$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: So1EVUCTTKQZSHuLoRlbRCv3xtXj3O3CUPgDgUKxetc= Subject key identifier: 16:F4:F2:1B:A4:2F:B3:AF:EA:9D:58:95:70:65:07:94:E7:56:82:8C Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 3C78016A8979AE82F88479DF4C08C27F28518315 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 04CC Signing time: Thu 03 Apr 2025 15:12:00 +0000 Manifest this update: Thu 03 Apr 2025 15:07:00 +0000 Manifest next update: Sun 06 Apr 2025 19:20:00 +0000 Files and hashes: 1: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: vI68Gh5Oh59Rb2lPrZHZHoQWOjb0zjzOJoq8Na+SUkQ=) 2: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: E6XmK1t6H2i7DnMzin3eXEnNRLj+glllDjzpw3yQ+tE=) 3: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: mGafxLeKPnG7Eg+GZ3Uvf1Rg2MZjFuXySA60etRq29k=) 4: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: wq7NOMFRmj3P5AlIoVmOnRKIVt6fK2RIxO3VC5nQd1Y=) 5: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: f+KL9sRBKYThjcUf6Fn4ETIt2vwAYX6+xVDk6HrJGjI=) 6: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: bFn5Y7JpqG3baSv58HSYajbj+++aONkagR6UZgJDf70=) 7: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: SDpHmQWrvR6QYeGR7FQ79oyRI2YwxolyxjXNhlqbQOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 19:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:78:01:6a:89:79:ae:82:f8:84:79:df:4c:08:c2:7f:28:51:83:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Apr 3 15:07:00 2025 GMT Not After : Apr 6 19:20:00 2025 GMT Subject: CN=16F4F21BA42FB3AFEA9D589570650794E756828C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:82:7c:b1:07:3b:d5:ef:aa:a2:ee:1a:1a: de:35:bc:c1:4e:d5:28:18:d0:fa:55:1a:b5:23:73: aa:a2:0c:83:43:6d:ca:e7:c8:3b:cb:d8:67:10:fe: f7:ee:bd:6f:66:77:61:80:e2:83:02:3b:4e:72:b6: 64:04:54:9f:f7:8a:dd:b9:c8:4b:dc:35:ce:2b:7f: 52:39:fc:d5:fa:87:3e:fc:9f:de:35:67:b0:f0:99: 43:4a:31:f5:1e:1e:33:f2:45:81:90:5d:ad:39:47: e9:8e:0f:89:97:a5:82:18:31:36:21:27:b8:e3:d1: c8:f0:a0:0a:db:35:ec:9f:78:2d:a7:ff:03:50:0c: ca:47:94:3e:3f:99:7a:74:97:fd:d8:5f:d8:bb:08: 39:89:01:48:30:22:bc:76:f1:7b:e7:57:7f:13:63: 41:b5:c0:d4:f6:c6:a2:33:50:84:6f:ae:02:c6:b4: 8c:93:b4:c0:06:90:6e:76:50:e2:87:46:c9:f1:2a: 38:5d:87:27:77:44:04:2d:a3:6c:28:56:bb:aa:ba: 72:d2:46:12:aa:90:e1:90:98:90:b4:a4:8a:a7:d2: d7:18:9f:5a:cd:83:de:6d:ba:54:fd:6e:1e:15:77: c9:bc:42:29:54:c4:f5:a1:80:dd:b0:e4:70:5d:ea: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F4:F2:1B:A4:2F:B3:AF:EA:9D:58:95:70:65:07:94:E7:56:82:8C X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c0:cc:25:8e:4c:5d:8c:d8:5d:61:75:5e:10:a1:bd:09:3c: 2f:c9:ea:37:94:7f:8a:f9:1a:09:4e:32:a6:53:7d:df:bb:c3: 4a:18:38:ba:28:ec:8f:dc:11:ba:c2:9a:81:63:6e:f9:df:95: c3:d7:05:62:74:68:ac:63:9c:a4:6a:63:b9:fc:90:27:7b:22: ce:d3:9a:35:d0:6c:23:71:25:96:ee:53:c0:83:b9:ef:56:1d: f2:6e:de:58:a0:1f:72:9c:77:b9:50:23:1c:12:7a:a0:bd:ac: d9:07:c5:14:e1:64:c7:35:e2:a8:01:41:03:a8:5d:3c:53:8e: d1:f5:63:24:f3:41:27:f3:8b:9c:ed:8d:e1:a4:3e:20:0c:1c: 81:41:19:dc:34:91:ee:3b:76:06:bb:2e:f6:33:b7:2d:19:a0: b9:80:b9:0b:52:39:b8:ff:e2:0f:b8:bb:d7:22:9a:5d:7b:7f: 71:22:aa:d8:49:d5:3b:ab:22:fb:87:5f:5e:ad:90:b2:0a:2a: df:af:ae:58:cd:08:58:4d:d1:a3:fe:b1:cb:e7:ac:55:f3:f9: 26:5f:0c:46:f0:25:79:c2:c0:7a:12:ed:30:8c:bc:57:f7:40: 7d:3f:ce:e1:09:da:fb:73:75:9c:e3:91:a4:d7:97:ba:2b:79: 0f:e1:df:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPHgBaol5roL4hHnfTAjCfyhRgxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNTA0MDMxNTA3MDBaFw0yNTA0MDYxOTIwMDBaMDMxMTAvBgNV BAMTKDE2RjRGMjFCQTQyRkIzQUZFQTlENTg5NTcwNjUwNzk0RTc1NjgyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVYJ8sQc71e+qou4aGt41vMFO 1SgY0PpVGrUjc6qiDINDbcrnyDvL2GcQ/vfuvW9md2GA4oMCO05ytmQEVJ/3it25 yEvcNc4rf1I5/NX6hz78n941Z7DwmUNKMfUeHjPyRYGQXa05R+mOD4mXpYIYMTYh J7jj0cjwoArbNeyfeC2n/wNQDMpHlD4/mXp0l/3YX9i7CDmJAUgwIrx28XvnV38T Y0G1wNT2xqIzUIRvrgLGtIyTtMAGkG52UOKHRsnxKjhdhyd3RAQto2woVruqunLS RhKqkOGQmJC0pIqn0tcYn1rNg95tulT9bh4Vd8m8QilUxPWhgN2w5HBd6o6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFvTyG6Qvs6/qnViVcGUHlOdWgowwHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnAzCWOTF2M2F1hdV4Qob0JPC/J6jeUf4r5 GglOMqZTfd+7w0oYOLoo7I/cEbrCmoFjbvnflcPXBWJ0aKxjnKRqY7n8kCd7Is7T mjXQbCNxJZbuU8CDue9WHfJu3ligH3Kcd7lQIxwSeqC9rNkHxRThZMc14qgBQQOo XTxTjtH1YyTzQSfzi5ztjeGkPiAMHIFBGdw0ke47dga7LvYzty0ZoLmAuQtSObj/ 4g+4u9ciml17f3EiqthJ1TurIvuHX16tkLIKKt+vrljNCFhN0aP+scvnrFXz+SZf DEbwJXnCwHoS7TCMvFf3QH0/zuEJ2vtzdZzjkaTXl7oreQ/h35U= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:03 2025 by rpki-client