$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: b8PQF1v1tP62OiXIrS7sPCuJFAhNEfkXK+V21+Er/1U= Subject key identifier: 14:08:2D:6D:BC:3A:9A:F5:C7:22:9E:1B:F7:2E:A6:D0:90:88:37:88 Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 7212AA998466168DF6CE37FB8D1CBB66D2946428 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: D6 Signing time: Tue 17 Jun 2025 04:32:04 +0000 Manifest this update: Tue 17 Jun 2025 04:27:04 +0000 Manifest next update: Fri 20 Jun 2025 14:52:04 +0000 Files and hashes: 1: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 3: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: oZ9w0S2rIP6wr/moAzBs62kILQJOFDYhyBPmPU1oZSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 14:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:12:aa:99:84:66:16:8d:f6:ce:37:fb:8d:1c:bb:66:d2:94:64:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Jun 17 04:27:04 2025 GMT Not After : Jun 20 14:52:04 2025 GMT Subject: CN=14082D6DBC3A9AF5C7229E1BF72EA6D090883788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:97:90:52:6e:ab:4e:47:c0:12:ca:c0:1e: 09:14:17:b8:9f:d4:06:e9:e1:ce:c5:35:dc:a6:5f: a9:8e:da:ab:b5:de:60:d2:08:d7:24:4e:14:68:f3: 6c:d2:2c:c7:35:8a:c0:8f:48:1d:70:56:50:38:7d: 66:de:fb:d4:f6:d9:23:8e:c9:1d:c1:b1:69:ae:20: f4:70:bc:2a:8d:da:e9:35:5d:63:fc:d9:65:73:14: 3e:f2:14:c2:04:a8:d9:ed:36:06:9a:2e:6e:5f:30: e4:d9:51:92:a2:3b:8d:e5:3c:a5:14:c9:42:81:5a: 83:2a:ff:3b:96:12:63:65:af:db:17:f4:05:27:f8: 41:ff:3d:9f:57:69:53:a1:28:71:b6:69:e0:8f:66: 25:fa:2d:01:bd:8b:63:c2:32:95:82:54:a1:bf:1c: db:07:42:73:d5:1c:f0:71:bb:81:c7:d7:69:6e:33: 62:6f:00:cc:dd:55:c9:af:ce:ac:84:15:ea:69:16: 55:84:50:47:6d:e6:8f:5a:2a:ec:e7:b0:c6:f7:c0: 4e:b4:62:23:92:b1:ff:40:a3:43:82:78:39:8b:15: 98:c4:66:01:96:8e:6d:41:31:6b:6e:f2:f4:c5:dd: 33:a8:e4:f2:87:60:a7:48:04:3a:1f:6f:7e:dc:bc: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:08:2D:6D:BC:3A:9A:F5:C7:22:9E:1B:F7:2E:A6:D0:90:88:37:88 X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:00:cc:09:74:a9:de:25:25:b4:4d:d9:30:3e:2f:2f:df:9c: 00:f1:5e:4e:9c:61:bd:1a:d6:36:61:3d:58:df:dc:af:9e:ba: bf:7a:1c:53:05:57:07:76:13:56:eb:d2:16:65:85:6f:2f:ca: 86:bc:07:fb:fc:96:b8:62:64:f3:a2:39:94:ff:d6:a4:b8:15: 5d:9a:d0:dd:9c:a7:a5:c6:cc:17:b9:aa:77:84:07:4d:46:04: 8a:0e:ed:cc:58:c0:1e:15:8a:d5:5f:13:99:3c:c9:12:e5:5f: 0f:cc:59:a5:38:25:38:a2:04:02:c2:2e:ff:61:e7:32:fd:e3: f1:0e:fc:c7:ff:c7:59:1e:41:02:61:d4:53:5b:29:4f:5c:ad: 16:d7:ea:a3:45:b4:12:53:38:08:95:c8:cc:da:dc:20:b1:88: 1e:4d:f2:68:c8:18:07:c9:a0:5d:3c:ae:e9:4a:95:86:26:0d: 70:c0:8e:0f:70:c2:a0:59:4f:c5:b2:df:dc:80:b9:9f:e3:e4: 25:3b:7e:e0:2d:4c:a0:07:bd:02:6a:cb:e9:31:79:19:db:ac: 68:7d:83:99:cd:67:9b:43:be:9f:df:76:00:44:49:7f:1e:78: 7b:50:ad:2b:d3:2e:12:a8:fc:e1:84:11:f2:2f:57:c7:cc:0b: 82:94:9c:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchKqmYRmFo32zjf7jRy7ZtKUZCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTA2MTcwNDI3MDRaFw0yNTA2MjAxNDUyMDRaMDMxMTAvBgNV BAMTKDE0MDgyRDZEQkMzQTlBRjVDNzIyOUUxQkY3MkVBNkQwOTA4ODM3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yJeQUm6rTkfAEsrAHgkUF7if 1Abp4c7FNdymX6mO2qu13mDSCNckThRo82zSLMc1isCPSB1wVlA4fWbe+9T22SOO yR3BsWmuIPRwvCqN2uk1XWP82WVzFD7yFMIEqNntNgaaLm5fMOTZUZKiO43lPKUU yUKBWoMq/zuWEmNlr9sX9AUn+EH/PZ9XaVOhKHG2aeCPZiX6LQG9i2PCMpWCVKG/ HNsHQnPVHPBxu4HH12luM2JvAMzdVcmvzqyEFeppFlWEUEdt5o9aKuznsMb3wE60 YiOSsf9Ao0OCeDmLFZjEZgGWjm1BMWtu8vTF3TOo5PKHYKdIBDofb37cvJahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFAgtbbw6mvXHIp4b9y6m0JCIN4gwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwAzAl0qd4lJbRN2TA+Ly/fnADxXk6cYb0a 1jZhPVjf3K+eur96HFMFVwd2E1br0hZlhW8vyoa8B/v8lrhiZPOiOZT/1qS4FV2a 0N2cp6XGzBe5qneEB01GBIoO7cxYwB4VitVfE5k8yRLlXw/MWaU4JTiiBALCLv9h 5zL94/EO/Mf/x1keQQJh1FNbKU9crRbX6qNFtBJTOAiVyMza3CCxiB5N8mjIGAfJ oF08rulKlYYmDXDAjg9wwqBZT8Wy39yAuZ/j5CU7fuAtTKAHvQJqy+kxeRnbrGh9 g5nNZ5tDvp/fdgBESX8eeHtQrSvTLhKo/OGEEfIvV8fMC4KUnGY= -----END CERTIFICATE-----Generated at Tue Jun 17 19:29:48 2025 by rpki-client