$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: HOVC6RcVkRPdXSZEe3DWlXrScVTvIi5aZbOugKRVoco= Subject key identifier: 17:A0:E5:B0:E5:6D:46:8C:8D:15:56:E8:75:C2:79:8C:A1:CC:33:BA Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 12CCFF06395B36F1071CD2E45204EA40B66CCDED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: BE Signing time: Mon 28 Apr 2025 07:04:22 +0000 Manifest this update: Mon 28 Apr 2025 06:59:22 +0000 Manifest next update: Thu 01 May 2025 14:25:22 +0000 Files and hashes: 1: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: B7ghdLbRyeXQM9lD+AFeLas3anVls8bVYNLT9v5uPb0=) 2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 3: 3231302e37392e3134322e302f32332d3234203d3e20313431363037.roa (hash: 2z5796EleJnilMU0FLojzkS/vK51uqD5/u1kXEKOaNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cc:ff:06:39:5b:36:f1:07:1c:d2:e4:52:04:ea:40:b6:6c:cd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Apr 28 06:59:22 2025 GMT Not After : May 1 14:25:22 2025 GMT Subject: CN=17A0E5B0E56D468C8D1556E875C2798CA1CC33BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:b2:3b:b9:40:64:9b:c1:64:f4:7d:51:2f: c1:c8:76:87:69:61:e7:f3:ca:3f:8c:09:9f:30:48: 83:d4:6c:6b:53:d8:8a:fd:f3:14:af:5c:89:f2:74: ad:6b:c1:d5:67:c3:a7:73:bd:86:7c:4a:57:cb:03: 65:28:82:c8:ec:f4:fc:81:49:3d:99:da:77:cb:15: 07:d0:4e:6e:83:3e:79:34:9a:2f:bf:00:8d:b3:3f: ce:52:24:03:01:17:ee:27:f0:03:96:6c:63:f5:04: be:ea:f7:9a:8b:33:ea:02:15:69:63:d9:b8:02:f6: 0a:12:4d:00:57:a2:7e:f3:9e:6e:e4:70:8e:50:7a: 03:8d:97:32:0e:c2:6d:16:85:e3:99:27:b1:79:06: d0:bf:af:42:9d:45:21:48:6c:68:6b:d0:b8:15:4d: 5f:78:81:d1:9e:8e:fd:58:96:cd:ae:48:9d:fa:4d: 84:cf:fc:73:96:dc:70:11:c3:14:fb:22:10:25:db: ae:79:94:d1:b1:00:87:3c:38:a1:c5:2c:c5:b4:9f: 03:13:84:0c:93:14:6a:b5:5c:78:d9:6e:31:a6:78: 87:9e:b1:5f:7f:86:54:7f:12:75:66:68:9b:e8:1c: e6:0c:b7:7b:68:15:d5:91:f6:05:4d:7f:8d:09:4c: e1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A0:E5:B0:E5:6D:46:8C:8D:15:56:E8:75:C2:79:8C:A1:CC:33:BA X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:7a:3e:6c:0d:5f:e3:ba:60:98:5c:e5:e6:7f:0c:21:a4:fc: f4:6c:3c:3a:b8:2a:c1:02:d1:80:e7:7c:ae:7e:66:b3:7d:d5: ae:52:6f:df:89:77:95:9e:34:5b:80:cb:04:41:23:94:b6:48: 89:b6:fd:08:d0:4e:fb:b6:cf:07:cd:2f:5f:c7:67:33:cd:c7: bd:ed:c8:2f:1d:3c:4d:29:6d:b7:8a:60:98:16:a2:3e:35:98: af:af:10:dc:3a:f2:39:55:80:ee:b4:d0:5e:fb:77:57:18:8b: 66:a5:58:a3:1a:79:c9:3e:35:3b:3f:b4:49:14:da:14:35:9c: 59:0d:70:7d:07:fe:6d:e0:79:d9:71:e1:34:ee:63:7e:df:8d: ed:8e:59:a9:9a:23:98:60:93:6e:eb:b5:f4:a3:54:7d:23:ae: ec:31:0c:cc:40:76:62:e4:82:32:02:13:c3:56:bd:8a:94:c3: f6:90:4b:b7:df:93:4d:03:18:2e:bb:79:19:dd:41:19:30:02: b0:65:e4:1f:9d:a5:8f:ad:92:f3:ff:8f:b6:b4:29:02:63:2f: e6:35:1d:a1:37:a4:49:7b:e4:af:9a:e2:0e:17:1c:c0:70:56: f8:bc:56:3f:1e:b6:ef:b2:7a:a2:94:28:59:4b:d0:43:77:78: 90:62:d2:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsz/BjlbNvEHHNLkUgTqQLZsze0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTA0MjgwNjU5MjJaFw0yNTA1MDExNDI1MjJaMDMxMTAvBgNV BAMTKDE3QTBFNUIwRTU2RDQ2OEM4RDE1NTZFODc1QzI3OThDQTFDQzMzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxT7I7uUBkm8Fk9H1RL8HIdodp Yefzyj+MCZ8wSIPUbGtT2Ir98xSvXInydK1rwdVnw6dzvYZ8SlfLA2Uogsjs9PyB ST2Z2nfLFQfQTm6DPnk0mi+/AI2zP85SJAMBF+4n8AOWbGP1BL7q95qLM+oCFWlj 2bgC9goSTQBXon7znm7kcI5QegONlzIOwm0WheOZJ7F5BtC/r0KdRSFIbGhr0LgV TV94gdGejv1Yls2uSJ36TYTP/HOW3HARwxT7IhAl2655lNGxAIc8OKHFLMW0nwMT hAyTFGq1XHjZbjGmeIeesV9/hlR/EnVmaJvoHOYMt3toFdWR9gVNf40JTOG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6DlsOVtRoyNFVbodcJ5jKHMM7owHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZ6PmwNX+O6YJhc5eZ/DCGk/PRsPDq4KsEC 0YDnfK5+ZrN91a5Sb9+Jd5WeNFuAywRBI5S2SIm2/QjQTvu2zwfNL1/HZzPNx73t yC8dPE0pbbeKYJgWoj41mK+vENw68jlVgO600F77d1cYi2alWKMaeck+NTs/tEkU 2hQ1nFkNcH0H/m3gedlx4TTuY37fje2OWamaI5hgk27rtfSjVH0jruwxDMxAdmLk gjICE8NWvYqUw/aQS7ffk00DGC67eRndQRkwArBl5B+dpY+tkvP/j7a0KQJjL+Y1 HaE3pEl75K+a4g4XHMBwVvi8Vj8etu+yeqKUKFlL0EN3eJBi0k4= -----END CERTIFICATE-----Generated at Wed Apr 30 00:17:54 2025 by rpki-client