$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: 512NOVqY8/aLY0y/6VekY4HXoD5v/fNPr7xZDenx8e0= Subject key identifier: B5:77:5E:47:DF:10:A8:9E:23:38:48:4A:B6:58:1B:DC:B6:75:4D:CD Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 6017A128B75DD86AADD44287F0926AF6C5F4A5C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 01D3 Signing time: Thu 05 Jun 2025 04:00:05 +0000 Manifest this update: Thu 05 Jun 2025 03:55:05 +0000 Manifest next update: Sun 08 Jun 2025 14:03:05 +0000 Files and hashes: 1: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: SEpXqEQti8BeeE1/EBscC6WPl+flOv/b2p/JGof7x/4=) 2: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 14:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:17:a1:28:b7:5d:d8:6a:ad:d4:42:87:f0:92:6a:f6:c5:f4:a5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Jun 5 03:55:05 2025 GMT Not After : Jun 8 14:03:05 2025 GMT Subject: CN=B5775E47DF10A89E2338484AB6581BDCB6754DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:63:06:39:a2:87:a6:c0:11:03:6f:e2:f5: e7:36:53:9e:87:1f:ce:cb:f3:dd:6d:16:a7:e9:1e: 25:ae:90:d8:7b:b9:90:6c:60:b0:23:ad:16:57:e4: 7d:87:e1:60:95:1e:1a:78:5d:b3:11:4e:0f:ca:29: 31:f4:0a:49:b9:32:df:1f:dd:e1:34:87:4d:d4:85: 33:b0:0a:00:d2:3b:0a:32:69:f3:c2:c0:61:2d:b9: 1d:3c:0a:eb:ea:a0:2e:43:b9:a8:6b:ae:e6:3d:5a: e1:d8:e8:75:51:ee:38:61:8a:81:df:ea:3b:2a:13: 2e:f2:94:55:df:c0:70:45:19:58:33:31:18:f6:ed: 61:9f:18:b8:dc:7a:47:ba:fd:3a:1a:49:53:a1:6f: 9f:37:5c:b2:17:e8:bf:8c:86:52:f3:4f:ab:3d:23: a1:ff:ef:87:eb:89:50:d6:b6:3a:02:c1:5b:46:8f: a1:8d:16:91:b7:76:7f:44:97:9a:b7:d5:23:a0:d0: 21:23:43:9d:81:3b:a6:13:97:54:fd:e1:1e:7f:29: c9:30:7b:54:10:b1:25:da:04:09:0f:ba:19:17:0b: 2d:e4:a4:a0:e1:6b:d1:c4:98:f0:f6:c4:dc:f4:21: cf:42:51:96:c9:df:3d:7e:bc:32:45:e2:88:8a:3a: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:77:5E:47:DF:10:A8:9E:23:38:48:4A:B6:58:1B:DC:B6:75:4D:CD X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c5:15:6e:5c:a6:f3:b9:4f:0d:6b:0a:77:03:e0:e0:6b:4d: a8:ca:be:02:37:5c:24:c5:c2:29:bd:0e:80:c0:cc:40:9d:c4: 5c:03:f2:7b:be:b5:68:03:42:3b:86:dd:fc:37:d9:60:3a:47: e0:5a:f5:4a:76:20:fe:7c:36:0a:53:6e:6d:47:d6:d4:84:fe: 4d:93:b7:b8:d0:e1:83:fb:57:cf:bc:3f:a7:59:1b:19:45:d9: 16:cd:d5:1a:48:2d:64:e1:e6:08:f7:73:97:58:0a:48:cd:35: 17:e8:54:b6:72:13:d2:9b:35:8b:60:11:c5:18:05:f1:b9:6f: 53:cc:0a:32:af:3e:a5:bf:94:8a:a2:14:c2:ac:44:07:29:09: 84:8e:e5:82:d5:21:5e:da:91:72:7c:23:48:0d:18:93:61:9e: 4e:19:88:f9:0e:da:2f:7f:65:22:e8:d5:64:de:41:76:a6:16: b8:69:1e:d3:aa:a4:39:6f:c9:95:d0:b5:e3:db:dd:b8:f8:bc: e0:e6:66:4a:84:66:c0:24:e8:71:5f:b7:2d:b7:4e:e2:b8:31: 56:03:b3:5c:1c:53:9c:82:3d:16:0a:a3:47:e5:68:b2:59:63: b2:fa:33:48:c6:c4:d0:02:2b:33:fe:bc:8e:e5:e7:92:b7:c1: f5:08:f0:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBehKLdd2Gqt1EKH8JJq9sX0pckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTA2MDUwMzU1MDVaFw0yNTA2MDgxNDAzMDVaMDMxMTAvBgNV BAMTKEI1Nzc1RTQ3REYxMEE4OUUyMzM4NDg0QUI2NTgxQkRDQjY3NTREQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7h2MGOaKHpsARA2/i9ec2U56H H87L891tFqfpHiWukNh7uZBsYLAjrRZX5H2H4WCVHhp4XbMRTg/KKTH0Ckm5Mt8f 3eE0h03UhTOwCgDSOwoyafPCwGEtuR08CuvqoC5DuahrruY9WuHY6HVR7jhhioHf 6jsqEy7ylFXfwHBFGVgzMRj27WGfGLjceke6/ToaSVOhb583XLIX6L+MhlLzT6s9 I6H/74friVDWtjoCwVtGj6GNFpG3dn9El5q31SOg0CEjQ52BO6YTl1T94R5/Kckw e1QQsSXaBAkPuhkXCy3kpKDha9HEmPD2xNz0Ic9CUZbJ3z1+vDJF4oiKOr8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtXdeR98QqJ4jOEhKtlgb3LZ1Tc0wHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrFFW5cpvO5Tw1rCncD4OBrTajKvgI3XCTF wim9DoDAzECdxFwD8nu+tWgDQjuG3fw32WA6R+Ba9Up2IP58NgpTbm1H1tSE/k2T t7jQ4YP7V8+8P6dZGxlF2RbN1RpILWTh5gj3c5dYCkjNNRfoVLZyE9KbNYtgEcUY BfG5b1PMCjKvPqW/lIqiFMKsRAcpCYSO5YLVIV7akXJ8I0gNGJNhnk4ZiPkO2i9/ ZSLo1WTeQXamFrhpHtOqpDlvyZXQtePb3bj4vODmZkqEZsAk6HFfty23TuK4MVYD s1wcU5yCPRYKo0flaLJZY7L6M0jGxNACKzP+vI7l55K3wfUI8F0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:25 2025 by rpki-client