$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: tBuElPUKXonU75uml0AUJhFwRj2+kPw6i7lxhtGwvUA= Subject key identifier: A0:24:67:C7:6C:E1:16:BC:1B:62:E5:68:E7:F9:3F:27:86:DF:F6:64 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 69DCE2A20AF5AE5344F1B237043C12A05E199A15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: D4 Signing time: Sun 15 Jun 2025 04:21:55 +0000 Manifest this update: Sun 15 Jun 2025 04:16:55 +0000 Manifest next update: Wed 18 Jun 2025 05:15:55 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: KkUApGZYrGrLLvcfKbQJHpmG938BFcnmTL9ItLtCr0g=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:dc:e2:a2:0a:f5:ae:53:44:f1:b2:37:04:3c:12:a0:5e:19:9a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Jun 15 04:16:55 2025 GMT Not After : Jun 18 05:15:55 2025 GMT Subject: CN=A02467C76CE116BC1B62E568E7F93F2786DFF664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:3e:1e:02:1e:7a:aa:65:b4:fb:9a:0b:1f: e9:99:94:8c:1d:ea:90:b3:d7:88:72:78:0e:88:b0: 8c:a9:4d:85:c6:73:67:62:3d:45:29:0a:27:71:8f: 25:a9:9b:1a:3e:97:ad:a7:c9:f8:2d:55:c5:96:f3: fc:6c:ce:d0:ac:02:2e:4c:41:3d:d3:2a:46:2f:16: 8f:47:f1:f9:fc:75:8a:38:3b:85:c9:4c:20:2e:41: 68:4b:88:f5:56:08:f0:fd:7a:14:62:1d:e5:cb:00: 23:a4:0a:8a:a9:de:98:16:35:30:75:16:b9:a4:66: 57:d9:94:19:41:05:f2:d8:74:e5:28:ff:1f:e8:26: f1:78:b7:88:8b:db:dc:d8:d7:3a:e2:04:5d:9a:f2: e9:d9:22:e2:44:64:bb:3a:7d:7c:93:10:45:24:a0: f5:17:02:01:6e:81:11:bb:13:a8:ce:05:92:b2:0b: 8b:e2:42:e1:ac:e0:77:e9:53:20:94:e5:b5:fe:86: 48:97:d3:cd:4b:2b:3f:d8:6a:7e:e0:c8:9e:5d:e3: d1:16:fe:3b:3b:0e:c7:78:8e:74:15:de:bf:ef:40: bd:58:61:cc:f4:16:21:40:40:d9:90:d2:a3:19:4b: 54:f0:9b:c6:37:bf:7d:8c:94:e0:22:20:8e:75:17: 01:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:24:67:C7:6C:E1:16:BC:1B:62:E5:68:E7:F9:3F:27:86:DF:F6:64 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c1:ca:8b:11:45:b6:b7:76:fa:c7:bf:4b:0a:a3:7d:1c:71: 9c:40:b5:df:e9:1d:c9:a7:42:d4:d6:e0:e5:bc:9d:b9:80:78: 14:16:53:f5:62:bf:03:27:40:ca:5a:49:51:12:67:5f:08:18: 35:c6:6d:00:fe:c9:c9:35:83:e3:4f:3c:d5:f7:f8:82:32:9b: c1:98:31:f7:1b:d3:65:d5:e2:3f:43:ad:36:41:86:60:2a:58: 7c:88:a6:b3:dc:1c:f7:a3:4b:b8:af:c4:3a:bd:bf:90:21:ee: 38:fb:26:c3:e2:b9:ca:7d:30:1b:53:df:c9:3c:71:c1:f8:53: ef:cf:03:28:52:4d:95:c1:0e:af:6c:07:4b:d7:bd:8e:73:29: 27:05:a0:91:86:0d:e2:3f:2e:6a:28:d7:76:c6:85:cf:ad:24: 88:de:a9:27:72:7c:68:00:a0:8b:2c:28:2c:8c:26:c8:5c:14: 60:37:c4:f4:dd:75:d8:3d:70:d7:97:a4:bd:1e:c1:fc:f7:1e: 81:f2:41:51:fb:4b:0b:67:d3:ca:74:fb:a7:9f:51:ae:c8:e3: 60:ff:ed:32:28:e2:43:ed:02:fb:6d:5f:fa:5e:a4:d9:47:ed: 56:98:92:43:ef:3d:a0:c7:08:01:c1:31:24:28:b0:88:53:bc: ba:73:45:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadziogr1rlNE8bI3BDwSoF4ZmhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTA2MTUwNDE2NTVaFw0yNTA2MTgwNTE1NTVaMDMxMTAvBgNV BAMTKEEwMjQ2N0M3NkNFMTE2QkMxQjYyRTU2OEU3RjkzRjI3ODZERkY2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZT4eAh56qmW0+5oLH+mZlIwd 6pCz14hyeA6IsIypTYXGc2diPUUpCidxjyWpmxo+l62nyfgtVcWW8/xsztCsAi5M QT3TKkYvFo9H8fn8dYo4O4XJTCAuQWhLiPVWCPD9ehRiHeXLACOkCoqp3pgWNTB1 FrmkZlfZlBlBBfLYdOUo/x/oJvF4t4iL29zY1zriBF2a8unZIuJEZLs6fXyTEEUk oPUXAgFugRG7E6jOBZKyC4viQuGs4HfpUyCU5bX+hkiX081LKz/Yan7gyJ5d49EW /js7Dsd4jnQV3r/vQL1YYcz0FiFAQNmQ0qMZS1Twm8Y3v32MlOAiII51FwEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoCRnx2zhFrwbYuVo5/k/J4bf9mQwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErByosRRba3dvrHv0sKo30ccZxAtd/pHcmn QtTW4OW8nbmAeBQWU/VivwMnQMpaSVESZ18IGDXGbQD+yck1g+NPPNX3+IIym8GY Mfcb02XV4j9DrTZBhmAqWHyIprPcHPejS7ivxDq9v5Ah7jj7JsPiucp9MBtT38k8 ccH4U+/PAyhSTZXBDq9sB0vXvY5zKScFoJGGDeI/Lmoo13bGhc+tJIjeqSdyfGgA oIssKCyMJshcFGA3xPTdddg9cNeXpL0ewfz3HoHyQVH7Swtn08p0+6efUa7I42D/ 7TIo4kPtAvttX/pepNlH7VaYkkPvPaDHCAHBMSQosIhTvLpzRaM= -----END CERTIFICATE-----Generated at Mon Jun 16 12:29:19 2025 by rpki-client