$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: OlbLVrQuvjbWc/zzwRSJkYZRIiee1GHS6clcR1dJ68A= Subject key identifier: 96:1A:95:02:3B:A8:A8:F9:AA:6D:7A:42:D7:6B:F5:27:45:80:7C:54 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 43FE220B821EA70168EAFFD3538821C48E58FAF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 036D Signing time: Sat 05 Apr 2025 09:32:09 +0000 Manifest this update: Sat 05 Apr 2025 09:27:09 +0000 Manifest next update: Tue 08 Apr 2025 13:20:09 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: QE3LIgC0C1WMqMe8Jk7E2lF6tc4eGsP3zpKM9h7cwkc=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fe:22:0b:82:1e:a7:01:68:ea:ff:d3:53:88:21:c4:8e:58:fa:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Apr 5 09:27:09 2025 GMT Not After : Apr 8 13:20:09 2025 GMT Subject: CN=961A95023BA8A8F9AA6D7A42D76BF52745807C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:bc:3b:5d:ca:0e:9d:47:d8:84:f6:40:8b: c9:7d:d5:68:0a:a1:45:2c:4d:fc:8f:c8:e1:a5:d3: 82:3b:91:a4:7f:a9:d8:ee:ec:e0:57:25:94:83:b4: fd:e2:ec:c3:f0:2c:0f:10:84:ad:3c:79:01:f3:c0: d3:d2:c2:9c:7b:09:52:8b:dd:95:42:6d:6d:3c:e9: 95:6b:17:23:1f:3d:36:22:5c:d3:e9:12:13:cd:4c: 52:11:95:87:93:d7:ef:fa:33:53:38:6e:72:70:7c: 5e:fe:82:21:1a:1f:b3:97:90:24:53:c0:98:84:04: 57:e0:de:ff:0f:ac:12:8b:e2:de:e6:05:d0:20:0c: 3c:85:38:53:e7:54:d6:4b:65:d3:a8:35:3e:54:cb: 90:50:f8:26:cb:ed:a4:42:a8:92:8c:05:e6:d7:81: 6f:b1:5c:38:8c:b5:08:22:73:82:8d:97:e1:2a:d0: 05:de:d0:47:c6:48:bd:f1:5c:78:07:9d:4f:bd:17: fd:e1:27:a7:d2:7c:23:00:2b:64:a1:68:64:49:f6: 4b:90:65:aa:4f:ea:cb:b7:02:ba:ad:5e:5d:f7:06: 8d:c7:5e:42:90:b9:39:07:bc:15:2e:23:d2:c5:db: aa:a4:28:4d:bd:92:48:e6:1d:75:6b:7c:d0:0e:ce: 62:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1A:95:02:3B:A8:A8:F9:AA:6D:7A:42:D7:6B:F5:27:45:80:7C:54 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ef:2d:49:81:f2:21:55:52:cd:7c:75:84:29:6b:bd:9d:d3: 9d:c1:01:74:a2:26:1c:a3:fc:06:04:ac:ec:e1:a7:32:96:f3: 91:85:d4:5b:50:0b:75:2e:26:e1:0b:59:bc:0f:63:e7:d7:90: f3:cd:9d:69:9f:38:5b:37:41:5c:9c:ea:bb:38:c1:b4:69:ea: f7:13:3c:68:50:9f:4c:b4:7d:e1:22:e6:59:6c:0a:36:ff:a5: 06:b1:67:be:0c:49:a5:78:13:16:40:37:fe:0d:06:cd:1f:5b: ee:39:0f:c7:3d:7f:86:5b:c5:cf:46:1d:9b:d6:f8:2a:fb:29: 0e:bc:c2:97:f9:b2:cc:ff:42:ba:06:0e:d3:e2:8b:d7:9e:54: ff:ff:e6:f7:02:85:a6:3d:81:46:57:1a:40:b6:9a:47:49:bd: da:db:81:ca:f3:47:f6:24:75:b3:c4:6b:5a:d4:8f:01:22:b2: 4f:bd:5e:a3:32:60:1f:5d:39:0a:ee:da:4d:43:cc:7a:47:ca: 89:31:3a:71:56:0d:43:23:92:fb:7a:47:57:36:0b:0a:60:ab: a8:c4:16:a3:58:12:ef:39:ba:9c:ce:8e:76:9e:de:62:68:61: 1f:a4:b6:75:18:c2:56:fd:ab:be:b3:f6:23:01:0c:c9:c3:98: 13:f9:93:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/4iC4IepwFo6v/TU4ghxI5Y+vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNTA0MDUwOTI3MDlaFw0yNTA0MDgxMzIwMDlaMDMxMTAvBgNV BAMTKDk2MUE5NTAyM0JBOEE4RjlBQTZEN0E0MkQ3NkJGNTI3NDU4MDdDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjrw7XcoOnUfYhPZAi8l91WgK oUUsTfyPyOGl04I7kaR/qdju7OBXJZSDtP3i7MPwLA8QhK08eQHzwNPSwpx7CVKL 3ZVCbW086ZVrFyMfPTYiXNPpEhPNTFIRlYeT1+/6M1M4bnJwfF7+giEaH7OXkCRT wJiEBFfg3v8PrBKL4t7mBdAgDDyFOFPnVNZLZdOoNT5Uy5BQ+CbL7aRCqJKMBebX gW+xXDiMtQgic4KNl+Eq0AXe0EfGSL3xXHgHnU+9F/3hJ6fSfCMAK2ShaGRJ9kuQ ZapP6su3ArqtXl33Bo3HXkKQuTkHvBUuI9LF26qkKE29kkjmHXVrfNAOzmK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlhqVAjuoqPmqbXpC12v1J0WAfFQwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjvLUmB8iFVUs18dYQpa72d053BAXSiJhyj /AYErOzhpzKW85GF1FtQC3UuJuELWbwPY+fXkPPNnWmfOFs3QVyc6rs4wbRp6vcT PGhQn0y0feEi5llsCjb/pQaxZ74MSaV4ExZAN/4NBs0fW+45D8c9f4Zbxc9GHZvW +Cr7KQ68wpf5ssz/QroGDtPii9eeVP//5vcChaY9gUZXGkC2mkdJvdrbgcrzR/Yk dbPEa1rUjwEisk+9XqMyYB9dOQru2k1DzHpHyokxOnFWDUMjkvt6R1c2Cwpgq6jE FqNYEu85upzOjnae3mJoYR+ktnUYwlb9q76z9iMBDMnDmBP5k70= -----END CERTIFICATE-----Generated at Sat Apr 5 20:17:31 2025 by rpki-client