$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: txZplSmCscWAIMllixHBL7MbiUGws84RgHsUtYk8zyA= Subject key identifier: 26:8B:66:C5:45:BF:54:AF:88:7E:89:32:F4:70:88:5D:EE:41:D0:B5 Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 027ACC35584BE3BF40361148A39D8B141EB3ED2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: 8A Signing time: Mon 28 Apr 2025 23:52:15 +0000 Manifest this update: Mon 28 Apr 2025 23:47:15 +0000 Manifest next update: Fri 02 May 2025 03:00:15 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: 0jzf3jS5vVLPI4smoqNtTs4s/QzbIezfs6ZBtuvSdKg=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: 49HTMVxx05wPdArfdbkc8ZuyfBJmlfmMETsXKqg+H4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7a:cc:35:58:4b:e3:bf:40:36:11:48:a3:9d:8b:14:1e:b3:ed:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Apr 28 23:47:15 2025 GMT Not After : May 2 03:00:15 2025 GMT Subject: CN=268B66C545BF54AF887E8932F470885DEE41D0B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:8c:81:a1:00:b4:52:7c:b1:14:6d:96:04: 16:25:4a:c2:a0:c4:ac:13:11:b7:86:57:8d:cd:cc: 97:f3:5b:f3:ba:57:fd:a1:e7:8b:e6:82:30:e4:76: eb:b1:b1:21:5e:f0:01:22:42:39:90:d5:d2:e2:60: be:6c:3d:1a:0e:74:b1:17:1c:2a:c0:34:56:e7:79: 01:a6:f2:d3:2b:fd:ea:96:d9:8c:76:1a:ba:5f:78: 2d:f5:90:f7:56:8d:8a:a6:3e:89:67:71:7f:c9:fa: 49:70:50:96:af:bd:ac:83:7d:b9:e2:1d:b8:4b:cd: 59:70:de:0c:ad:72:6b:cc:26:8a:c9:74:85:da:58: 08:dc:85:f8:3e:d8:11:69:6a:a8:dd:84:0d:48:cd: 4b:47:58:7d:0b:f2:64:97:55:eb:bf:79:44:74:96: 58:47:16:a4:3d:50:b8:ef:a1:36:50:18:e5:bd:b3: 5b:23:a6:5a:d1:24:09:a3:72:80:20:db:ec:8c:61: 91:e0:8c:ff:fe:0a:0d:e4:66:13:c0:00:5e:14:07: 44:10:93:32:97:11:e8:e9:0b:a6:cd:49:fb:fe:28: 0f:41:11:e3:8d:c2:f5:af:5f:42:ce:d2:af:2d:87: 4f:03:c2:69:a9:61:43:ab:a1:52:1e:ab:fa:a2:4c: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8B:66:C5:45:BF:54:AF:88:7E:89:32:F4:70:88:5D:EE:41:D0:B5 X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b3:b0:c4:c0:e2:5f:b2:51:25:46:a5:9b:43:3e:3b:6e:ce: d1:ae:bc:c7:08:f1:50:f8:c8:42:d8:81:eb:cc:8e:24:e3:cb: 9c:4b:62:c0:08:47:48:6a:92:c2:83:52:81:8a:d3:e3:d3:27: 8a:df:c8:27:41:4b:97:75:ad:58:34:e5:6b:66:c0:8e:82:47: 02:ea:56:6d:3a:02:50:0d:86:4e:1b:2a:39:5d:1f:91:3c:51: db:c5:45:d4:38:fb:60:f4:70:73:c8:f1:57:66:1f:2f:b8:ca: 8b:c2:37:bb:55:65:3a:d8:c0:6d:fa:96:e3:0b:9c:9c:66:6a: 3b:e5:6d:fa:48:66:76:49:92:c6:34:54:6c:05:21:db:9f:7d: 43:1e:3b:26:50:77:f4:02:3a:a6:3b:20:5c:47:f5:e2:32:03: 31:ea:78:70:90:80:11:2a:ab:df:19:01:c9:a8:9b:43:72:8b: ac:c6:cd:d8:31:6f:9a:fb:6d:7b:06:0c:43:d1:32:69:54:f3: 4c:94:ab:97:3e:f8:4a:ec:5a:56:c6:99:ee:fe:c0:1b:e9:7e: 52:9c:49:d4:10:c4:8a:ea:bf:28:ca:ea:6d:55:3f:87:9b:de: 64:3f:ee:1a:59:f1:72:d9:52:8a:af:0f:59:0f:2f:f9:f0:2e: 4c:a6:8b:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnrMNVhL479ANhFIo52LFB6z7SowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTA0MjgyMzQ3MTVaFw0yNTA1MDIwMzAwMTVaMDMxMTAvBgNV BAMTKDI2OEI2NkM1NDVCRjU0QUY4ODdFODkzMkY0NzA4ODVERUU0MUQwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGoyBoQC0UnyxFG2WBBYlSsKg xKwTEbeGV43NzJfzW/O6V/2h54vmgjDkduuxsSFe8AEiQjmQ1dLiYL5sPRoOdLEX HCrANFbneQGm8tMr/eqW2Yx2GrpfeC31kPdWjYqmPolncX/J+klwUJavvayDfbni HbhLzVlw3gytcmvMJorJdIXaWAjchfg+2BFpaqjdhA1IzUtHWH0L8mSXVeu/eUR0 llhHFqQ9ULjvoTZQGOW9s1sjplrRJAmjcoAg2+yMYZHgjP/+Cg3kZhPAAF4UB0QQ kzKXEejpC6bNSfv+KA9BEeONwvWvX0LO0q8th08DwmmpYUOroVIeq/qiTEZhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJotmxUW/VK+Ifoky9HCIXe5B0LUwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACizsMTA4l+yUSVGpZtDPjtuztGuvMcI8VD4 yELYgevMjiTjy5xLYsAIR0hqksKDUoGK0+PTJ4rfyCdBS5d1rVg05WtmwI6CRwLq Vm06AlANhk4bKjldH5E8UdvFRdQ4+2D0cHPI8VdmHy+4yovCN7tVZTrYwG36luML nJxmajvlbfpIZnZJksY0VGwFIduffUMeOyZQd/QCOqY7IFxH9eIyAzHqeHCQgBEq q98ZAcmom0Nyi6zGzdgxb5r7bXsGDEPRMmlU80yUq5c++ErsWlbGme7+wBvpflKc SdQQxIrqvyjK6m1VP4eb3mQ/7hpZ8XLZUoqvD1kPL/nwLkymi/k= -----END CERTIFICATE-----Generated at Tue Apr 29 23:12:42 2025 by rpki-client