$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: dvAaVN0WdKlPncQ+V3B4qlvyrZkSbDqyCgj6IpnZu+k= Subject key identifier: 23:17:73:28:3F:C4:DB:C2:14:7A:17:C3:25:80:C4:91:9B:B9:29:9A Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 1D0F321099A7311CEA6EFDC0859BDAFF82810C11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 0196 Signing time: Wed 04 Jun 2025 10:51:21 +0000 Manifest this update: Wed 04 Jun 2025 10:46:21 +0000 Manifest next update: Sat 07 Jun 2025 22:02:21 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: NcU0dxr5NnbVLDPrHBihySBGfiy6I11a1NHuRwgYVYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0f:32:10:99:a7:31:1c:ea:6e:fd:c0:85:9b:da:ff:82:81:0c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Jun 4 10:46:21 2025 GMT Not After : Jun 7 22:02:21 2025 GMT Subject: CN=231773283FC4DBC2147A17C32580C4919BB9299A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e4:4d:ce:63:58:f7:09:a3:33:d6:e7:a8:05: 2b:65:12:0a:11:f0:35:d6:a5:5a:30:de:9a:f7:07: e0:90:f8:38:5c:38:76:82:bf:af:31:d0:c5:b8:4c: 57:ec:3e:e9:57:78:95:06:74:84:aa:aa:09:fc:aa: dc:25:bd:32:5d:9f:82:6e:af:bd:ad:6a:44:42:94: e7:67:e2:fb:4c:ee:6c:80:e8:58:35:05:19:b1:b4: 6d:9d:05:67:79:1e:a8:62:0e:94:8f:39:26:75:28: 3d:22:c5:b7:5c:62:1a:d4:e9:67:1d:9b:9c:03:2e: 1c:9e:e7:97:d1:3e:1b:ae:c4:aa:c2:6d:7b:ef:ed: 79:55:e9:e9:cb:d4:8b:2f:4c:13:10:b3:12:07:c4: df:a2:30:02:e4:5a:90:ef:bb:60:f3:50:61:6c:6a: 50:8b:ce:ca:80:c2:f7:02:4d:a0:78:73:ec:19:09: 55:31:e3:cf:84:8f:24:c6:fe:b7:9c:a8:d5:4c:61: 1f:a0:eb:e1:df:b2:a9:99:bd:85:5b:62:b7:4d:c6: 3f:fb:cf:df:12:03:43:6c:3d:4c:3b:b9:b5:4b:aa: b9:15:f0:9d:1c:5d:65:d5:a4:69:eb:e4:fe:13:c5: 22:91:37:47:cb:ce:56:99:4d:74:95:32:4c:6e:1f: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:17:73:28:3F:C4:DB:C2:14:7A:17:C3:25:80:C4:91:9B:B9:29:9A X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:de:49:2d:78:2a:77:3b:45:6b:54:f4:52:45:e8:67:81:b2: 49:fe:ba:a7:3d:52:24:01:5e:8f:36:45:28:69:28:ed:53:a7: f1:3e:72:e8:1d:8e:19:0e:50:8a:81:7b:52:3a:45:e5:7b:19: 70:3d:96:f5:9e:04:b9:99:d7:77:48:74:05:f8:9d:58:33:44: af:cf:c8:0c:be:d8:b1:f6:ef:21:cd:2c:b3:94:84:52:e8:ef: 46:c1:9a:9b:d1:e8:08:2d:0f:86:5a:46:d3:75:93:fd:c9:3d: 3a:83:dd:10:bb:5d:f6:c3:d9:bc:6b:08:b2:3c:51:6b:04:a6: 89:e0:24:91:ea:f1:79:39:e7:1f:a7:18:a5:f2:04:a2:50:dd: 98:0a:68:a8:ca:e0:cc:c6:56:d8:ac:c6:d4:2b:1c:63:ef:b3: 0c:fc:eb:76:05:97:65:b8:fa:1c:c8:2e:eb:c1:cd:19:96:e0: 0b:57:14:37:d0:0b:fd:56:ff:f6:2a:74:f1:87:a6:9d:d7:d9: 63:49:a3:7a:20:ab:6e:47:51:aa:b0:da:b8:2e:3e:61:3b:f2: c3:c3:f7:3a:79:63:07:21:9c:aa:9f:bb:49:11:96:16:ae:ef: 6b:b3:44:a7:e4:54:1f:0c:ab:bc:7b:d5:e7:71:d0:a0:b6:34: ea:59:08:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQ8yEJmnMRzqbv3AhZva/4KBDBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNTA2MDQxMDQ2MjFaFw0yNTA2MDcyMjAyMjFaMDMxMTAvBgNV BAMTKDIzMTc3MzI4M0ZDNERCQzIxNDdBMTdDMzI1ODBDNDkxOUJCOTI5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk5E3OY1j3CaMz1ueoBStlEgoR 8DXWpVow3pr3B+CQ+DhcOHaCv68x0MW4TFfsPulXeJUGdISqqgn8qtwlvTJdn4Ju r72takRClOdn4vtM7myA6Fg1BRmxtG2dBWd5HqhiDpSPOSZ1KD0ixbdcYhrU6Wcd m5wDLhye55fRPhuuxKrCbXvv7XlV6enL1IsvTBMQsxIHxN+iMALkWpDvu2DzUGFs alCLzsqAwvcCTaB4c+wZCVUx48+EjyTG/recqNVMYR+g6+HfsqmZvYVbYrdNxj/7 z98SA0NsPUw7ubVLqrkV8J0cXWXVpGnr5P4TxSKRN0fLzlaZTXSVMkxuHwrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIxdzKD/E28IUehfDJYDEkZu5KZowHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDeSS14Knc7RWtU9FJF6GeBskn+uqc9UiQB Xo82RShpKO1Tp/E+cugdjhkOUIqBe1I6ReV7GXA9lvWeBLmZ13dIdAX4nVgzRK/P yAy+2LH27yHNLLOUhFLo70bBmpvR6AgtD4ZaRtN1k/3JPTqD3RC7XfbD2bxrCLI8 UWsEpongJJHq8Xk55x+nGKXyBKJQ3ZgKaKjK4MzGVtisxtQrHGPvswz863YFl2W4 +hzILuvBzRmW4AtXFDfQC/1W//YqdPGHpp3X2WNJo3ogq25HUaqw2rguPmE78sPD 9zp5YwchnKqfu0kRlhau72uzRKfkVB8Mq7x71edx0KC2NOpZCJo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:09:15 2025 by rpki-client