$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: v4GHA/hmxOnjvk4KqC2p/BOe5XJPNuiCUuTxiEeNHEU= Subject key identifier: EC:CB:13:DA:FA:E0:85:BF:C6:C7:E2:33:33:A9:72:D0:40:10:95:99 Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 400431B233C39B7F71F4D17FAEFBDF9CA97A8693 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 0288 Signing time: Wed 04 Jun 2025 10:31:18 +0000 Manifest this update: Wed 04 Jun 2025 10:26:18 +0000 Manifest next update: Sat 07 Jun 2025 13:10:18 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: 28NEZViyAua8GgnH437xEtS0pyTzhdn54A/RiyUX0aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 13:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:04:31:b2:33:c3:9b:7f:71:f4:d1:7f:ae:fb:df:9c:a9:7a:86:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Jun 4 10:26:18 2025 GMT Not After : Jun 7 13:10:18 2025 GMT Subject: CN=ECCB13DAFAE085BFC6C7E23333A972D040109599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:72:64:b1:27:8e:83:61:7c:30:11:1f:6f: 0a:f1:66:20:b1:ed:98:60:c5:5c:8e:78:5f:f1:f1: 1f:d9:fd:c2:f5:4c:18:cb:6f:b8:43:71:99:9b:bb: 2d:29:52:9c:16:a3:11:d3:ae:b9:c8:cb:63:e5:99: d4:7d:4d:b0:bc:83:50:db:0e:63:fa:03:a4:4a:21: ba:5e:5f:37:00:1a:03:c7:56:fd:19:d8:26:63:af: 77:d1:6c:02:86:d8:e7:b4:3e:76:bc:60:e5:48:59: ec:9d:cb:a5:46:f8:12:00:b3:0c:67:68:27:00:a7: 0a:04:91:b4:ed:71:5d:c3:7a:7a:98:18:ef:3a:b6: 9c:1d:00:47:50:52:23:a6:26:1c:d7:9f:bb:a3:66: ea:d1:f5:b1:e8:7e:85:53:ec:97:88:5e:27:c6:31: 48:ee:9f:62:0e:b5:ae:7e:25:1f:a9:a0:3a:50:5b: 49:07:91:7e:a2:46:d6:93:16:54:a5:4a:5b:b1:f7: 27:b2:0e:af:77:44:5e:67:fe:e4:f4:77:5c:6c:93: 67:10:56:52:63:eb:a9:a4:33:71:35:32:d6:8e:22: 16:1f:25:83:6f:5b:c7:cb:87:42:e6:4c:79:42:b0: 55:a3:8b:b3:0a:7a:59:36:82:15:52:2d:6e:d1:3f: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CB:13:DA:FA:E0:85:BF:C6:C7:E2:33:33:A9:72:D0:40:10:95:99 X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6c:df:66:85:2b:be:77:14:3b:c1:c5:14:12:8c:cd:8f:dc: 10:c2:64:80:88:47:53:2b:88:74:30:43:37:48:ea:f5:30:81: 04:0c:6f:63:e7:0c:26:b1:1a:63:9e:18:ff:d9:0e:60:e1:5c: 3d:d0:25:f9:3c:e5:92:6f:32:b8:92:61:90:10:d9:c8:1d:a5: 10:66:a9:4c:f7:42:de:bd:33:9a:0e:9f:f9:f3:d2:89:63:3f: 2a:01:03:1e:c8:71:b9:74:7f:cd:db:06:18:73:e0:d6:c6:40: 20:1d:0d:cb:71:a4:2f:85:be:a4:e0:a4:b5:e7:fd:d1:25:65: cf:47:86:65:67:0c:a4:f1:e7:0a:8b:64:f1:79:3a:ce:31:56: 27:96:53:8e:99:b4:40:29:71:2a:5a:0a:4e:35:34:68:19:1d: 89:13:fc:7f:b8:b9:8a:f2:f7:f9:37:84:07:59:d5:ff:2e:05: b5:15:74:7d:c8:e4:59:93:99:2a:12:dd:fd:dd:58:c8:16:c9: 74:ce:01:45:d3:5f:48:f0:9a:dc:39:ae:cc:3b:d9:f4:e1:e3: 9b:e8:17:df:72:92:cc:c9:18:79:9a:db:6b:4a:9e:ce:04:23: 53:9e:67:23:4d:e9:2a:c4:ad:98:dd:8e:2f:98:d6:1b:43:2d: c2:b4:18:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAQxsjPDm39x9NF/rvvfnKl6hpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTA2MDQxMDI2MThaFw0yNTA2MDcxMzEwMThaMDMxMTAvBgNV BAMTKEVDQ0IxM0RBRkFFMDg1QkZDNkM3RTIzMzMzQTk3MkQwNDAxMDk1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMnJksSeOg2F8MBEfbwrxZiCx 7ZhgxVyOeF/x8R/Z/cL1TBjLb7hDcZmbuy0pUpwWoxHTrrnIy2PlmdR9TbC8g1Db DmP6A6RKIbpeXzcAGgPHVv0Z2CZjr3fRbAKG2Oe0Pna8YOVIWeydy6VG+BIAswxn aCcApwoEkbTtcV3DenqYGO86tpwdAEdQUiOmJhzXn7ujZurR9bHofoVT7JeIXifG MUjun2IOta5+JR+poDpQW0kHkX6iRtaTFlSlSlux9yeyDq93RF5n/uT0d1xsk2cQ VlJj66mkM3E1MtaOIhYfJYNvW8fLh0LmTHlCsFWji7MKelk2ghVSLW7RP9AvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7MsT2vrghb/Gx+IzM6ly0EAQlZkwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9s32aFK753FDvBxRQSjM2P3BDCZICIR1Mr iHQwQzdI6vUwgQQMb2PnDCaxGmOeGP/ZDmDhXD3QJfk85ZJvMriSYZAQ2cgdpRBm qUz3Qt69M5oOn/nz0oljPyoBAx7Icbl0f83bBhhz4NbGQCAdDctxpC+FvqTgpLXn /dElZc9HhmVnDKTx5wqLZPF5Os4xVieWU46ZtEApcSpaCk41NGgZHYkT/H+4uYry 9/k3hAdZ1f8uBbUVdH3I5FmTmSoS3f3dWMgWyXTOAUXTX0jwmtw5rsw72fTh45vo F99ykszJGHma22tKns4EI1OeZyNN6SrErZjdji+Y1htDLcK0GMo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:25 2025 by rpki-client