$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft File: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft (raw, json) Hash identifier: G7mqzS3GyMGZGJb/I31CzwOPwsDL7wvnu0sfEJECPJM= Subject key identifier: F4:47:72:40:1B:83:97:2F:3A:89:7B:29:58:2C:D3:F2:58:2D:D7:F9 Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Certificate serial: 17BC4C8435921F96FF6A5CE2A64E521FBC5FC861 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft Manifest number: 0328 Signing time: Fri 06 Jun 2025 02:21:58 +0000 Manifest this update: Fri 06 Jun 2025 02:16:58 +0000 Manifest next update: Mon 09 Jun 2025 11:00:58 +0000 Files and hashes: 1: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: DCgYEPaVukPuYmvO5a2cczC4OgprkfQ5HG76ulQS39Q=) 2: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: aihSJuIZjlYbfPjvBLdvafMIwZ5NASIBmOuqn4SEmM0=) 3: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl (hash: WXUgk6zfYL9Z5gt//4Nnjp6Lglofwrf2AiKAksMN3AU=) 4: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: YYGVRYPBp9IPNMR5VwzW826x/acetE+4Oj6LGMt7tPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bc:4c:84:35:92:1f:96:ff:6a:5c:e2:a6:4e:52:1f:bc:5f:c8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Validity Not Before: Jun 6 02:16:58 2025 GMT Not After : Jun 9 11:00:58 2025 GMT Subject: CN=F44772401B83972F3A897B29582CD3F2582DD7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:9a:c4:cd:d5:7a:ce:a3:1d:ff:ba:06:16: 89:81:24:bf:e4:ee:5d:e6:df:53:35:b4:d8:0e:f4: e6:63:f0:4a:fc:40:d3:b3:3c:95:bc:00:04:af:ce: d9:c4:5d:1b:10:7d:68:f5:9d:60:e1:ea:3f:17:51: 8c:40:9c:7b:de:fd:ba:8a:74:98:ec:79:1e:39:6d: f0:37:00:10:a9:72:e5:63:00:46:30:19:ac:19:8d: b4:96:46:05:df:2b:b2:f5:ef:c1:6e:47:e6:e4:6b: 44:f6:fb:76:de:11:6d:19:1b:aa:f6:96:32:36:ad: 26:19:02:73:22:8e:5c:15:55:e0:78:8b:ab:33:0a: 21:cd:ad:2b:e5:24:44:2e:f4:04:f3:4e:d6:11:78: 31:e9:cc:49:37:13:d9:4b:b2:ec:e5:b5:0d:f2:73: 02:03:1a:7f:1f:11:4c:be:fb:fb:d2:5e:91:a3:36: 13:59:3a:22:0e:32:9a:67:9e:04:e9:1e:58:a4:1d: 00:b7:56:04:c8:ce:c0:fe:26:ee:b7:66:27:1d:82: 03:eb:cf:48:c5:c5:bf:26:52:23:3d:f9:56:ba:e9: f7:1b:1f:c4:76:b0:a9:d9:23:22:91:bf:9e:d1:33: 17:ca:9e:47:ba:6b:19:b4:6d:0b:cb:88:9d:6d:9f: 08:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:47:72:40:1B:83:97:2F:3A:89:7B:29:58:2C:D3:F2:58:2D:D7:F9 X509v3 Authority Key Identifier: keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:30:17:ca:2b:9e:f3:8e:61:c0:39:32:af:fc:d8:d9:ef:11: fa:2b:19:55:b3:e5:de:c2:8d:bc:02:13:4a:d4:11:26:24:3f: 75:db:d5:4f:b5:36:12:60:e5:f5:d1:a6:ae:47:50:80:97:3b: 9b:c4:87:76:58:bf:8b:0b:e3:38:8b:b0:5a:75:dd:c3:f9:a3: 9a:8f:f0:0e:12:07:36:47:15:ff:92:14:88:95:91:95:8f:85: cc:21:7c:52:78:b7:8f:ff:57:b5:3e:63:6d:41:54:0f:b9:13: 0b:d4:2e:56:b2:a0:99:f7:9a:eb:92:4c:68:17:9d:c8:aa:ec: 69:46:3b:60:5a:89:00:f4:e2:c3:f7:b5:de:b5:47:4e:b0:6c: a3:f7:45:0e:76:da:79:e4:00:f8:02:ba:4b:d3:73:f1:4a:26: a9:e7:b4:3c:43:6c:e6:11:fd:fa:c4:b1:8e:78:92:f3:53:c5: 60:13:ff:bc:0a:f4:88:0f:31:98:2c:00:5e:7c:c1:43:f5:a5: 81:eb:e9:1e:c4:02:62:f2:a4:1a:5a:e1:4f:76:7a:ae:6a:fc: 72:08:c9:29:a8:dd:0f:49:55:55:10:d6:5e:0e:be:40:92:b4: 8c:14:a9:94:30:ab:76:03:dc:e0:60:24:d5:12:b3:f3:e3:c6: e3:9e:37:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF7xMhDWSH5b/alzipk5SH7xfyGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG NjUxQkFBQTAeFw0yNTA2MDYwMjE2NThaFw0yNTA2MDkxMTAwNThaMDMxMTAvBgNV BAMTKEY0NDc3MjQwMUI4Mzk3MkYzQTg5N0IyOTU4MkNEM0YyNTgyREQ3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRJrEzdV6zqMd/7oGFomBJL/k 7l3m31M1tNgO9OZj8Er8QNOzPJW8AASvztnEXRsQfWj1nWDh6j8XUYxAnHve/bqK dJjseR45bfA3ABCpcuVjAEYwGawZjbSWRgXfK7L178FuR+bka0T2+3beEW0ZG6r2 ljI2rSYZAnMijlwVVeB4i6szCiHNrSvlJEQu9ATzTtYReDHpzEk3E9lLsuzltQ3y cwIDGn8fEUy++/vSXpGjNhNZOiIOMppnngTpHlikHQC3VgTIzsD+Ju63ZicdggPr z0jFxb8mUiM9+Va66fcbH8R2sKnZIyKRv57RMxfKnke6axm0bQvLiJ1tnwj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9EdyQBuDly86iXspWCzT8lgt1/kwHwYDVR0j BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx QkFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM1MDVjYjMtYjU1ZS00MGU0LWFj NzktNjM2NTYwNmY0ZWY5LzAvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMz RkVGNjUxQkFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAwF8ornvOOYcA5Mq/82NnvEforGVWz5d7C jbwCE0rUESYkP3Xb1U+1NhJg5fXRpq5HUICXO5vEh3ZYv4sL4ziLsFp13cP5o5qP 8A4SBzZHFf+SFIiVkZWPhcwhfFJ4t4//V7U+Y21BVA+5EwvULlayoJn3muuSTGgX nciq7GlGO2BaiQD04sP3td61R06wbKP3RQ522nnkAPgCukvTc/FKJqnntDxDbOYR /frEsY54kvNTxWAT/7wK9IgPMZgsAF58wUP1pYHr6R7EAmLypBpa4U92eq5q/HII ySmo3Q9JVVUQ1l4OvkCStIwUqZQwq3YD3OBgJNUSs/PjxuOeN8E= -----END CERTIFICATE-----Generated at Sun Jun 8 01:42:34 2025 by rpki-client