$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: RhLg6i7s50nSHUGNIIWM7/LazgSbjGxdzHtNgQxHjZI= Subject key identifier: 10:3F:11:76:E8:1D:4B:87:BD:F3:1F:89:B7:11:D6:23:3A:18:96:7C Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 410C0CE0639C20E85FE2FAE5FDC7537A6500B41B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 04DD Signing time: Fri 06 Jun 2025 11:20:02 +0000 Manifest this update: Fri 06 Jun 2025 11:15:02 +0000 Manifest next update: Mon 09 Jun 2025 16:09:02 +0000 Files and hashes: 1: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: xMhopN6RhUrQr0UoQBGVj4pnpruAcIyICHzqvwrwDho=) 2: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: ceQmMPp+JFM8PLNjUGgt0Y7G0TM8V+j5NlOS6mg0Eis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0c:0c:e0:63:9c:20:e8:5f:e2:fa:e5:fd:c7:53:7a:65:00:b4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Jun 6 11:15:02 2025 GMT Not After : Jun 9 16:09:02 2025 GMT Subject: CN=103F1176E81D4B87BDF31F89B711D6233A18967C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:74:7f:79:4a:72:01:18:26:dd:0c:71:0a: c1:33:49:0c:36:29:33:74:a0:78:90:f7:6a:62:74: 35:c2:3a:86:71:45:74:05:cb:1c:2a:aa:1c:77:f2: 34:65:51:77:36:0b:7c:cc:ee:72:50:ae:38:3e:f4: 40:30:e4:37:b5:dc:e6:fe:12:32:f3:42:2e:f9:23: f6:36:94:8f:6e:c0:af:89:7a:63:29:bd:66:e7:de: ac:58:6e:b4:b9:1f:87:f1:b9:45:6e:1f:70:5d:d6: 7b:1b:13:1c:b5:be:f1:a0:7e:c7:5e:58:57:98:69: 3d:20:48:c4:a9:1e:5b:f8:15:7e:5e:66:5f:ec:c3: b3:7d:ad:cd:8a:1d:9f:ef:60:cb:c4:4e:44:8d:56: 00:55:98:03:49:aa:17:03:b2:44:39:5c:57:5b:59: dd:9e:0e:e1:45:19:f8:93:6f:fd:ed:dd:26:a2:1e: 40:24:c0:f7:b5:8e:44:ba:e4:09:86:36:95:96:4c: 6a:15:a8:57:c3:8b:bb:31:18:96:74:73:bc:99:b2: 01:32:13:e4:d4:9a:90:1c:1d:98:2f:4a:40:8e:dd: cb:25:2c:13:c3:12:42:43:84:5d:51:0b:17:d4:7c: b1:da:2c:ba:be:7b:3d:f6:e2:11:63:a1:f0:6e:96: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:11:76:E8:1D:4B:87:BD:F3:1F:89:B7:11:D6:23:3A:18:96:7C X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1c:50:8e:b4:82:03:8d:19:40:03:42:1b:d0:38:57:62:14: 48:36:64:9e:36:5b:26:80:88:e6:c2:fa:fe:84:cf:86:53:fa: 69:70:45:fd:72:4c:c7:61:c3:42:34:3d:c7:7d:df:a6:7f:c1: 8e:fb:b8:87:f0:ff:0c:ae:7e:42:91:03:b4:f2:c2:2c:2e:f4: 0d:0f:38:ea:66:62:ad:89:e5:ab:63:15:bc:6a:1b:50:dd:f9: 60:91:1d:2b:2c:6f:b8:05:4f:6f:9a:24:ae:73:96:ca:73:15: 02:9e:a0:b8:18:7f:86:13:bf:17:f2:c2:37:7f:d0:53:53:85: 03:7c:70:58:58:a7:b8:c3:58:30:82:29:cb:43:54:f7:b1:92: cc:1c:1b:c7:2a:ea:2b:ab:92:6b:7d:79:19:40:d0:32:4d:db: cb:39:a9:b3:db:0f:51:0f:04:c9:c0:1e:d0:6d:10:f3:ae:46: f1:1d:88:84:c8:f7:17:ac:f6:10:9d:82:75:32:f1:f1:14:d3: 38:e3:8b:2f:1a:6d:16:2b:12:c8:65:fa:17:98:e4:a8:19:ac: d7:41:5c:f6:c3:f3:b7:7f:15:42:b4:02:0a:be:4f:44:1a:35: 78:15:9e:cb:e9:a0:85:3d:ae:48:92:b2:8e:74:39:43:89:f4: 8f:84:3e:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQwM4GOcIOhf4vrl/cdTemUAtBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTA2MDYxMTE1MDJaFw0yNTA2MDkxNjA5MDJaMDMxMTAvBgNV BAMTKDEwM0YxMTc2RTgxRDRCODdCREYzMUY4OUI3MTFENjIzM0ExODk2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bXR/eUpyARgm3QxxCsEzSQw2 KTN0oHiQ92pidDXCOoZxRXQFyxwqqhx38jRlUXc2C3zM7nJQrjg+9EAw5De13Ob+ EjLzQi75I/Y2lI9uwK+JemMpvWbn3qxYbrS5H4fxuUVuH3Bd1nsbExy1vvGgfsde WFeYaT0gSMSpHlv4FX5eZl/sw7N9rc2KHZ/vYMvETkSNVgBVmANJqhcDskQ5XFdb Wd2eDuFFGfiTb/3t3SaiHkAkwPe1jkS65AmGNpWWTGoVqFfDi7sxGJZ0c7yZsgEy E+TUmpAcHZgvSkCO3cslLBPDEkJDhF1RCxfUfLHaLLq+ez324hFjofBulpzBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUED8RdugdS4e98x+JtxHWIzoYlnwwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgcUI60ggONGUADQhvQOFdiFEg2ZJ42WyaA iObC+v6Ez4ZT+mlwRf1yTMdhw0I0Pcd936Z/wY77uIfw/wyufkKRA7Tywiwu9A0P OOpmYq2J5atjFbxqG1Dd+WCRHSssb7gFT2+aJK5zlspzFQKeoLgYf4YTvxfywjd/ 0FNThQN8cFhYp7jDWDCCKctDVPexkswcG8cq6iurkmt9eRlA0DJN28s5qbPbD1EP BMnAHtBtEPOuRvEdiITI9xes9hCdgnUy8fEU0zjjiy8abRYrEshl+heY5KgZrNdB XPbD87d/FUK0Agq+T0QaNXgVnsvpoIU9rkiSso50OUOJ9I+EPgY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:42:30 2025 by rpki-client