$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft (raw, json) Hash identifier: KQ5bGWzNNccggAzPls1fwdY2roldQRAZx6AeOyoEE6A= Subject key identifier: CF:7C:A1:51:8C:8E:80:72:C2:A7:96:A0:8E:A8:35:4F:52:37:5F:2B Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 66893D9D00B2B31DA95AB08CB106F2B1E8F4D85A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft Manifest number: 0120 Signing time: Fri 04 Apr 2025 00:20:58 +0000 Manifest this update: Fri 04 Apr 2025 00:15:58 +0000 Manifest next update: Mon 07 Apr 2025 01:40:58 +0000 Files and hashes: 1: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: ndDFlzQ0IuA3S69ND6C8Jsle8tJZdiO7+mspElCpg00=) 2: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: Lyic6tpyx8dE3BSp7Wiu55L5Zbno6Dp9EUOJ8PKwjfM=) 3: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 5H4JKwnq4oresa7MkpV7TriW3ivumi6N3jRxijZ21Fs=) 4: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl (hash: w1Vt9eowTyFyCfnlpllChW5fjUos2y1bmS21wFSeTag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 01:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:89:3d:9d:00:b2:b3:1d:a9:5a:b0:8c:b1:06:f2:b1:e8:f4:d8:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: Apr 4 00:15:58 2025 GMT Not After : Apr 7 01:40:58 2025 GMT Subject: CN=CF7CA1518C8E8072C2A796A08EA8354F52375F2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d9:85:b3:18:aa:dd:98:3f:b3:07:ff:a6:65: a2:cf:14:6f:c8:87:66:4b:79:49:28:5b:ea:fe:9d: 56:08:e4:39:20:59:5b:2e:75:0e:e1:90:14:5e:da: 86:e4:fa:7f:20:a9:47:26:65:4c:5d:c3:1c:4f:fe: 42:93:3a:d7:44:15:4a:22:43:ab:5e:01:63:82:78: 1f:6d:1f:d0:76:d6:ec:c2:52:93:de:5a:08:3c:c8: 00:58:0e:1c:c6:17:f8:7a:5d:6f:13:85:9b:b9:48: c3:a6:03:2c:c8:80:1f:ea:a2:d5:e7:05:06:64:b5: 32:2b:dd:69:93:da:5e:d4:9e:f5:76:b0:4b:c3:98: cc:f6:5d:45:aa:eb:2d:e3:d9:59:e6:ed:c5:e3:91: d9:ed:f8:29:90:b1:61:7c:19:f5:14:98:17:b8:63: 24:8b:34:85:37:e9:69:4e:df:1a:de:f9:1b:7f:e8: 3d:11:51:87:f4:cc:ac:1f:ea:79:c8:5b:e8:ec:79: 97:83:62:87:ab:26:d7:5c:c5:32:23:22:e9:e6:48: 74:27:8d:41:0a:ff:24:ed:f4:c3:cd:e6:d2:3a:d5: e8:b6:b3:99:10:cb:d5:4f:3f:bf:5d:7d:7b:dc:35: 93:7e:d3:14:89:d8:24:8b:4a:b5:cc:d4:31:da:d9: 73:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7C:A1:51:8C:8E:80:72:C2:A7:96:A0:8E:A8:35:4F:52:37:5F:2B X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6e:97:ce:1a:08:ab:68:1d:fe:1e:28:ec:bd:c5:53:85:12: 89:1b:57:dc:14:18:a8:96:6b:8c:61:79:9f:bf:56:a9:e2:65: 9a:ba:c9:fe:cd:1a:62:93:3c:3d:c6:6a:ca:94:68:2f:f0:a7: 07:41:76:23:00:b9:f6:6b:9d:bf:23:2d:95:b5:be:74:d8:3b: 06:0f:63:47:03:4e:6e:e6:1e:30:00:19:1d:17:11:70:95:62: f9:26:4c:7a:05:03:29:65:8d:2d:a7:b4:e7:2c:b3:f7:4d:3d: c7:fb:29:a3:25:ed:77:dc:99:f6:2c:f9:28:40:31:01:ad:a1: ae:a2:df:55:4e:3f:7d:e8:98:45:f1:18:94:22:44:e2:68:74: 2e:f4:41:28:4a:dd:37:81:49:0c:c8:72:87:9c:63:01:ef:d6: dc:a1:7b:d8:4d:6e:bd:ea:c0:e3:77:3b:80:cc:58:dd:4a:6b: cd:3c:53:f1:1e:32:21:cb:4f:50:1c:39:a1:82:2a:bd:67:6c: bd:f6:83:11:4f:59:51:bd:da:d5:6c:2b:70:89:f1:4c:c0:2c: d7:69:da:e8:3f:17:53:6f:d6:e9:00:c6:68:a4:d0:7f:a3:32: 9b:d8:1a:9c:b4:ce:d8:07:ce:c4:ed:de:e4:d6:3f:c3:2a:8b: 18:2d:c2:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZok9nQCysx2pWrCMsQbysej02FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNTA0MDQwMDE1NThaFw0yNTA0MDcwMTQwNThaMDMxMTAvBgNV BAMTKENGN0NBMTUxOEM4RTgwNzJDMkE3OTZBMDhFQTgzNTRGNTIzNzVGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm2YWzGKrdmD+zB/+mZaLPFG/I h2ZLeUkoW+r+nVYI5DkgWVsudQ7hkBRe2obk+n8gqUcmZUxdwxxP/kKTOtdEFUoi Q6teAWOCeB9tH9B21uzCUpPeWgg8yABYDhzGF/h6XW8ThZu5SMOmAyzIgB/qotXn BQZktTIr3WmT2l7UnvV2sEvDmMz2XUWq6y3j2Vnm7cXjkdnt+CmQsWF8GfUUmBe4 YySLNIU36WlO3xre+Rt/6D0RUYf0zKwf6nnIW+jseZeDYoerJtdcxTIjIunmSHQn jUEK/yTt9MPN5tI61ei2s5kQy9VPP79dfXvcNZN+0xSJ2CSLSrXM1DHa2XOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz3yhUYyOgHLCp5agjqg1T1I3XyswHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFE NEM1MDg1MkE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERul84aCKtoHf4eKOy9xVOFEokbV9wUGKiW a4xheZ+/VqniZZq6yf7NGmKTPD3GasqUaC/wpwdBdiMAufZrnb8jLZW1vnTYOwYP Y0cDTm7mHjAAGR0XEXCVYvkmTHoFAylljS2ntOcss/dNPcf7KaMl7XfcmfYs+ShA MQGtoa6i31VOP33omEXxGJQiROJodC70QShK3TeBSQzIcoecYwHv1tyhe9hNbr3q wON3O4DMWN1Ka808U/EeMiHLT1AcOaGCKr1nbL32gxFPWVG92tVsK3CJ8UzALNdp 2ug/F1Nv1ukAxmik0H+jMpvYGpy0ztgHzsTt3uTWP8MqixgtwuU= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:30 2025 by rpki-client