$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: w4vOhTUxtGdKMI8NjNXiEH8QLwZ2/cK7XZzUXvHDQ5M= Subject key identifier: 8F:05:82:B7:B2:88:C3:29:55:FC:57:91:25:69:13:AA:4E:FC:71:A5 Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 6C244A7B67F5A0AB1B99BA2DA7EF3D6CACA09CCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 01CA Signing time: Thu 05 Jun 2025 13:11:59 +0000 Manifest this update: Thu 05 Jun 2025 13:06:59 +0000 Manifest next update: Sun 08 Jun 2025 18:50:59 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: xCOn9NWbt0GGMLt//qaNrgk/Sb/ECXg1/Jw9T03F6gc=) 2: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: +aYgV7p1X1TAw32sJQDFPZ5QXQcUqf2Pg9Wsy7Iew4g=) 3: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: VIzQkYoIgNT3kxzey3OeWu9PIgOZVkPequh7P8snB7U=) 4: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: rPKEvLXWGWoztExe4HntWPPQ3bNHicZSmrS4LoU+DGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:24:4a:7b:67:f5:a0:ab:1b:99:ba:2d:a7:ef:3d:6c:ac:a0:9c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Jun 5 13:06:59 2025 GMT Not After : Jun 8 18:50:59 2025 GMT Subject: CN=8F0582B7B288C32955FC5791256913AA4EFC71A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2d:06:b0:9c:9c:ab:95:bd:74:dc:55:cc:38: 1c:13:e0:83:67:c6:fa:92:26:c2:42:ed:4f:90:6f: 15:83:89:d1:61:6c:25:48:6d:3b:05:c0:1b:b0:e5: 70:3a:38:b2:29:66:86:bd:7c:e0:d6:e1:10:0c:70: f5:69:63:c6:d8:05:a1:2b:90:df:6c:a2:83:4a:05: b1:a6:f7:8d:25:ab:72:5d:97:01:b3:f8:f2:55:36: 95:9a:85:d7:d9:dd:0d:4a:8e:fb:e7:f0:a9:50:e3: 83:86:dc:99:8a:db:6b:77:bb:73:41:5a:98:a6:89: 2e:f0:7b:06:fa:03:0d:45:92:36:a2:da:47:07:22: dd:f3:e5:c2:54:2d:a9:0c:07:9e:27:47:6d:3f:75: 20:53:17:22:d2:39:40:85:79:2c:44:83:e5:f0:94: fa:3f:ec:1f:49:bc:32:9d:c1:34:0e:91:fa:82:2d: c3:09:16:76:ad:ec:eb:fe:f5:a2:12:0b:10:15:42: 95:dc:f4:6b:97:c1:af:f9:4d:66:16:11:aa:66:89: 15:b0:70:b0:50:41:27:72:9e:3b:29:a4:ff:7e:32: fe:43:5c:f1:f4:4b:2a:2e:22:c7:13:90:62:48:55: 4b:4a:51:c7:e7:84:38:2a:3b:9e:2c:18:c5:8c:db: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:05:82:B7:B2:88:C3:29:55:FC:57:91:25:69:13:AA:4E:FC:71:A5 X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d6:48:a1:93:9c:e0:23:3f:af:02:a9:8d:37:5b:b6:5b:d5: 7a:d5:99:42:01:c8:ae:d0:00:a8:d2:9a:32:dc:a6:a7:1f:94: 13:97:36:3c:3b:ec:b2:85:ca:eb:6a:5a:67:0f:95:3b:d6:71: 03:5f:4c:17:67:c8:cc:23:33:2e:fa:08:7e:c5:07:0c:3c:ff: b3:55:ae:f3:1f:1a:68:91:75:c4:6c:2d:0f:83:52:98:50:b6: 36:43:37:3e:ea:55:f5:4c:e4:0a:2e:15:e3:c8:46:91:aa:19: 72:7c:9a:37:24:01:82:79:db:33:93:74:97:0c:2c:e3:6d:6c: cc:cb:92:cb:aa:12:61:3a:f5:2c:16:db:98:cb:5e:cb:4e:9a: 66:b8:72:f4:d6:bb:29:29:2b:bd:ab:d7:8a:fe:f2:2c:14:6e: c2:82:33:1c:be:dc:1e:31:71:eb:04:17:6d:a0:b1:45:7b:12: c6:0c:34:22:9d:82:60:91:33:6e:cb:d4:c8:2f:8e:99:0b:33: ee:1f:8b:8c:26:5c:1a:af:e6:ce:6f:90:0a:97:95:07:e4:04: a3:58:f5:f2:00:59:64:ff:6a:34:e8:ba:cf:fd:9a:63:de:5b: af:14:b6:cb:bc:6a:dd:14:28:f6:cf:89:35:fb:eb:4b:d2:c0: f3:9b:03:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbCRKe2f1oKsbmbotp+89bKygnM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTA2MDUxMzA2NTlaFw0yNTA2MDgxODUwNTlaMDMxMTAvBgNV BAMTKDhGMDU4MkI3QjI4OEMzMjk1NUZDNTc5MTI1NjkxM0FBNEVGQzcxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLQawnJyrlb103FXMOBwT4INn xvqSJsJC7U+QbxWDidFhbCVIbTsFwBuw5XA6OLIpZoa9fODW4RAMcPVpY8bYBaEr kN9sooNKBbGm940lq3JdlwGz+PJVNpWahdfZ3Q1Kjvvn8KlQ44OG3JmK22t3u3NB WpimiS7wewb6Aw1Fkjai2kcHIt3z5cJULakMB54nR20/dSBTFyLSOUCFeSxEg+Xw lPo/7B9JvDKdwTQOkfqCLcMJFnat7Ov+9aISCxAVQpXc9GuXwa/5TWYWEapmiRWw cLBQQSdynjsppP9+Mv5DXPH0SyouIscTkGJIVUtKUcfnhDgqO54sGMWM2zlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjwWCt7KIwylV/FeRJWkTqk78caUwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrWSKGTnOAjP68CqY03W7Zb1XrVmUIByK7Q AKjSmjLcpqcflBOXNjw77LKFyutqWmcPlTvWcQNfTBdnyMwjMy76CH7FBww8/7NV rvMfGmiRdcRsLQ+DUphQtjZDNz7qVfVM5AouFePIRpGqGXJ8mjckAYJ52zOTdJcM LONtbMzLksuqEmE69SwW25jLXstOmma4cvTWuykpK72r14r+8iwUbsKCMxy+3B4x cesEF22gsUV7EsYMNCKdgmCRM27L1MgvjpkLM+4fi4wmXBqv5s5vkAqXlQfkBKNY 9fIAWWT/ajTous/9mmPeW68Utsu8at0UKPbPiTX760vSwPObA8o= -----END CERTIFICATE-----Generated at Sat Jun 7 18:54:31 2025 by rpki-client