$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: XuYsVd/xSRrmEZLKjbWpj6HKTir4uIs0URkxV+AIQoA= Subject key identifier: 5B:8E:BB:5E:08:F3:4B:37:F2:D5:FB:74:C3:8E:45:CA:EE:21:46:6E Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 3382948850CB699A0C62B67A937630461D944BB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 04E0 Signing time: Tue 17 Jun 2025 03:31:42 +0000 Manifest this update: Tue 17 Jun 2025 03:26:42 +0000 Manifest next update: Fri 20 Jun 2025 11:15:42 +0000 Files and hashes: 1: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) 2: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: WyQPX2aQ49gfyxciPOzgbK5dds8ZDbwfJoJJC4iviEs=) 3: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:82:94:88:50:cb:69:9a:0c:62:b6:7a:93:76:30:46:1d:94:4b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Jun 17 03:26:42 2025 GMT Not After : Jun 20 11:15:42 2025 GMT Subject: CN=5B8EBB5E08F34B37F2D5FB74C38E45CAEE21466E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:1d:12:8c:ed:f6:8e:d6:c1:f4:1f:67:d2: 6b:c1:a5:fe:a4:a2:e3:c4:88:42:dd:6d:93:8e:0a: 96:2f:a7:d0:09:10:64:c1:f7:41:7b:af:c1:be:18: ff:7e:53:ec:79:0d:91:40:73:59:b6:e6:ac:1e:ec: 03:71:43:be:f4:33:33:08:6b:fb:b3:82:99:96:06: fe:af:cf:c4:92:d8:02:37:7d:dc:0a:6e:fb:fa:4d: 84:d7:50:44:a4:44:07:44:2b:7d:6f:3f:4a:ff:75: 1c:d1:aa:94:04:e8:a4:d5:71:4e:79:51:55:94:e6: b2:51:5b:19:ba:0c:64:65:e1:e2:ce:f3:8d:11:66: 9a:56:70:68:9c:80:13:44:45:13:77:f0:e8:d1:c3: 4a:5e:68:5d:c4:45:e7:48:95:ce:4d:65:a0:79:81: b5:9b:4b:95:e4:1c:34:53:fc:75:90:8b:12:76:e6: 52:ed:f8:d3:36:71:1a:f3:c2:95:a5:52:89:f3:66: b0:be:dd:2b:b5:66:e0:e8:3e:d3:35:55:f0:46:ce: fe:a7:3b:4a:8c:f1:fb:39:6f:4b:3f:f9:2a:a7:70: 81:b5:06:dd:26:76:07:c9:2f:f5:41:0d:5c:35:40: d8:ac:34:0b:94:36:dc:d1:25:de:72:3b:b6:55:6f: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8E:BB:5E:08:F3:4B:37:F2:D5:FB:74:C3:8E:45:CA:EE:21:46:6E X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2a:26:7a:cb:47:2a:d4:7b:9b:92:6d:f4:c9:e9:7e:f3:aa: 68:af:c4:43:dd:24:71:0d:14:23:e6:98:fb:35:65:11:1a:a2: 5e:30:d1:a3:4e:d7:29:25:b7:d5:3f:78:44:07:ed:d9:98:49: 7a:72:86:9d:fd:51:5c:de:a8:5a:13:2b:ee:4d:61:1f:38:fe: da:56:86:0f:8d:10:f6:d1:e6:ec:ea:a8:93:0c:a5:d3:f8:61: 3f:54:e2:a2:8e:f9:d7:8e:d0:77:69:99:95:85:e8:55:31:e4: 35:48:77:e7:05:17:73:d7:2c:ee:df:b9:63:f5:72:e9:f9:14: ab:91:64:8a:6f:95:ce:08:c1:d0:a1:9d:c3:6e:26:30:7a:cf: e5:22:86:13:29:7b:7a:c5:ed:9b:1c:19:0b:2c:8e:d0:ee:b2: 80:cc:38:21:6b:69:30:de:8f:26:80:f2:7e:91:1e:14:1d:79: b3:31:a5:1c:61:c1:82:ab:71:eb:d7:7c:1e:58:b3:07:d1:32: de:d2:0f:fa:a7:31:45:e5:39:c6:0c:5b:93:f8:05:37:24:ae: a1:13:3b:b6:c8:c9:06:b6:66:e1:38:1f:2d:3f:05:90:92:0d: 1f:d2:4d:04:8e:b7:58:4e:fa:77:a7:a4:1c:7e:95:da:3e:65: d8:19:58:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4KUiFDLaZoMYrZ6k3YwRh2US7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNTA2MTcwMzI2NDJaFw0yNTA2MjAxMTE1NDJaMDMxMTAvBgNV BAMTKDVCOEVCQjVFMDhGMzRCMzdGMkQ1RkI3NEMzOEU0NUNBRUUyMTQ2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGR0SjO32jtbB9B9n0mvBpf6k ouPEiELdbZOOCpYvp9AJEGTB90F7r8G+GP9+U+x5DZFAc1m25qwe7ANxQ770MzMI a/uzgpmWBv6vz8SS2AI3fdwKbvv6TYTXUESkRAdEK31vP0r/dRzRqpQE6KTVcU55 UVWU5rJRWxm6DGRl4eLO840RZppWcGicgBNERRN38OjRw0peaF3ERedIlc5NZaB5 gbWbS5XkHDRT/HWQixJ25lLt+NM2cRrzwpWlUonzZrC+3Su1ZuDoPtM1VfBGzv6n O0qM8fs5b0s/+SqncIG1Bt0mdgfJL/VBDVw1QNisNAuUNtzRJd5yO7ZVb2DlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW467XgjzSzfy1ft0w45Fyu4hRm4wHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUqJnrLRyrUe5uSbfTJ6X7zqmivxEPdJHEN FCPmmPs1ZREaol4w0aNO1yklt9U/eEQH7dmYSXpyhp39UVzeqFoTK+5NYR84/tpW hg+NEPbR5uzqqJMMpdP4YT9U4qKO+deO0HdpmZWF6FUx5DVId+cFF3PXLO7fuWP1 cun5FKuRZIpvlc4IwdChncNuJjB6z+UihhMpe3rF7ZscGQssjtDusoDMOCFraTDe jyaA8n6RHhQdebMxpRxhwYKrcevXfB5YswfRMt7SD/qnMUXlOcYMW5P4BTckrqET O7bIyQa2ZuE4Hy0/BZCSDR/STQSOt1hO+nenpBx+ldo+ZdgZWFo= -----END CERTIFICATE-----Generated at Tue Jun 17 05:02:44 2025 by rpki-client