$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: GaP7/m4O5qgrOmjDRwiF/X3wDRnjX5WC/vj9X3CBjy8= Subject key identifier: 2C:1F:A9:62:45:B9:6A:DC:69:2B:B6:DC:73:6A:9A:CC:2F:5D:F4:93 Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 3D63EB996A2E6EF00BC0D75EFA905F1B6456C880 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 01E8 Signing time: Wed 04 Jun 2025 11:02:08 +0000 Manifest this update: Wed 04 Jun 2025 10:57:08 +0000 Manifest next update: Sat 07 Jun 2025 11:37:08 +0000 Files and hashes: 1: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: 2BHDAp9JJwAxfTTARkB38SDDNtvqwAwZb/7wm+5krf0=) 2: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) 3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:63:eb:99:6a:2e:6e:f0:0b:c0:d7:5e:fa:90:5f:1b:64:56:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Jun 4 10:57:08 2025 GMT Not After : Jun 7 11:37:08 2025 GMT Subject: CN=2C1FA96245B96ADC692BB6DC736A9ACC2F5DF493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:46:73:c0:c4:ef:7b:47:e8:c5:d3:01:05: b7:59:fe:d7:16:b4:ed:53:4d:d8:94:91:19:66:90: 02:33:e2:64:14:db:61:18:04:6f:d0:46:d7:2f:f4: 50:71:96:f8:f3:e1:ff:ab:82:57:60:30:90:66:8c: fa:ed:a6:57:17:ad:10:4a:26:b4:c2:3e:7a:ae:8d: 84:fa:17:77:98:5c:c5:b0:97:a1:70:7e:37:bf:5b: 39:e8:26:73:06:59:0f:b4:e4:1b:da:ad:7d:96:02: 73:cc:28:af:2f:09:ed:51:a4:26:19:ad:9c:a0:de: 38:f3:55:6b:e3:8a:66:18:8a:09:b7:5a:60:19:20: 98:14:c6:f4:69:40:5b:43:b8:58:5f:0c:39:db:82: db:51:f6:32:47:2d:ea:69:98:ac:16:11:d7:fe:40: 39:ec:e4:6c:e5:e6:9f:a2:f1:5f:f4:32:46:25:c2: ae:66:7c:a3:ca:65:de:f1:f3:ec:c0:ba:c6:37:eb: c2:93:e2:2a:76:6b:32:85:ae:ea:04:18:12:73:2d: cf:54:cd:a2:57:42:e8:07:d2:5c:93:c4:d3:b7:6b: f3:e1:20:0d:a4:1f:8a:99:88:bd:39:2b:36:aa:3d: 56:03:ce:9e:34:53:85:86:f5:aa:41:b0:29:b1:c3: 48:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1F:A9:62:45:B9:6A:DC:69:2B:B6:DC:73:6A:9A:CC:2F:5D:F4:93 X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:55:c9:bf:dd:94:ae:c6:15:2c:a5:79:ef:a0:5b:41:e0:45: bf:16:de:db:ce:69:14:89:46:e0:e2:92:a4:3e:93:43:5f:8c: c5:b4:02:84:44:e0:fe:2b:37:a0:0c:96:36:e0:13:6e:9f:57: 99:88:ad:58:25:ab:8a:6e:65:2e:6d:fd:81:85:a0:67:c1:3f: 12:c9:df:a8:60:45:b1:0c:f1:0e:25:7d:e2:b2:da:c7:82:d2: 19:b9:00:26:ab:2d:4f:9a:22:1e:0b:e0:3b:38:ee:49:59:09: b5:83:9c:7f:83:60:97:eb:9c:57:0d:3f:0a:9a:7e:3b:26:99: ba:c5:08:9d:ab:c1:09:a1:6d:d2:9d:f8:47:76:81:fe:53:8e: 1a:1e:b8:d8:0b:e7:c0:d2:95:1e:ea:83:a1:92:f8:6c:81:7d: 9e:ff:6c:bc:da:02:d0:cc:7f:03:2e:d5:c6:13:f8:04:ba:3d: 0f:2f:e0:e5:b8:63:81:8b:43:fa:4d:df:46:65:9c:b9:24:0e: 71:07:1a:c2:ba:25:32:fb:63:eb:0e:bc:4c:c2:00:16:ef:3b: 7f:f3:b6:d6:ca:72:79:71:eb:e6:43:7a:b0:fd:3d:9a:a8:d5: 74:97:59:71:dc:62:89:83:9d:64:27:d8:bb:23:03:6a:82:19: c7:8d:99:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWPrmWoubvALwNde+pBfG2RWyIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTA2MDQxMDU3MDhaFw0yNTA2MDcxMTM3MDhaMDMxMTAvBgNV BAMTKDJDMUZBOTYyNDVCOTZBREM2OTJCQjZEQzczNkE5QUNDMkY1REY0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCX0ZzwMTve0foxdMBBbdZ/tcW tO1TTdiUkRlmkAIz4mQU22EYBG/QRtcv9FBxlvjz4f+rgldgMJBmjPrtplcXrRBK JrTCPnqujYT6F3eYXMWwl6Fwfje/WznoJnMGWQ+05BvarX2WAnPMKK8vCe1RpCYZ rZyg3jjzVWvjimYYigm3WmAZIJgUxvRpQFtDuFhfDDnbgttR9jJHLeppmKwWEdf+ QDns5Gzl5p+i8V/0MkYlwq5mfKPKZd7x8+zAusY368KT4ip2azKFruoEGBJzLc9U zaJXQugH0lyTxNO3a/PhIA2kH4qZiL05KzaqPVYDzp40U4WG9apBsCmxw0hnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULB+pYkW5atxpK7bcc2qazC9d9JMwHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVVyb/dlK7GFSylee+gW0HgRb8W3tvOaRSJ RuDikqQ+k0NfjMW0AoRE4P4rN6AMljbgE26fV5mIrVglq4puZS5t/YGFoGfBPxLJ 36hgRbEM8Q4lfeKy2seC0hm5ACarLU+aIh4L4Ds47klZCbWDnH+DYJfrnFcNPwqa fjsmmbrFCJ2rwQmhbdKd+Ed2gf5TjhoeuNgL58DSlR7qg6GS+GyBfZ7/bLzaAtDM fwMu1cYT+AS6PQ8v4OW4Y4GLQ/pN30ZlnLkkDnEHGsK6JTL7Y+sOvEzCABbvO3/z ttbKcnlx6+ZDerD9PZqo1XSXWXHcYomDnWQn2LsjA2qCGceNmRs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:44 2025 by rpki-client