$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: xMqZ0/2NJS0uLP5gkOuL8ZYz1DERT1/S7yBAEmHRGBw= Subject key identifier: 57:BC:EE:FD:DD:00:38:CC:A5:4C:17:7B:A7:FE:6E:F2:0C:A8:31:36 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 0EBBC5B79A0A893FAA2594620A7967C714C71BE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 0177 Signing time: Fri 04 Apr 2025 09:11:48 +0000 Manifest this update: Fri 04 Apr 2025 09:06:48 +0000 Manifest next update: Mon 07 Apr 2025 12:38:48 +0000 Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: YkqTUS2Z2UuwtoM368RF8urC/Oab5X97e1L3+cvZ7rw=) 2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 12:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:bb:c5:b7:9a:0a:89:3f:aa:25:94:62:0a:79:67:c7:14:c7:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Apr 4 09:06:48 2025 GMT Not After : Apr 7 12:38:48 2025 GMT Subject: CN=57BCEEFDDD0038CCA54C177BA7FE6EF20CA83136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ca:8c:04:b0:9c:ac:58:80:7f:c7:00:dc:44: ea:5e:f5:d0:b5:0b:cc:a0:3b:df:b7:0b:08:c3:61: 73:6b:75:da:b0:66:cf:7e:b2:a1:44:1c:f9:19:df: 26:6a:a0:ab:e9:c8:4f:37:a7:39:67:be:92:a6:86: 51:9f:85:f7:83:f0:72:43:36:3c:01:b5:d4:ea:ce: 49:1d:d3:b0:5a:27:bb:1b:9a:e4:9c:89:ec:be:4f: 32:59:ee:60:e7:df:55:05:4e:06:9b:ae:6f:d9:b1: 8e:e8:54:e3:73:a9:dc:21:ff:6e:85:53:fe:d8:77: cf:2e:f6:04:d2:e7:66:e1:4d:96:61:6d:ca:be:9f: e6:9e:49:57:86:96:72:b7:36:3c:6f:26:4a:3d:d8: a7:61:fa:7b:17:1e:15:c4:7f:11:d9:d3:79:df:39: 53:e5:26:24:ec:7a:dd:34:07:97:7d:0a:a5:bf:fb: 83:c7:31:ca:0e:d0:65:a2:59:98:1b:98:7d:33:66: 97:3d:ea:4c:9b:5f:69:b6:1a:a5:37:5f:85:f0:51: 6f:8f:5b:c5:c0:67:f3:b1:e4:85:89:97:db:97:73: 4e:59:8f:9a:3d:9a:aa:df:72:90:b7:4f:7b:92:94: d1:20:b4:b3:3d:5d:41:57:44:0b:1d:57:fc:d3:d0: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:EE:FD:DD:00:38:CC:A5:4C:17:7B:A7:FE:6E:F2:0C:A8:31:36 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:85:45:8c:16:51:fb:16:4d:28:22:75:f0:7b:b6:d2:ee:3a: b6:21:24:63:28:ed:89:5a:5a:50:6f:3c:af:15:41:12:47:11: eb:2a:29:2a:bb:6a:16:0c:1f:d6:c7:5b:6c:ff:1e:7a:b4:ed: ed:fb:2e:c4:79:39:17:4f:ed:81:f7:9e:30:36:a7:5f:02:a3: 44:48:69:2e:1d:6b:6c:a5:e1:59:84:84:2b:33:21:3c:49:59: 21:2f:4f:3e:56:c6:f7:86:f7:2b:b3:29:70:0e:08:3c:ba:fe: 71:d2:6e:cb:4a:ef:84:9f:10:a0:ec:33:cd:a4:03:9b:bf:e1: da:96:0b:d6:43:bd:77:5d:a5:22:da:05:9b:b6:60:b4:4e:8a: 46:35:f7:be:06:27:37:d5:dc:70:f4:8e:bf:23:5c:64:88:89: 8b:ee:8c:02:cf:c8:5a:1a:87:3e:4d:1f:ad:76:e8:d4:9f:ec: 46:de:eb:fc:8b:37:81:a5:70:5f:0d:24:75:c8:e8:e3:e0:7d: d1:79:7d:3d:ce:5e:66:8b:c4:b9:af:32:b2:41:40:8c:af:54: 45:55:6b:d1:28:a1:a1:75:4d:ef:6e:a5:65:93:47:80:7e:f2: 26:e8:9b:29:58:7b:33:b1:c5:b8:06:d5:ad:a3:5c:41:f5:96: 71:84:9d:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrvFt5oKiT+qJZRiCnlnxxTHG+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTA0MDQwOTA2NDhaFw0yNTA0MDcxMjM4NDhaMDMxMTAvBgNV BAMTKDU3QkNFRUZEREQwMDM4Q0NBNTRDMTc3QkE3RkU2RUYyMENBODMxMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5yowEsJysWIB/xwDcROpe9dC1 C8ygO9+3CwjDYXNrddqwZs9+sqFEHPkZ3yZqoKvpyE83pzlnvpKmhlGfhfeD8HJD NjwBtdTqzkkd07BaJ7sbmuSciey+TzJZ7mDn31UFTgabrm/ZsY7oVONzqdwh/26F U/7Yd88u9gTS52bhTZZhbcq+n+aeSVeGlnK3NjxvJko92Kdh+nsXHhXEfxHZ03nf OVPlJiTset00B5d9CqW/+4PHMcoO0GWiWZgbmH0zZpc96kybX2m2GqU3X4XwUW+P W8XAZ/Ox5IWJl9uXc05Zj5o9mqrfcpC3T3uSlNEgtLM9XUFXRAsdV/zT0Dz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV7zu/d0AOMylTBd7p/5u8gyoMTYwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANOFRYwWUfsWTSgidfB7ttLuOrYhJGMo7Yla WlBvPK8VQRJHEesqKSq7ahYMH9bHW2z/Hnq07e37LsR5ORdP7YH3njA2p18Co0RI aS4da2yl4VmEhCszITxJWSEvTz5WxveG9yuzKXAOCDy6/nHSbstK74SfEKDsM82k A5u/4dqWC9ZDvXddpSLaBZu2YLROikY1974GJzfV3HD0jr8jXGSIiYvujALPyFoa hz5NH6126NSf7Ebe6/yLN4GlcF8NJHXI6OPgfdF5fT3OXmaLxLmvMrJBQIyvVEVV a9EooaF1Te9upWWTR4B+8ibomylYezOxxbgG1a2jXEH1lnGEnag= -----END CERTIFICATE-----Generated at Sat Apr 5 16:46:57 2025 by rpki-client