$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: HbwW0Qa45MDqVR8+9ce+jitb6N5JcqxThCgrVvDTyAY= Subject key identifier: D1:7D:7F:F1:09:77:85:34:6D:F6:BF:40:87:91:9A:7C:2B:F3:1E:D4 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 691DA5B7F1349306C9E5866B02A10F85C1B7D105 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 04C8 Signing time: Sat 26 Apr 2025 09:11:40 +0000 Manifest this update: Sat 26 Apr 2025 09:06:40 +0000 Manifest next update: Tue 29 Apr 2025 14:38:40 +0000 Files and hashes: 1: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: aBM9w2AjR1ACyqK6DmDNFfzzfTbG6aXVzM70hXE+yq0=) 2: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: BSvE+OLnytfbf8toiJJMEZBKYqLTRbQfxnqbMWT62fk=) 3: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 14:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1d:a5:b7:f1:34:93:06:c9:e5:86:6b:02:a1:0f:85:c1:b7:d1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Apr 26 09:06:40 2025 GMT Not After : Apr 29 14:38:40 2025 GMT Subject: CN=D17D7FF1097785346DF6BF4087919A7C2BF31ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:08:30:70:f5:7e:59:80:6e:17:70:84:37: 1a:cc:87:6a:1b:e4:df:9e:b5:5c:33:53:e3:14:44: 07:6a:82:2d:29:f6:13:ad:58:56:7f:e0:3b:72:5a: 5b:7c:ef:51:aa:31:91:c0:da:ad:6c:c8:b6:ec:db: 1d:24:76:86:8e:dd:b9:8c:20:68:8b:21:ff:5e:19: 45:07:be:ae:9b:e7:93:40:b4:ca:4c:77:e3:18:78: d5:f5:95:3a:65:d3:e2:46:80:a1:98:82:d9:8c:af: a9:40:b2:86:3f:5c:22:33:a2:ae:2c:bf:26:77:9f: 1b:fc:98:b0:8e:75:7a:14:8b:be:c7:2a:44:14:df: b2:1e:c9:5e:b1:f0:d5:44:84:84:34:c0:fc:88:49: ef:e2:59:c9:ff:aa:86:8c:cf:69:78:71:3e:31:a0: 32:4f:af:29:b3:17:19:43:cc:81:35:8a:14:9a:ac: ce:a3:16:c7:89:3a:7b:62:36:7f:9c:d1:e9:99:be: c6:c0:0e:fa:a9:ba:56:97:54:c0:ac:28:bd:50:4d: c6:46:59:c6:4a:c0:34:ee:7b:3e:52:8b:cb:cc:36: 46:a8:5f:ac:2c:dc:07:d9:7f:b0:f3:00:92:ef:1d: fb:3a:bd:7b:47:4c:f8:ba:70:3f:fe:76:0d:8d:10: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7D:7F:F1:09:77:85:34:6D:F6:BF:40:87:91:9A:7C:2B:F3:1E:D4 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:45:06:ba:68:6a:59:11:2c:c8:f2:27:15:78:ba:3d:3f:c6: 80:9e:2b:e8:85:2f:0a:b6:90:bf:30:4f:ce:95:cb:ba:81:41: 3f:2c:95:9d:e3:7f:f4:b8:69:2d:88:2e:da:03:8f:2f:e3:87: 74:d4:b5:3b:c8:7a:fe:02:b5:36:d1:f6:70:52:f2:10:79:a3: 1f:f1:7d:7d:4c:d4:fd:00:61:22:37:8d:4f:80:01:f1:33:72: 3b:b7:18:79:df:f0:2d:da:5c:e1:8a:c8:b9:14:db:36:33:cf: b5:87:cf:cb:e2:1a:f1:e4:f4:90:50:00:a3:b0:ea:d2:db:ef: a8:6c:d9:58:3d:de:09:60:ff:b0:fc:c5:72:33:55:2e:5a:32: 99:ac:b7:47:6c:33:65:6b:69:b7:4c:f8:88:5b:f0:bf:93:a7: e6:df:24:bb:d8:74:21:c7:f8:d2:cc:f6:b6:ef:5f:c6:f0:91: 40:60:c9:06:a7:5e:61:88:90:bb:80:b4:ac:5d:11:d5:67:5b: 36:93:24:7f:c2:f6:39:3b:2d:4d:35:d8:49:3f:be:82:76:92: 21:e5:c2:ec:a4:09:12:ac:d2:cf:23:38:40:2b:d0:de:e9:62: dd:bb:20:ae:21:1b:42:c1:59:d2:8a:47:36:4c:7e:93:bc:e4: c3:ab:a6:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaR2lt/E0kwbJ5YZrAqEPhcG30QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNTA0MjYwOTA2NDBaFw0yNTA0MjkxNDM4NDBaMDMxMTAvBgNV BAMTKEQxN0Q3RkYxMDk3Nzg1MzQ2REY2QkY0MDg3OTE5QTdDMkJGMzFFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdKggwcPV+WYBuF3CENxrMh2ob 5N+etVwzU+MURAdqgi0p9hOtWFZ/4DtyWlt871GqMZHA2q1syLbs2x0kdoaO3bmM IGiLIf9eGUUHvq6b55NAtMpMd+MYeNX1lTpl0+JGgKGYgtmMr6lAsoY/XCIzoq4s vyZ3nxv8mLCOdXoUi77HKkQU37IeyV6x8NVEhIQ0wPyISe/iWcn/qoaMz2l4cT4x oDJPrymzFxlDzIE1ihSarM6jFseJOntiNn+c0emZvsbADvqpulaXVMCsKL1QTcZG WcZKwDTuez5Si8vMNkaoX6ws3AfZf7DzAJLvHfs6vXtHTPi6cD/+dg2NEAz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0X1/8Ql3hTRt9r9Ah5GafCvzHtQwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1FBrpoalkRLMjyJxV4uj0/xoCeK+iFLwq2 kL8wT86Vy7qBQT8slZ3jf/S4aS2ILtoDjy/jh3TUtTvIev4CtTbR9nBS8hB5ox/x fX1M1P0AYSI3jU+AAfEzcju3GHnf8C3aXOGKyLkU2zYzz7WHz8viGvHk9JBQAKOw 6tLb76hs2Vg93glg/7D8xXIzVS5aMpmst0dsM2VrabdM+Ihb8L+Tp+bfJLvYdCHH +NLM9rbvX8bwkUBgyQanXmGIkLuAtKxdEdVnWzaTJH/C9jk7LU012Ek/voJ2kiHl wuykCRKs0s8jOEAr0N7pYt27IK4hG0LBWdKKRzZMfpO85MOrpmM= -----END CERTIFICATE-----Generated at Sun Apr 27 12:08:04 2025 by rpki-client