$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: 2zNAPICcVN5yOvyVxyMHCPHMchqX4FVLUWSJZb0321Y= Subject key identifier: 1D:D9:52:36:8F:FE:D3:01:C3:00:DC:8E:4C:4B:5F:F3:F1:07:D2:07 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 5F433FD467B49CB39BB989DAC57FD68BAA1C7857 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: D0 Signing time: Tue 03 Jun 2025 17:54:48 +0000 Manifest this update: Tue 03 Jun 2025 17:49:48 +0000 Manifest next update: Sat 07 Jun 2025 00:50:48 +0000 Files and hashes: 1: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 2: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: 87S7zpZDGtbMARPnRBHMBEYqCUAo9lU867CHvup1o1A=) 3: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:43:3f:d4:67:b4:9c:b3:9b:b9:89:da:c5:7f:d6:8b:aa:1c:78:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Jun 3 17:49:48 2025 GMT Not After : Jun 7 00:50:48 2025 GMT Subject: CN=1DD952368FFED301C300DC8E4C4B5FF3F107D207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:7e:a5:58:8a:05:97:98:87:01:80:a3:f7: 29:7b:9c:b1:df:49:49:dd:d2:2c:b7:8f:cc:30:48: ff:08:f8:8e:62:45:cb:12:cf:23:c9:64:48:7f:19: 3b:ea:1b:88:33:73:b0:e2:6f:72:d9:b3:06:1b:da: 80:f9:f3:f6:96:b3:53:3b:23:2d:42:90:2d:46:f3: 46:cc:5e:07:0f:60:1c:c7:7d:9a:8c:8e:be:4a:74: c7:c0:30:6a:86:05:2d:0c:10:27:c1:bb:e1:86:c9: 68:83:ad:c2:04:f3:71:03:58:49:ee:32:83:6d:68: e0:42:2a:66:73:15:b6:70:bd:4a:cd:47:08:de:3f: 91:f2:92:5c:27:24:09:09:db:db:d9:36:62:8a:ea: bb:11:95:3c:96:3e:8c:6d:71:b3:7e:3b:46:bb:e1: 53:16:09:e1:67:78:ad:5a:7c:06:a5:ed:b1:a0:c6: b3:ae:30:9c:af:f7:a4:0b:e3:99:c5:1e:2d:3e:6c: a9:2e:1e:2d:60:4b:fe:ef:c3:ad:29:4c:a2:2f:f4: c9:d6:d0:15:e5:d2:4d:78:5c:e8:02:8a:82:9c:0f: 17:9e:22:7e:60:2a:d9:7d:61:20:b3:d1:3a:2b:8d: 9c:35:a6:d4:3e:91:35:ed:fc:62:7a:b4:f2:7e:73: 69:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D9:52:36:8F:FE:D3:01:C3:00:DC:8E:4C:4B:5F:F3:F1:07:D2:07 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:86:2c:3d:75:73:56:07:bb:81:c3:49:1c:76:77:be:06:1e: 73:38:c3:20:b1:09:bb:b4:f5:69:3f:1f:11:19:90:72:ad:36: a1:c2:f4:fa:e0:8c:eb:05:41:c5:81:cb:14:58:96:c0:64:08: ec:15:50:23:3a:ab:ee:93:57:8b:13:43:15:dc:d5:a4:34:f5: 02:0a:85:a0:44:20:ec:b1:ff:c3:16:a7:00:0a:36:33:9e:04: 98:1f:aa:50:2b:66:7a:04:3f:32:d6:50:fe:70:2b:2d:69:67: 77:e8:b3:f3:96:c7:39:de:20:fb:98:77:1e:96:dd:73:57:74: 06:ba:fe:46:90:9b:58:3d:32:d6:a3:68:cc:1a:b5:f9:d6:1f: 34:7f:46:4e:93:e7:64:b0:dd:21:42:44:93:b8:70:9d:51:b5: da:9b:3a:24:60:33:cd:a5:03:f4:09:99:ba:82:ee:79:fe:42: 24:fb:e0:15:b6:d4:24:7b:c8:64:7e:77:30:9b:09:dc:00:b8: e8:11:c4:eb:59:17:9b:26:1e:38:1c:3d:23:61:69:61:5f:a3: 55:bf:2b:b6:5f:01:64:b0:66:59:3f:24:32:3d:98:62:76:ac: e4:d6:48:b9:6a:de:11:bd:3b:42:89:ba:4d:50:77:95:9b:58: 09:8c:49:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0M/1Ge0nLObuYnaxX/Wi6oceFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTA2MDMxNzQ5NDhaFw0yNTA2MDcwMDUwNDhaMDMxMTAvBgNV BAMTKDFERDk1MjM2OEZGRUQzMDFDMzAwREM4RTRDNEI1RkYzRjEwN0QyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWLn6lWIoFl5iHAYCj9yl7nLHf SUnd0iy3j8wwSP8I+I5iRcsSzyPJZEh/GTvqG4gzc7Dib3LZswYb2oD58/aWs1M7 Iy1CkC1G80bMXgcPYBzHfZqMjr5KdMfAMGqGBS0MECfBu+GGyWiDrcIE83EDWEnu MoNtaOBCKmZzFbZwvUrNRwjeP5HyklwnJAkJ29vZNmKK6rsRlTyWPoxtcbN+O0a7 4VMWCeFneK1afAal7bGgxrOuMJyv96QL45nFHi0+bKkuHi1gS/7vw60pTKIv9MnW 0BXl0k14XOgCioKcDxeeIn5gKtl9YSCz0TorjZw1ptQ+kTXt/GJ6tPJ+c2m/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdlSNo/+0wHDANyOTEtf8/EH0gcwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGGLD11c1YHu4HDSRx2d74GHnM4wyCxCbu0 9Wk/HxEZkHKtNqHC9PrgjOsFQcWByxRYlsBkCOwVUCM6q+6TV4sTQxXc1aQ09QIK haBEIOyx/8MWpwAKNjOeBJgfqlArZnoEPzLWUP5wKy1pZ3fos/OWxzneIPuYdx6W 3XNXdAa6/kaQm1g9MtajaMwatfnWHzR/Rk6T52Sw3SFCRJO4cJ1RtdqbOiRgM82l A/QJmbqC7nn+QiT74BW21CR7yGR+dzCbCdwAuOgRxOtZF5smHjgcPSNhaWFfo1W/ K7ZfAWSwZlk/JDI9mGJ2rOTWSLlq3hG9O0KJuk1Qd5WbWAmMSS4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:02 2025 by rpki-client