$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: Ui2gm6hb8vwmwQR5BKqB8Fj7p4aLPS7Mj8UcKGbtoGI= Subject key identifier: 27:E0:22:BC:3F:EF:C3:41:8D:F4:BF:57:4F:C4:BC:68:11:28:04:1C Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 3ECCA02C5A1ABB36504047DA25D1BCC2A14A9C60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 04E0 Signing time: Sat 21 Jun 2025 17:31:16 +0000 Manifest this update: Sat 21 Jun 2025 17:26:16 +0000 Manifest next update: Tue 24 Jun 2025 20:49:16 +0000 Files and hashes: 1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: LtScTHZoxOHSbHhuqbZIrkhW+lipK1u0xCr0E9aMFWE=) 2: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: PSLLLkMTFeaWKphXjFd6Z0YHXtRHK7tACjX9o5VudvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 20:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:cc:a0:2c:5a:1a:bb:36:50:40:47:da:25:d1:bc:c2:a1:4a:9c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Jun 21 17:26:16 2025 GMT Not After : Jun 24 20:49:16 2025 GMT Subject: CN=27E022BC3FEFC3418DF4BF574FC4BC681128041C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:5e:ca:33:d4:22:ff:c8:f6:9d:c2:51:16: a4:fb:13:b4:4e:4c:9e:44:97:ac:14:ed:8d:36:c7: 0e:0f:c2:7e:ac:ea:3b:d5:f3:d4:bf:ee:03:dd:eb: 80:f8:d3:87:9d:2d:cb:02:f8:d7:04:90:a5:47:58: b6:8f:8b:a7:02:96:7d:3f:5e:cc:a3:63:37:a9:35: 9f:6a:de:78:92:82:a6:d5:19:f0:93:e6:80:ae:9c: 20:5f:23:59:fe:5c:5f:5b:78:c8:fb:d2:65:b6:a8: 22:01:4e:33:6f:fe:45:bc:cb:19:5c:94:4d:da:97: 6c:23:ba:b4:b5:2f:cf:38:98:39:e2:b8:bb:96:68: 1c:d0:1a:3e:c7:88:6b:cd:79:13:e1:91:29:72:63: 44:ff:30:c2:30:87:69:dc:77:8f:c5:46:72:88:71: f8:2c:7e:df:b0:3c:a1:f9:0d:25:f7:0e:10:1f:d0: a8:2d:b7:09:85:a6:d3:2b:a7:0e:c6:d3:96:17:b0: 86:65:5b:61:1f:73:af:38:7d:98:b9:21:02:d6:00: 25:8d:60:fa:ce:14:6f:3b:00:51:a6:f8:c7:aa:74: 28:b1:42:95:20:e8:4a:c8:91:03:e9:48:9f:f3:43: f5:06:f6:7e:dd:74:7f:9f:8d:f1:a0:c5:09:23:65: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E0:22:BC:3F:EF:C3:41:8D:F4:BF:57:4F:C4:BC:68:11:28:04:1C X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:45:87:6f:ed:cc:ef:29:0a:76:6c:f4:76:a7:cb:0a:45:5e: c8:60:93:f6:21:59:fd:ac:00:2e:46:6d:2e:46:bf:1e:f9:92: 0a:77:4e:ed:78:bf:0f:1a:2b:83:01:11:56:b1:c3:5a:53:24: dd:1c:8c:7f:4f:88:5d:6b:73:c9:5c:b1:1e:b7:60:e6:81:af: dc:56:61:36:fb:7a:94:07:8d:4d:1e:fb:5a:89:7d:31:24:29: 06:85:db:4f:3f:88:ae:b4:94:16:bd:3e:08:95:e0:6b:64:5f: 88:b2:87:39:e4:b2:62:14:d2:55:6b:b4:23:ef:3b:33:d1:98: 72:15:bc:3c:77:7f:5d:6e:dc:fe:8d:80:f6:13:bb:73:79:34: e5:44:62:4d:3b:d6:48:a3:cf:85:af:42:d5:71:69:c1:e1:a9: 7f:dc:ce:ed:52:40:5a:65:31:3f:10:55:a1:41:bb:e0:75:66: 9f:4e:a6:7a:6f:c8:ee:b2:db:a1:eb:e5:40:5a:fe:8b:2a:61: 03:03:ae:24:9c:58:55:7c:99:b7:0f:e0:6a:a9:9a:a5:dc:76: d2:ec:f0:30:3a:22:44:45:30:8d:0c:08:a3:46:c9:d6:db:8b: a1:54:60:2a:37:95:a1:b9:ff:87:78:1a:d3:f3:39:45:b9:7a: cf:15:39:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsygLFoauzZQQEfaJdG8wqFKnGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNTA2MjExNzI2MTZaFw0yNTA2MjQyMDQ5MTZaMDMxMTAvBgNV BAMTKDI3RTAyMkJDM0ZFRkMzNDE4REY0QkY1NzRGQzRCQzY4MTEyODA0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGL17KM9Qi/8j2ncJRFqT7E7RO TJ5El6wU7Y02xw4Pwn6s6jvV89S/7gPd64D404edLcsC+NcEkKVHWLaPi6cCln0/ XsyjYzepNZ9q3niSgqbVGfCT5oCunCBfI1n+XF9beMj70mW2qCIBTjNv/kW8yxlc lE3al2wjurS1L884mDniuLuWaBzQGj7HiGvNeRPhkSlyY0T/MMIwh2ncd4/FRnKI cfgsft+wPKH5DSX3DhAf0KgttwmFptMrpw7G05YXsIZlW2Efc684fZi5IQLWACWN YPrOFG87AFGm+MeqdCixQpUg6ErIkQPpSJ/zQ/UG9n7ddH+fjfGgxQkjZb11AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ+AivD/vw0GN9L9XT8S8aBEoBBwwHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9Fh2/tzO8pCnZs9HanywpFXshgk/YhWf2s AC5GbS5Gvx75kgp3Tu14vw8aK4MBEVaxw1pTJN0cjH9PiF1rc8lcsR63YOaBr9xW YTb7epQHjU0e+1qJfTEkKQaF208/iK60lBa9PgiV4GtkX4iyhznksmIU0lVrtCPv OzPRmHIVvDx3f11u3P6NgPYTu3N5NOVEYk071kijz4WvQtVxacHhqX/czu1SQFpl MT8QVaFBu+B1Zp9OpnpvyO6y26Hr5UBa/osqYQMDriScWFV8mbcP4GqpmqXcdtLs 8DA6IkRFMI0MCKNGydbbi6FUYCo3laG5/4d4GtPzOUW5es8VOQ4= -----END CERTIFICATE-----Generated at Mon Jun 23 03:17:30 2025 by rpki-client