$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft File: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json) Hash identifier: V4LvYtKf9P/zX2NGWM3rP5PIM3bBSrv12FIkWxBi++U= Subject key identifier: 30:FB:F1:AD:F0:B9:A2:37:98:13:3B:58:49:A9:6F:C0:BB:BF:62:0D Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 3B371F7E1764CD1AE435FB78458DFC3849F2E620 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft Manifest number: 01B3 Signing time: Sat 05 Apr 2025 10:50:01 +0000 Manifest this update: Sat 05 Apr 2025 10:45:01 +0000 Manifest next update: Tue 08 Apr 2025 17:16:01 +0000 Files and hashes: 1: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: XSC0Gq88cUlsFNZJ2CBxihpDRd4Qy0py/+CrpptjgAw=) 2: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: uq7VBPdBUBt1kqmnMiL45Mq0szBy3gIv+qxo2j9zwpg=) 3: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: gC/dBQ2N9PvKMvFuI06G3U2I+dfO9VxJBQri33zTdRo=) 4: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: pAEwhRYxV+IdN3IG0AqgmlSpqpDySaxKtO1akdQcPJk=) 5: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: zz0q4evVyiGmnkeJgjKZ6+3+IQRQHcK60NcY4NiLuVA=) 6: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: zY6MeVih11oEA5Y6wZpVQeAXzh1zZ/fzkIYHt+si4VA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:37:1f:7e:17:64:cd:1a:e4:35:fb:78:45:8d:fc:38:49:f2:e6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Apr 5 10:45:01 2025 GMT Not After : Apr 8 17:16:01 2025 GMT Subject: CN=30FBF1ADF0B9A23798133B5849A96FC0BBBF620D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:ae:25:07:ef:f3:52:c1:f5:bf:a6:31:4d: 78:a7:71:d1:a2:2e:b5:3a:d2:e7:de:f0:f4:7a:bc: c5:f4:98:28:28:13:46:18:8b:0e:23:74:9a:64:d3: a7:88:eb:27:10:88:92:40:b5:2f:92:80:38:97:4c: 96:ec:92:89:bf:6b:30:1a:f5:29:f0:6f:39:ec:82: fe:db:e7:79:93:d5:44:41:69:a0:76:ab:51:35:2c: 54:a8:29:5d:9a:34:73:16:91:65:3c:2e:3b:64:42: 42:8e:9d:e3:46:70:0b:09:c4:d8:04:3e:e2:b2:24: 76:2d:68:91:7b:0d:1a:1d:28:c8:b6:15:c4:f3:51: c4:2a:7d:d9:59:0b:e8:2c:fc:22:78:c6:8d:e1:7d: 21:23:95:9e:85:52:65:7d:73:48:2d:e8:1a:2d:84: fa:d7:73:f7:7e:fc:a1:89:66:37:41:8d:0d:32:c1: 97:a7:6a:a2:11:57:c6:b0:12:72:d3:e9:37:75:8d: 99:c3:c8:dc:21:c6:e6:dc:e5:9d:70:57:d4:19:46: 72:5d:23:3f:12:ac:2c:49:06:a8:b4:25:85:70:00: fc:1b:99:78:fc:d1:c3:89:f2:f5:03:cc:31:23:09: 1c:fc:00:4d:29:44:0d:fe:e5:21:33:2f:da:72:22: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FB:F1:AD:F0:B9:A2:37:98:13:3B:58:49:A9:6F:C0:BB:BF:62:0D X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f8:06:71:73:5a:c9:b0:5a:87:2b:e5:a4:cb:e3:0d:8a:57: cb:d2:98:d9:b5:2d:bf:f3:3e:20:24:4c:a2:10:28:45:35:44: e2:2c:8d:71:c0:a8:18:f4:c9:64:b9:e1:4d:93:fc:79:ae:3c: ce:4c:f0:b9:d9:f9:df:6d:dc:da:8e:4e:98:ce:05:c4:5e:e2: 4a:91:0b:71:3d:5a:bd:c8:07:0b:cc:71:33:13:19:95:dc:d6: d6:1b:a3:c1:1f:32:a7:ca:e2:ff:86:4e:0d:76:ff:8c:b9:83: ca:c5:96:f8:bd:44:5c:bf:23:33:69:bd:23:d0:f5:f5:2a:2b: 67:c9:69:8f:29:a8:60:2b:b8:26:5e:b2:f2:ce:63:5a:b6:15: fb:7c:f4:b6:b0:9b:0e:5e:f2:76:3c:4c:d8:d2:7d:ca:2e:05: 40:b6:e3:c1:30:a2:4d:5a:ef:70:d2:a0:4a:5d:af:be:06:fe: cc:1f:4b:75:a8:c4:9c:83:82:dc:2c:e2:4a:a8:ae:20:37:c2: 25:68:e8:0c:ee:71:9c:74:9f:6d:0b:5b:e6:98:ce:2e:cc:3f: de:3e:4d:44:c1:d8:a3:00:a6:00:e1:22:ac:19:a2:28:a3:65: 91:b8:af:a9:25:88:66:4e:cd:bc:52:a9:30:33:e1:32:b5:22: f8:a6:ec:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzcffhdkzRrkNft4RY38OEny5iAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNTA0MDUxMDQ1MDFaFw0yNTA0MDgxNzE2MDFaMDMxMTAvBgNV BAMTKDMwRkJGMUFERjBCOUEyMzc5ODEzM0I1ODQ5QTk2RkMwQkJCRjYyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxp64lB+/zUsH1v6YxTXincdGi LrU60ufe8PR6vMX0mCgoE0YYiw4jdJpk06eI6ycQiJJAtS+SgDiXTJbskom/azAa 9Snwbznsgv7b53mT1URBaaB2q1E1LFSoKV2aNHMWkWU8LjtkQkKOneNGcAsJxNgE PuKyJHYtaJF7DRodKMi2FcTzUcQqfdlZC+gs/CJ4xo3hfSEjlZ6FUmV9c0gt6Bot hPrXc/d+/KGJZjdBjQ0ywZenaqIRV8awEnLT6Td1jZnDyNwhxubc5Z1wV9QZRnJd Iz8SrCxJBqi0JYVwAPwbmXj80cOJ8vUDzDEjCRz8AE0pRA3+5SEzL9pyIqhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMPvxrfC5ojeYEztYSalvwLu/Yg0wHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkND NjcyN0Q2RTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC74BnFzWsmwWocr5aTL4w2KV8vSmNm1Lb/z PiAkTKIQKEU1ROIsjXHAqBj0yWS54U2T/HmuPM5M8LnZ+d9t3NqOTpjOBcRe4kqR C3E9Wr3IBwvMcTMTGZXc1tYbo8EfMqfK4v+GTg12/4y5g8rFlvi9RFy/IzNpvSPQ 9fUqK2fJaY8pqGAruCZesvLOY1q2Fft89Lawmw5e8nY8TNjSfcouBUC248Ewok1a 73DSoEpdr74G/swfS3WoxJyDgtws4kqoriA3wiVo6AzucZx0n20LW+aYzi7MP94+ TUTB2KMApgDhIqwZoiijZZG4r6kliGZOzbxSqTAz4TK1Ivim7B0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:13 2025 by rpki-client