$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: USawrURRQpiva4BzSMMNLOlAajBXamCFWnm4jwqG+30= Subject key identifier: 50:69:AE:83:C8:C4:14:F6:6A:18:ED:09:78:C3:CB:08:F0:B5:71:9D Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 6AD3681431D6F348806D857CDCEC7E3C55AAA32E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 0156 Signing time: Tue 03 Jun 2025 04:43:03 +0000 Manifest this update: Tue 03 Jun 2025 04:38:03 +0000 Manifest next update: Fri 06 Jun 2025 07:23:03 +0000 Files and hashes: 1: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) 2: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: 31ypEwGXGHcgPxKd7c1+d5bu+z/mDk6DjdQSBiv47LA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 07:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d3:68:14:31:d6:f3:48:80:6d:85:7c:dc:ec:7e:3c:55:aa:a3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Jun 3 04:38:03 2025 GMT Not After : Jun 6 07:23:03 2025 GMT Subject: CN=5069AE83C8C414F66A18ED0978C3CB08F0B5719D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:0c:20:10:31:ce:9e:c9:e6:91:af:1a:18: 1a:c7:ac:27:31:25:65:de:9f:3b:9e:35:6f:12:8e: b3:72:e4:3e:47:c3:9a:19:c2:ce:bc:ce:2d:01:4c: 29:34:41:71:74:40:b5:0a:88:91:23:f6:11:29:a6: 00:9e:57:28:6d:b8:c3:f2:21:b2:1f:59:45:1d:b2: ac:32:d3:bb:d2:08:dd:d2:29:ca:15:6c:25:bd:c1: be:f8:b6:87:55:15:1e:49:02:06:77:1b:62:d2:a7: 76:8b:7f:b3:9d:f0:96:24:ed:25:1c:73:95:2f:32: 0e:61:f3:4a:b8:d7:a8:95:b3:bd:07:51:95:3b:53: 0a:a2:e5:57:dd:5a:55:7f:98:e8:5c:00:23:80:41: c2:5f:f3:43:1a:43:87:31:16:db:99:64:1b:50:f6: 24:d0:0d:0d:1a:ba:16:13:9e:19:0d:77:a3:ca:98: ef:64:c9:91:33:14:91:b2:2a:7a:a1:64:40:43:70: 3f:37:38:68:64:98:ef:10:43:e2:2a:f9:32:88:c7: 9c:16:aa:65:35:45:02:f6:64:1a:73:b7:95:5b:ab: 37:83:42:c1:b7:44:95:eb:85:f4:c3:6d:1f:ca:66: c0:50:60:d4:0a:32:b4:fe:61:3e:29:b4:0d:cf:89: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:69:AE:83:C8:C4:14:F6:6A:18:ED:09:78:C3:CB:08:F0:B5:71:9D X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b2:63:d7:95:7f:65:78:fd:ac:13:7d:ef:ab:1a:39:80:86: a6:1f:16:bc:f6:3d:92:a0:1b:5a:71:13:5a:fe:56:0b:85:e4: f9:45:04:06:49:23:64:8b:a1:30:58:ac:45:4e:12:4e:50:65: 59:47:d6:e8:b3:54:34:40:ce:39:09:9d:69:d5:02:1f:b2:69: 28:0f:7c:41:bb:c9:be:8c:bb:56:8f:6e:01:01:18:2d:69:87: 9c:5d:bc:a1:91:3a:05:71:fc:da:d8:87:e0:73:56:e7:43:d5: 9a:ac:89:08:02:69:e4:92:cb:85:2e:fa:10:a2:95:cf:e0:69: 14:73:7d:ec:a7:a3:5a:02:48:fa:36:45:2f:03:66:9c:68:aa: ef:ae:93:51:e8:97:ab:c8:9c:be:f0:b0:1c:04:be:44:e1:e1: 81:05:ea:dc:fe:14:18:38:17:3c:b8:48:98:7f:a8:b3:4a:97: 54:4a:d7:3a:9a:c6:83:4f:8a:a6:c8:4b:1b:0d:8c:12:bb:d2: b6:52:b7:93:18:17:fe:2e:b3:50:02:25:d7:7e:31:59:b6:e5: 98:3d:cf:a2:9e:a6:cd:8e:d7:52:fd:17:55:fb:ad:29:97:e6: 98:7b:e9:64:19:8b:00:c0:01:ef:23:84:97:a2:b5:17:ef:67: a7:bd:d4:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatNoFDHW80iAbYV83Ox+PFWqoy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTA2MDMwNDM4MDNaFw0yNTA2MDYwNzIzMDNaMDMxMTAvBgNV BAMTKDUwNjlBRTgzQzhDNDE0RjY2QTE4RUQwOTc4QzNDQjA4RjBCNTcxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdgwgEDHOnsnmka8aGBrHrCcx JWXenzueNW8SjrNy5D5Hw5oZws68zi0BTCk0QXF0QLUKiJEj9hEppgCeVyhtuMPy IbIfWUUdsqwy07vSCN3SKcoVbCW9wb74todVFR5JAgZ3G2LSp3aLf7Od8JYk7SUc c5UvMg5h80q416iVs70HUZU7Uwqi5VfdWlV/mOhcACOAQcJf80MaQ4cxFtuZZBtQ 9iTQDQ0auhYTnhkNd6PKmO9kyZEzFJGyKnqhZEBDcD83OGhkmO8QQ+Iq+TKIx5wW qmU1RQL2ZBpzt5VbqzeDQsG3RJXrhfTDbR/KZsBQYNQKMrT+YT4ptA3PiZtDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUGmug8jEFPZqGO0JeMPLCPC1cZ0wHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOyY9eVf2V4/awTfe+rGjmAhqYfFrz2PZKg G1pxE1r+VguF5PlFBAZJI2SLoTBYrEVOEk5QZVlH1uizVDRAzjkJnWnVAh+yaSgP fEG7yb6Mu1aPbgEBGC1ph5xdvKGROgVx/NrYh+BzVudD1ZqsiQgCaeSSy4Uu+hCi lc/gaRRzfeyno1oCSPo2RS8DZpxoqu+uk1Hol6vInL7wsBwEvkTh4YEF6tz+FBg4 Fzy4SJh/qLNKl1RK1zqaxoNPiqbISxsNjBK70rZSt5MYF/4us1ACJdd+MVm25Zg9 z6Keps2O11L9F1X7rSmX5ph76WQZiwDAAe8jhJeitRfvZ6e91Hc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:47 2025 by rpki-client