$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: c35zmU3KY8Os0b2LRuHoHWva/8DjpfXSzkZxVzTt4gY= Subject key identifier: AE:AF:4F:D7:29:3D:2F:41:EC:09:F0:3A:85:60:D6:B1:F0:0E:90:81 Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 48D39A9C63303E8523E5FB38A70F221D5E556751 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: 015D Signing time: Fri 04 Apr 2025 01:30:41 +0000 Manifest this update: Fri 04 Apr 2025 01:25:41 +0000 Manifest next update: Mon 07 Apr 2025 10:00:41 +0000 Files and hashes: 1: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: woe8wTOCkgzw1AhZmS0qc2WfDSk5Txn9xI0A9rGDrdg=) 2: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: JkFYaHPeY3SlmqEL1vhRWlMq0W69nVCzoQ1k4ww7ObQ=) 3: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: fEJQJx/Txzr+vMmd8tCh4JvmoJuakGNPJHf3zsUQTcY=) 4: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: bY09S58JuRMnRZFg/qJz8l2GALj8CEukiohA16BsJD4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d3:9a:9c:63:30:3e:85:23:e5:fb:38:a7:0f:22:1d:5e:55:67:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Apr 4 01:25:41 2025 GMT Not After : Apr 7 10:00:41 2025 GMT Subject: CN=AEAF4FD7293D2F41EC09F03A8560D6B1F00E9081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:11:6a:38:96:58:4f:2d:81:d4:9a:31:ad: 6c:6d:6a:dc:b5:52:66:3e:dd:86:08:0b:a5:ba:45: 8b:f0:5d:45:59:a3:ca:18:98:87:68:34:98:f0:76: 93:11:b3:62:e5:99:f4:5f:6b:29:5b:ee:03:c0:e8: 6f:70:73:69:d2:0f:6e:be:5c:07:38:ec:51:56:3d: 86:78:9e:da:9f:36:03:41:1b:a5:e1:9c:00:4d:e8: ac:c7:d6:57:58:8e:c8:62:01:fe:5a:8b:75:ca:25: 58:8b:d4:53:91:b6:53:3b:13:58:42:49:9b:70:0f: e3:86:06:95:d9:5b:fd:f1:e1:b3:4a:6a:da:fc:6a: 7e:7d:03:f4:c0:27:ae:42:a7:40:e5:96:1c:e2:1b: 61:09:f8:a9:1e:5d:23:81:8b:2c:22:36:31:e9:0a: cf:07:86:d7:15:00:3c:2b:a5:11:0d:3b:a0:ca:a7: e5:1e:55:82:00:e5:ba:6c:03:0a:94:92:df:ca:d8: b7:70:b9:9c:f2:a5:bf:e0:20:e5:1e:7e:36:a1:06: df:41:14:e9:48:bb:4e:3e:b4:6b:dd:f4:9a:d4:96: 7f:82:95:82:93:b2:b1:fd:79:a4:76:68:f8:b8:79: 06:27:2f:8b:5c:47:1e:5c:c9:ac:49:87:d4:22:5c: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AF:4F:D7:29:3D:2F:41:EC:09:F0:3A:85:60:D6:B1:F0:0E:90:81 X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1d:97:f9:54:04:3b:39:71:36:3b:ba:d7:da:3b:e4:27:d1: 85:fe:25:0e:39:44:d5:c8:f2:15:1f:c4:8b:fb:cd:39:9a:22: c4:db:a4:ea:91:83:41:ba:cd:b1:f7:c3:12:d7:47:52:60:45: d9:35:7d:56:f3:5f:eb:27:a9:ee:1e:1b:5e:65:8d:7b:1a:73: 3e:d9:96:39:db:b1:c0:17:00:3a:0a:e2:77:6a:ef:9b:8d:54: d8:c9:70:73:1b:3a:e7:c8:bc:1c:34:7b:ea:5f:b4:dc:b7:4e: 08:f9:c0:52:d0:a3:83:13:d2:96:8e:a3:3e:0c:7a:ce:aa:e7: d7:a6:fe:cb:11:b9:52:13:f7:c7:fd:10:25:2c:de:35:b7:8a: 96:96:1c:89:8a:1c:47:a2:8f:69:b1:6b:dc:c9:77:a0:3d:75: 77:b7:90:e7:dd:82:6b:7a:a5:2e:34:60:4f:7a:87:62:f2:1e: 4a:1b:e6:41:37:bb:1a:4e:57:aa:b3:0f:a2:13:24:d7:2b:31: cb:27:74:58:0c:d8:28:24:35:53:ac:6b:06:13:9c:08:a6:93: d7:62:5f:eb:b1:35:f2:bd:41:1f:fc:60:4a:10:9f:cf:d1:5c: 0c:fa:a0:d5:fd:79:8b:0d:20:97:13:88:22:fe:9b:06:06:64: 9b:77:62:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNOanGMwPoUj5fs4pw8iHV5VZ1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNTA0MDQwMTI1NDFaFw0yNTA0MDcxMDAwNDFaMDMxMTAvBgNV BAMTKEFFQUY0RkQ3MjkzRDJGNDFFQzA5RjAzQTg1NjBENkIxRjAwRTkwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xBFqOJZYTy2B1JoxrWxtaty1 UmY+3YYIC6W6RYvwXUVZo8oYmIdoNJjwdpMRs2LlmfRfaylb7gPA6G9wc2nSD26+ XAc47FFWPYZ4ntqfNgNBG6XhnABN6KzH1ldYjshiAf5ai3XKJViL1FORtlM7E1hC SZtwD+OGBpXZW/3x4bNKatr8an59A/TAJ65Cp0DllhziG2EJ+KkeXSOBiywiNjHp Cs8HhtcVADwrpRENO6DKp+UeVYIA5bpsAwqUkt/K2LdwuZzypb/gIOUefjahBt9B FOlIu04+tGvd9JrUln+ClYKTsrH9eaR2aPi4eQYnL4tcRx5cyaxJh9QiXGXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrq9P1yk9L0HsCfA6hWDWsfAOkIEwHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgdl/lUBDs5cTY7utfaO+Qn0YX+JQ45RNXI 8hUfxIv7zTmaIsTbpOqRg0G6zbH3wxLXR1JgRdk1fVbzX+snqe4eG15ljXsacz7Z ljnbscAXADoK4ndq75uNVNjJcHMbOufIvBw0e+pftNy3Tgj5wFLQo4MT0paOoz4M es6q59em/ssRuVIT98f9ECUs3jW3ipaWHImKHEeij2mxa9zJd6A9dXe3kOfdgmt6 pS40YE96h2LyHkob5kE3uxpOV6qzD6ITJNcrMcsndFgM2CgkNVOsawYTnAimk9di X+uxNfK9QR/8YEoQn8/RXAz6oNX9eYsNIJcTiCL+mwYGZJt3Ysc= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:41 2025 by rpki-client