$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json) Hash identifier: F4a76QpeqzkaFsilhvoA4ebU96eNCw5gbonvOPG5Ua0= Subject key identifier: 6B:DF:B8:48:4D:C7:AB:30:7C:42:19:32:9A:AA:20:10:C5:1B:F7:E5 Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Certificate serial: 251B893A639F5830C5FFF2B7A8D7A9E98A318DA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft Manifest number: 0487 Signing time: Mon 16 Jun 2025 09:50:49 +0000 Manifest this update: Mon 16 Jun 2025 09:45:49 +0000 Manifest next update: Thu 19 Jun 2025 13:31:49 +0000 Files and hashes: 1: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: +Sh30nDK5FN0F+rgaXdcf8t+v+X9RkFfwm8Ti8cbstU=) 2: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: lQ3cn/A5HN3jIQ/t9q720YoLi/EjN+V6WDz4S/Fwj9E=) 3: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 2wmGpgdLLad+yQRBpECeWO5okHIOK5XLuX+ZtyFeGtw=) 4: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: b4KiMwiJASyBICznuxWYSVpBPiU9qpEIZ1f+n3s+3IM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 13:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:1b:89:3a:63:9f:58:30:c5:ff:f2:b7:a8:d7:a9:e9:8a:31:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Validity Not Before: Jun 16 09:45:49 2025 GMT Not After : Jun 19 13:31:49 2025 GMT Subject: CN=6BDFB8484DC7AB307C4219329AAA2010C51BF7E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:5e:84:91:47:1c:63:0f:38:67:80:ca:32: d8:76:21:44:57:16:23:5e:b4:fd:9d:af:3e:40:67: 71:ce:d5:2a:db:65:1f:a8:cf:e4:73:43:20:03:0b: f4:28:5f:48:26:c2:20:44:7e:f3:7d:41:23:b5:1b: fb:e6:41:3e:7c:d5:a5:df:86:32:19:e3:56:5f:fe: ca:19:58:eb:77:4f:97:80:28:2a:00:f3:c9:fd:df: 0c:8e:70:5a:a8:d9:0e:6f:36:5f:36:2f:11:97:7c: 8c:fa:3f:81:ae:74:80:a2:ad:72:9b:75:ff:ed:e6: 82:26:ab:c3:11:52:fb:e3:59:93:60:75:82:99:91: 39:b6:83:64:19:36:65:2f:7a:69:01:a3:a5:e2:d0: a0:df:e5:6d:34:37:a0:32:89:8b:8a:f2:1b:4a:97: af:73:db:a7:d2:d8:2d:52:9b:a8:a8:ab:5a:53:d6: 08:86:37:01:29:58:c1:24:f2:72:32:38:39:72:18: d6:2b:eb:ab:84:a8:93:b5:71:5d:04:be:10:87:c9: 10:9a:04:e9:3e:09:d0:08:fb:2c:59:19:aa:d6:72: f7:65:2d:86:97:78:f3:05:49:b9:b8:9e:fb:ce:50: 95:df:42:8a:8b:8a:06:5c:f1:de:8e:60:fa:dc:2a: 5c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DF:B8:48:4D:C7:AB:30:7C:42:19:32:9A:AA:20:10:C5:1B:F7:E5 X509v3 Authority Key Identifier: keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:af:a2:a0:4d:8d:c0:4f:5c:77:65:40:f6:15:c0:32:a8:0e: ed:44:a3:fb:e8:94:5f:7e:88:13:1c:7d:17:83:30:c0:18:ce: 47:c0:d1:c8:36:5f:3f:94:bf:3c:34:60:1c:8d:98:72:53:ef: a0:a4:54:d5:62:f1:24:d0:30:52:6a:4a:16:bf:7e:dd:90:4f: 12:ad:6d:7f:69:e0:cc:75:7e:9c:ea:f7:11:95:69:c0:c8:51: 6d:88:ce:a5:c4:06:34:5d:65:80:8d:a2:6e:9b:58:d1:0c:c1: ce:ee:63:6f:bb:b2:c9:32:b9:1c:61:3b:66:bf:05:4e:3d:1e: 64:14:60:6d:11:79:27:51:42:1b:cd:cd:fb:13:97:ac:95:20: 01:73:de:cf:a1:86:d6:6e:a4:d1:a0:d7:3d:70:96:6d:22:37: bc:81:d6:58:de:56:a0:2b:48:dc:e4:80:16:0f:d5:49:85:c4: 58:ed:8c:17:17:6e:9c:41:64:58:71:8e:0e:d0:d8:a4:96:2e: b5:08:f8:02:db:e6:10:df:46:04:3a:a6:00:57:bb:56:92:eb: 9a:8c:46:be:31:e3:40:2c:39:37:dd:5c:b2:8e:85:f2:91:7d: c8:ab:46:91:cc:58:75:ba:f6:88:3e:83:c9:76:e3:1f:04:a3: 0d:f7:77:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRuJOmOfWDDF//K3qNep6YoxjaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw N0U4MkQ1OTAeFw0yNTA2MTYwOTQ1NDlaFw0yNTA2MTkxMzMxNDlaMDMxMTAvBgNV BAMTKDZCREZCODQ4NERDN0FCMzA3QzQyMTkzMjlBQUEyMDEwQzUxQkY3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAr16EkUccYw84Z4DKMth2IURX FiNetP2drz5AZ3HO1SrbZR+oz+RzQyADC/QoX0gmwiBEfvN9QSO1G/vmQT581aXf hjIZ41Zf/soZWOt3T5eAKCoA88n93wyOcFqo2Q5vNl82LxGXfIz6P4GudICirXKb df/t5oImq8MRUvvjWZNgdYKZkTm2g2QZNmUvemkBo6Xi0KDf5W00N6AyiYuK8htK l69z26fS2C1Sm6ioq1pT1giGNwEpWMEk8nIyODlyGNYr66uEqJO1cV0EvhCHyRCa BOk+CdAI+yxZGarWcvdlLYaXePMFSbm4nvvOUJXfQoqLigZc8d6OYPrcKlxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa9+4SE3HqzB8QhkymqogEMUb9+UwHwYDVR0j BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0 RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4 MkQ1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIz ODQwN0U4MkQ1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGavoqBNjcBPXHdlQPYVwDKoDu1Eo/volF9+ iBMcfReDMMAYzkfA0cg2Xz+Uvzw0YByNmHJT76CkVNVi8STQMFJqSha/ft2QTxKt bX9p4Mx1fpzq9xGVacDIUW2IzqXEBjRdZYCNom6bWNEMwc7uY2+7sskyuRxhO2a/ BU49HmQUYG0ReSdRQhvNzfsTl6yVIAFz3s+hhtZupNGg1z1wlm0iN7yB1ljeVqAr SNzkgBYP1UmFxFjtjBcXbpxBZFhxjg7Q2KSWLrUI+ALb5hDfRgQ6pgBXu1aS65qM Rr4x40AsOTfdXLKOhfKRfcirRpHMWHW69og+g8l24x8Eow33dzM= -----END CERTIFICATE-----Generated at Tue Jun 17 17:50:39 2025 by rpki-client