$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft File: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json) Hash identifier: osd/fusg70HDwYEnQlyyhNFJVETS5UvK3bvN+wPLCkg= Subject key identifier: DB:2E:9A:31:39:FF:1D:BD:43:1F:D9:0F:82:7B:1F:A7:9B:BE:96:3E Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 Certificate issuer: /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Certificate serial: 2F6643DAC7162EAB12C315807B9EB7C4914CCF01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject info access: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft Manifest number: 01BC Signing time: Mon 28 Apr 2025 18:41:20 +0000 Manifest this update: Mon 28 Apr 2025 18:36:20 +0000 Manifest next update: Fri 02 May 2025 00:18:20 +0000 Files and hashes: 1: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: L9tG1zj2jd1oKT2GZjg0CkO9AU/LG+WKnQWK3pJLWv8=) 2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: uJ4UndaAGVEWTS0CGBzHtyefGbyYsYBo80wyV0nM7O4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:66:43:da:c7:16:2e:ab:12:c3:15:80:7b:9e:b7:c4:91:4c:cf:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Validity Not Before: Apr 28 18:36:20 2025 GMT Not After : May 2 00:18:20 2025 GMT Subject: CN=DB2E9A3139FF1DBD431FD90F827B1FA79BBE963E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:d7:37:bf:58:15:9e:86:2d:ae:4b:43:d8: 29:ca:30:1c:59:74:e9:0d:9f:9c:54:60:91:04:02: bc:8f:5d:b6:e8:d4:5d:06:68:6d:89:8e:9a:e1:b5: 9b:58:d5:b8:48:ac:d0:5c:50:aa:ff:a1:68:ba:7d: d2:10:ef:6b:69:01:e5:6b:9b:12:c4:fc:10:b3:8c: 4c:a8:24:4d:3a:9e:d2:f5:04:08:3e:8c:f4:4e:3f: 45:be:e3:fe:c9:b0:1f:ba:80:e5:73:2e:fc:ed:b6: 4a:a2:0c:ef:36:fa:45:99:28:d1:0b:ff:6a:41:08: a6:41:11:5c:3d:5b:8e:00:eb:b1:7d:e2:42:a5:30: 17:d6:56:b6:a1:75:33:15:15:fd:fe:e9:48:b3:15: 41:0c:fd:bd:fc:41:49:db:7d:7c:b5:3c:bf:10:4c: a8:07:c6:85:4c:a3:f3:c0:b3:c8:01:78:8f:f1:06: 2c:8c:8f:d9:2d:53:53:ca:d0:84:67:f1:4c:fb:70: ce:78:ab:9b:cc:20:c1:4d:15:a5:17:f3:19:27:45: 0d:c8:6d:d9:35:f3:ab:cc:15:5f:2b:a1:1e:3d:c9: e5:78:fe:c5:e0:9d:d2:19:bd:48:68:23:b4:98:2f: e7:3a:c5:da:14:57:c5:e4:99:2e:9e:c1:3f:ef:87: 14:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2E:9A:31:39:FF:1D:BD:43:1F:D9:0F:82:7B:1F:A7:9B:BE:96:3E X509v3 Authority Key Identifier: keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9a:b0:33:6f:22:2e:11:a3:46:68:5d:78:c9:89:5d:26:c7: 54:77:22:1d:48:62:e1:60:3f:bb:c8:ed:bb:5b:53:33:be:c2: 63:16:5b:c6:46:df:f7:07:a1:7c:35:d7:a1:91:d3:3f:3e:2c: eb:4f:7a:9c:a3:cf:b1:c0:c8:c8:72:18:31:92:17:80:14:ef: a9:cd:3c:08:38:b2:bc:63:d6:f7:d1:59:10:d0:e5:13:f9:7d: b6:20:06:bb:aa:5f:c3:76:7f:58:55:fe:f9:53:cd:e2:51:d4: 5e:b8:5b:d7:28:42:a8:67:53:20:45:ad:a3:58:17:22:c7:ed: d8:ac:86:f5:01:8e:74:1d:e1:85:ac:a9:85:3b:d9:3c:72:b9: f4:41:65:98:e9:6e:4e:44:45:7d:45:bb:9a:08:d2:81:06:26: 0d:7f:da:08:42:91:cd:2d:8c:d3:5b:8f:6e:86:92:a5:d7:80: e4:1e:ae:8e:f0:b2:b3:52:ae:e6:31:24:54:03:cc:41:84:13: 36:a4:f8:3b:c4:46:e8:30:46:b5:66:7f:32:23:1c:c3:5d:36: a6:d4:07:32:53:9c:1b:37:ea:5e:6d:e0:9b:a9:ab:63:fb:ef: f8:8c:bd:e0:ce:96:44:02:2b:a1:37:46:19:1c:0c:57:55:1d: 6b:b8:ac:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2ZD2scWLqsSwxWAe563xJFMzwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZG MjAwRjYxMzAeFw0yNTA0MjgxODM2MjBaFw0yNTA1MDIwMDE4MjBaMDMxMTAvBgNV BAMTKERCMkU5QTMxMzlGRjFEQkQ0MzFGRDkwRjgyN0IxRkE3OUJCRTk2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5btc3v1gVnoYtrktD2CnKMBxZ dOkNn5xUYJEEAryPXbbo1F0GaG2JjprhtZtY1bhIrNBcUKr/oWi6fdIQ72tpAeVr mxLE/BCzjEyoJE06ntL1BAg+jPROP0W+4/7JsB+6gOVzLvzttkqiDO82+kWZKNEL /2pBCKZBEVw9W44A67F94kKlMBfWVrahdTMVFf3+6UizFUEM/b38QUnbfXy1PL8Q TKgHxoVMo/PAs8gBeI/xBiyMj9ktU1PK0IRn8Uz7cM54q5vMIMFNFaUX8xknRQ3I bdk186vMFV8roR49yeV4/sXgndIZvUhoI7SYL+c6xdoUV8XkmS6ewT/vhxRpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2y6aMTn/Hb1DH9kPgnsfp5u+lj4wHwYDVR0j BBgwFoAUPmSOaoYjxcXd8AFSbQ/cD/IA9hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjFmM2ZhZS1kMGNiLTRhMTctYTU0OC0xYmE2NjMxYjFlMDkvMC8zRTY0OEU2QTg2 MjNDNUM1RERGMDAxNTI2RDBGREMwRkYyMDBGNjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZGMjAw RjYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRD MEZGMjAwRjYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKasDNvIi4Ro0ZoXXjJiV0mx1R3Ih1IYuFg P7vI7btbUzO+wmMWW8ZG3/cHoXw116GR0z8+LOtPepyjz7HAyMhyGDGSF4AU76nN PAg4srxj1vfRWRDQ5RP5fbYgBruqX8N2f1hV/vlTzeJR1F64W9coQqhnUyBFraNY FyLH7dishvUBjnQd4YWsqYU72TxyufRBZZjpbk5ERX1Fu5oI0oEGJg1/2ghCkc0t jNNbj26GkqXXgOQero7wsrNSruYxJFQDzEGEEzak+DvERugwRrVmfzIjHMNdNqbU BzJTnBs36l5t4Jupq2P77/iMveDOlkQCK6E3RhkcDFdVHWu4rLo= -----END CERTIFICATE-----Generated at Tue Apr 29 06:24:53 2025 by rpki-client