$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft File: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json) Hash identifier: CnyMQnS/7ZieXlW8d7E1zgG7tSly56Q3+ObkR/vRPAU= Subject key identifier: 0C:ED:EC:A0:26:8D:7B:A6:C2:BB:00:B1:3C:FD:21:F1:43:CF:DD:74 Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 Certificate issuer: /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Certificate serial: 43430094B9D72ADD1018933D91C5175FB50C39A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft Manifest number: 027B Signing time: Mon 02 Jun 2025 19:42:27 +0000 Manifest this update: Mon 02 Jun 2025 19:37:27 +0000 Manifest next update: Fri 06 Jun 2025 06:02:27 +0000 Files and hashes: 1: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: HpSArK9wKsGD/4QjsHQDEChpbO5zQMtEgV2WhSH9EBo=) 2: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: tNCrkyzG4AciCmgimqvIw2bQeulAylk5FoXAJrDEuic=) 3: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: TImz5M9cJp/+fKICdkiMfiG/sWX96hHHaDzpBXeUCP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 06:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:43:00:94:b9:d7:2a:dd:10:18:93:3d:91:c5:17:5f:b5:0c:39:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151 Validity Not Before: Jun 2 19:37:27 2025 GMT Not After : Jun 6 06:02:27 2025 GMT Subject: CN=0CEDECA0268D7BA6C2BB00B13CFD21F143CFDD74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:17:50:9c:ba:b1:ef:2f:53:b7:6a:30:ab: 22:e6:e0:b8:a5:cc:c1:17:ec:8e:d3:77:9a:ef:0b: 0a:b4:a4:66:4c:98:0a:eb:55:43:51:f8:e9:01:e9: 7e:47:86:6a:37:27:45:f0:0d:62:d2:28:2d:28:fe: dc:35:e5:cd:89:d0:c0:84:f6:98:b5:a2:c1:a6:e2: 99:65:aa:3a:4f:4d:45:25:78:a3:b2:57:8a:3f:05: 3c:96:b6:46:c8:c6:61:22:39:47:ef:3a:12:97:68: 7e:89:4f:3b:3e:0b:22:4b:b6:26:62:63:97:7a:26: b6:db:6d:ce:1c:d5:83:e4:41:df:e3:a2:7a:89:13: bc:57:54:8c:21:37:b6:b0:83:6a:08:38:12:d0:f4: b5:0a:dc:bb:95:8b:bc:59:08:26:f1:94:0a:44:96: 03:a0:34:15:17:f0:ad:f7:aa:a3:eb:67:cb:2d:33: f3:23:45:a4:3b:25:2c:fe:79:63:5d:4a:c1:6e:26: 30:7f:41:28:8f:f1:87:df:e7:70:39:bb:13:13:65: c6:76:5d:6f:64:aa:59:df:eb:61:3d:67:42:a5:9e: 5f:e4:08:2b:5e:62:78:3c:ba:a0:4b:e1:4d:f2:10: 16:be:c1:74:06:46:98:81:8f:97:f6:25:be:88:26: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:ED:EC:A0:26:8D:7B:A6:C2:BB:00:B1:3C:FD:21:F1:43:CF:DD:74 X509v3 Authority Key Identifier: keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b0:15:5d:f8:7f:c6:06:93:07:66:30:6f:5b:20:8b:46:bc: 21:fd:a7:e5:9d:b8:52:04:cc:26:ef:4c:a4:d1:27:cd:02:04: d1:ed:19:d9:3b:77:0c:74:94:a4:43:3a:a0:09:e0:39:af:3e: c5:94:70:29:05:64:13:ee:28:69:78:23:86:18:70:56:cb:a2: af:b3:32:73:c7:ee:b5:65:02:db:6f:d8:65:db:da:6f:ce:40: 0f:a8:af:72:da:3d:7d:1d:0b:8e:c1:09:49:be:63:3b:a5:3e: c0:2f:bc:ab:18:a5:49:70:07:2b:04:32:81:cd:c9:fe:c8:2c: d5:1b:ee:d9:67:46:03:69:ae:89:1e:c0:c8:40:29:06:e0:d7: 88:3e:ef:f5:da:2e:9f:57:ad:69:08:d9:f1:cc:ee:ea:00:5e: ba:7a:61:d4:d2:92:88:9d:f8:4a:69:da:b4:d8:14:19:3b:9e: f9:ca:76:e5:20:36:41:74:13:a8:6e:6c:fd:80:1c:43:47:59: 25:14:d4:69:9d:51:56:05:a1:8b:96:73:a8:c4:4a:f9:42:3d: 89:50:f1:92:4a:b8:b4:c4:56:6f:3d:f0:44:36:77:1e:1b:4f: 8d:19:fb:86:5e:e4:c8:59:04:09:0e:bf:7f:44:fa:2e:89:1d: a9:74:5d:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0MAlLnXKt0QGJM9kcUXX7UMOaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2 Q0VGNzE1MTAeFw0yNTA2MDIxOTM3MjdaFw0yNTA2MDYwNjAyMjdaMDMxMTAvBgNV BAMTKDBDRURFQ0EwMjY4RDdCQTZDMkJCMDBCMTNDRkQyMUYxNDNDRkRENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThhdQnLqx7y9Tt2owqyLm4Lil zMEX7I7Td5rvCwq0pGZMmArrVUNR+OkB6X5Hhmo3J0XwDWLSKC0o/tw15c2J0MCE 9pi1osGm4pllqjpPTUUleKOyV4o/BTyWtkbIxmEiOUfvOhKXaH6JTzs+CyJLtiZi Y5d6Jrbbbc4c1YPkQd/jonqJE7xXVIwhN7awg2oIOBLQ9LUK3LuVi7xZCCbxlApE lgOgNBUX8K33qqPrZ8stM/MjRaQ7JSz+eWNdSsFuJjB/QSiP8Yff53A5uxMTZcZ2 XW9kqlnf62E9Z0Klnl/kCCteYng8uqBL4U3yEBa+wXQGRpiBj5f2Jb6IJgWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDO3soCaNe6bCuwCxPP0h8UPP3XQwHwYDVR0j BBgwFoAUDDwRP5gNgA+tX8Rn7n8QgGzvcVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTU3YTNiZi00ODIzLTQ2MDktODVjZC03NzU3MGJmMTg1ODAvMC8wQzNDMTEzRjk4 MEQ4MDBGQUQ1RkM0NjdFRTdGMTA4MDZDRUY3MTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEwODA2Q0VG NzE1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvMEMzQzExM0Y5ODBEODAwRkFENUZDNDY3RUU3RjEw ODA2Q0VGNzE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiwFV34f8YGkwdmMG9bIItGvCH9p+WduFIE zCbvTKTRJ80CBNHtGdk7dwx0lKRDOqAJ4DmvPsWUcCkFZBPuKGl4I4YYcFbLoq+z MnPH7rVlAttv2GXb2m/OQA+or3LaPX0dC47BCUm+YzulPsAvvKsYpUlwBysEMoHN yf7ILNUb7tlnRgNprokewMhAKQbg14g+7/XaLp9XrWkI2fHM7uoAXrp6YdTSkoid +Epp2rTYFBk7nvnKduUgNkF0E6hubP2AHENHWSUU1GmdUVYFoYuWc6jESvlCPYlQ 8ZJKuLTEVm898EQ2dx4bT40Z+4Ze5MhZBAkOv39E+i6JHal0XVI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:46:02 2025 by rpki-client