$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: lDRKg/uhPGIV/G6AOaWTsq4z/kkzNUgdS/0UR4VWvYs= Subject key identifier: 9D:FD:04:F3:1D:87:96:D4:FD:4C:01:7D:7D:6C:60:7C:86:FE:F7:9F Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 43219F835660D1501A275444CF673BA6E8857DC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 03CE Signing time: Mon 16 Jun 2025 21:11:56 +0000 Manifest this update: Mon 16 Jun 2025 21:06:56 +0000 Manifest next update: Thu 19 Jun 2025 21:19:56 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 8zQK8AXHLSApMmYd7tjNJsIjZnWf3yDUEAsA1LFehWw=) 2: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: VTqh60zE0kgH6A3Y+FQSJ9P09Fsid1/p9Oo4RVYaeZM=) 3: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: 6KZnCoun2OeRfJhfU31JgFdGtJDoY9NCrchaCehwgfg=) 4: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6ARHaxkV0HQRmAgHPZ4dlFB+3c6L0ZGJmc/nN2+k+no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:21:9f:83:56:60:d1:50:1a:27:54:44:cf:67:3b:a6:e8:85:7d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Jun 16 21:06:56 2025 GMT Not After : Jun 19 21:19:56 2025 GMT Subject: CN=9DFD04F31D8796D4FD4C017D7D6C607C86FEF79F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:ec:be:d8:70:a0:d2:de:c3:18:56:5b:d0: 5d:de:2e:01:78:b1:f8:91:28:83:84:51:9d:12:0e: 66:c0:22:9a:37:94:01:78:38:44:9f:38:3a:14:1a: 74:f3:43:49:f9:08:cf:04:8f:22:a0:d1:23:53:ae: 28:a0:6e:54:3a:8d:60:17:76:d5:1d:9c:8b:4c:7c: c3:89:80:03:08:29:42:fd:0c:65:d5:54:19:dd:1f: fd:db:30:39:38:01:e3:70:8e:fa:e6:74:fb:78:51: c8:1c:55:e4:67:65:d0:fe:46:09:10:a9:a7:0e:63: 13:7e:b0:6b:7b:d7:15:14:e9:58:af:18:ef:2d:73: 39:00:2a:0d:5f:a9:c6:d6:db:e6:9a:6d:b3:dc:73: 31:14:dd:a0:fa:cc:37:d8:7f:7b:4f:f6:e5:e2:88: 2c:ba:1f:34:8c:65:ce:f3:94:ea:35:b0:6b:d5:02: 84:50:be:8c:b5:3c:b4:13:d1:d4:91:55:56:aa:b4: 73:e6:63:3d:21:06:8a:00:f5:b0:9c:c0:94:0b:90: 1d:c0:b9:d7:af:e4:cb:ad:8a:2c:6f:da:54:e5:2c: 59:3c:e9:a1:bc:19:3f:e5:ff:30:ae:62:80:e7:4f: 75:f1:5f:b4:c1:0c:a3:31:a9:55:43:96:2a:f5:76: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FD:04:F3:1D:87:96:D4:FD:4C:01:7D:7D:6C:60:7C:86:FE:F7:9F X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:90:b6:54:7d:0f:3b:49:ac:d2:1f:b8:14:9a:97:dc:62:aa: a8:c4:f6:8e:1b:e7:b4:50:08:5a:8b:a9:6f:26:d7:5e:86:de: 7a:3c:60:47:a9:c8:4e:e4:10:89:2c:fa:2b:12:99:55:3b:a3: 3b:02:40:8f:1e:fb:61:5e:8a:d4:95:f4:97:f5:46:cf:71:22: bd:8a:e4:14:c4:09:70:41:bf:99:fb:8f:84:05:80:dd:e2:ed: 35:fa:f3:59:cb:6b:30:20:c0:dd:cf:9e:fb:f4:dc:5e:80:73: 36:bc:7f:57:6d:f1:42:2b:7e:15:56:2a:36:fc:4f:e1:6e:64: c7:7d:6e:f4:c4:89:1d:10:63:b9:16:2b:b0:0f:8f:97:36:fd: 49:c4:da:8a:6e:4e:2d:60:6c:07:d0:31:59:b8:dc:6d:7f:04: b5:92:52:7c:1c:3f:d9:f2:7d:55:a2:b3:f5:56:c6:b2:7e:32: 12:f1:00:61:34:19:c1:74:33:8c:3d:a8:12:bb:2f:1c:4b:6d: a9:e9:07:1c:b2:8b:c2:0c:52:21:2f:25:39:58:95:55:da:fc: 88:2c:81:9b:3a:cc:f3:e4:8d:09:51:fb:d4:51:d0:0c:d3:3e: 7a:e6:07:30:20:f5:26:7b:ba:ef:1d:15:17:9d:e8:94:d0:6c: 61:1b:f3:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyGfg1Zg0VAaJ1REz2c7puiFfcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNTA2MTYyMTA2NTZaFw0yNTA2MTkyMTE5NTZaMDMxMTAvBgNV BAMTKDlERkQwNEYzMUQ4Nzk2RDRGRDRDMDE3RDdENkM2MDdDODZGRUY3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xuy+2HCg0t7DGFZb0F3eLgF4 sfiRKIOEUZ0SDmbAIpo3lAF4OESfODoUGnTzQ0n5CM8EjyKg0SNTriigblQ6jWAX dtUdnItMfMOJgAMIKUL9DGXVVBndH/3bMDk4AeNwjvrmdPt4UcgcVeRnZdD+RgkQ qacOYxN+sGt71xUU6VivGO8tczkAKg1fqcbW2+aabbPcczEU3aD6zDfYf3tP9uXi iCy6HzSMZc7zlOo1sGvVAoRQvoy1PLQT0dSRVVaqtHPmYz0hBooA9bCcwJQLkB3A udev5Mutiixv2lTlLFk86aG8GT/l/zCuYoDnT3XxX7TBDKMxqVVDlir1du2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnf0E8x2HltT9TAF9fWxgfIb+958wHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGQtlR9DztJrNIfuBSal9xiqqjE9o4b57RQ CFqLqW8m116G3no8YEepyE7kEIks+isSmVU7ozsCQI8e+2FeitSV9Jf1Rs9xIr2K 5BTECXBBv5n7j4QFgN3i7TX681nLazAgwN3Pnvv03F6Acza8f1dt8UIrfhVWKjb8 T+FuZMd9bvTEiR0QY7kWK7APj5c2/UnE2opuTi1gbAfQMVm43G1/BLWSUnwcP9ny fVWis/VWxrJ+MhLxAGE0GcF0M4w9qBK7LxxLbanpBxyyi8IMUiEvJTlYlVXa/Igs gZs6zPPkjQlR+9RR0AzTPnrmBzAg9SZ7uu8dFRed6JTQbGEb85E= -----END CERTIFICATE-----Generated at Wed Jun 18 07:18:01 2025 by rpki-client