$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: naDYj7OlY9BOKGuGp3I6ehXf/BGope4OaaQhQ+PDb9A= Subject key identifier: 4F:B0:3C:E1:28:76:80:89:4C:25:EC:84:BA:95:66:CA:64:82:3D:C8 Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 156358626848A7698BB110E3A983A8DEF0F3FBD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 0141 Signing time: Fri 04 Apr 2025 04:01:47 +0000 Manifest this update: Fri 04 Apr 2025 03:56:47 +0000 Manifest next update: Mon 07 Apr 2025 11:00:47 +0000 Files and hashes: 1: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) 2: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) 3: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) 4: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) 5: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: ZgcLxO/w1MNABOuppf14S8uPm1PhS2wItdwI+IX4euU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:63:58:62:68:48:a7:69:8b:b1:10:e3:a9:83:a8:de:f0:f3:fb:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Apr 4 03:56:47 2025 GMT Not After : Apr 7 11:00:47 2025 GMT Subject: CN=4FB03CE1287680894C25EC84BA9566CA64823DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:85:58:6b:45:64:c5:e3:a3:a4:b0:9e:d8: 10:27:32:5b:7f:fc:c4:30:de:42:68:48:55:66:76: 86:23:4f:00:19:dc:6e:55:2f:cf:2c:91:63:a5:2c: f7:d1:f7:83:29:23:b6:15:f6:df:37:77:a8:bf:dd: bc:04:62:4a:c6:97:51:79:3d:7b:b0:10:a7:6d:59: d1:34:19:7b:7d:c4:39:37:5a:b0:20:9c:97:8e:0d: a3:74:de:42:29:a5:af:71:d7:13:0a:34:58:19:2d: 06:6b:20:7a:88:49:64:4d:25:fb:73:09:fb:29:f8: ff:57:49:04:6e:c7:5e:42:d2:1f:2f:06:6b:bd:01: a4:6a:e8:a2:ff:61:6e:d2:02:59:01:26:6b:20:96: 7b:ba:f3:90:4b:c4:12:b7:14:e9:87:73:17:a4:bf: 91:5d:ef:57:3a:15:00:f5:7c:57:bc:c6:27:f5:bc: 34:2c:65:f9:7b:c7:ba:e9:7f:f6:06:e9:ca:26:79: 12:11:7e:3f:df:65:f4:4d:60:c4:a9:88:c4:8d:97: 3d:c1:1d:a8:16:f3:dd:c0:d0:e1:5c:13:94:1a:db: 3d:e0:c1:81:e1:8a:6e:df:1d:a0:1f:19:e1:5e:65: 7e:ce:ae:75:5c:5e:9a:0a:40:01:2b:da:4c:a0:52: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B0:3C:E1:28:76:80:89:4C:25:EC:84:BA:95:66:CA:64:82:3D:C8 X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1b:d3:0f:e4:c4:2c:38:12:48:f1:c7:05:61:66:2b:19:8c: dd:b1:d5:d6:6e:d6:40:c2:2f:12:44:b2:5e:57:d7:ac:ef:6d: c4:25:3e:04:ca:3f:b1:8c:c8:d7:56:62:f4:c7:2e:b4:22:c5: ba:d3:0e:64:06:42:d2:7f:d8:94:05:a1:69:c2:47:d0:ab:f4: de:b8:9a:77:58:e0:83:64:17:0a:5a:60:5c:de:50:e7:9c:88: 94:14:d6:6a:ff:60:b6:19:e1:9d:e0:01:2d:98:e0:4a:12:7a: 48:2b:4c:99:0e:a5:14:9d:5e:08:ff:bd:b4:9d:8f:b0:c5:d9: e6:97:fc:c9:eb:83:a5:fe:14:f4:87:e4:a6:87:f7:16:33:cf: ae:da:20:33:ef:f4:4d:3c:e6:01:8b:7f:ff:d0:ec:87:e9:93: a6:f4:bd:68:81:43:59:43:7e:e0:9d:55:b4:60:5f:59:a5:3f: 30:02:45:14:47:a8:c0:d5:03:59:01:2b:0e:e3:c2:68:51:6a: 82:b6:2d:be:5d:fb:1c:e7:ee:4f:6a:20:4b:2d:05:35:66:01: 6c:52:b9:80:30:b4:de:35:8e:fe:59:06:c7:e5:68:2b:a3:24: 35:d9:98:b6:e9:2e:25:36:86:6f:43:4f:c8:72:af:5c:eb:a3: f5:99:73:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWNYYmhIp2mLsRDjqYOo3vDz+9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNTA0MDQwMzU2NDdaFw0yNTA0MDcxMTAwNDdaMDMxMTAvBgNV BAMTKDRGQjAzQ0UxMjg3NjgwODk0QzI1RUM4NEJBOTU2NkNBNjQ4MjNEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLu4VYa0VkxeOjpLCe2BAnMlt/ /MQw3kJoSFVmdoYjTwAZ3G5VL88skWOlLPfR94MpI7YV9t83d6i/3bwEYkrGl1F5 PXuwEKdtWdE0GXt9xDk3WrAgnJeODaN03kIppa9x1xMKNFgZLQZrIHqISWRNJftz Cfsp+P9XSQRux15C0h8vBmu9AaRq6KL/YW7SAlkBJmsglnu685BLxBK3FOmHcxek v5Fd71c6FQD1fFe8xif1vDQsZfl7x7rpf/YG6comeRIRfj/fZfRNYMSpiMSNlz3B HagW893A0OFcE5Qa2z3gwYHhim7fHaAfGeFeZX7OrnVcXpoKQAEr2kygUpRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT7A84Sh2gIlMJeyEupVmymSCPcgwHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMb0w/kxCw4EkjxxwVhZisZjN2x1dZu1kDC LxJEsl5X16zvbcQlPgTKP7GMyNdWYvTHLrQixbrTDmQGQtJ/2JQFoWnCR9Cr9N64 mndY4INkFwpaYFzeUOeciJQU1mr/YLYZ4Z3gAS2Y4EoSekgrTJkOpRSdXgj/vbSd j7DF2eaX/Mnrg6X+FPSH5KaH9xYzz67aIDPv9E085gGLf//Q7Ifpk6b0vWiBQ1lD fuCdVbRgX1mlPzACRRRHqMDVA1kBKw7jwmhRaoK2Lb5d+xzn7k9qIEstBTVmAWxS uYAwtN41jv5ZBsflaCujJDXZmLbpLiU2hm9DT8hyr1zro/WZc5Y= -----END CERTIFICATE-----Generated at Sat Apr 5 16:37:55 2025 by rpki-client