$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: xNQ/nzKUYkpyF2AClOSLdry7XnOhV8ISBh/X/s5Y4aI= Subject key identifier: A0:78:FC:EE:F5:40:DC:8B:63:7C:B7:66:20:5C:62:04:74:C7:28:3F Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 3FA3BBC7EABF96484CDA86D180B0EE2F4315BB79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: 8F Signing time: Thu 05 Jun 2025 08:42:19 +0000 Manifest this update: Thu 05 Jun 2025 08:37:19 +0000 Manifest next update: Sun 08 Jun 2025 14:15:19 +0000 Files and hashes: 1: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: HdQz1dWfKOGxSjvYAjfqgzM8praYpuYX0xMaqB08kJM=) 2: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: HuAPb9V3iN7gcp6jljXClvtpHs4XEGbzHFMDyflauQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 14:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a3:bb:c7:ea:bf:96:48:4c:da:86:d1:80:b0:ee:2f:43:15:bb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Jun 5 08:37:19 2025 GMT Not After : Jun 8 14:15:19 2025 GMT Subject: CN=A078FCEEF540DC8B637CB766205C620474C7283F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f7:da:da:a5:e0:b6:f4:77:94:e8:e3:c8:94: b1:4b:bf:fb:46:fc:67:3b:6b:61:91:03:86:8c:de: cf:5e:fa:4f:ef:93:0c:61:42:3d:94:bd:7f:c1:9c: 19:15:30:87:f2:bb:9b:45:05:1c:f2:a2:91:f6:1d: fb:e8:4f:b4:e6:24:09:ad:7f:de:17:43:54:c3:e3: 4d:24:e5:d7:be:5f:d3:8a:d1:e7:68:4d:c0:de:8a: e6:3e:ca:ba:36:18:ca:06:50:3f:29:b0:ea:80:46: fb:b3:b9:37:7a:c6:0a:32:27:ca:6b:2e:9f:00:0a: 1f:13:c4:55:82:56:91:a7:5b:57:11:36:42:1e:90: 4b:c3:45:3c:8b:65:63:d1:28:3c:b7:fa:99:64:69: cb:11:b9:f2:76:22:0e:87:c2:bf:2a:22:6d:2b:8e: c0:91:63:c8:eb:92:88:14:c9:a4:d7:21:ed:2f:3f: b5:cb:42:8d:09:f6:7c:77:1d:06:5e:40:1f:ae:92: a7:71:79:4e:10:51:7f:a0:47:ac:e7:26:1a:8e:cf: 2c:73:97:71:04:3e:5f:bd:6c:a9:6d:e4:d8:a1:37: f5:04:f8:ae:c5:05:b5:8c:6c:34:3b:44:3c:7a:06: 1d:08:42:56:ae:82:4d:e6:16:e4:70:47:66:16:5a: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:78:FC:EE:F5:40:DC:8B:63:7C:B7:66:20:5C:62:04:74:C7:28:3F X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9b:d0:b6:8e:08:f9:8d:56:29:e4:c9:25:da:04:86:e5:ef: fb:c9:12:87:d1:f3:85:2c:2f:e8:25:3b:15:09:e3:c7:2f:19: ce:cb:7a:8c:ab:e8:c2:65:4a:5a:46:ee:66:0e:05:92:5e:55: a1:d2:72:86:0c:55:7d:42:1c:c0:97:dd:c1:2a:f8:10:d5:e9: 9a:ac:b2:84:5c:8f:60:f3:f6:b0:35:db:69:05:3a:30:ca:48: 2e:27:26:12:0b:81:4e:1f:f6:94:6c:07:3a:8e:70:99:8e:3d: 3d:f0:3a:93:53:ba:00:aa:26:84:57:d1:0c:64:97:2d:24:3a: 13:52:7a:58:67:c2:ff:48:94:ff:4d:e3:d4:ac:44:a4:e5:1d: 0b:7d:99:0f:f1:f0:b8:69:28:a8:87:1e:70:1f:10:94:ca:bd: 62:4f:84:0a:23:a0:2f:f5:4e:45:63:ff:2f:8f:72:75:31:32: ef:7c:25:9f:b2:93:6e:6d:09:45:b8:2e:31:c7:a0:5a:25:29: 2d:b4:34:e3:49:33:8a:eb:cf:05:45:f6:4f:3b:1f:75:37:1a: 47:b8:8d:49:77:96:88:b9:13:e8:25:2a:e4:4f:4d:f0:3c:d4: bd:9b:0c:7c:6b:ee:bd:d5:cc:67:14:9e:62:92:f3:ff:d3:25: cc:11:47:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6O7x+q/lkhM2obRgLDuL0MVu3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNTA2MDUwODM3MTlaFw0yNTA2MDgxNDE1MTlaMDMxMTAvBgNV BAMTKEEwNzhGQ0VFRjU0MERDOEI2MzdDQjc2NjIwNUM2MjA0NzRDNzI4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw99rapeC29HeU6OPIlLFLv/tG /Gc7a2GRA4aM3s9e+k/vkwxhQj2UvX/BnBkVMIfyu5tFBRzyopH2HfvoT7TmJAmt f94XQ1TD400k5de+X9OK0edoTcDeiuY+yro2GMoGUD8psOqARvuzuTd6xgoyJ8pr Lp8ACh8TxFWCVpGnW1cRNkIekEvDRTyLZWPRKDy3+plkacsRufJ2Ig6Hwr8qIm0r jsCRY8jrkogUyaTXIe0vP7XLQo0J9nx3HQZeQB+ukqdxeU4QUX+gR6znJhqOzyxz l3EEPl+9bKlt5NihN/UE+K7FBbWMbDQ7RDx6Bh0IQlaugk3mFuRwR2YWWn4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoHj87vVA3ItjfLdmIFxiBHTHKD8wHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+b0LaOCPmNVinkySXaBIbl7/vJEofR84Us L+glOxUJ48cvGc7Leoyr6MJlSlpG7mYOBZJeVaHScoYMVX1CHMCX3cEq+BDV6Zqs soRcj2Dz9rA122kFOjDKSC4nJhILgU4f9pRsBzqOcJmOPT3wOpNTugCqJoRX0Qxk ly0kOhNSelhnwv9IlP9N49SsRKTlHQt9mQ/x8LhpKKiHHnAfEJTKvWJPhAojoC/1 TkVj/y+PcnUxMu98JZ+yk25tCUW4LjHHoFolKS20NONJM4rrzwVF9k87H3U3Gke4 jUl3loi5E+glKuRPTfA81L2bDHxr7r3VzGcUnmKS8//TJcwRRzA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:02:17 2025 by rpki-client