$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft File: 3E0D060F214DF8E6493243033EBD30ABD627ED36.mft (raw, json) Hash identifier: 5TS80nD1u8E8jdhGkytBGTb4BRrS47I/M97st7KyLpM= Subject key identifier: DB:12:44:01:40:A3:54:48:0C:E8:C9:8B:41:C8:7A:3E:37:55:6D:E1 Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Certificate serial: 7605C7CB7A138547AD3A2FB27C6997877AD0A7DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft Manifest number: 0325 Signing time: Mon 02 Jun 2025 00:01:21 +0000 Manifest this update: Sun 01 Jun 2025 23:56:21 +0000 Manifest next update: Thu 05 Jun 2025 02:52:21 +0000 Files and hashes: 1: 3E0D060F214DF8E6493243033EBD30ABD627ED36.crl (hash: LIZRRVZ8XbhPlQAdV4aBx8dloRcp5mX0ELhf3MF4xjo=) 2: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: Ez6QIdOXrwH3cf8oEyXk+iBGNJ8xFXIz0jGNdzgCm5M=) 3: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: CbVKZtVYvVOggDO1uOKPHPfiUdMOnMjVJFDe5xCk8Yw=) 4: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: weBnxCBwkaeNxkdjFOdohMOR+sXn3+vCk0UPpAqaQI8=) 5: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: JWZBNDnWrENdctaqQmnbVevM+3EqtVlewochx0EfS+s=) 6: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: fOY5dkAcQph8EWJTLprRbPuleZdE/MLjzsb7GZ9f9kI=) 7: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: jx7v0Idpebq1Ou6PCUn6oQ0kEGw/RyRx4sL+jxJLcZU=) 8: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: 3D9vuP9WnybAIy/tjpIyzYKT6Y/ASbbbLJ7Kn+x1z7Q=) 9: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: xxFYLgnOs6wDgHlT3HJi54CQjUA2KWj+T7DvpjE3DPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 02:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:05:c7:cb:7a:13:85:47:ad:3a:2f:b2:7c:69:97:87:7a:d0:a7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Validity Not Before: Jun 1 23:56:21 2025 GMT Not After : Jun 5 02:52:21 2025 GMT Subject: CN=DB12440140A354480CE8C98B41C87A3E37556DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:00:ca:f6:ca:57:82:c8:01:0b:1a:44:6c: 92:10:24:03:7e:52:02:77:a2:0f:d7:48:b7:17:46: 26:55:0b:40:70:9c:ba:33:06:26:bb:07:13:4f:2b: ea:8a:15:52:6d:5b:cf:cd:6a:bc:bb:49:c7:fa:2e: 79:d2:9e:08:93:fc:4d:a4:f4:2f:0d:4d:ba:c6:49: 06:2e:2f:49:c4:1b:72:45:a1:02:5a:27:65:c9:e7: 7a:8c:99:a1:95:5d:4b:3b:8a:b5:d0:de:52:da:cc: 6d:cb:d1:40:42:f8:5d:6f:d5:d0:b2:3b:9e:e5:5b: e2:47:a6:30:3a:ea:e9:8b:3d:c3:fe:8d:9b:0d:3f: 96:e8:a3:5a:04:19:d2:fd:34:cc:e2:e3:5f:dd:ca: 29:56:cb:90:01:28:27:07:7f:15:31:19:3e:86:18: 4a:a4:16:5d:1b:38:f6:0e:1c:d9:6e:b5:b7:ba:1a: ab:e3:7e:06:f4:58:be:33:fe:d8:56:e0:66:9e:77: b9:c6:0b:3a:7f:ff:e4:a4:9e:d7:39:c3:96:38:2b: 9d:ba:2a:0b:fd:80:3a:65:3a:20:1f:a2:a1:c1:9f: 53:f0:f4:bc:ae:75:35:5a:8f:8d:df:12:cf:2c:85: 