$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: 28i4kaME9/A4mqunApzlmiqXuhAvDVC9K8DGwy+OOCE= Subject key identifier: 8E:55:35:FA:6E:F2:9D:39:89:F7:0D:7D:98:4E:4D:46:1E:07:9C:F6 Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 6A0BE4BCF9EE70F785029BBCC09EF9FE5F98D793 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 01E8 Signing time: Sun 15 Jun 2025 17:21:52 +0000 Manifest this update: Sun 15 Jun 2025 17:16:52 +0000 Manifest next update: Thu 19 Jun 2025 02:30:52 +0000 Files and hashes: 1: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: j+xMG0Mja1vgbHDmB6Mk1vqe3c5PuIR+QXfVG/S4zas=) 2: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: t8B5TLT0OZeJCX1DrsVUnUnXgfCj16UtYInom84KiMg=) 3: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: 8y5JK94ZhR3xgyaECM453KUX1kpdfDuJgnhaIAM+DdY=) 4: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: XWnh1VykZqMD04Gqe6UZfKtVzo0XPT3InbmErZuC12M=) 5: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: R94Jhrt2peQ9VoyHvkm97VBfx7MWEw69Cox/hXCe3MY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 02:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0b:e4:bc:f9:ee:70:f7:85:02:9b:bc:c0:9e:f9:fe:5f:98:d7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Jun 15 17:16:52 2025 GMT Not After : Jun 19 02:30:52 2025 GMT Subject: CN=8E5535FA6EF29D3989F70D7D984E4D461E079CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:94:09:7c:08:8c:bb:5c:a9:87:d5:b7:41: e4:e8:7b:cf:a6:74:26:dd:d9:fc:19:54:35:94:81: cd:8a:c4:8f:14:7c:dc:1e:12:b3:5e:a1:7a:38:a8: 3d:00:91:f0:ce:e9:08:2d:2d:b0:da:e1:5f:1e:a9: e3:af:93:9e:be:a2:54:3f:4c:77:ff:79:3e:a5:66: 3b:3f:61:e8:a3:64:1b:89:6d:25:d7:fb:01:ab:92: 21:9f:be:d5:5d:24:18:37:54:d6:9e:ae:ef:6c:ad: c1:df:ec:26:50:85:b2:c2:3c:3e:af:03:5e:64:b6: ed:87:86:2f:70:a4:52:60:74:40:2d:6d:b3:f9:72: 2c:2d:ed:f1:df:24:0b:18:ea:d2:36:01:cd:f8:a3: e8:48:49:4f:11:4f:50:2b:1a:a4:71:22:f9:53:92: a3:97:66:64:7c:92:52:72:f2:77:ac:db:06:8e:ea: 27:0d:78:7f:09:30:4a:f3:38:e5:e7:f6:4c:31:d5: 3e:7d:cf:15:de:27:0b:85:be:5b:d5:bb:89:f3:2d: ad:93:ab:82:44:81:17:f8:e3:a2:61:9c:0e:cb:8a: 02:39:e8:59:0b:5d:40:bf:9d:f2:b1:80:6c:9a:e4: 3d:09:b0:a3:26:e2:30:cb:de:ac:96:1d:79:21:31: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:55:35:FA:6E:F2:9D:39:89:F7:0D:7D:98:4E:4D:46:1E:07:9C:F6 X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:cc:08:3a:cf:bc:25:39:45:e3:a1:da:c4:25:ca:00:d5:04: 88:e4:68:9c:20:a4:9e:a2:d2:ef:c1:86:cf:f3:1c:d5:79:f6: a8:07:c0:f0:3a:f9:5f:15:c1:2e:55:f6:db:3b:71:5f:2c:44: 35:2e:fb:a4:e3:6b:c1:f7:f7:06:77:93:0b:74:81:9e:37:3f: 48:31:36:01:aa:31:62:98:43:07:fa:ed:f2:ab:44:bd:26:4b: 71:8b:36:25:f4:22:47:7a:d9:a1:02:63:b0:1c:9b:40:50:ba: 66:85:fb:b8:99:5c:80:04:28:a6:40:30:95:67:8f:4d:cb:a2: 6c:c7:bf:5f:d5:bb:8f:bb:0f:6c:1c:81:13:e1:10:75:35:1b: 6f:ce:e7:2f:d3:c2:cd:3b:57:e2:48:ed:78:5b:99:6b:6a:92: bd:ab:7a:7e:81:33:25:5f:1f:41:99:20:d9:9f:af:b6:bf:40: 2f:cf:4c:7c:a1:73:92:da:05:59:55:81:46:32:c7:1f:9e:34: 68:e4:73:54:3d:e6:dc:de:8c:2a:de:7f:62:49:bc:ae:32:c3: ab:98:90:23:ff:80:d1:7a:9d:c9:ee:e0:60:d9:0e:fe:72:4c: 0e:fc:6e:8e:35:d5:51:50:70:71:25:32:af:67:d2:b8:86:1a: bf:08:33:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUagvkvPnucPeFApu8wJ75/l+Y15MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTA2MTUxNzE2NTJaFw0yNTA2MTkwMjMwNTJaMDMxMTAvBgNV BAMTKDhFNTUzNUZBNkVGMjlEMzk4OUY3MEQ3RDk4NEU0RDQ2MUUwNzlDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+ZQJfAiMu1yph9W3QeToe8+m dCbd2fwZVDWUgc2KxI8UfNweErNeoXo4qD0AkfDO6QgtLbDa4V8eqeOvk56+olQ/ THf/eT6lZjs/YeijZBuJbSXX+wGrkiGfvtVdJBg3VNaeru9srcHf7CZQhbLCPD6v A15ktu2Hhi9wpFJgdEAtbbP5ciwt7fHfJAsY6tI2Ac34o+hISU8RT1ArGqRxIvlT kqOXZmR8klJy8nes2waO6icNeH8JMErzOOXn9kwx1T59zxXeJwuFvlvVu4nzLa2T q4JEgRf446JhnA7LigI56FkLXUC/nfKxgGya5D0JsKMm4jDL3qyWHXkhMSkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjlU1+m7ynTmJ9w19mE5NRh4HnPYwHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXMCDrPvCU5ReOh2sQlygDVBIjkaJwgpJ6i 0u/Bhs/zHNV59qgHwPA6+V8VwS5V9ts7cV8sRDUu+6Tja8H39wZ3kwt0gZ43P0gx NgGqMWKYQwf67fKrRL0mS3GLNiX0Ikd62aECY7Acm0BQumaF+7iZXIAEKKZAMJVn j03LomzHv1/Vu4+7D2wcgRPhEHU1G2/O5y/Tws07V+JI7XhbmWtqkr2ren6BMyVf H0GZINmfr7a/QC/PTHyhc5LaBVlVgUYyxx+eNGjkc1Q95tzejCref2JJvK4yw6uY kCP/gNF6ncnu4GDZDv5yTA78bo411VFQcHElMq9n0riGGr8IM6A= -----END CERTIFICATE-----Generated at Tue Jun 17 15:38:16 2025 by rpki-client