$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: hPxhHHWLET0koHjRD6hPa9DqTkXs3pgDk7MavxR25mg= Subject key identifier: 9E:E9:6A:FF:72:51:DF:79:1D:2E:FE:90:01:8B:51:22:12:66:4D:52 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 7F68E371E1626BCF2978F5852D376A35A448E518 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: E1 Signing time: Sat 07 Jun 2025 00:50:43 +0000 Manifest this update: Sat 07 Jun 2025 00:45:43 +0000 Manifest next update: Tue 10 Jun 2025 02:50:43 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: D8c4aqE2kfcokF8+VPf4JeSY+Z9ACuMbPQ7rGqUmKRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:68:e3:71:e1:62:6b:cf:29:78:f5:85:2d:37:6a:35:a4:48:e5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Jun 7 00:45:43 2025 GMT Not After : Jun 10 02:50:43 2025 GMT Subject: CN=9EE96AFF7251DF791D2EFE90018B512212664D52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:21:a7:05:78:d4:4c:f5:a1:c8:3c:b0:e8: c3:4c:3f:7f:11:b2:96:ab:3a:0e:60:69:58:cd:9e: 98:49:ef:6b:1a:b0:e8:07:11:e1:bd:af:54:e8:87: 34:02:26:65:9e:d7:4c:31:dc:f4:45:fc:9f:f2:af: a0:1e:c2:ee:53:91:62:53:8b:f0:65:88:f0:f2:65: 70:a9:f1:6c:6b:4a:1e:b4:45:69:87:6a:3d:d1:40: c2:fe:d0:e8:e7:60:dd:b3:9b:d8:5d:44:33:35:a5: ac:ce:dc:2a:74:a8:bc:d1:eb:b6:47:90:99:c7:b0: d5:8d:6f:07:c5:5e:b3:2a:85:91:a9:93:9c:5f:a3: b5:0d:9f:e0:4d:e1:ec:7a:bb:f3:92:7a:48:f9:ba: be:12:0f:f6:7a:d3:af:d7:b8:5a:59:9a:45:a4:a6: a6:43:65:04:f2:16:dc:1d:d6:a3:22:e7:24:45:65: 44:a7:dd:f6:28:fc:1a:7d:27:ff:f6:a7:4e:09:ec: 78:22:d8:1c:27:84:5a:2f:51:a1:b4:08:f1:3f:1a: 86:0f:fd:32:b7:c0:9f:fd:23:44:ec:c5:96:ae:23: e9:fe:a4:eb:f2:ee:ea:e1:4c:91:cd:19:16:2d:71: 5b:be:0a:50:88:9f:2e:ec:d1:cc:9a:f0:f4:21:71: a0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E9:6A:FF:72:51:DF:79:1D:2E:FE:90:01:8B:51:22:12:66:4D:52 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:9b:c5:95:73:49:a2:51:c4:0a:57:2e:aa:32:71:8c:8c:c0: ab:a6:9e:02:fd:7f:31:81:6a:7f:47:e0:b9:16:fc:9c:20:bd: b9:32:76:dc:f1:79:35:bf:66:6f:17:08:cd:64:5c:bb:d7:3d: 73:84:48:a0:b7:9f:f5:97:d9:e4:c1:64:19:0d:f7:59:6f:bc: 21:c9:83:aa:10:3e:a4:ba:f6:f2:c2:54:ef:71:d8:6e:ca:c1: 40:70:6b:ca:57:0e:e1:dc:6c:be:67:e0:ad:2d:50:e5:d0:af: f5:c3:34:64:5f:8c:0e:37:e5:5b:67:68:f3:09:56:84:ee:0d: 50:b8:44:4f:8f:f1:af:68:ab:82:86:c3:c2:be:1c:39:df:f1: 78:69:bb:72:91:5a:17:da:91:29:de:c5:0f:d8:ee:5f:3c:45: 66:7a:54:1a:c9:68:0f:d7:56:20:01:ab:2b:f2:d1:54:23:5d: a8:0f:fa:b4:20:05:95:f8:e1:cc:bb:ee:fe:fd:0f:15:ab:2f: 12:c4:ac:da:bb:dc:c4:17:15:ae:7a:ef:21:82:83:bc:86:0a: 56:d0:9c:c7:07:af:d3:42:04:5c:95:96:47:e2:ad:63:4c:5b: 2c:b4:ee:66:ea:01:04:f8:2a:c3:b9:32:da:78:5d:b8:f1:6e: 9c:70:07:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2jjceFia88pePWFLTdqNaRI5RgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTA2MDcwMDQ1NDNaFw0yNTA2MTAwMjUwNDNaMDMxMTAvBgNV BAMTKDlFRTk2QUZGNzI1MURGNzkxRDJFRkU5MDAxOEI1MTIyMTI2NjRENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlRSGnBXjUTPWhyDyw6MNMP38R sparOg5gaVjNnphJ72sasOgHEeG9r1TohzQCJmWe10wx3PRF/J/yr6Aewu5TkWJT i/BliPDyZXCp8WxrSh60RWmHaj3RQML+0OjnYN2zm9hdRDM1pazO3Cp0qLzR67ZH kJnHsNWNbwfFXrMqhZGpk5xfo7UNn+BN4ex6u/OSekj5ur4SD/Z606/XuFpZmkWk pqZDZQTyFtwd1qMi5yRFZUSn3fYo/Bp9J//2p04J7Hgi2BwnhFovUaG0CPE/GoYP /TK3wJ/9I0TsxZauI+n+pOvy7urhTJHNGRYtcVu+ClCIny7s0cya8PQhcaAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnulq/3JR33kdLv6QAYtRIhJmTVIwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOCbxZVzSaJRxApXLqoycYyMwKumngL9fzGB an9H4LkW/JwgvbkydtzxeTW/Zm8XCM1kXLvXPXOESKC3n/WX2eTBZBkN91lvvCHJ g6oQPqS69vLCVO9x2G7KwUBwa8pXDuHcbL5n4K0tUOXQr/XDNGRfjA435VtnaPMJ VoTuDVC4RE+P8a9oq4KGw8K+HDnf8Xhpu3KRWhfakSnexQ/Y7l88RWZ6VBrJaA/X ViABqyvy0VQjXagP+rQgBZX44cy77v79DxWrLxLErNq73MQXFa567yGCg7yGClbQ nMcHr9NCBFyVlkfirWNMWyy07mbqAQT4KsO5Mtp4XbjxbpxwBwU= -----END CERTIFICATE-----Generated at Sun Jun 8 13:36:37 2025 by rpki-client