$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: hVRYHUBvSlswS3PRoDN4A7y/h3AimuiBS7yd5X9M/44= Subject key identifier: 05:D1:23:5D:10:59:C7:4B:1E:21:25:88:A4:7F:1A:9A:F6:D5:5B:2D Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 1D88AABE220BE551AAC02CA751A487FC84088B1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 04DC Signing time: Wed 04 Jun 2025 10:40:36 +0000 Manifest this update: Wed 04 Jun 2025 10:35:36 +0000 Manifest next update: Sat 07 Jun 2025 21:14:36 +0000 Files and hashes: 1: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: AVkKZZwPgUTfVOwS3yorrqPC+/oeiPP17jEvixE1G7M=) 2: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 3: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) 4: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:88:aa:be:22:0b:e5:51:aa:c0:2c:a7:51:a4:87:fc:84:08:8b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Jun 4 10:35:36 2025 GMT Not After : Jun 7 21:14:36 2025 GMT Subject: CN=05D1235D1059C74B1E212588A47F1A9AF6D55B2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:50:cb:b4:ae:81:41:fe:25:f3:46:d1:b1: 65:cc:ce:83:f7:bf:ac:ec:11:9a:c1:e7:95:8f:f5: e8:6c:05:db:a1:b5:fe:70:6f:3f:3f:c8:94:aa:54: 7a:07:7b:a0:5d:66:e7:35:e5:08:d1:b4:b6:4e:85: 5e:64:4e:ac:13:67:b5:94:a6:6e:41:7e:1a:83:dc: 08:73:8b:f4:ae:88:b7:31:81:28:1e:df:f6:66:bb: 79:ff:c5:cf:8a:c4:39:eb:29:57:21:88:70:c6:90: 9e:0b:9b:9f:74:be:a5:2d:85:ed:82:9d:05:db:ce: 44:9f:f5:83:fc:10:4a:15:10:06:13:84:3f:7e:f8: 5a:56:b0:fd:4d:24:c9:08:b6:4c:b9:30:9d:5c:51: aa:29:14:8b:0a:30:c5:cc:c1:28:2e:2c:f3:ca:d5: 17:85:7a:28:11:31:fe:3e:db:af:2b:85:c9:0e:51: 99:82:b8:41:a7:3b:29:5c:94:f4:38:33:0d:45:d3: 02:81:e3:1d:4a:74:bb:de:47:51:da:42:98:a6:7e: 7d:31:bf:fd:6c:96:ed:e7:b1:8a:93:d2:4a:ad:1b: d4:58:31:6b:53:e7:5a:b7:13:2e:e8:dd:2a:ff:f2: ff:b4:53:ad:fe:14:a6:35:5f:2e:97:a9:1b:9d:56: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D1:23:5D:10:59:C7:4B:1E:21:25:88:A4:7F:1A:9A:F6:D5:5B:2D X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:31:37:e8:d6:a4:3a:4c:60:9e:dc:5b:39:84:0e:80:b6:b3: 9d:5b:89:d6:e3:dc:24:f5:ae:15:ae:d0:f1:e0:48:2e:3d:df: 1b:c6:4a:b0:82:83:92:7f:2c:80:22:54:36:5c:fb:46:3d:23: a0:ff:9b:c3:12:bb:7e:44:51:02:c6:e4:ec:8e:9d:77:9d:11: 9f:e4:c7:35:92:5c:cb:a0:b6:fa:bd:47:14:fa:be:4e:57:0f: 3d:d0:c8:4b:87:0c:2e:b2:a1:46:49:a0:61:10:fd:42:66:3a: bf:bb:1c:8c:89:6e:42:84:40:02:c3:b0:82:03:13:3a:c6:81: a7:38:58:e9:8c:ef:24:a0:61:a7:64:da:78:5e:de:7a:42:df: 44:42:04:32:5d:d7:3f:c2:38:01:80:26:26:ee:66:e8:13:56: f7:f9:90:94:b3:05:63:ca:3c:62:0e:ee:d0:49:97:4d:93:0b: 44:69:b4:49:c0:4b:72:89:f9:93:cf:fa:8c:ec:05:84:10:b3: dd:9d:00:46:49:b4:c2:ab:26:fc:be:1a:c0:d8:7d:82:90:2f: 22:5b:1c:8c:a5:75:84:54:16:b0:5d:4a:30:03:35:80:26:cb: c6:63:d0:56:16:87:50:4e:b5:af:01:af:71:82:ca:15:f5:19: 22:76:3d:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHYiqviIL5VGqwCynUaSH/IQIix8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTA2MDQxMDM1MzZaFw0yNTA2MDcyMTE0MzZaMDMxMTAvBgNV BAMTKDA1RDEyMzVEMTA1OUM3NEIxRTIxMjU4OEE0N0YxQTlBRjZENTVCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7lDLtK6BQf4l80bRsWXMzoP3 v6zsEZrB55WP9ehsBduhtf5wbz8/yJSqVHoHe6BdZuc15QjRtLZOhV5kTqwTZ7WU pm5BfhqD3Ahzi/SuiLcxgSge3/Zmu3n/xc+KxDnrKVchiHDGkJ4Lm590vqUthe2C nQXbzkSf9YP8EEoVEAYThD9++FpWsP1NJMkItky5MJ1cUaopFIsKMMXMwSguLPPK 1ReFeigRMf4+268rhckOUZmCuEGnOylclPQ4Mw1F0wKB4x1KdLveR1HaQpimfn0x v/1slu3nsYqT0kqtG9RYMWtT51q3Ey7o3Sr/8v+0U63+FKY1Xy6XqRudVko3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdEjXRBZx0seISWIpH8amvbVWy0wHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkxN+jWpDpMYJ7cWzmEDoC2s51bidbj3CT1 rhWu0PHgSC493xvGSrCCg5J/LIAiVDZc+0Y9I6D/m8MSu35EUQLG5OyOnXedEZ/k xzWSXMugtvq9RxT6vk5XDz3QyEuHDC6yoUZJoGEQ/UJmOr+7HIyJbkKEQALDsIID EzrGgac4WOmM7ySgYadk2nhe3npC30RCBDJd1z/COAGAJibuZugTVvf5kJSzBWPK PGIO7tBJl02TC0RptEnAS3KJ+ZPP+ozsBYQQs92dAEZJtMKrJvy+GsDYfYKQLyJb HIyldYRUFrBdSjADNYAmy8Zj0FYWh1BOta8Br3GCyhX1GSJ2PYA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:25:53 2025 by rpki-client