7f:4f:59:8c:6f:36:72:e6:14:68:fa:60:cc:15:ca: 90:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:12:44:01:40:A3:54:48:0C:E8:C9:8B:41:C8:7A:3E:37:55:6D:E1 X509v3 Authority Key Identifier: keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8d:fc:f8:2c:5e:db:76:df:2d:23:ee:94:05:1d:4c:7d:2b: ac:24:c5:da:8e:47:c1:6b:73:5e:f7:19:8f:09:db:f6:84:30: 54:bb:29:cb:7b:b4:ea:de:53:72:92:f5:53:eb:3a:7c:80:79: 64:08:a4:3d:4d:b7:ce:ae:a2:be:35:88:ef:e7:2a:49:ee:74: 64:83:f6:aa:90:8b:3d:ec:8e:ae:0f:fb:93:d6:b6:14:08:e7: 3a:13:9d:2f:42:8d:a4:38:ed:7b:42:2b:d3:d6:e5:0b:82:a0: 74:11:89:8e:55:fb:0e:ac:d2:91:9e:ee:0b:d8:b7:fd:13:c7: 1f:df:fc:4a:37:92:eb:0d:31:20:1e:92:a1:c4:d3:65:fb:ca: e3:70:df:1a:62:4b:71:2d:2e:a0:98:fa:ff:e8:d5:db:fa:9f: 94:9a:74:4e:ca:a7:b9:e1:22:88:17:7a:94:cc:ad:b8:4a:43: ae:2c:57:e0:b9:21:cf:df:2f:c3:da:c4:fd:25:18:2b:c0:f7: 91:32:56:c1:9a:9e:3c:9c:ac:86:86:f3:5c:6f:f6:2b:23:a8: b3:be:e7:df:dd:c5:77:3d:80:e4:ed:4c:78:37:ce:ac:8c:70: 42:6e:7b:9c:30:38:a4:7a:3b:29:8b:1f:30:80:78:3a:be:5e: 70:d8:5f:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgXHy3oThUetOi+yfGmXh3rQp9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJE NjI3RUQzNjAeFw0yNTA2MDEyMzU2MjFaFw0yNTA2MDUwMjUyMjFaMDMxMTAvBgNV BAMTKERCMTI0NDAxNDBBMzU0NDgwQ0U4Qzk4QjQxQzg3QTNFMzc1NTZERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRwDK9spXgsgBCxpEbJIQJAN+ UgJ3og/XSLcXRiZVC0BwnLozBia7BxNPK+qKFVJtW8/Nary7Scf6LnnSngiT/E2k 9C8NTbrGSQYuL0nEG3JFoQJaJ2XJ53qMmaGVXUs7irXQ3lLazG3L0UBC+F1v1dCy O57lW+JHpjA66umLPcP+jZsNP5boo1oEGdL9NMzi41/dyilWy5ABKCcHfxUxGT6G GEqkFl0bOPYOHNlutbe6Gqvjfgb0WL4z/thW4Gaed7nGCzp//+Skntc5w5Y4K526 Kgv9gDplOiAfoqHBn1Pw9LyudTVaj43fEs8shX9PWYxvNnLmFGj6YMwVypC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xJEAUCjVEgM6MmLQch6PjdVbeEwHwYDVR0j BBgwFoAUPg0GDyFN+OZJMkMDPr0wq9Yn7TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjRmODUxMS0wN2IzLTRhNjEtYmQwNC0yZTY2NWM5Mjc4ZmMvMC8zRTBEMDYwRjIx NERGOEU2NDkzMjQzMDMzRUJEMzBBQkQ2MjdFRDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJENjI3 RUQzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI0Zjg1MTEtMDdiMy00YTYxLWJk MDQtMmU2NjVjOTI3OGZjLzAvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMw QUJENjI3RUQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaN/PgsXtt23y0j7pQFHUx9K6wkxdqOR8Fr c173GY8J2/aEMFS7Kct7tOreU3KS9VPrOnyAeWQIpD1Nt86uor41iO/nKknudGSD 9qqQiz3sjq4P+5PWthQI5zoTnS9CjaQ47XtCK9PW5QuCoHQRiY5V+w6s0pGe7gvY t/0Txx/f/Eo3kusNMSAekqHE02X7yuNw3xpiS3EtLqCY+v/o1dv6n5SadE7Kp7nh IogXepTMrbhKQ64sV+C5Ic/fL8PaxP0lGCvA95EyVsGanjycrIaG81xv9isjqLO+ 59/dxXc9gOTtTHg3zqyMcEJue5wwOKR6OymLHzCAeDq+XnDYX3s= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:48 2025 by rpki-client