$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: /SRrvipeuwGHL8DTMTCTYXbTVSWio7+VsMFNsJo+gbY= Subject key identifier: D5:F3:22:D6:F8:8F:3B:9A:C6:EF:B4:0F:0F:42:84:77:5A:AA:6A:CF Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 6E665CC7954500901DFF4286163453845BF9ACC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 01C0 Signing time: Mon 07 Apr 2025 00:51:29 +0000 Manifest this update: Mon 07 Apr 2025 00:46:29 +0000 Manifest next update: Thu 10 Apr 2025 06:56:29 +0000 Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: 2OJ/wtKeIZAaX++aUeHXj+pN9DRnOhjC4MRVlbyCCIw=) 2: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: GtT5huXWDKMvdrCDr9sSnDswCogOH9+p/PjPh9AU9jE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:66:5c:c7:95:45:00:90:1d:ff:42:86:16:34:53:84:5b:f9:ac:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Apr 7 00:46:29 2025 GMT Not After : Apr 10 06:56:29 2025 GMT Subject: CN=D5F322D6F88F3B9AC6EFB40F0F4284775AAA6ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:de:3e:84:90:b7:a8:d2:e3:31:e1:1f:8b: 5f:a7:f6:eb:a0:f9:61:85:3e:5f:87:11:30:7c:e0: 79:60:a5:4c:12:b1:5a:d8:d3:3d:d8:09:be:8a:70: aa:5a:38:ae:37:b7:2d:7e:77:8d:76:b9:f2:f1:88: 32:f6:9d:77:bb:94:c4:de:f9:2f:2c:ff:cb:aa:72: 92:42:e4:19:a9:85:55:93:ce:63:e6:be:27:2a:75: 15:03:ff:9d:c5:7f:e4:ab:0e:cf:50:8b:e3:7c:0b: 71:71:0a:4f:54:4d:60:5d:b1:dd:ff:9d:63:4e:cd: cf:db:97:60:50:26:96:c4:63:5f:9d:31:c7:d9:de: 2a:4e:de:29:3c:c1:d0:9b:38:ca:83:9a:1b:05:50: cf:16:25:5d:a6:2d:9e:22:93:c0:c9:f6:f2:61:6d: ef:b1:fb:e2:2d:ec:18:67:47:dc:7c:c8:60:0a:54: 8e:cb:30:c6:50:a0:f5:f2:21:18:31:99:16:df:e9: 4e:86:35:ec:3e:05:65:20:80:89:ad:73:1c:92:67: 9b:b1:f0:33:ae:02:40:a3:93:c4:4b:58:42:36:bf: 9c:db:84:dd:f8:20:c9:65:90:db:e8:38:bf:62:a1: 0f:90:fc:b7:4b:f3:9c:c8:3c:24:db:8f:2a:a5:69: f7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F3:22:D6:F8:8F:3B:9A:C6:EF:B4:0F:0F:42:84:77:5A:AA:6A:CF X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1e:6e:d1:2b:8e:37:6b:a9:29:b8:e2:7e:a4:5f:7b:8c:97: c8:22:a6:23:23:ce:7f:32:e7:87:0f:ad:90:a2:01:a3:4f:01: 10:5c:42:3a:73:33:8f:ac:52:f0:33:ce:e4:64:fb:6d:04:3f: 1c:75:a8:b0:cf:21:8b:e4:37:2a:a4:34:6c:eb:d0:d4:bc:0c: 06:52:ee:51:43:8b:91:d1:09:84:a8:e5:99:13:6b:7d:1e:a9: 8c:cb:04:af:2c:59:0f:d7:d1:fc:c9:fd:c2:a8:2b:47:e4:1c: 34:90:59:b3:38:eb:66:30:1b:5d:18:59:61:59:b2:ed:09:61: 23:a0:f3:31:36:e4:fa:a0:c3:e8:a1:fc:ab:20:87:c0:81:ee: d7:34:a2:51:1d:cb:eb:d0:65:74:eb:11:c1:b6:11:1b:b6:28: 26:35:16:71:51:05:a4:0a:40:c2:06:0b:12:a0:3a:3f:e1:91: d5:fc:1e:a7:6b:5a:d7:81:ba:4d:b7:86:61:8a:e6:ce:01:56: 86:d4:73:4c:75:32:71:10:8a:89:06:c9:ec:ac:03:63:4c:c7: e3:c9:33:36:22:f7:8c:61:9f:4a:b2:ff:bb:4b:c2:85:e6:24: cf:5e:c8:f9:5d:58:f2:98:38:a4:b4:cf:4b:d8:de:48:fd:90: fa:73:67:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmZcx5VFAJAd/0KGFjRThFv5rMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTA0MDcwMDQ2MjlaFw0yNTA0MTAwNjU2MjlaMDMxMTAvBgNV BAMTKEQ1RjMyMkQ2Rjg4RjNCOUFDNkVGQjQwRjBGNDI4NDc3NUFBQTZBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZEd4+hJC3qNLjMeEfi1+n9uug +WGFPl+HETB84HlgpUwSsVrY0z3YCb6KcKpaOK43ty1+d412ufLxiDL2nXe7lMTe +S8s/8uqcpJC5BmphVWTzmPmvicqdRUD/53Ff+SrDs9Qi+N8C3FxCk9UTWBdsd3/ nWNOzc/bl2BQJpbEY1+dMcfZ3ipO3ik8wdCbOMqDmhsFUM8WJV2mLZ4ik8DJ9vJh be+x++It7BhnR9x8yGAKVI7LMMZQoPXyIRgxmRbf6U6GNew+BWUggImtcxySZ5ux 8DOuAkCjk8RLWEI2v5zbhN34IMllkNvoOL9ioQ+Q/LdL85zIPCTbjyqlafflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1fMi1viPO5rG77QPD0KEd1qqas8wHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYebtErjjdrqSm44n6kX3uMl8gipiMjzn8y 54cPrZCiAaNPARBcQjpzM4+sUvAzzuRk+20EPxx1qLDPIYvkNyqkNGzr0NS8DAZS 7lFDi5HRCYSo5ZkTa30eqYzLBK8sWQ/X0fzJ/cKoK0fkHDSQWbM462YwG10YWWFZ su0JYSOg8zE25Pqgw+ih/Ksgh8CB7tc0olEdy+vQZXTrEcG2ERu2KCY1FnFRBaQK QMIGCxKgOj/hkdX8HqdrWteBuk23hmGK5s4BVobUc0x1MnEQiokGyeysA2NMx+PJ MzYi94xhn0qy/7tLwoXmJM9eyPldWPKYOKS0z0vY3kj9kPpzZxc= -----END CERTIFICATE-----Generated at Mon Apr 7 10:36:50 2025 by rpki-client