$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: F4mqIRHTDD6q7w+kZY+WxjC2IHDYKbufrdhYXzDQUmo= Subject key identifier: 7E:78:1C:22:1C:CB:09:EC:9A:E8:0B:8A:9E:E5:32:00:90:94:C3:9C Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 714DCDD7FB150432444C8656FBAD97AF58D4D623 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: 68 Signing time: Tue 17 Jun 2025 05:30:53 +0000 Manifest this update: Tue 17 Jun 2025 05:25:53 +0000 Manifest next update: Fri 20 Jun 2025 09:33:53 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: sIE4saPQ8vD/XGsp1t/XeVSUjfqT+wusCH1osFHIPoo=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: 6pByXgAQ6YR6dUDH4dJy61wrtOMRHMSvLiETBeP3xAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 09:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4d:cd:d7:fb:15:04:32:44:4c:86:56:fb:ad:97:af:58:d4:d6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Jun 17 05:25:53 2025 GMT Not After : Jun 20 09:33:53 2025 GMT Subject: CN=7E781C221CCB09EC9AE80B8A9EE532009094C39C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:30:ec:8d:bf:58:af:72:c4:b4:a8:4f:26: fb:36:c1:a4:e3:53:17:08:72:a5:30:c4:40:71:d7: 5e:bf:f4:90:6c:62:d6:3d:58:a9:67:6c:77:34:3d: c3:04:2e:d2:32:4a:f5:8a:19:b5:b2:24:87:d2:74: 24:ab:06:ce:e1:ad:65:d2:7b:19:d2:34:19:73:6b: b8:52:9a:54:87:07:d2:30:ef:13:63:60:70:fa:97: 78:8f:74:08:ed:2d:a1:24:95:1e:eb:6a:cd:f8:9f: 38:b8:5e:19:49:d8:a6:a7:44:23:4c:6d:7a:4f:af: 90:fc:31:fa:2e:c3:1f:17:b1:e8:43:42:db:97:14: 51:68:60:51:e6:49:bd:f7:5f:3e:42:c7:37:37:c7: a2:1e:48:97:42:74:d2:1f:7b:79:0f:66:63:42:e6: d0:ee:63:c1:b4:dc:01:41:92:f8:83:15:04:a1:be: 26:39:88:4a:14:3e:67:78:12:0a:a6:ff:cb:b6:8f: 70:d7:39:66:a3:9d:ef:db:42:dc:91:eb:a7:0b:4f: a9:da:59:72:4f:08:d5:84:af:c9:88:88:9a:85:9a: bd:6d:67:0e:0c:7a:af:77:b1:e2:bf:6a:b9:44:ff: 03:65:99:53:f5:46:8e:51:62:d4:b1:0c:83:28:ac: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:78:1C:22:1C:CB:09:EC:9A:E8:0B:8A:9E:E5:32:00:90:94:C3:9C X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:6b:50:6f:65:c7:1c:2b:38:ee:7e:1a:e8:f9:63:d3:09:c7: 46:5d:a5:49:47:f9:7b:06:df:fd:72:f5:d6:a0:d6:43:60:52: 30:bc:9c:37:be:1f:fc:e6:f1:90:14:2b:2f:af:56:fc:65:dd: ba:be:14:2a:6e:b4:b2:9b:27:81:08:9e:66:08:52:04:73:da: f3:d2:43:5c:fe:6b:04:8d:52:53:d4:33:22:01:bb:e2:49:ae: b1:0d:cf:ce:a1:f6:ea:12:03:4f:3d:e8:fd:25:27:14:03:8a: 0c:1c:e3:83:75:35:9c:ad:1e:ea:e6:09:4f:a0:30:db:7f:32: 81:a7:bf:7a:aa:2c:83:93:2f:d0:88:8c:85:71:f2:b5:b5:d6: f0:d2:bf:b3:dd:32:6e:f9:39:0a:c0:3b:24:12:58:2a:d6:c6: 9d:1d:72:50:9a:94:14:e5:14:04:d3:95:d4:f4:6d:1b:31:26: 78:e1:42:40:9b:da:9c:f9:70:ed:ae:41:9b:d6:1e:ce:58:e2: 36:c6:9e:42:0d:0e:57:d7:2d:86:34:b7:6c:3d:5f:2f:8f:ed: 38:01:22:78:58:21:03:aa:6f:f2:25:d3:bc:35:20:76:9e:00: d8:b3:06:24:f3:83:db:20:52:f6:a6:11:07:c8:e6:48:79:7b: a3:b1:0e:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcU3N1/sVBDJETIZW+62Xr1jU1iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNTA2MTcwNTI1NTNaFw0yNTA2MjAwOTMzNTNaMDMxMTAvBgNV BAMTKDdFNzgxQzIyMUNDQjA5RUM5QUU4MEI4QTlFRTUzMjAwOTA5NEMzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83TDsjb9Yr3LEtKhPJvs2waTj UxcIcqUwxEBx116/9JBsYtY9WKlnbHc0PcMELtIySvWKGbWyJIfSdCSrBs7hrWXS exnSNBlza7hSmlSHB9Iw7xNjYHD6l3iPdAjtLaEklR7ras34nzi4XhlJ2KanRCNM bXpPr5D8Mfouwx8XsehDQtuXFFFoYFHmSb33Xz5Cxzc3x6IeSJdCdNIfe3kPZmNC 5tDuY8G03AFBkviDFQShviY5iEoUPmd4Egqm/8u2j3DXOWajne/bQtyR66cLT6na WXJPCNWEr8mIiJqFmr1tZw4Meq93seK/arlE/wNlmVP1Ro5RYtSxDIMorD4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfngcIhzLCeya6AuKnuUyAJCUw5wwHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOdrUG9lxxwrOO5+Guj5Y9MJx0ZdpUlH+XsG 3/1y9dag1kNgUjC8nDe+H/zm8ZAUKy+vVvxl3bq+FCputLKbJ4EInmYIUgRz2vPS Q1z+awSNUlPUMyIBu+JJrrENz86h9uoSA0896P0lJxQDigwc44N1NZytHurmCU+g MNt/MoGnv3qqLIOTL9CIjIVx8rW11vDSv7PdMm75OQrAOyQSWCrWxp0dclCalBTl FATTldT0bRsxJnjhQkCb2pz5cO2uQZvWHs5Y4jbGnkINDlfXLYY0t2w9Xy+P7TgB InhYIQOqb/Il07w1IHaeANizBiTzg9sgUvamEQfI5kh5e6OxDoE= -----END CERTIFICATE-----Generated at Tue Jun 17 16:17:21 2025 by rpki-client