$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft File: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft (raw, json) Hash identifier: DJmmwi7WFdoZsq9hno5KYdiFoEFZxTgMaTiV7JHsPTE= Subject key identifier: BE:E7:2B:32:6A:8E:64:11:7A:FB:C8:8A:04:4F:1D:18:11:07:CA:9B Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Certificate serial: 1CC43BADA3211C309EC2372FF6377FBCC13DDB2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft Manifest number: 0312 Signing time: Fri 18 Apr 2025 14:51:52 +0000 Manifest this update: Fri 18 Apr 2025 14:46:52 +0000 Manifest next update: Mon 21 Apr 2025 21:45:52 +0000 Files and hashes: 1: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: aihSJuIZjlYbfPjvBLdvafMIwZ5NASIBmOuqn4SEmM0=) 2: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl (hash: xBq9olLjWeR0UE4aHlFb/DiF5zT8cHvXyqhYm1me4rE=) 3: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: KwtUaoClH3kiNpvEIWalSEf5bxo2cymUbkAJRaf/ygM=) 4: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: 7VSc9Gcvnpfn7ZPPafV+FSx6VsyDCdcR7tm8J+oVFFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 21:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c4:3b:ad:a3:21:1c:30:9e:c2:37:2f:f6:37:7f:bc:c1:3d:db:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Validity Not Before: Apr 18 14:46:52 2025 GMT Not After : Apr 21 21:45:52 2025 GMT Subject: CN=BEE72B326A8E64117AFBC88A044F1D181107CA9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:a1:2f:65:5c:63:13:ac:64:f9:32:cc:8a: 5e:a8:ea:31:99:78:8d:c2:7f:15:8b:ab:1a:f8:9a: 96:71:8e:f3:3a:85:f8:86:1f:90:0c:54:81:f1:fa: d0:bb:78:b5:5a:f6:80:0d:56:8f:48:32:0c:c5:86: 11:9a:01:76:ce:00:20:42:55:4b:ad:b8:7c:c1:9b: 6c:21:3a:8e:e3:7c:ea:9e:53:3a:18:16:9e:04:b1: 55:bc:eb:72:1d:4f:a9:c8:09:da:ec:14:a4:31:25: d4:4d:65:3e:ab:70:2a:d0:e6:34:09:49:d3:43:16: 88:da:11:62:cc:31:13:33:11:ea:7e:a5:e5:e1:32: 11:2d:84:6c:0b:28:ff:f8:ad:8a:31:f5:fa:1e:7c: 54:f4:2b:88:3e:46:5b:82:96:de:e4:6c:79:f6:92: a4:fa:43:9a:82:f7:5d:2f:16:f1:e6:23:fe:51:5c: e4:14:5c:99:15:91:0e:f3:aa:07:a5:55:2c:50:67: 27:88:12:6a:6f:20:f2:69:89:f3:c4:55:77:43:b3: d9:4a:db:1a:7d:4b:18:22:fe:e5:a8:21:de:af:6d: ff:65:91:88:4e:a2:0b:c9:4e:09:3f:09:2b:ff:50: 83:ee:4b:8e:d7:21:ac:d0:25:d8:05:47:7f:fc:51: c7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E7:2B:32:6A:8E:64:11:7A:FB:C8:8A:04:4F:1D:18:11:07:CA:9B X509v3 Authority Key Identifier: keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:57:78:6f:ed:44:42:23:16:67:2d:52:69:66:a2:c5:64:a3: 87:6e:51:60:86:13:6f:7a:64:4a:92:a0:5e:4f:55:18:b1:52: d3:c3:fa:17:71:84:27:ee:dd:60:c2:37:9d:7a:e0:d8:cf:8f: 10:e8:cc:4c:41:71:76:45:7c:63:56:a8:d2:71:06:8e:52:f8: 34:5c:39:0c:87:ef:d1:11:53:c4:98:e2:32:b7:6e:a0:0d:a1: 24:5a:5b:d3:fa:c8:b5:c8:d5:92:58:f9:8b:ea:32:b5:b6:10: 9c:70:27:a6:cc:0e:79:2f:79:f0:a3:9c:e3:f7:5b:c0:b3:d0: ea:c3:18:80:c2:ce:90:64:61:8e:82:7b:45:bf:43:02:64:9f: 8a:cf:fb:49:9d:56:22:75:52:b4:cb:4d:3e:64:bd:ce:73:17: 10:2c:9e:dc:34:19:38:9b:fb:05:26:12:d0:a5:4b:af:9f:02: 22:dc:eb:50:2c:1c:63:09:4e:b5:fa:13:ee:df:4f:f1:dc:2c: 01:b0:ee:f2:a7:46:c3:33:d3:76:51:10:b2:c2:a1:95:0c:38: 4b:43:5b:af:5d:a4:40:88:6d:85:a5:8f:5f:a0:17:70:04:4a: 79:46:d9:4c:f3:00:9b:c0:a4:49:60:f6:8f:20:64:66:fa:3f: b9:b5:63:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMQ7raMhHDCewjcv9jd/vME92yswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG NjUxQkFBQTAeFw0yNTA0MTgxNDQ2NTJaFw0yNTA0MjEyMTQ1NTJaMDMxMTAvBgNV BAMTKEJFRTcyQjMyNkE4RTY0MTE3QUZCQzg4QTA0NEYxRDE4MTEwN0NBOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCskqEvZVxjE6xk+TLMil6o6jGZ eI3CfxWLqxr4mpZxjvM6hfiGH5AMVIHx+tC7eLVa9oANVo9IMgzFhhGaAXbOACBC VUutuHzBm2whOo7jfOqeUzoYFp4EsVW863IdT6nICdrsFKQxJdRNZT6rcCrQ5jQJ SdNDFojaEWLMMRMzEep+peXhMhEthGwLKP/4rYox9foefFT0K4g+RluClt7kbHn2 kqT6Q5qC910vFvHmI/5RXOQUXJkVkQ7zqgelVSxQZyeIEmpvIPJpifPEVXdDs9lK 2xp9Sxgi/uWoId6vbf9lkYhOogvJTgk/CSv/UIPuS47XIazQJdgFR3/8Ucd5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvucrMmqOZBF6+8iKBE8dGBEHypswHwYDVR0j BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx QkFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM1MDVjYjMtYjU1ZS00MGU0LWFj NzktNjM2NTYwNmY0ZWY5LzAvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMz RkVGNjUxQkFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExXeG/tREIjFmctUmlmosVko4duUWCGE296 ZEqSoF5PVRixUtPD+hdxhCfu3WDCN5164NjPjxDozExBcXZFfGNWqNJxBo5S+DRc OQyH79ERU8SY4jK3bqANoSRaW9P6yLXI1ZJY+YvqMrW2EJxwJ6bMDnkvefCjnOP3 W8Cz0OrDGIDCzpBkYY6Ce0W/QwJkn4rP+0mdViJ1UrTLTT5kvc5zFxAsntw0GTib +wUmEtClS6+fAiLc61AsHGMJTrX6E+7fT/HcLAGw7vKnRsMz03ZRELLCoZUMOEtD W69dpECIbYWlj1+gF3AESnlG2UzzAJvApElg9o8gZGb6P7m1Y90= -----END CERTIFICATE-----Generated at Sun Apr 20 02:01:09 2025 by rpki-client