$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: wxwjslVDm8CFpXx2XHRMhGXWE56gfWGvinhtseNeduw= Subject key identifier: C8:4D:41:FC:29:56:6E:38:F0:1F:DE:0E:1C:7A:1B:F2:26:DB:7B:94 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 0E8E71B231A507FCB6EB3D64E0C249354E0FDF62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0335 Signing time: Tue 03 Jun 2025 17:53:30 +0000 Manifest this update: Tue 03 Jun 2025 17:48:30 +0000 Manifest next update: Sat 07 Jun 2025 04:21:30 +0000 Files and hashes: 1: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) 2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) 3: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: Tj+6ywOU2Ftd9yX1okzSNUaNg9aynr5CrrCwm+ghJKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8e:71:b2:31:a5:07:fc:b6:eb:3d:64:e0:c2:49:35:4e:0f:df:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Jun 3 17:48:30 2025 GMT Not After : Jun 7 04:21:30 2025 GMT Subject: CN=C84D41FC29566E38F01FDE0E1C7A1BF226DB7B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:2e:71:03:61:6d:70:cd:ae:4a:4a:5f:f3: dc:fd:00:7d:2e:b0:96:44:ab:c1:dc:71:6d:a5:28: 95:13:dc:22:20:26:00:3b:54:0a:cf:1d:ca:80:14: 2c:4b:fe:39:50:7e:4f:ea:66:38:55:0f:74:87:f4: b0:d3:6d:95:13:e4:b0:88:16:65:02:a1:74:96:54: 7b:cc:ee:01:91:5e:2e:dd:56:6f:17:a3:20:85:d2: 2f:49:ed:44:07:34:a9:1b:3f:ac:a3:67:71:65:08: 03:f7:ab:79:de:44:bb:0c:60:dd:7a:05:e8:fb:8f: ff:9d:fa:ea:0e:02:be:15:a7:4a:0d:e1:ec:49:ef: ce:9c:5f:d9:4d:d5:22:42:a9:2a:c9:a8:01:e3:7e: 2f:dc:3f:75:9f:25:80:a5:d5:ae:9c:e3:f2:89:8f: 71:10:b2:f9:63:14:60:45:58:6f:bb:2c:dd:70:50: 85:91:5a:c7:66:cd:43:2c:55:9d:e6:ab:bf:83:07: 86:52:01:ff:10:99:b6:86:9b:cb:36:ce:ee:83:bc: dc:4a:84:35:ec:8c:c9:ac:5f:a2:e3:60:5d:2f:46: 28:73:de:ba:83:72:08:54:4b:ee:68:87:b2:8e:4e: e8:4a:dd:6c:5f:51:0a:53:91:37:1e:93:73:5b:43: 37:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4D:41:FC:29:56:6E:38:F0:1F:DE:0E:1C:7A:1B:F2:26:DB:7B:94 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:bd:f9:e9:6a:ad:dd:57:c9:ac:90:9d:9e:da:3e:d4:94:13: 17:cf:18:b4:b8:09:7a:55:07:ba:69:70:84:0a:11:97:cd:c4: 27:8a:54:05:e6:32:0b:4c:6a:dc:c8:ae:b0:4c:7d:fb:21:5b: f9:b1:c2:1b:89:2b:ad:06:f9:44:85:4c:30:6a:70:98:09:24: 6f:0e:2a:af:39:2e:38:48:4c:50:c4:0c:a4:02:81:90:ee:9f: d7:c7:19:4e:24:06:b9:f9:4e:6b:ae:d1:91:4a:0c:54:80:79: c9:8c:23:7f:62:91:88:b5:82:cf:ef:4f:a3:07:5b:3c:e2:3a: d4:a0:2e:bf:d9:93:7e:f3:88:50:45:47:34:67:7a:90:33:ac: 4f:d7:72:54:44:1c:f1:be:52:00:09:5b:9a:50:ab:0e:41:f2: ff:8e:78:f6:4a:c1:0f:6a:e3:2d:5d:cc:e1:bd:90:c5:65:0e: 07:7a:13:26:2d:c1:82:3a:87:38:ca:48:b0:69:f1:79:58:b3: 1b:29:0a:77:61:f1:c2:25:55:2f:7e:3a:98:a0:89:8d:2c:d9: 72:8f:35:82:98:b9:b1:e9:a1:e4:10:5e:35:ab:26:37:32:41: 3b:32:80:3c:d4:0d:46:19:74:8e:97:5e:72:74:db:58:31:ce: a4:15:58:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDo5xsjGlB/y26z1k4MJJNU4P32IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTA2MDMxNzQ4MzBaFw0yNTA2MDcwNDIxMzBaMDMxMTAvBgNV BAMTKEM4NEQ0MUZDMjk1NjZFMzhGMDFGREUwRTFDN0ExQkYyMjZEQjdCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLi5xA2FtcM2uSkpf89z9AH0u sJZEq8HccW2lKJUT3CIgJgA7VArPHcqAFCxL/jlQfk/qZjhVD3SH9LDTbZUT5LCI FmUCoXSWVHvM7gGRXi7dVm8XoyCF0i9J7UQHNKkbP6yjZ3FlCAP3q3neRLsMYN16 Bej7j/+d+uoOAr4Vp0oN4exJ786cX9lN1SJCqSrJqAHjfi/cP3WfJYCl1a6c4/KJ j3EQsvljFGBFWG+7LN1wUIWRWsdmzUMsVZ3mq7+DB4ZSAf8QmbaGm8s2zu6DvNxK hDXsjMmsX6LjYF0vRihz3rqDcghUS+5oh7KOTuhK3WxfUQpTkTcek3NbQzfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyE1B/ClWbjjwH94OHHob8ibbe5QwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACa9+elqrd1XyayQnZ7aPtSUExfPGLS4CXpV B7ppcIQKEZfNxCeKVAXmMgtMatzIrrBMffshW/mxwhuJK60G+USFTDBqcJgJJG8O Kq85LjhITFDEDKQCgZDun9fHGU4kBrn5Tmuu0ZFKDFSAecmMI39ikYi1gs/vT6MH WzziOtSgLr/Zk37ziFBFRzRnepAzrE/XclREHPG+UgAJW5pQqw5B8v+OePZKwQ9q 4y1dzOG9kMVlDgd6EyYtwYI6hzjKSLBp8XlYsxspCndh8cIlVS9+OpigiY0s2XKP NYKYubHpoeQQXjWrJjcyQTsygDzUDUYZdI6XXnJ021gxzqQVWD0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:03 2025 by rpki-client