$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: +ftBZiGEPhzSaV8xcV/DRRKKRS8Kal5WEZqbDgySN9s= Subject key identifier: 54:F1:B6:15:ED:8A:31:D1:A3:97:86:19:96:54:18:9F:E2:CE:1F:41 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 77DB1A6F5BD23DA6F17A5E6B263A74DFAF2F9779 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: E5 Signing time: Sun 15 Jun 2025 16:10:42 +0000 Manifest this update: Sun 15 Jun 2025 16:05:42 +0000 Manifest next update: Wed 18 Jun 2025 22:38:42 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: iGiwpjol4pP4XTm7FVubl078Y7/2jzaLVC35/LrR13M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:db:1a:6f:5b:d2:3d:a6:f1:7a:5e:6b:26:3a:74:df:af:2f:97:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Jun 15 16:05:42 2025 GMT Not After : Jun 18 22:38:42 2025 GMT Subject: CN=54F1B615ED8A31D1A39786199654189FE2CE1F41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:a9:fc:77:a8:03:53:06:c8:85:d9:1e:0b: 68:66:69:fb:9a:5b:9e:7e:4c:ad:a4:9d:42:2c:f2: 5d:58:8e:d8:46:0b:89:7e:bf:ad:db:56:e4:a8:db: e4:43:e3:7d:71:20:a1:6d:db:99:ea:5f:fe:ca:0d: 17:4d:f7:b8:39:2e:ae:58:8c:bb:4f:c3:d4:45:a1: 93:22:bd:ba:25:7b:2e:d3:91:10:7d:a2:15:b7:33: 21:fe:16:5b:7c:95:3c:72:de:fc:d2:04:83:3a:9d: ae:cb:59:35:1e:9d:ca:df:1c:df:3d:f4:77:9a:4c: d5:0f:e0:4e:60:49:45:a7:25:e7:84:e0:b5:69:3f: 74:3a:69:c4:b1:10:4c:99:6d:9b:9b:f2:2b:0e:2a: a6:e8:fc:7d:c1:e9:7c:e1:a2:9c:04:4e:ab:75:de: 58:63:b9:7f:d6:02:d8:27:d6:b9:f1:31:b4:e1:10: bc:9b:a3:25:75:f2:2e:43:6b:51:e7:6c:b4:22:53: ae:17:34:20:10:1e:33:b7:9a:c5:d6:56:3c:01:6a: f9:51:63:2f:c6:72:43:64:09:81:2f:00:99:29:dc: f2:47:ec:1c:e6:80:33:68:b0:9d:40:31:f4:7f:ce: b4:69:99:a1:7f:e1:7a:90:a3:5c:6a:7f:58:80:37: 7f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F1:B6:15:ED:8A:31:D1:A3:97:86:19:96:54:18:9F:E2:CE:1F:41 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:62:f2:07:1a:d0:29:cb:64:a8:10:e9:d2:4a:62:79:60:d3: a8:23:eb:37:a5:88:aa:5c:3c:fc:3f:2e:67:63:2f:5b:36:d1: c3:b5:cc:06:20:77:93:c5:63:a0:14:f0:dd:e3:e2:0b:6f:26: 2e:83:93:d6:a4:86:b1:a9:2d:1c:e8:02:35:d7:d0:18:b8:56: 0a:e7:d4:06:ec:f6:12:05:59:81:e4:a3:31:69:2d:89:5e:3a: eb:95:c9:08:2b:a9:8b:bb:cf:e2:d1:75:16:d3:75:ea:ba:f5: 69:68:e1:88:2b:30:4c:f8:21:5b:27:8a:1c:00:d0:fc:3c:ec: 5a:07:75:28:70:51:f2:bd:df:a1:1d:d2:ad:ec:c5:31:29:57: 7e:f7:3e:82:c5:b5:ad:36:32:21:21:a3:8e:bf:39:93:ba:2e: de:e3:6a:ee:f3:42:1f:78:69:f4:8a:62:d4:4d:c0:b4:df:48: 0a:9e:66:33:78:bc:34:a6:95:41:79:4a:40:04:93:54:b6:3c: 91:72:05:8d:dd:ec:fc:4e:73:89:e7:c5:bd:7e:87:64:9a:45: f8:36:68:6d:72:a1:c6:a9:ee:2f:0a:8c:01:a7:8e:56:22:ab: f8:e2:56:8b:bc:b2:3c:e8:97:b1:8b:60:d5:c1:d1:56:3e:b7: 9e:61:c1:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9sab1vSPabxel5rJjp0368vl3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTA2MTUxNjA1NDJaFw0yNTA2MTgyMjM4NDJaMDMxMTAvBgNV BAMTKDU0RjFCNjE1RUQ4QTMxRDFBMzk3ODYxOTk2NTQxODlGRTJDRTFGNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdKn8d6gDUwbIhdkeC2hmafua W55+TK2knUIs8l1YjthGC4l+v63bVuSo2+RD431xIKFt25nqX/7KDRdN97g5Lq5Y jLtPw9RFoZMivboley7TkRB9ohW3MyH+Flt8lTxy3vzSBIM6na7LWTUencrfHN89 9HeaTNUP4E5gSUWnJeeE4LVpP3Q6acSxEEyZbZub8isOKqbo/H3B6XzhopwETqt1 3lhjuX/WAtgn1rnxMbThELyboyV18i5Da1HnbLQiU64XNCAQHjO3msXWVjwBavlR Yy/GckNkCYEvAJkp3PJH7BzmgDNosJ1AMfR/zrRpmaF/4XqQo1xqf1iAN3/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVPG2Fe2KMdGjl4YZllQYn+LOH0EwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBi8gca0CnLZKgQ6dJKYnlg06gj6zeliKpc PPw/LmdjL1s20cO1zAYgd5PFY6AU8N3j4gtvJi6Dk9akhrGpLRzoAjXX0Bi4Vgrn 1Abs9hIFWYHkozFpLYleOuuVyQgrqYu7z+LRdRbTdeq69Wlo4YgrMEz4IVsnihwA 0Pw87FoHdShwUfK936Ed0q3sxTEpV373PoLFta02MiEho46/OZO6Lt7jau7zQh94 afSKYtRNwLTfSAqeZjN4vDSmlUF5SkAEk1S2PJFyBY3d7PxOc4nnxb1+h2SaRfg2 aG1yocap7i8KjAGnjlYiq/jiVou8sjzol7GLYNXB0VY+t55hwdQ= -----END CERTIFICATE-----Generated at Mon Jun 16 15:08:36 2025 by rpki-client