$ rpki-client -vvf repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft File: 3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft (raw, json) Hash identifier: lcaeHa+Cz0xHCFUAxvgWV20I/z2wM+2+R81FHAk1v1o= Subject key identifier: 27:9D:44:67:25:32:D0:FC:05:C4:95:54:81:0B:61:01:1C:FD:BF:26 Authority key identifier: 31:57:B9:BE:6F:36:9A:1C:A3:87:38:FF:D6:4D:61:13:C7:5C:0E:2D Certificate issuer: /CN=3157B9BE6F369A1CA38738FFD64D6113C75C0E2D Certificate serial: 2B4EBC5199CBC16D3B8D3DFF14CE79EB40B23718 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft Manifest number: 75 Signing time: Sun 15 Jun 2025 07:21:50 +0000 Manifest this update: Sun 15 Jun 2025 07:16:50 +0000 Manifest next update: Wed 18 Jun 2025 18:25:50 +0000 Files and hashes: 1: 3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl (hash: MMataOOd2tJ61eY8jOgDcXp5/BNaiV+YAVxT9ZZXNjM=) 2: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: yVwxFDu5QrQ2T1+WLHNp8JACowsZOzdgNvDquhZexvY=) 3: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: yI21TQhgzhyCtoyvgeWwpQGfBfqGzJmTftAUrnTEbC8=) 4: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 8c6wILZx8DuCL6PHpfE6A2+8YPuPEhrlv7dD3qJR3mQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 18:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4e:bc:51:99:cb:c1:6d:3b:8d:3d:ff:14:ce:79:eb:40:b2:37:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3157B9BE6F369A1CA38738FFD64D6113C75C0E2D Validity Not Before: Jun 15 07:16:50 2025 GMT Not After : Jun 18 18:25:50 2025 GMT Subject: CN=279D44672532D0FC05C49554810B61011CFDBF26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:61:36:6f:f8:9b:23:23:bc:6a:b7:7e:bf:e6: e3:21:0d:d5:2c:0f:31:82:87:c4:2c:6a:f1:fb:3b: a5:8e:23:bd:da:cd:87:a0:08:b3:e6:12:e9:d4:5e: 54:03:67:59:ab:49:6f:33:c8:75:b2:e6:5c:a3:1a: 2d:e1:9d:e5:82:5d:aa:09:68:ee:d6:28:aa:d3:7d: 2b:b7:b8:f4:05:e8:79:05:4b:03:0f:22:ab:97:bf: 08:d0:d0:7b:93:fe:60:3c:61:57:71:a1:f7:06:57: 81:41:37:90:34:66:55:7d:e8:cd:d5:f8:9e:40:ab: 03:63:3a:93:d0:f4:b1:7a:fd:4c:6d:ac:a2:2b:14: f0:5b:bf:ac:0a:c7:8d:04:61:70:43:7f:73:d9:d1: 66:ce:90:f2:a7:6a:e6:e8:c9:82:f5:2d:be:59:91: 24:b8:f8:80:8b:3a:47:2f:95:7a:1c:62:79:a1:66: 27:ce:99:fe:fe:e8:29:4e:9c:00:0f:1a:3e:59:94: 0a:e2:20:79:24:bc:77:37:fc:94:06:a7:48:ee:22: 3d:9f:f3:b5:d0:01:33:0c:07:a9:ef:09:79:9c:e7: ef:99:21:35:56:7b:b2:5f:cd:34:c4:8a:8f:9e:7c: 5d:c6:fd:dd:70:06:a7:37:13:e8:1c:c9:33:16:1c: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9D:44:67:25:32:D0:FC:05:C4:95:54:81:0B:61:01:1C:FD:BF:26 