$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: JKGOiHuK4B3z6R9jpUk+g3N6Twvju+buZNb7c9OR5Ag= Subject key identifier: 2A:3B:80:62:29:81:AB:83:28:32:C6:7D:78:80:A0:E6:8B:3A:D1:A1 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 344DD2A94612F34C0E3B5473C608F1420CF6D9F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: D0 Signing time: Wed 30 Apr 2025 07:00:42 +0000 Manifest this update: Wed 30 Apr 2025 06:55:42 +0000 Manifest next update: Sat 03 May 2025 10:38:42 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: xyEm2VvBx0tQ2kJuAPrsZCd+OaaQngzvQFrOzS0Ks2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 10:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4d:d2:a9:46:12:f3:4c:0e:3b:54:73:c6:08:f1:42:0c:f6:d9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Apr 30 06:55:42 2025 GMT Not After : May 3 10:38:42 2025 GMT Subject: CN=2A3B80622981AB832832C67D7880A0E68B3AD1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:0f:62:a0:62:72:17:62:6d:c8:ae:9b:4e: 63:95:88:a1:22:fc:49:fb:dc:70:6f:7e:36:ac:04: 48:78:8c:7a:d6:6c:a0:71:07:a4:66:e8:6a:bf:7a: 90:f6:e5:06:b8:7e:c0:d2:65:32:9e:80:31:f0:7c: c6:1a:38:16:c5:e5:11:07:e7:c3:e6:8a:0f:58:a2: 48:a6:28:c7:2b:5a:c3:f8:b5:b7:a5:80:73:a5:f2: ee:8e:b0:b5:95:63:4c:9a:b0:d7:69:7a:89:95:e3: c4:e0:1f:92:11:8f:03:4a:52:f6:fe:6a:8b:e6:05: 17:ae:5d:a1:10:0f:94:56:7f:b1:1c:65:30:0a:12: d6:7b:e0:6d:a1:3b:b4:6a:f5:30:62:d4:45:2f:30: c4:98:97:7b:65:80:ca:53:a0:e5:5f:c1:bd:c8:94: 45:dd:10:26:96:58:ba:7d:90:a5:eb:a9:61:6c:33: 92:74:7f:71:92:15:6e:3c:95:e1:f4:cf:0a:3a:d1: 14:2b:30:fd:20:6c:96:16:c6:c7:96:a4:53:6a:ad: 06:33:56:5c:dd:e6:6f:25:b1:ae:5c:34:25:1d:3f: 2c:e2:5c:8d:ff:0b:e0:11:9f:74:e8:0f:69:7b:e9: e7:66:40:d3:1b:fe:6f:22:a1:b9:8a:ae:97:29:9f: 5c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:80:62:29:81:AB:83:28:32:C6:7D:78:80:A0:E6:8B:3A:D1:A1 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:43:5c:b4:d3:71:71:49:a9:4f:b7:8e:eb:0f:f0:1c:27:ab: df:2a:77:2a:b7:c6:58:c4:5c:66:18:be:76:89:f8:01:af:c2: 11:b3:a6:c2:34:71:24:83:eb:56:a9:20:16:61:96:aa:a4:7f: 01:50:a3:cb:b0:4d:cf:88:d1:0d:b4:71:52:a2:e7:c1:76:33: 68:be:5e:05:96:d5:25:ad:b0:0d:ff:a0:cc:d8:49:12:25:13: f6:dd:98:90:f2:92:28:1e:d0:2e:c8:60:59:06:58:9c:08:58: 83:c8:eb:4f:9e:c2:8e:df:2e:f4:f5:42:84:d8:55:35:be:74: bc:e2:3b:5e:16:7a:97:45:d1:7a:84:b0:64:c6:79:ce:f3:ad: b2:4d:80:d3:ae:d1:ae:74:1d:82:b2:f8:52:ea:ec:de:c1:91: ee:dc:65:91:8d:ff:0a:a1:72:4a:96:db:11:c3:af:9c:a7:54: 2d:e9:ce:b0:9f:ef:cd:96:69:49:b0:57:1b:42:7d:6f:b2:4a: 79:6a:32:0b:f6:67:68:dc:10:7f:f0:6a:8c:8f:ea:88:6b:2b: 65:22:4b:29:59:a4:51:25:41:64:9f:3b:cd:f3:4d:9f:25:8d: 97:8c:43:be:1b:79:0e:05:17:b6:f4:f1:59:7c:d3:01:d8:ec: 8d:10:64:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNE3SqUYS80wOO1RzxgjxQgz22fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTA0MzAwNjU1NDJaFw0yNTA1MDMxMDM4NDJaMDMxMTAvBgNV BAMTKDJBM0I4MDYyMjk4MUFCODMyODMyQzY3RDc4ODBBMEU2OEIzQUQxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwaw9ioGJyF2JtyK6bTmOViKEi /En73HBvfjasBEh4jHrWbKBxB6Rm6Gq/epD25Qa4fsDSZTKegDHwfMYaOBbF5REH 58Pmig9YokimKMcrWsP4tbelgHOl8u6OsLWVY0yasNdpeomV48TgH5IRjwNKUvb+ aovmBReuXaEQD5RWf7EcZTAKEtZ74G2hO7Rq9TBi1EUvMMSYl3tlgMpToOVfwb3I lEXdECaWWLp9kKXrqWFsM5J0f3GSFW48leH0zwo60RQrMP0gbJYWxseWpFNqrQYz Vlzd5m8lsa5cNCUdPyziXI3/C+ARn3ToD2l76edmQNMb/m8iobmKrpcpn1ytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKjuAYimBq4MoMsZ9eICg5os60aEwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxDXLTTcXFJqU+3jusP8Bwnq98qdyq3xljE XGYYvnaJ+AGvwhGzpsI0cSSD61apIBZhlqqkfwFQo8uwTc+I0Q20cVKi58F2M2i+ XgWW1SWtsA3/oMzYSRIlE/bdmJDykige0C7IYFkGWJwIWIPI60+ewo7fLvT1QoTY VTW+dLziO14WepdF0XqEsGTGec7zrbJNgNOu0a50HYKy+FLq7N7Bke7cZZGN/wqh ckqW2xHDr5ynVC3pzrCf782WaUmwVxtCfW+ySnlqMgv2Z2jcEH/waoyP6ohrK2Ui SylZpFElQWSfO83zTZ8ljZeMQ74beQ4FF7b08Vl80wHY7I0QZAA= -----END CERTIFICATE-----Generated at Wed Apr 30 12:59:51 2025 by rpki-client