$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: RogWm+rauK3Vnug9ClZykpqsV3UV0hv9g/Q7e2Rv+9A= Subject key identifier: 7B:48:90:50:96:B0:AE:92:54:1F:DE:BA:2D:95:B4:24:72:EE:AD:A2 Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 5335C83A762FFFC9A87B753EE0DB093294F9D513 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 01D2 Signing time: Sun 27 Apr 2025 16:11:50 +0000 Manifest this update: Sun 27 Apr 2025 16:06:50 +0000 Manifest next update: Wed 30 Apr 2025 20:22:50 +0000 Files and hashes: 1: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: ED9YF8JfO/EWZUDqfXUDIQ9fTwKBbZGbuI+ZFinSbao=) 2: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: j+xMG0Mja1vgbHDmB6Mk1vqe3c5PuIR+QXfVG/S4zas=) 3: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: R94Jhrt2peQ9VoyHvkm97VBfx7MWEw69Cox/hXCe3MY=) 4: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: 8y5JK94ZhR3xgyaECM453KUX1kpdfDuJgnhaIAM+DdY=) 5: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: XWnh1VykZqMD04Gqe6UZfKtVzo0XPT3InbmErZuC12M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 20:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:35:c8:3a:76:2f:ff:c9:a8:7b:75:3e:e0:db:09:32:94:f9:d5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Apr 27 16:06:50 2025 GMT Not After : Apr 30 20:22:50 2025 GMT Subject: CN=7B48905096B0AE92541FDEBA2D95B42472EEADA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:e7:68:bc:bc:1d:2c:a9:8d:39:b1:e7:13: bb:ec:bf:3e:dd:04:e7:50:b0:a9:c6:7e:2e:19:cc: 19:99:64:51:ec:2c:4b:1b:01:6e:a8:52:c5:5a:90: c1:a9:e0:94:a8:95:9e:73:41:9f:b4:09:e9:53:52: ef:b0:b2:b0:50:20:bc:8d:d8:ca:ac:80:df:0e:2c: 18:bb:d4:b8:17:86:d0:4a:3d:d9:7e:76:44:d9:84: c5:88:cd:70:42:ba:3c:1c:0e:9e:f7:70:c3:16:42: 3d:47:0e:ab:47:ac:d0:ac:09:05:47:40:92:ff:ec: 46:22:78:d9:9b:87:5b:44:3b:4d:31:03:fe:8f:56: 1a:52:a2:73:6f:c8:d1:c6:7e:35:eb:ba:1a:3d:58: 00:b2:d3:37:ae:49:82:91:c7:91:70:ec:26:c1:7b: d3:f3:f8:b7:e9:d8:ec:68:3f:78:13:e0:3d:a5:f6: ed:61:2f:66:1e:4a:75:7a:63:35:36:8f:b0:04:13: 25:28:f2:34:3d:d1:2a:c2:c1:79:33:e9:52:e9:94: 4a:56:ff:12:78:1a:e3:e0:56:2b:31:86:69:09:8e: 90:99:ad:a8:fc:2d:62:fd:51:de:ae:72:6d:05:f6: 7e:61:cd:cd:21:3c:68:06:4b:95:b8:86:68:8f:5e: 2a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:48:90:50:96:B0:AE:92:54:1F:DE:BA:2D:95:B4:24:72:EE:AD:A2 X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a1:20:72:1a:6b:99:20:bc:89:a6:6c:e8:46:a9:20:7b:a9: 8c:a9:5e:7f:bb:bd:32:63:bd:e6:23:b5:60:fb:d0:a7:9c:2d: d8:e4:92:fe:af:f3:0f:f5:71:2a:cc:94:be:d3:90:b9:4f:a5: a8:ff:86:85:f2:db:f3:1e:27:b3:25:75:4d:ad:6d:13:e0:05: 14:1f:cb:a3:af:15:c1:37:f6:e5:dc:1c:4b:24:c7:1b:1b:f7: a4:8e:c4:80:91:99:f7:03:9c:c5:19:dd:7e:d1:c6:b3:91:dd: 5d:c8:01:b4:03:8b:06:6a:5a:73:ec:b4:a6:8a:fb:eb:7b:4a: fd:bd:7a:83:9b:83:4c:2f:b0:26:5b:5f:ed:82:63:a8:d3:2b: de:fa:a8:1a:55:ad:f2:3f:0a:1f:08:58:10:da:56:cf:9d:9d: 0e:fa:4a:55:ba:90:19:e7:eb:9a:6b:46:20:ac:b6:58:2e:62: ca:a9:67:9d:3c:d1:14:05:20:ee:fd:5d:8b:7e:ea:61:fb:c9: e2:bf:5f:6b:77:e7:8c:37:8b:db:f3:f7:23:e1:bb:99:c7:c5: f3:ff:7e:e4:05:4c:0e:75:61:a6:08:c0:83:20:b9:db:90:3f: 02:a7:f0:44:e3:66:24:64:9b:25:c4:d4:f0:8d:c7:ef:58:8a: 5d:19:77:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzXIOnYv/8moe3U+4NsJMpT51RMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTA0MjcxNjA2NTBaFw0yNTA0MzAyMDIyNTBaMDMxMTAvBgNV BAMTKDdCNDg5MDUwOTZCMEFFOTI1NDFGREVCQTJEOTVCNDI0NzJFRUFEQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2udovLwdLKmNObHnE7vsvz7d BOdQsKnGfi4ZzBmZZFHsLEsbAW6oUsVakMGp4JSolZ5zQZ+0CelTUu+wsrBQILyN 2MqsgN8OLBi71LgXhtBKPdl+dkTZhMWIzXBCujwcDp73cMMWQj1HDqtHrNCsCQVH QJL/7EYieNmbh1tEO00xA/6PVhpSonNvyNHGfjXruho9WACy0zeuSYKRx5Fw7CbB e9Pz+Lfp2OxoP3gT4D2l9u1hL2YeSnV6YzU2j7AEEyUo8jQ90SrCwXkz6VLplEpW /xJ4GuPgVisxhmkJjpCZraj8LWL9Ud6ucm0F9n5hzc0hPGgGS5W4hmiPXiotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe0iQUJawrpJUH966LZW0JHLuraIwHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMShIHIaa5kgvImmbOhGqSB7qYypXn+7vTJj veYjtWD70KecLdjkkv6v8w/1cSrMlL7TkLlPpaj/hoXy2/MeJ7MldU2tbRPgBRQf y6OvFcE39uXcHEskxxsb96SOxICRmfcDnMUZ3X7RxrOR3V3IAbQDiwZqWnPstKaK ++t7Sv29eoObg0wvsCZbX+2CY6jTK976qBpVrfI/Ch8IWBDaVs+dnQ76SlW6kBnn 65prRiCstlguYsqpZ5080RQFIO79XYt+6mH7yeK/X2t354w3i9vz9yPhu5nHxfP/ fuQFTA51YaYIwIMguduQPwKn8ETjZiRkmyXE1PCNx+9Yil0Zd94= -----END CERTIFICATE-----Generated at Mon Apr 28 22:49:34 2025 by rpki-client