$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json) Hash identifier: d+ODh4bkFBahZdV5ZV4XR4VZRcwL7rreHI6Rf35Vr/A= Subject key identifier: 77:67:64:E0:CA:CD:A5:C3:17:72:D3:66:5D:80:F0:B2:F5:03:F2:04 Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 7AE39A74A82342AF89D3EB6FB563D5C83BEE2337 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft Manifest number: 01A3 Signing time: Mon 02 Jun 2025 09:31:43 +0000 Manifest this update: Mon 02 Jun 2025 09:26:43 +0000 Manifest next update: Thu 05 Jun 2025 12:24:43 +0000 Files and hashes: 1: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: P493iB78p9t7qltIwTKGQaGSTPOPi9gtjeRxlpq2/G8=) 2: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: c6BbZqskhId1bW3l6aSuRQLjcbQNOmGBaOGbC28FTXg=) 3: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZsYKQLKtHkVTslRdGYlW0kXwJ9gapNRm2k1uNrTnTX0=) 4: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: FkjuZkviekb7VaMyMmuCMchrVU1yZ527lgE1cprIhiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 12:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e3:9a:74:a8:23:42:af:89:d3:eb:6f:b5:63:d5:c8:3b:ee:23:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: Jun 2 09:26:43 2025 GMT Not After : Jun 5 12:24:43 2025 GMT Subject: CN=776764E0CACDA5C31772D3665D80F0B2F503F204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:11:8c:71:10:8e:a4:ec:cf:62:26:77:fa:11: ff:98:9e:b0:97:90:a4:e3:78:ed:67:09:cf:07:74: 92:c1:a9:59:bd:4c:d4:7c:8c:39:df:6c:0b:2e:b0: 65:a1:5c:2d:ca:6b:ba:54:12:3f:f2:cb:37:4b:0f: cf:66:d2:91:f5:e4:b3:8f:7a:47:62:0e:40:e9:70: 21:30:a6:09:b0:27:61:19:d6:48:14:a7:53:5e:49: a4:2a:46:58:8a:a0:d6:a6:7b:fa:f0:41:02:82:cd: 7c:e2:ae:ef:39:eb:f5:28:73:a6:9d:98:16:80:23: 97:ca:8f:99:63:11:cd:a2:81:be:75:07:8a:a6:27: 32:5f:1f:fc:fa:84:29:09:b4:87:d0:f0:2a:cb:2d: 8c:37:07:53:2d:36:7f:cf:16:23:17:59:fb:1d:46: a7:9d:4b:fc:80:84:80:e6:3c:8a:96:d9:b1:8c:9b: 77:4a:f8:7e:ab:4a:62:62:43:f1:5d:a4:33:9b:f5: dd:3c:a5:57:b9:e0:32:83:72:44:37:42:c3:09:d1: 43:09:a4:1b:ac:ac:d4:0a:ff:11:ed:cc:9e:03:58: 08:15:b6:0f:25:5c:cb:35:43:30:a5:fe:30:c5:d4: 27:e6:52:0a:08:76:ea:ea:a1:e2:a3:57:9a:b4:86: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:67:64:E0:CA:CD:A5:C3:17:72:D3:66:5D:80:F0:B2:F5:03:F2:04 X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:73:13:3e:e4:06:44:0a:99:2f:bf:8d:9e:c4:f6:a1:86:ee: 8f:f9:ed:e5:64:74:6e:de:e6:a0:bf:54:47:88:0e:a9:98:6c: 1c:07:e4:d5:33:6a:57:b3:77:31:31:bb:62:25:5b:d4:fe:4a: 78:42:c6:4d:02:92:9e:49:0e:e2:de:54:af:7a:9d:53:75:96: 9a:c7:be:1a:da:91:a0:5d:eb:8c:9e:eb:38:ff:53:1c:fe:29: 44:b9:6a:42:84:51:ea:24:80:0c:a4:d1:a3:09:d0:1f:67:b3: f1:98:79:b7:f8:d0:09:6c:ef:73:26:b1:0b:ea:f2:e9:51:ce: d9:f5:36:ab:68:17:72:53:96:6f:67:d9:a8:75:68:eb:0b:a4: 67:fe:3e:07:ae:b2:d7:d3:9e:2a:72:71:e3:df:56:55:02:20: ef:3a:b6:36:1f:c4:16:6d:75:a1:c7:2e:64:b7:10:6c:fa:bb: 80:a6:07:45:67:d2:6c:1c:6d:aa:4d:e7:99:77:cb:56:45:02: e0:8c:a9:83:66:8e:7d:22:c9:bd:b3:20:e3:ed:01:3a:40:87: 82:95:7d:2c:e9:1e:33:5f:32:b7:e8:ba:7e:89:1b:25:cf:7a: a3:39:da:5c:dd:7e:48:ce:95:b8:fe:6a:a4:8f:d3:c5:e9:d0: 49:14:65:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeuOadKgjQq+J0+tvtWPVyDvuIzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVC NkMyMUM3NzAeFw0yNTA2MDIwOTI2NDNaFw0yNTA2MDUxMjI0NDNaMDMxMTAvBgNV BAMTKDc3Njc2NEUwQ0FDREE1QzMxNzcyRDM2NjVEODBGMEIyRjUwM0YyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaEYxxEI6k7M9iJnf6Ef+YnrCX kKTjeO1nCc8HdJLBqVm9TNR8jDnfbAsusGWhXC3Ka7pUEj/yyzdLD89m0pH15LOP ekdiDkDpcCEwpgmwJ2EZ1kgUp1NeSaQqRliKoName/rwQQKCzXziru856/Uoc6ad mBaAI5fKj5ljEc2igb51B4qmJzJfH/z6hCkJtIfQ8CrLLYw3B1MtNn/PFiMXWfsd RqedS/yAhIDmPIqW2bGMm3dK+H6rSmJiQ/FdpDOb9d08pVe54DKDckQ3QsMJ0UMJ pBusrNQK/xHtzJ4DWAgVtg8lXMs1QzCl/jDF1CfmUgoIdurqoeKjV5q0hhytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd2dk4MrNpcMXctNmXYDwsvUD8gQwHwYDVR0j BBgwFoAUPSBSK1GuqkH1lJDi1Vw23rbCHHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTYxZTVhZS1lNDVmLTRlZTMtOGY2Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUx QUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIxQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVCNkMy MUM3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2 REVCNkMyMUM3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZzEz7kBkQKmS+/jZ7E9qGG7o/57eVkdG7e 5qC/VEeIDqmYbBwH5NUzalezdzExu2IlW9T+SnhCxk0Ckp5JDuLeVK96nVN1lprH vhrakaBd64ye6zj/Uxz+KUS5akKEUeokgAyk0aMJ0B9ns/GYebf40Als73MmsQvq 8ulRztn1NqtoF3JTlm9n2ah1aOsLpGf+PgeustfTnipycePfVlUCIO86tjYfxBZt daHHLmS3EGz6u4CmB0Vn0mwcbapN55l3y1ZFAuCMqYNmjn0iyb2zIOPtATpAh4KV fSzpHjNfMrfoun6JGyXPeqM52lzdfkjOlbj+aqSP08Xp0EkUZYM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:31:42 2025 by rpki-client