$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: RfQXg0jOMC28b+MvDaf6NZIdacPfPGq+Cc8afDdY9J8= Subject key identifier: 45:F6:F6:D4:DC:39:EB:E2:7F:EE:42:5D:CF:34:AF:5B:7E:91:29:4A Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 3154026980D0ADB40F4A20E97A826018436B403C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 01DB Signing time: Fri 06 Jun 2025 16:11:37 +0000 Manifest this update: Fri 06 Jun 2025 16:06:37 +0000 Manifest next update: Tue 10 Jun 2025 00:59:37 +0000 Files and hashes: 1: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: WyzsXgptMvopQhQyzD/ekABcHohtz6md6z5ymXOvpnA=) 2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: 2OJ/wtKeIZAaX++aUeHXj+pN9DRnOhjC4MRVlbyCCIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:54:02:69:80:d0:ad:b4:0f:4a:20:e9:7a:82:60:18:43:6b:40:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Jun 6 16:06:37 2025 GMT Not After : Jun 10 00:59:37 2025 GMT Subject: CN=45F6F6D4DC39EBE27FEE425DCF34AF5B7E91294A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:d5:9e:a6:fe:5b:8c:07:18:f9:07:c8:86: 56:50:b6:f4:ce:90:26:b2:e5:5d:2b:6f:30:79:53: d0:9f:2f:7a:8e:6b:70:d0:75:72:a1:14:bf:0d:71: 30:24:cd:72:36:be:38:e0:e7:7a:ec:9a:b9:4d:04: f2:96:ed:4e:c4:4f:c3:7b:f4:09:3f:e9:82:8c:86: d1:9f:ad:1f:17:3d:6c:87:8f:fd:fe:61:85:9c:12: 10:84:de:95:28:ac:04:fa:f4:79:95:a9:e1:d6:b9: de:ee:c8:89:10:d8:ae:26:9e:ce:f3:4f:72:ff:f5: 35:5b:56:91:6f:be:77:58:65:99:48:c1:ce:eb:0f: 3b:cf:3c:a4:1a:ae:4e:51:1e:b6:41:e2:72:66:51: 43:76:63:9e:14:60:83:d1:c7:4e:d3:90:a0:72:d1: ec:90:85:ba:54:6d:60:7d:3b:6a:5f:7f:4d:66:bc: 9e:c2:f6:60:c2:6f:2d:af:32:19:8c:07:ba:e8:b8: 38:bd:4d:b0:ae:a0:57:68:90:39:b2:80:65:8c:0f: c4:85:d1:4e:3f:00:a7:3e:7a:8c:65:65:a8:0b:52: cd:4d:e0:4c:a8:fd:9c:1c:48:4f:6a:bb:18:14:60: 2e:65:6c:da:45:7d:65:ae:77:52:ea:f7:a9:a8:87: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F6:F6:D4:DC:39:EB:E2:7F:EE:42:5D:CF:34:AF:5B:7E:91:29:4A X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:35:19:8b:82:c6:c9:63:af:46:76:7f:5c:0d:9e:1c:05:5b: a9:bc:69:8c:c6:9a:8b:90:08:49:6b:78:e0:08:e2:31:a4:cb: ea:aa:1a:23:08:a4:ea:2f:75:5f:26:4c:1e:8a:f9:45:dd:db: 29:43:2e:ce:ff:ec:67:60:3e:2e:4a:d0:91:36:04:a1:87:72: 80:d3:19:d3:7c:d6:69:fb:72:84:1a:35:f5:d9:0d:46:21:d3: 6c:b2:7a:e9:88:83:a8:be:19:55:ee:b3:2b:53:9d:26:ff:4e: 8e:c2:ad:7c:0d:14:ec:26:d6:67:23:d9:fc:be:24:e1:a7:c5: 06:f8:b7:91:72:10:25:54:a2:29:44:d9:86:7e:ce:55:e3:41: 04:4f:c6:27:30:f8:4e:b2:4b:99:c8:83:4e:19:0c:3e:8d:41: 43:79:6c:6d:2d:50:c8:3f:51:56:92:4a:14:c8:2b:43:a8:bd: 15:eb:c8:bb:b4:31:6c:87:a5:75:3f:55:1d:eb:46:e2:d5:5b: ef:0e:e3:31:de:52:78:4d:19:f3:1c:60:5f:b8:11:90:96:6a: 11:82:65:55:7a:5d:3c:16:d8:3c:da:d9:3a:44:ed:24:58:05: e4:4f:a1:36:2d:9f:f7:6c:66:36:32:da:c9:b2:75:1d:f8:e8: c9:fd:39:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMVQCaYDQrbQPSiDpeoJgGENrQDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTA2MDYxNjA2MzdaFw0yNTA2MTAwMDU5MzdaMDMxMTAvBgNV BAMTKDQ1RjZGNkQ0REMzOUVCRTI3RkVFNDI1RENGMzRBRjVCN0U5MTI5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwENWepv5bjAcY+QfIhlZQtvTO kCay5V0rbzB5U9CfL3qOa3DQdXKhFL8NcTAkzXI2vjjg53rsmrlNBPKW7U7ET8N7 9Ak/6YKMhtGfrR8XPWyHj/3+YYWcEhCE3pUorAT69HmVqeHWud7uyIkQ2K4mns7z T3L/9TVbVpFvvndYZZlIwc7rDzvPPKQark5RHrZB4nJmUUN2Y54UYIPRx07TkKBy 0eyQhbpUbWB9O2pff01mvJ7C9mDCby2vMhmMB7rouDi9TbCuoFdokDmygGWMD8SF 0U4/AKc+eoxlZagLUs1N4Eyo/ZwcSE9quxgUYC5lbNpFfWWud1Lq96mohzSfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURfb21Nw56+J/7kJdzzSvW36RKUowHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFM1GYuCxsljr0Z2f1wNnhwFW6m8aYzGmouQ CElreOAI4jGky+qqGiMIpOovdV8mTB6K+UXd2ylDLs7/7GdgPi5K0JE2BKGHcoDT GdN81mn7coQaNfXZDUYh02yyeumIg6i+GVXusytTnSb/To7CrXwNFOwm1mcj2fy+ JOGnxQb4t5FyECVUoilE2YZ+zlXjQQRPxicw+E6yS5nIg04ZDD6NQUN5bG0tUMg/ UVaSShTIK0OovRXryLu0MWyHpXU/VR3rRuLVW+8O4zHeUnhNGfMcYF+4EZCWahGC ZVV6XTwW2Dza2TpE7SRYBeRPoTYtn/dsZjYy2smydR346Mn9OSM= -----END CERTIFICATE-----Generated at Sat Jun 7 11:49:49 2025 by rpki-client