$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft File: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft (raw, json) Hash identifier: sM3BIRdiESIUqpO0m+jX8XkWNglBgpjpwZI0L6SsBas= Subject key identifier: F2:B9:D3:A6:72:73:38:8D:8F:A5:1A:F1:73:4F:29:98:96:60:9C:95 Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 Certificate issuer: /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Certificate serial: 2646B861FB0AD442FC69088A8C3340DF044B85F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft Manifest number: E4 Signing time: Tue 03 Jun 2025 01:01:46 +0000 Manifest this update: Tue 03 Jun 2025 00:56:46 +0000 Manifest next update: Fri 06 Jun 2025 02:51:46 +0000 Files and hashes: 1: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: SdfVlvgb41TvQfFCAAr6Hvu/iM3n38wFz7a+3vMqJi4=) 2: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: NjJcmD+G+kiFwmmP8zS7heQcwBVqq18Sis+HXMvM+ZY=) 3: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl (hash: L/J1XZ3BI2L/2tVyMWuTJioxRV4Mg2ft7YXjzuI2OqI=) 4: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: YbG5Gw9xgbijBTbp7E/AZR+gn02wD0TeW2SCv/sSqKI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 02:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:46:b8:61:fb:0a:d4:42:fc:69:08:8a:8c:33:40:df:04:4b:85:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Validity Not Before: Jun 3 00:56:46 2025 GMT Not After : Jun 6 02:51:46 2025 GMT Subject: CN=F2B9D3A67273388D8FA51AF1734F299896609C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6a:e8:84:b4:da:a7:40:ac:81:c6:e3:71:a8: e0:64:d8:bd:5d:a4:08:3d:9a:95:fb:9e:c8:df:98: 7f:9e:38:68:8f:c3:a5:c2:4f:de:d0:ac:68:97:8e: 94:33:67:3b:c0:26:a4:4a:a9:c1:0a:8f:9a:07:90: d2:c3:1e:12:3f:dd:27:39:44:9e:b5:6f:04:d8:06: ca:03:50:3e:d4:f4:c3:08:f2:e0:28:43:6a:dd:69: f6:b5:68:21:71:66:17:05:2c:4b:2f:90:cf:6c:b6: 3f:d0:3c:e8:85:66:09:4e:be:06:1e:3f:b9:35:b2: d1:bf:ea:38:e6:b2:54:2c:42:9e:51:dc:42:11:7d: cd:aa:c2:b3:cf:c0:0d:99:5b:8e:d8:62:5d:29:3b: ca:0b:91:8d:5e:f8:5f:eb:e1:82:1f:20:fa:7a:79: 1a:c4:04:9f:72:5b:3e:5c:00:dc:a5:85:d0:9c:ad: 7e:1f:83:1a:57:55:3c:03:ac:00:ca:28:01:27:4c: 28:b1:1f:ed:50:bd:36:16:4c:8f:bb:58:71:a1:93: 7f:a4:ba:7c:ca:1b:00:c4:9b:50:4d:9c:e3:72:2d: 1d:a8:f9:67:4d:31:a1:48:d9:1f:c7:93:4e:6b:fb: 2b:02:65:76:52:c9:b9:b8:c9:77:9f:5a:c3:46:71: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B9:D3:A6:72:73:38:8D:8F:A5:1A:F1:73:4F:29:98:96:60:9C:95 X509v3 Authority Key Identifier: keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f8:50:28:45:64:f4:0d:24:f8:f5:37:0a:35:8b:da:56:0c: f7:34:6a:5e:7e:76:a6:2d:55:08:37:90:13:ad:5a:62:e3:f3: b5:23:63:85:86:a1:d7:0f:43:4a:08:16:6f:d0:15:e9:5d:9d: 00:d6:6e:b2:06:d7:0c:e2:38:ef:6a:8c:0e:81:32:c3:e8:b0: e0:24:11:64:19:09:a5:33:ca:75:50:89:ef:f5:c8:5e:6e:a6: 00:85:9a:e0:39:5a:c3:4c:57:a3:52:05:0a:c5:43:07:74:60: 61:05:1d:a5:3d:26:cc:1f:64:aa:05:a7:e6:49:94:21:05:58: 43:f9:7a:2a:36:4c:54:77:0f:24:79:ff:1c:7d:ad:10:9a:ec: fd:64:c8:b1:61:0c:54:00:e1:83:66:2e:75:dc:39:95:5f:37: 45:81:53:22:9d:50:4c:6e:ac:07:f5:66:06:89:4e:ca:82:34: 49:71:66:94:ec:e1:8e:7d:a6:a0:4c:cc:13:00:2d:5b:71:dc: 1c:f8:a8:f6:11:c6:59:4d:37:20:a8:04:3b:80:ef:60:8a:a4: 85:e0:9e:be:eb:90:43:12:4a:96:af:2a:28:90:53:af:42:6e: 90:56:2e:d6:23:27:7a:b3:ef:8d:c2:ba:bf:d4:6f:2e:e8:c8: 41:01:29:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJka4YfsK1EL8aQiKjDNA3wRLhfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3 MjM3OEJGMzAeFw0yNTA2MDMwMDU2NDZaFw0yNTA2MDYwMjUxNDZaMDMxMTAvBgNV BAMTKEYyQjlEM0E2NzI3MzM4OEQ4RkE1MUFGMTczNEYyOTk4OTY2MDlDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5auiEtNqnQKyBxuNxqOBk2L1d pAg9mpX7nsjfmH+eOGiPw6XCT97QrGiXjpQzZzvAJqRKqcEKj5oHkNLDHhI/3Sc5 RJ61bwTYBsoDUD7U9MMI8uAoQ2rdafa1aCFxZhcFLEsvkM9stj/QPOiFZglOvgYe P7k1stG/6jjmslQsQp5R3EIRfc2qwrPPwA2ZW47YYl0pO8oLkY1e+F/r4YIfIPp6 eRrEBJ9yWz5cANylhdCcrX4fgxpXVTwDrADKKAEnTCixH+1QvTYWTI+7WHGhk3+k unzKGwDEm1BNnONyLR2o+WdNMaFI2R/Hk05r+ysCZXZSybm4yXefWsNGceUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8rnTpnJzOI2PpRrxc08pmJZgnJUwHwYDVR0j BBgwFoAUPguVe1gtiu+ZpJxkSPmZPHI3i/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWRjOWU0Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC8zRTBCOTU3QjU4 MkQ4QUVGOTlBNDlDNjQ0OEY5OTkzQzcyMzc4QkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3MjM3 OEJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw OGQtOGVlNWE4YTcwYTA1LzAvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5 M0M3MjM3OEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT4UChFZPQNJPj1Nwo1i9pWDPc0al5+dqYt VQg3kBOtWmLj87UjY4WGodcPQ0oIFm/QFeldnQDWbrIG1wziOO9qjA6BMsPosOAk EWQZCaUzynVQie/1yF5upgCFmuA5WsNMV6NSBQrFQwd0YGEFHaU9JswfZKoFp+ZJ lCEFWEP5eio2TFR3DyR5/xx9rRCa7P1kyLFhDFQA4YNmLnXcOZVfN0WBUyKdUExu rAf1ZgaJTsqCNElxZpTs4Y59pqBMzBMALVtx3Bz4qPYRxllNNyCoBDuA72CKpIXg nr7rkEMSSpavKiiQU69CbpBWLtYjJ3qz743Cur/Uby7oyEEBKRQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:10 2025 by rpki-client