$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json) Hash identifier: /tVCTEvppgKv41vClS3vpLMDDYe75flzebRXm9bicEE= Subject key identifier: 6C:68:6E:DA:4B:17:04:84:A2:9D:10:A9:C4:C4:E1:D6:85:4D:96:CD Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 3C575848FB58439E5BEE2E4CDC0267FDFA88F75A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft Manifest number: 01D8 Signing time: Sun 08 Jun 2025 14:00:57 +0000 Manifest this update: Sun 08 Jun 2025 13:55:57 +0000 Manifest next update: Wed 11 Jun 2025 14:47:57 +0000 Files and hashes: 1: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: 5ODCvpJsl+XnXZcZjU6a9g5frNriLFm4lEWGxVY15JQ=) 2: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: 6pWVSpFXVKH6EqJrCt3rmPa2Bj+n9pO/wL1SNQ2qvtg=) 3: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: 8XoWA7wjQ9QxZ0L/Kfwe37SJlUE1mXybXTnMU4joHBk=) 4: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: YfWdCVoIH1DQu9Nb8zknsBq3gjAx6STdl7+GflAiVVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:57:58:48:fb:58:43:9e:5b:ee:2e:4c:dc:02:67:fd:fa:88:f7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Jun 8 13:55:57 2025 GMT Not After : Jun 11 14:47:57 2025 GMT Subject: CN=6C686EDA4B170484A29D10A9C4C4E1D6854D96CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:16:02:93:fb:0a:37:34:36:5d:c5:5d:f8: 26:b5:c9:6d:1c:22:c1:c9:7d:ae:75:28:3b:72:eb: 31:49:47:3c:00:69:c0:4f:b9:ba:4d:59:64:9c:5d: 96:3b:25:db:50:30:f3:4f:22:7f:00:e1:1d:e8:96: da:3e:a2:b9:59:45:1d:0a:0e:1e:49:51:9b:15:94: 63:d2:57:03:ee:62:4b:58:f3:27:c0:f6:cf:9c:26: ed:cb:7b:06:1e:d7:46:3b:80:d3:7b:fa:08:42:9b: 1c:58:0f:10:83:57:bd:ca:e6:93:e2:08:28:0e:bc: a4:9c:e1:c3:b9:15:42:8d:74:74:b2:96:c9:e4:19: 4b:93:00:aa:4c:e0:56:ec:72:e6:4e:3f:0d:e6:6c: 46:ce:30:1d:af:6c:73:85:a8:2d:da:d3:ad:48:44: 59:5c:e3:9a:c9:5e:91:3d:41:81:9c:21:f3:9b:28: 85:aa:70:a0:04:12:64:aa:5e:db:1f:9f:d9:6b:77: a7:32:68:1f:7e:76:08:62:0c:15:81:22:a1:08:e0: 30:dc:87:51:99:88:51:53:85:d6:dd:39:ea:34:af: a0:3d:bc:83:47:a5:9a:de:28:28:83:86:e0:2d:0d: f3:7a:dd:a2:35:99:1d:32:19:c0:c5:a7:60:fd:ec: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:68:6E:DA:4B:17:04:84:A2:9D:10:A9:C4:C4:E1:D6:85:4D:96:CD X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:3b:c2:38:d0:6a:b6:e0:b7:85:ac:14:4e:a6:de:69:7f:3c: ec:18:f7:36:dd:8e:c4:a3:bf:c6:fc:21:1b:18:67:0a:e7:b5: 05:a8:20:69:da:88:35:34:18:9c:5b:e1:31:41:c0:9a:98:f2: 5c:e3:54:cc:2a:37:04:33:1d:81:d4:03:04:17:fa:1e:e7:13: 2e:a1:19:80:89:54:ef:69:b5:54:4e:1c:56:94:b6:a7:83:7a: de:1a:a0:86:b6:8c:1c:94:c2:87:20:a7:c7:2d:28:f3:8f:8e: 66:8e:6c:8e:3d:c8:ba:00:35:9a:f8:ad:1e:71:49:ef:5a:fd: 33:c7:72:84:79:8c:b9:5b:79:e1:82:dd:f3:01:95:35:49:49: e8:29:89:bd:6a:94:60:4a:8b:67:32:d6:64:2c:ce:73:56:fa: 2d:d8:f1:48:b4:3a:b0:4b:df:82:7b:61:63:a3:e5:6a:bb:3e: 96:77:eb:1d:78:06:07:d3:4d:0c:56:f1:e3:de:18:8b:c6:35: 4b:86:07:71:1b:73:e5:f0:1e:3f:9b:e2:2f:7a:c2:68:77:9a: 87:f2:f4:ae:c5:a4:ed:66:70:3a:21:4a:a4:ea:8c:4b:02:27: 08:02:e5:d2:d0:62:f2:99:59:d8:99:49:cf:de:50:42:3d:2a: 82:88:e4:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPFdYSPtYQ55b7i5M3AJn/fqI91owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNTA2MDgxMzU1NTdaFw0yNTA2MTExNDQ3NTdaMDMxMTAvBgNV BAMTKDZDNjg2RURBNEIxNzA0ODRBMjlEMTBBOUM0QzRFMUQ2ODU0RDk2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMiBYCk/sKNzQ2XcVd+Ca1yW0c IsHJfa51KDty6zFJRzwAacBPubpNWWScXZY7JdtQMPNPIn8A4R3olto+orlZRR0K Dh5JUZsVlGPSVwPuYktY8yfA9s+cJu3LewYe10Y7gNN7+ghCmxxYDxCDV73K5pPi CCgOvKSc4cO5FUKNdHSylsnkGUuTAKpM4FbscuZOPw3mbEbOMB2vbHOFqC3a061I RFlc45rJXpE9QYGcIfObKIWqcKAEEmSqXtsfn9lrd6cyaB9+dghiDBWBIqEI4DDc h1GZiFFThdbdOeo0r6A9vINHpZreKCiDhuAtDfN63aI1mR0yGcDFp2D97C/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbGhu2ksXBISinRCpxMTh1oVNls0wHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABM7wjjQarbgt4WsFE6m3ml/POwY9zbdjsSj v8b8IRsYZwrntQWoIGnaiDU0GJxb4TFBwJqY8lzjVMwqNwQzHYHUAwQX+h7nEy6h GYCJVO9ptVROHFaUtqeDet4aoIa2jByUwocgp8ctKPOPjmaObI49yLoANZr4rR5x Se9a/TPHcoR5jLlbeeGC3fMBlTVJSegpib1qlGBKi2cy1mQsznNW+i3Y8Ui0OrBL 34J7YWOj5Wq7PpZ36x14BgfTTQxW8ePeGIvGNUuGB3Ebc+XwHj+b4i96wmh3mofy 9K7FpO1mcDohSqTqjEsCJwgC5dLQYvKZWdiZSc/eUEI9KoKI5HE= -----END CERTIFICATE-----Generated at Sun Jun 8 18:33:27 2025 by rpki-client