: c2:87:2d:c8:15:ab:7f:cc:54:64:74:af:62:1f:ca:d3:3e:a3: 76:2f:8a:9c:4b:aa:6b:4e:aa:63:0d:76:a3:d9:67:46:ce:5e: b2:f3:1f:ea:73:a4:5f:26:48:4c:22:b6:9c:38:c8:a2:65:b3: 1c:38:f1:c6:cb:34:e4:e4:f0:32:2a:65:1d:e2:1e:ea:4d:64: 54:4b:55:11:ea:85:72:b8:59:43:c9:b1:81:f3:14:04:a7:46: ca:70:7b:19:5d:b5:26:e9:86:bb:f0:7f:6c:d9:e2:dc:a4:69: a8:07:d6:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI089z+dLoGWfCfWCaf+JJDWCN2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTA2MDExNDA2NThaFw0yNTA2MDUwMDI1NThaMDMxMTAvBgNV BAMTKDJDRDkxODBCMzM3NEE4MDg3NTEwOUQ5ODIzNDA0MUQ4MkE0ODNFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPaIOAMyJv10dXuGSpqx7P584A LaZXiOQHVNUdnEmSCUdjTm9tLukaitugnINt+UmrsmvmWnqI5vX65xuf43H/yh1k TyDPueSwgwXkfEW+YOJfGms6fhrAGB3LIl4OJ94c2H14rOxqK9TVMae8JXTJtdli jYofq9+PbomfgW9AYLRdaFKASBUNENKEc4v89wXpet5JhKv0D2iYJaddtZw69jIg +Jk1BNpEUD6TUSpVxWzbmn01xe/OXCF18AQapVXmB2Ul0CS1bhnn+UlzGpIsE5oN uVf8FJ/oim+bGPu/RPFjV8ZJGJSGH/zBDzEvcaJIJvRQ/g2QR2/5SKH+zqrBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULNkYCzN0qAh1EJ2YI0BB2CpIPpYwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkqF5GhvWqSJAkjvqkdRPNawUUWnZjWgMK5 nJkrigKibj5oiZ8/+xFLIIRdvMeStV+va8SIRdAjY3na6TiM2GcBwpsKpRvJb4nY Vd4A4xUlLDrzGRjLzJLs2OQV8CpyBzAFSCNZS7tD/PyL4I7iqAuLRfdrtafrAPF1 S2QQMzFVX9WLplS0oOzip3e7V6nX9MKHLcgVq3/MVGR0r2IfytM+o3YvipxLqmtO qmMNdqPZZ0bOXrLzH+pzpF8mSEwitpw4yKJlsxw48cbLNOTk8DIqZR3iHupNZFRL VRHqhXK4WUPJsYHzFASnRspwexldtSbphrvwf2zZ4tykaagH1tA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:42 2025 by rpki-client