$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: 6cVvEClksN4+icWEIVGOxliR0zZMqHCPE6MkaBOkv9g= Subject key identifier: 17:45:19:D7:A5:9E:98:07:F1:13:3C:8E:90:4C:74:E5:90:1D:07:B4 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 2AD85487E5A7034810E90A390784590A056F3212 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 031A Signing time: Fri 04 Apr 2025 05:02:22 +0000 Manifest this update: Fri 04 Apr 2025 04:57:22 +0000 Manifest next update: Mon 07 Apr 2025 14:44:22 +0000 Files and hashes: 1: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) 2: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: H/L8Xv+Pe9X2hgfISyeoOMdx3p99Y1SJjKIiUtDztYE=) 3: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d8:54:87:e5:a7:03:48:10:e9:0a:39:07:84:59:0a:05:6f:32:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Apr 4 04:57:22 2025 GMT Not After : Apr 7 14:44:22 2025 GMT Subject: CN=174519D7A59E9807F1133C8E904C74E5901D07B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:57:8e:22:83:65:24:99:e3:00:f8:fe:ae:31: b6:13:8a:2e:76:a7:92:1b:36:3e:ae:0f:aa:ee:25: 2a:42:8c:25:6f:36:48:52:8d:bf:33:77:6b:97:38: 1a:ac:8a:45:1b:10:23:9b:26:85:90:42:3e:09:eb: 79:44:5f:6b:5e:29:dd:f7:44:3c:6e:78:f4:74:19: fc:ed:27:bd:78:3c:e8:13:fd:fb:6b:ea:71:06:a4: c3:2e:9a:8c:8f:ce:58:f6:a0:79:9b:92:5d:e0:f0: b8:a7:fd:45:9f:75:b6:2f:b4:bd:46:0a:43:38:8f: 1f:47:6a:6c:6c:0d:0b:4f:e6:af:02:ce:ef:3f:28: 91:ed:de:ac:72:2c:0a:16:92:f5:cd:11:ad:c8:1a: 41:d6:6e:e7:0b:ae:ba:d8:2c:23:dc:4f:6c:15:69: 92:d1:24:c1:cd:17:e3:e1:c4:5c:a8:79:63:02:a4: 0c:cc:e5:f4:cd:b7:3c:08:c7:91:f9:30:c7:c4:69: 71:a2:f0:7c:1a:01:88:fa:91:f3:e7:1f:eb:de:fe: 5a:1c:44:94:64:7d:6f:fa:4c:e8:a4:d8:b9:f6:04: d5:b2:5e:12:0c:35:4c:a9:f6:be:c3:1c:6f:c0:9e: ca:34:43:f7:be:3e:5c:14:e2:3c:4f:af:81:9e:97: c7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:45:19:D7:A5:9E:98:07:F1:13:3C:8E:90:4C:74:E5:90:1D:07:B4 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3f:2e:2c:c3:c6:9d:63:50:1f:03:a6:cf:c1:cf:c1:47:cf: 44:cf:12:a4:62:97:96:96:71:23:83:d7:97:b1:e4:a9:9d:82: f1:7d:40:d2:02:1b:1a:4d:45:91:b3:19:ed:d5:27:db:55:9b: 45:0b:5a:ed:f5:c7:4f:35:54:06:50:aa:2c:07:45:be:ca:86: 1c:3d:6a:86:43:7c:f8:80:fc:a2:d2:28:a8:45:3a:c0:71:35: df:7b:52:b6:09:4b:dc:3d:28:bf:ef:5a:00:a9:96:d4:3c:84: e1:08:ba:37:54:bb:99:97:e7:b6:b4:5b:c7:55:36:86:61:41: 06:60:b8:1e:c2:38:16:07:ab:38:31:d8:14:4f:e5:cb:77:0e: 10:cc:83:55:d5:4a:fb:ce:4c:8a:d4:e2:b5:2a:6b:25:84:83: c5:0e:81:5f:99:18:39:27:10:87:65:aa:40:a0:a0:e4:23:c5: f6:5d:39:c4:27:44:8f:96:a0:0a:61:44:45:96:60:e3:95:6b: 7a:19:3a:a2:ba:9e:b7:87:cc:be:16:6d:42:b7:02:ca:32:a7: b5:72:77:1a:cc:86:cf:77:20:18:33:9b:f7:d0:cd:46:0a:fd: 72:cd:fb:29:54:43:91:f7:25:fc:7a:a5:a3:ee:82:d2:93:8b: fb:d1:91:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKthUh+WnA0gQ6Qo5B4RZCgVvMhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTA0MDQwNDU3MjJaFw0yNTA0MDcxNDQ0MjJaMDMxMTAvBgNV BAMTKDE3NDUxOUQ3QTU5RTk4MDdGMTEzM0M4RTkwNEM3NEU1OTAxRDA3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUV44ig2UkmeMA+P6uMbYTii52 p5IbNj6uD6ruJSpCjCVvNkhSjb8zd2uXOBqsikUbECObJoWQQj4J63lEX2teKd33 RDxuePR0GfztJ714POgT/ftr6nEGpMMumoyPzlj2oHmbkl3g8Lin/UWfdbYvtL1G CkM4jx9HamxsDQtP5q8Czu8/KJHt3qxyLAoWkvXNEa3IGkHWbucLrrrYLCPcT2wV aZLRJMHNF+PhxFyoeWMCpAzM5fTNtzwIx5H5MMfEaXGi8HwaAYj6kfPnH+ve/loc RJRkfW/6TOik2Ln2BNWyXhIMNUyp9r7DHG/Anso0Q/e+PlwU4jxPr4Gel8d9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF0UZ16WemAfxEzyOkEx05ZAdB7QwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI/LizDxp1jUB8Dps/Bz8FHz0TPEqRil5aW cSOD15ex5KmdgvF9QNICGxpNRZGzGe3VJ9tVm0ULWu31x081VAZQqiwHRb7Khhw9 aoZDfPiA/KLSKKhFOsBxNd97UrYJS9w9KL/vWgCpltQ8hOEIujdUu5mX57a0W8dV NoZhQQZguB7COBYHqzgx2BRP5ct3DhDMg1XVSvvOTIrU4rUqayWEg8UOgV+ZGDkn EIdlqkCgoOQjxfZdOcQnRI+WoAphREWWYOOVa3oZOqK6nreHzL4WbUK3Asoyp7Vy dxrMhs93IBgzm/fQzUYK/XLN+ylUQ5H3Jfx6paPugtKTi/vRkbo= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:10 2025 by rpki-client