$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft (raw, json) Hash identifier: f8P0QEQp/kOo5B6z9cd32efVeUOd54lQblDxAF5Wclk= Subject key identifier: 23:11:EE:31:E9:59:95:21:12:79:5A:D7:36:4E:EA:EC:C5:C6:04:45 Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Certificate serial: 4E431A5C4B7DCD3D031309B74534F1042E80553C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft Manifest number: 01C5 Signing time: Fri 04 Apr 2025 01:21:53 +0000 Manifest this update: Fri 04 Apr 2025 01:16:53 +0000 Manifest next update: Mon 07 Apr 2025 06:00:53 +0000 Files and hashes: 1: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: ieMGqtS8RhGJzVFgVXdHFZF0bIr1rTb711Dv1YSs4lQ=) 2: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl (hash: av1cF1qKoBGoz+ivUTX0E0Oq0wCc4oMxVlF+SZBbWjQ=) 3: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: wVvC7RrM2/LqSU+eCUMpRT4VLMiy6hzOCmvyl4cCB/U=) 4: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: 0FUmX3o0RRvRLbhaXpUU620mkMGet183fROAANIvvIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:43:1a:5c:4b:7d:cd:3d:03:13:09:b7:45:34:f1:04:2e:80:55:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Validity Not Before: Apr 4 01:16:53 2025 GMT Not After : Apr 7 06:00:53 2025 GMT Subject: CN=2311EE31E959952112795AD7364EEAECC5C60445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:7e:c4:17:4b:b9:c6:4d:dc:3c:20:ef:b6: 8f:76:8d:6e:5d:92:8c:e0:9b:48:d8:91:ca:f3:4f: 93:a7:97:d9:4d:60:9b:2f:7c:bb:98:16:48:71:fd: 71:cc:e7:5b:85:c4:d6:6f:55:58:4e:ce:eb:3e:40: fa:06:2f:36:5f:e1:87:b8:94:1e:de:9e:ee:b5:5b: 5a:f4:83:8a:ba:2c:12:b5:fa:7b:d0:2f:59:83:47: 3a:21:bf:f5:40:d0:b1:12:85:37:2c:4f:d2:ca:6d: 47:c2:3e:29:37:33:3b:6b:dd:dd:ec:43:b4:45:48: 50:7c:b9:02:44:7d:27:82:f6:cf:36:9d:fa:d9:38: 2e:bc:61:20:5f:d1:a5:c6:a0:19:12:f9:13:ff:ba: a2:08:28:e4:6b:2f:29:f3:4e:0d:86:6e:35:d3:a8: 52:19:c3:c5:e8:d3:00:96:b8:eb:65:5d:dc:47:38: f0:91:9f:dd:18:75:43:c9:55:0b:a3:cb:7b:5a:43: d8:d4:4a:df:bc:73:1f:1d:3d:41:d5:27:63:12:de: aa:40:c5:cb:0c:7c:8b:07:a6:d3:7e:0c:77:5c:ba: 95:e7:08:0a:3c:40:16:be:60:7f:32:66:f0:f8:d3: 85:f6:c1:ec:50:93:89:44:2f:e9:af:97:6a:06:80: 93:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:11:EE:31:E9:59:95:21:12:79:5A:D7:36:4E:EA:EC:C5:C6:04:45 X509v3 Authority Key Identifier: keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d6:c4:2d:b7:a6:ef:cf:1c:e3:1e:3e:3c:8d:d7:2b:79:bd: 2d:91:e4:d5:b0:23:4b:12:10:20:cd:df:e3:1c:b1:bf:19:62: 7b:1e:b0:7f:dd:14:a8:3e:de:c8:25:52:5c:79:9f:f8:e7:49: 96:f2:78:0d:44:4c:0a:c8:3d:be:cf:f1:a5:80:46:eb:fe:b7: cf:57:75:9e:e1:9c:93:7f:de:4e:a0:3a:93:8c:b4:a8:17:10: 8c:2b:d7:fa:4e:cf:9c:3e:9c:77:fc:c4:01:09:eb:29:a5:92: f9:ef:f6:30:a4:5d:ff:80:85:60:79:cb:d4:fe:6c:9a:0f:94: 65:be:9b:6f:84:27:26:6e:ee:5b:39:29:4c:08:88:8c:88:82: 85:32:d3:ff:3e:e2:59:81:86:00:e9:73:3f:90:15:af:39:ef: 14:3b:5f:c9:c8:e6:20:dc:ba:18:8f:9d:f5:16:9d:22:b7:32: bd:59:88:cf:2f:a4:52:43:69:49:a9:3a:a7:f1:3d:97:f5:be: 79:70:25:a6:8a:07:de:64:79:e0:77:4e:3e:71:e3:3f:2b:ab: 67:d0:8b:e0:3b:34:2b:16:5b:30:d4:6f:20:4b:74:77:d3:26: a9:1f:8f:02:04:c7:17:5d:ae:e0:20:21:98:82:54:05:d1:93: 5e:be:14:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTkMaXEt9zT0DEwm3RTTxBC6AVTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy MkNCREVFOTAeFw0yNTA0MDQwMTE2NTNaFw0yNTA0MDcwNjAwNTNaMDMxMTAvBgNV BAMTKDIzMTFFRTMxRTk1OTk1MjExMjc5NUFENzM2NEVFQUVDQzVDNjA0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRn7EF0u5xk3cPCDvto92jW5d kozgm0jYkcrzT5Onl9lNYJsvfLuYFkhx/XHM51uFxNZvVVhOzus+QPoGLzZf4Ye4 lB7enu61W1r0g4q6LBK1+nvQL1mDRzohv/VA0LEShTcsT9LKbUfCPik3Mztr3d3s Q7RFSFB8uQJEfSeC9s82nfrZOC68YSBf0aXGoBkS+RP/uqIIKORrLynzTg2GbjXT qFIZw8Xo0wCWuOtlXdxHOPCRn90YdUPJVQujy3taQ9jUSt+8cx8dPUHVJ2MS3qpA xcsMfIsHptN+DHdcupXnCAo8QBa+YH8yZvD404X2wexQk4lEL+mvl2oGgJMzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIxHuMelZlSESeVrXNk7q7MXGBEUwHwYDVR0j BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC REVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1 NzAyMkNCREVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfWxC23pu/PHOMePjyN1yt5vS2R5NWwI0sS ECDN3+Mcsb8ZYnsesH/dFKg+3sglUlx5n/jnSZbyeA1ETArIPb7P8aWARuv+t89X dZ7hnJN/3k6gOpOMtKgXEIwr1/pOz5w+nHf8xAEJ6ymlkvnv9jCkXf+AhWB5y9T+ bJoPlGW+m2+EJyZu7ls5KUwIiIyIgoUy0/8+4lmBhgDpcz+QFa857xQ7X8nI5iDc uhiPnfUWnSK3Mr1ZiM8vpFJDaUmpOqfxPZf1vnlwJaaKB95keeB3Tj5x4z8rq2fQ i+A7NCsWWzDUbyBLdHfTJqkfjwIExxddruAgIZiCVAXRk16+FEw= -----END CERTIFICATE-----Generated at Sat Apr 5 20:38:10 2025 by rpki-client