$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: SJBuA7cMdl5AAU/c6XPvB37naCQfFOe1noH+BuZGGGI= Subject key identifier: 9B:CC:35:EA:62:3C:0B:06:76:B3:43:5A:5C:13:9B:9C:9E:23:70:A1 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 24478A0236B9E07D30AEC5B8ED59989E74238A56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 0182 Signing time: Tue 29 Apr 2025 03:01:50 +0000 Manifest this update: Tue 29 Apr 2025 02:56:50 +0000 Manifest next update: Fri 02 May 2025 14:13:50 +0000 Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: jf4xYnJ4Nz4jnRvHr6KWvHYtNuLHq45zzAQGXpIeTCk=) 2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 14:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:47:8a:02:36:b9:e0:7d:30:ae:c5:b8:ed:59:98:9e:74:23:8a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Apr 29 02:56:50 2025 GMT Not After : May 2 14:13:50 2025 GMT Subject: CN=9BCC35EA623C0B0676B3435A5C139B9C9E2370A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:5c:1a:25:22:e1:90:28:6b:a5:2e:82:e1: df:0e:57:97:65:27:de:17:20:94:25:51:a7:04:ef: eb:ea:a9:15:2b:11:10:12:94:14:d6:61:b3:64:2e: bf:06:f5:6b:ba:fb:d1:5c:fb:4d:b4:a5:49:d3:d7: 80:eb:21:b5:9c:ca:8b:2c:fb:d1:44:77:a4:83:16: 1d:f0:62:4f:d6:43:47:c3:10:0d:50:ea:38:3c:0d: b3:52:e3:21:1f:3d:66:f3:89:bd:f8:59:80:ce:9b: 58:16:15:a6:7b:82:f7:b2:00:f8:cc:ba:43:02:c0: 71:3a:2c:42:32:e6:83:1f:07:46:86:da:c6:d6:f4: 0c:f7:52:37:a2:bb:0b:8c:5b:89:7d:57:9d:57:03: 63:d3:b4:88:db:e9:dc:11:7f:6c:e9:25:b4:74:8a: b7:8b:61:fc:8b:d3:a6:4d:10:35:4f:87:b2:02:9e: c3:05:8e:a3:8c:d2:a4:cc:e3:96:3b:d6:b0:e7:10: f1:62:bf:b3:d4:6a:c7:ec:2b:47:d1:4c:4c:41:67: 34:f1:30:9e:34:d8:5b:e0:39:0d:0e:45:f3:25:a4: 59:0a:46:c4:39:23:1e:60:b9:c2:99:58:f0:73:03: 49:2d:d3:e4:b8:6d:10:39:a5:0c:18:0a:23:29:80: ee:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CC:35:EA:62:3C:0B:06:76:B3:43:5A:5C:13:9B:9C:9E:23:70:A1 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f3:11:d3:17:14:b2:cf:ac:92:ee:e1:9b:55:b6:fb:6f:bf: 3e:c3:c2:2c:75:22:1e:ec:a0:93:af:57:c1:2f:72:86:76:c7: 01:3b:50:76:3a:ea:2b:d6:d4:26:a0:64:41:58:16:43:83:51: 9a:9d:68:b9:94:a0:78:46:73:c0:92:aa:d5:7e:ef:e3:82:be: fb:f1:1f:c3:46:b8:28:20:e1:7a:c7:1e:54:0c:84:62:25:1d: 35:60:d4:6a:2b:49:a4:03:b2:68:ca:9c:2c:01:d2:a8:ff:e1: 7a:02:04:54:ee:6d:18:e7:a0:bf:1e:7a:c6:a0:3d:7c:fc:6d: 98:38:f4:26:95:65:52:18:d3:8b:bb:76:9d:9c:c8:b7:39:b0: 82:0c:08:ce:72:06:79:02:7b:92:fe:64:40:f7:08:1f:b3:34: d1:c1:9d:2b:d5:e0:32:c2:bd:0d:08:1f:bf:c4:e1:15:71:de: 20:1b:f0:bf:bb:ff:c3:d2:8d:0c:f9:8e:74:64:7d:c9:80:18: d9:aa:d2:87:8d:1e:1d:0b:5e:78:42:0f:18:ae:19:ef:9a:9d: 38:3d:ee:8f:1f:e3:f2:c2:af:91:04:eb:e5:5d:9b:20:f7:98: f0:ec:d0:7c:00:f3:84:3b:6d:6b:f0:a8:76:c2:ce:89:3a:9a: ba:76:31:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEeKAja54H0wrsW47VmYnnQjilYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTA0MjkwMjU2NTBaFw0yNTA1MDIxNDEzNTBaMDMxMTAvBgNV BAMTKDlCQ0MzNUVBNjIzQzBCMDY3NkIzNDM1QTVDMTM5QjlDOUUyMzcwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGW1waJSLhkChrpS6C4d8OV5dl J94XIJQlUacE7+vqqRUrERASlBTWYbNkLr8G9Wu6+9Fc+020pUnT14DrIbWcyoss +9FEd6SDFh3wYk/WQ0fDEA1Q6jg8DbNS4yEfPWbzib34WYDOm1gWFaZ7gveyAPjM ukMCwHE6LEIy5oMfB0aG2sbW9Az3UjeiuwuMW4l9V51XA2PTtIjb6dwRf2zpJbR0 ireLYfyL06ZNEDVPh7ICnsMFjqOM0qTM45Y71rDnEPFiv7PUasfsK0fRTExBZzTx MJ402FvgOQ0ORfMlpFkKRsQ5Ix5gucKZWPBzA0kt0+S4bRA5pQwYCiMpgO6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm8w16mI8CwZ2s0NaXBObnJ4jcKEwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjzEdMXFLLPrJLu4ZtVtvtvvz7Dwix1Ih7s oJOvV8EvcoZ2xwE7UHY66ivW1CagZEFYFkODUZqdaLmUoHhGc8CSqtV+7+OCvvvx H8NGuCgg4XrHHlQMhGIlHTVg1GorSaQDsmjKnCwB0qj/4XoCBFTubRjnoL8eesag PXz8bZg49CaVZVIY04u7dp2cyLc5sIIMCM5yBnkCe5L+ZED3CB+zNNHBnSvV4DLC vQ0IH7/E4RVx3iAb8L+7/8PSjQz5jnRkfcmAGNmq0oeNHh0LXnhCDxiuGe+anTg9 7o8f4/LCr5EE6+VdmyD3mPDs0HwA84Q7bWvwqHbCzok6mrp2MaU= -----END CERTIFICATE-----Generated at Wed Apr 30 22:42:40 2025 by rpki-client