$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: +V1htrGZj5IOsoJv57LoIBjcNkTzAIt+92dO/BAmpM4= Subject key identifier: 23:70:53:3B:47:C4:FE:50:E7:93:1B:D6:83:D2:F0:93:AA:80:6A:CA Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 326A1F80DF65C871621806B9737C1583935B022F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 015C Signing time: Wed 04 Jun 2025 08:31:44 +0000 Manifest this update: Wed 04 Jun 2025 08:26:44 +0000 Manifest next update: Sat 07 Jun 2025 18:39:44 +0000 Files and hashes: 1: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) 2: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) 3: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: +W6mkiGtfj0KWkSK8X3Z4CQfFVMNji1EcT1ZkdzC4Dg=) 4: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) 5: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6a:1f:80:df:65:c8:71:62:18:06:b9:73:7c:15:83:93:5b:02:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Jun 4 08:26:44 2025 GMT Not After : Jun 7 18:39:44 2025 GMT Subject: CN=2370533B47C4FE50E7931BD683D2F093AA806ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c0:6a:94:f1:fa:0c:f9:c4:ab:92:97:96:79: 92:26:81:67:91:67:a2:59:01:d8:e4:d6:75:71:c8: 98:24:5c:86:10:6b:84:fd:2d:16:d6:f3:ac:a4:b6: db:35:d5:b8:36:73:fc:01:45:b1:3b:da:6e:c5:7f: 8b:a8:c9:b6:82:62:22:c3:16:60:69:93:d9:c1:9d: 41:4d:28:10:82:a4:d3:a3:2a:4f:ed:b1:a1:3e:09: 94:65:35:b8:b0:f7:8a:ab:6e:78:1f:15:06:b6:f7: 6c:43:93:bc:b8:d8:d5:10:6a:12:5b:85:74:03:98: 45:05:11:c7:d3:68:45:bd:61:59:0c:fa:54:75:4b: bc:51:56:57:83:c5:17:28:cf:b5:0f:7a:d3:a4:54: 70:3e:f1:9d:61:2b:34:60:06:f6:14:10:0b:1e:6a: 87:03:17:e0:28:36:7e:97:06:db:cd:97:90:ea:cb: 6c:52:a7:a9:74:6e:ed:1d:69:78:14:e2:b4:93:46: b7:20:ec:e5:bc:6c:ee:c7:41:55:e1:7f:3f:6c:66: 0b:13:3b:53:bb:c8:ff:81:b9:96:25:a8:b0:1d:4c: 84:be:99:c2:0b:12:fb:d6:4c:2f:cf:2f:2c:88:9e: 9d:b8:87:59:de:04:4e:cc:46:69:2c:77:65:34:ad: 56:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:70:53:3B:47:C4:FE:50:E7:93:1B:D6:83:D2:F0:93:AA:80:6A:CA X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:72:51:4e:05:1a:98:39:4a:9a:dc:e9:fc:57:8b:b3:27:4b: 02:20:6e:ea:4a:b0:07:29:5b:22:be:0f:df:d9:50:1f:ce:50: b5:6e:1d:c6:fa:d0:da:ee:de:f7:b7:61:cb:ea:d8:7f:67:22: b1:ce:19:9a:b4:0e:ed:78:ac:85:45:46:1a:f2:2c:7f:d7:44: fa:57:48:99:a3:d1:a8:e9:f3:c1:0c:91:d2:0e:02:18:d6:12: 8c:f2:8b:16:94:85:74:c9:93:81:0e:9e:3f:ec:78:26:ad:59: 0d:9b:eb:d7:3d:fe:cd:18:9e:34:ea:73:35:98:e0:96:d7:9e: fd:4e:b7:9d:3f:50:6d:84:0b:a9:49:37:c9:ea:f4:55:e0:4f: e6:53:6b:ea:a6:0e:d4:51:4a:d4:bb:8c:fa:c8:74:92:64:9b: b2:18:b9:06:a6:6e:62:6e:b8:c8:a2:b3:16:72:8c:f0:a3:69: 2c:cc:4b:11:b0:dc:b1:4c:90:30:79:73:6d:08:1c:e9:2c:8c: 32:a0:a0:30:55:2f:84:70:84:93:a5:3f:74:1e:d7:dc:a2:4b: 05:3b:0a:ec:9c:5a:7f:fb:97:92:08:8e:59:cb:78:e5:da:01: 06:b1:95:fb:9e:fc:05:31:09:af:5c:48:83:3c:e5:d8:44:ae: c3:12:bd:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmofgN9lyHFiGAa5c3wVg5NbAi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNTA2MDQwODI2NDRaFw0yNTA2MDcxODM5NDRaMDMxMTAvBgNV BAMTKDIzNzA1MzNCNDdDNEZFNTBFNzkzMUJENjgzRDJGMDkzQUE4MDZBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwGqU8foM+cSrkpeWeZImgWeR Z6JZAdjk1nVxyJgkXIYQa4T9LRbW86yktts11bg2c/wBRbE72m7Ff4uoybaCYiLD FmBpk9nBnUFNKBCCpNOjKk/tsaE+CZRlNbiw94qrbngfFQa292xDk7y42NUQahJb hXQDmEUFEcfTaEW9YVkM+lR1S7xRVleDxRcoz7UPetOkVHA+8Z1hKzRgBvYUEAse aocDF+AoNn6XBtvNl5Dqy2xSp6l0bu0daXgU4rSTRrcg7OW8bO7HQVXhfz9sZgsT O1O7yP+BuZYlqLAdTIS+mcILEvvWTC/PLyyInp24h1neBE7MRmksd2U0rVYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI3BTO0fE/lDnkxvWg9Lwk6qAasowHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5yUU4FGpg5Sprc6fxXi7MnSwIgbupKsAcp WyK+D9/ZUB/OULVuHcb60Nru3ve3Ycvq2H9nIrHOGZq0Du14rIVFRhryLH/XRPpX SJmj0ajp88EMkdIOAhjWEozyixaUhXTJk4EOnj/seCatWQ2b69c9/s0YnjTqczWY 4JbXnv1Ot50/UG2EC6lJN8nq9FXgT+ZTa+qmDtRRStS7jPrIdJJkm7IYuQambmJu uMiisxZyjPCjaSzMSxGw3LFMkDB5c20IHOksjDKgoDBVL4RwhJOlP3Qe19yiSwU7 CuycWn/7l5IIjlnLeOXaAQaxlfue/AUxCa9cSIM85dhErsMSvcs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:59 2025 by rpki-client