$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: AHCwSPswMAWDJYaoaI8sHx/+e005B1mbRzOWeLWL+Vk= Subject key identifier: 86:A8:A5:AE:CC:23:D8:F1:29:F9:21:3C:CB:31:C7:B8:4C:A3:A5:C7 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 313D6AE75326C8C090BE49D1840A063B345E4D19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 0388 Signing time: Thu 05 Jun 2025 11:12:09 +0000 Manifest this update: Thu 05 Jun 2025 11:07:09 +0000 Manifest next update: Sun 08 Jun 2025 15:25:09 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: 9gqTpjXvsAWTCysXYuvL1n3meMol4aGraRh+0UeuYJQ=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 15:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3d:6a:e7:53:26:c8:c0:90:be:49:d1:84:0a:06:3b:34:5e:4d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Jun 5 11:07:09 2025 GMT Not After : Jun 8 15:25:09 2025 GMT Subject: CN=86A8A5AECC23D8F129F9213CCB31C7B84CA3A5C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:09:ce:63:02:ea:bf:ee:ea:49:f1:5e:79: bb:5d:fd:26:01:87:bc:39:60:68:09:e3:49:7a:af: 9f:f2:0e:43:ca:c6:54:b9:9d:76:9e:81:08:fd:40: 55:59:b4:b7:23:2a:29:fc:bc:42:16:ce:79:de:0b: 64:14:22:2e:9a:d6:fc:b1:af:fc:63:39:e9:a0:b1: ab:3c:63:65:25:e7:8b:9a:34:85:e8:4d:63:0c:d2: 93:18:6c:25:c0:48:e3:7b:b4:6c:72:04:60:ee:45: 25:8c:7e:47:e8:11:a0:9c:c3:f8:82:b9:e0:d7:ce: 1d:c3:5b:53:93:aa:45:a7:62:3f:ad:54:93:71:a5: e4:48:49:45:67:5b:fd:85:dc:58:ae:24:1e:33:25: ca:d3:85:28:77:8b:eb:ca:a4:46:dc:cc:e6:dc:aa: 95:44:18:ec:7f:c7:6f:e3:ec:19:f3:da:1c:7c:66: 0e:bc:20:fd:26:c5:c8:ea:84:4a:c9:60:4b:36:ba: a9:4d:69:99:f5:65:eb:80:07:77:00:3d:9c:c8:ca: 19:cf:3e:5d:ff:a4:40:78:c8:02:8b:5b:ea:cf:d9: ba:11:d6:2c:68:e8:0a:99:d1:6d:3a:e9:95:f9:65: 29:7e:1b:14:4f:95:1c:50:fa:0a:44:9e:31:96:c1: c0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A8:A5:AE:CC:23:D8:F1:29:F9:21:3C:CB:31:C7:B8:4C:A3:A5:C7 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:19:8b:cb:26:d4:e2:b0:62:f5:40:3a:e4:05:d6:68:2c:3a: ae:5c:23:dd:03:67:20:59:17:bf:26:c2:16:f6:22:e9:2e:75: 40:32:f6:b1:6a:c5:1c:eb:52:3d:26:f6:eb:7f:74:9f:e3:4d: 88:6a:f3:8e:23:20:63:c6:13:14:e4:7e:d7:78:bc:2e:bd:38: 78:4f:b0:b2:e1:38:90:9b:31:5a:ea:bc:20:4f:b1:d7:a7:d8: 57:e1:c0:eb:c9:e8:62:f9:41:7d:33:e9:5f:03:c8:8c:e7:eb: 3b:ec:77:2b:ef:5c:71:34:21:18:fd:87:4e:12:e5:45:5d:45: 88:1d:2f:5d:36:f5:c5:d8:27:9d:78:0b:1c:7c:94:4f:bd:16: 60:54:66:a9:67:ab:68:97:3f:29:ab:40:02:d1:86:7a:2e:87: 07:91:52:7b:04:f2:97:ff:32:4b:0f:bf:20:29:8e:95:63:93: 25:f1:5f:2c:63:38:fd:82:8a:a9:04:1c:f8:62:61:b5:f1:0f: af:f3:70:32:55:10:80:2c:98:b4:76:33:40:28:bf:6c:d6:e2: af:30:ff:6d:95:48:69:cf:50:ee:ed:76:e8:46:5b:ad:2f:18: f9:2a:65:e8:7a:e2:f0:75:dc:52:ac:d3:f2:5e:a8:7d:6d:dd: 95:5e:70:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMT1q51MmyMCQvknRhAoGOzReTRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNTA2MDUxMTA3MDlaFw0yNTA2MDgxNTI1MDlaMDMxMTAvBgNV BAMTKDg2QThBNUFFQ0MyM0Q4RjEyOUY5MjEzQ0NCMzFDN0I4NENBM0E1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgAnOYwLqv+7qSfFeebtd/SYB h7w5YGgJ40l6r5/yDkPKxlS5nXaegQj9QFVZtLcjKin8vEIWznneC2QUIi6a1vyx r/xjOemgsas8Y2Ul54uaNIXoTWMM0pMYbCXASON7tGxyBGDuRSWMfkfoEaCcw/iC ueDXzh3DW1OTqkWnYj+tVJNxpeRISUVnW/2F3FiuJB4zJcrThSh3i+vKpEbczObc qpVEGOx/x2/j7Bnz2hx8Zg68IP0mxcjqhErJYEs2uqlNaZn1ZeuAB3cAPZzIyhnP Pl3/pEB4yAKLW+rP2boR1ixo6AqZ0W066ZX5ZSl+GxRPlRxQ+gpEnjGWwcDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqilrswj2PEp+SE8yzHHuEyjpccwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANMZi8sm1OKwYvVAOuQF1mgsOq5cI90DZyBZ F78mwhb2IukudUAy9rFqxRzrUj0m9ut/dJ/jTYhq844jIGPGExTkftd4vC69OHhP sLLhOJCbMVrqvCBPsden2FfhwOvJ6GL5QX0z6V8DyIzn6zvsdyvvXHE0IRj9h04S 5UVdRYgdL1029cXYJ514Cxx8lE+9FmBUZqlnq2iXPymrQALRhnouhweRUnsE8pf/ MksPvyApjpVjkyXxXyxjOP2CiqkEHPhiYbXxD6/zcDJVEIAsmLR2M0Aov2zW4q8w /22VSGnPUO7tduhGW60vGPkqZeh64vB13FKs0/JeqH1t3ZVecDw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:51 2025 by rpki-client