$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: lLEtWBKQoY1OXAM66fyJsF9oVTUwTGJJLfwGFle6Tys= Subject key identifier: 82:CF:D7:D3:1D:85:23:F8:3B:CA:A8:78:D7:4E:8E:A1:1A:28:69:AF Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 27774CDBAEE60E5555B8368318D3E29356759CAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04B1 Signing time: Sat 14 Jun 2025 00:20:46 +0000 Manifest this update: Sat 14 Jun 2025 00:15:46 +0000 Manifest next update: Tue 17 Jun 2025 03:41:46 +0000 Files and hashes: 1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: ldM5gQmoddxsf5X7eyuyoyiwc9oDQoZ2C/P2aPJj8Wc=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: hy7MHDWEDjxGDvk+/qutfkgc+zuRrswWd+OhRhF5XYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 03:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:77:4c:db:ae:e6:0e:55:55:b8:36:83:18:d3:e2:93:56:75:9c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Jun 14 00:15:46 2025 GMT Not After : Jun 17 03:41:46 2025 GMT Subject: CN=82CFD7D31D8523F83BCAA878D74E8EA11A2869AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:67:e2:b3:d1:c9:bb:7a:e5:49:e7:f3:14: fe:2c:51:57:ed:e3:2b:ce:2a:5c:94:b6:cf:4b:eb: 28:0c:6f:f4:ae:98:3f:bf:76:dc:c8:9e:2e:e9:86: 25:03:72:52:ff:b1:24:ed:3a:12:69:d5:ff:60:55: bc:7c:ee:96:bc:de:f6:b3:54:e0:33:48:7a:6d:48: 75:f9:16:72:0d:14:27:cb:f4:99:96:c6:6d:74:45: 1c:27:fd:a8:38:24:29:b5:71:ad:e9:c5:ec:b5:f0: f7:08:b6:30:b0:90:c4:b3:9a:88:50:3b:0a:1b:bd: 78:fd:4a:71:b3:35:fa:ed:d6:d3:85:58:28:c6:ca: 6f:88:fd:80:2b:8b:65:13:a1:8d:5c:43:06:c1:6e: 91:9f:c7:71:d7:c9:40:38:f2:95:f9:2a:f5:d0:e2: bc:3e:4f:ce:6b:a1:7a:95:d0:01:1a:43:67:61:11: ab:75:2a:29:11:bc:9e:c7:5f:78:5a:2e:1c:2b:bc: ad:66:76:41:83:f8:5f:f1:9f:26:1d:5a:cc:c2:c3: bc:f2:c9:5c:4b:82:0a:c6:29:d4:33:23:92:67:1f: 8a:26:0b:45:9a:9d:b4:6d:ab:11:e7:f4:65:80:03: 7c:1f:fe:58:ab:18:33:06:b1:49:74:d6:1f:b3:d8: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CF:D7:D3:1D:85:23:F8:3B:CA:A8:78:D7:4E:8E:A1:1A:28:69:AF X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:54:6b:65:34:55:9b:65:b7:d3:67:ea:e5:8c:33:7e:6f:49: bc:f6:85:e9:0b:c5:47:4f:51:13:f8:73:6b:dc:6f:ac:14:91: d1:3e:f0:4a:59:72:3c:21:c7:0e:ff:e7:6b:93:e8:4c:99:e7: 6d:a7:b4:83:73:6f:49:21:0a:13:7e:17:ca:c7:63:22:ca:8a: 9e:52:53:a4:b5:49:9f:1b:49:25:2a:97:dd:0d:c8:87:2d:5b: dc:d5:7e:f0:cb:87:79:3b:ab:e0:33:f1:4f:44:33:57:c9:76: 51:b4:56:b9:ca:aa:ab:63:c5:82:c7:a7:26:ab:06:75:ef:01: 6d:bd:c3:60:eb:4a:ed:3b:a9:11:81:f9:c6:b2:af:cc:fb:dd: c2:44:18:4b:5a:2b:23:62:cb:8b:d4:0b:ac:91:70:99:47:91: c8:a7:de:30:c1:a4:d7:0e:d1:70:80:0a:51:f0:75:e3:a7:86: 92:eb:89:d5:70:b7:38:3d:a6:aa:17:10:8c:f1:40:85:af:89: df:03:6c:6c:c8:1b:b0:d0:7c:ce:96:c6:65:93:9d:36:56:d4: c8:4a:ff:ae:3f:1b:c8:33:31:62:db:e8:03:5a:d5:b1:45:dd: 8d:47:c2:f5:76:99:1e:a9:0c:a1:19:1c:1a:b5:6e:4e:47:10: 11:1b:37:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3dM267mDlVVuDaDGNPik1Z1nK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTA2MTQwMDE1NDZaFw0yNTA2MTcwMzQxNDZaMDMxMTAvBgNV BAMTKDgyQ0ZEN0QzMUQ4NTIzRjgzQkNBQTg3OEQ3NEU4RUExMUEyODY5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlWfis9HJu3rlSefzFP4sUVft 4yvOKlyUts9L6ygMb/SumD+/dtzIni7phiUDclL/sSTtOhJp1f9gVbx87pa83vaz VOAzSHptSHX5FnINFCfL9JmWxm10RRwn/ag4JCm1ca3pxey18PcItjCwkMSzmohQ OwobvXj9SnGzNfrt1tOFWCjGym+I/YAri2UToY1cQwbBbpGfx3HXyUA48pX5KvXQ 4rw+T85roXqV0AEaQ2dhEat1KikRvJ7HX3haLhwrvK1mdkGD+F/xnyYdWszCw7zy yVxLggrGKdQzI5JnH4omC0WanbRtqxHn9GWAA3wf/lirGDMGsUl01h+z2OZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgs/X0x2FI/g7yqh4106OoRooaa8wHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANNUa2U0VZtlt9Nn6uWMM35vSbz2hekLxUdP URP4c2vcb6wUkdE+8EpZcjwhxw7/52uT6EyZ522ntINzb0khChN+F8rHYyLKip5S U6S1SZ8bSSUql90NyIctW9zVfvDLh3k7q+Az8U9EM1fJdlG0VrnKqqtjxYLHpyar BnXvAW29w2DrSu07qRGB+cayr8z73cJEGEtaKyNiy4vUC6yRcJlHkcin3jDBpNcO 0XCAClHwdeOnhpLridVwtzg9pqoXEIzxQIWvid8DbGzIG7DQfM6WxmWTnTZW1MhK /64/G8gzMWLb6ANa1bFF3Y1HwvV2mR6pDKEZHBq1bk5HEBEbN68= -----END CERTIFICATE-----Generated at Sun Jun 15 22:25:02 2025 by rpki-client