X509v3 Authority Key Identifier: keyid:31:57:B9:BE:6F:36:9A:1C:A3:87:38:FF:D6:4D:61:13:C7:5C:0E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:cd:6f:c4:6b:0b:60:7c:1a:ba:e9:a7:32:54:c4:3a:f3:34: 40:e3:c8:36:d6:b5:f4:b7:52:6a:4d:a7:fd:c9:9e:40:c0:21: f1:a8:42:3f:6a:53:80:9a:44:23:34:5e:bb:24:c2:b4:a6:27: e8:35:c2:ba:e2:32:96:31:1b:cc:a6:72:39:f4:5d:ed:0f:ae: 4a:c6:46:fc:84:28:b5:ea:ed:35:5b:58:ef:6e:fe:e5:80:49: f3:8c:47:f8:20:d6:1f:18:35:25:0c:df:df:d4:06:2c:f9:69: 76:be:97:ca:4f:f4:bc:f6:e0:4e:bc:e3:18:4d:b8:db:e7:09: 98:54:66:cc:76:f7:d1:27:61:47:b1:5d:69:4a:32:e5:a4:3f: d9:fe:46:04:62:ff:af:df:fb:71:7e:da:12:b8:f9:61:09:bf: 84:80:a6:d1:cf:a5:fa:85:01:cc:a5:ce:9a:87:f4:85:4d:89: 2e:1e:12:8e:34:12:f1:81:0f:29:a2:03:87:f5:f9:06:8c:87: 4e:94:1f:ba:cd:4d:40:43:c2:e6:a3:2c:de:3a:d4:b7:a9:76: 5c:fd:a6:66:97:b2:c5:5f:c6:7b:9f:1f:ef:03:f0:e7:da:32: 8c:55:0e:6e:c5:b0:ca:45:87:5d:ae:6c:17:14:f1:36:95:76: 42:4d:13:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK068UZnLwW07jT3/FM5560CyNxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYxMTND NzVDMEUyRDAeFw0yNTA2MTUwNzE2NTBaFw0yNTA2MTgxODI1NTBaMDMxMTAvBgNV BAMTKDI3OUQ0NDY3MjUzMkQwRkMwNUM0OTU1NDgxMEI2MTAxMUNGREJGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXYTZv+JsjI7xqt36/5uMhDdUs DzGCh8QsavH7O6WOI73azYegCLPmEunUXlQDZ1mrSW8zyHWy5lyjGi3hneWCXaoJ aO7WKKrTfSu3uPQF6HkFSwMPIquXvwjQ0HuT/mA8YVdxofcGV4FBN5A0ZlV96M3V +J5AqwNjOpPQ9LF6/UxtrKIrFPBbv6wKx40EYXBDf3PZ0WbOkPKnauboyYL1Lb5Z kSS4+ICLOkcvlXocYnmhZifOmf7+6ClOnAAPGj5ZlAriIHkkvHc3/JQGp0juIj2f 87XQATMMB6nvCXmc5++ZITVWe7JfzTTEio+efF3G/d1wBqc3E+gcyTMWHM/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ51EZyUy0PwFxJVUgQthARz9vyYwHwYDVR0j BBgwFoAUMVe5vm82mhyjhzj/1k1hE8dcDi0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MGZiNzhhOS1jZDY4LTQ0ZmQtODVhYS02YzZiMDhjYjIzNDYvMC8zMTU3QjlCRTZG MzY5QTFDQTM4NzM4RkZENjRENjExM0M3NUMwRTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYxMTNDNzVD MEUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYx MTNDNzVDMEUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzNb8RrC2B8GrrppzJUxDrzNEDjyDbWtfS3 UmpNp/3JnkDAIfGoQj9qU4CaRCM0XrskwrSmJ+g1wrriMpYxG8ymcjn0Xe0PrkrG RvyEKLXq7TVbWO9u/uWASfOMR/gg1h8YNSUM39/UBiz5aXa+l8pP9Lz24E684xhN uNvnCZhUZsx299EnYUexXWlKMuWkP9n+RgRi/6/f+3F+2hK4+WEJv4SAptHPpfqF AcylzpqH9IVNiS4eEo40EvGBDymiA4f1+QaMh06UH7rNTUBDwuajLN461Lepdlz9 pmaXssVfxnufH+8D8OfaMoxVDm7FsMpFh12ubBcU8TaVdkJNE1c= -----END CERTIFICATE-----Generated at Mon Jun 16 21:05:18 2025 by rpki-client