$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: a7kFkgR1Ul729xgusupm9B/kMBVBHkrfEsHOndUAJCI= Subject key identifier: CA:AB:44:B0:7D:26:DA:EA:A6:12:C4:2E:62:70:0A:F9:BB:56:0E:74 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 3B7EE68F1966F19842AEAE44C92ACA905AC7052C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 01CA Signing time: Tue 29 Apr 2025 10:01:31 +0000 Manifest this update: Tue 29 Apr 2025 09:56:31 +0000 Manifest next update: Fri 02 May 2025 16:22:31 +0000 Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: 2OJ/wtKeIZAaX++aUeHXj+pN9DRnOhjC4MRVlbyCCIw=) 2: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: pjtUeUxRKhGA1pFfEb/zN9/TdNUSxCzrQDGB2HA1fT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 16:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7e:e6:8f:19:66:f1:98:42:ae:ae:44:c9:2a:ca:90:5a:c7:05:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Apr 29 09:56:31 2025 GMT Not After : May 2 16:22:31 2025 GMT Subject: CN=CAAB44B07D26DAEAA612C42E62700AF9BB560E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:e5:6b:9e:f4:44:50:b8:aa:0e:b2:51:aa: 9d:e9:7f:01:37:8c:8e:bf:67:34:4c:26:38:a8:cf: c2:e1:66:53:84:94:30:66:11:e0:7d:ef:86:d5:dd: 68:5f:2a:e5:02:3c:30:d2:ff:19:d0:70:33:e9:e2: f0:3f:c9:14:f0:78:52:e1:d8:1a:cb:2f:5f:bd:cf: f4:b6:ee:97:0b:e0:94:6a:ce:b4:22:db:b9:86:02: 63:89:d8:f4:0a:57:79:a1:c7:09:8b:ce:ef:51:43: 65:48:86:aa:b8:80:f6:f1:82:9e:85:e5:73:c8:a9: 5a:03:35:71:d7:a6:d3:c7:99:24:58:ec:6f:5f:a7: b7:38:f5:4c:fb:18:1f:df:5c:e9:22:cc:e9:b6:28: 2e:35:69:17:90:6d:cb:82:54:ba:1f:c5:21:5f:8f: f0:20:f9:04:85:7f:7d:d5:f6:9a:e9:a1:35:1f:7c: e8:51:0a:9f:a0:f6:5d:91:c9:92:f1:c8:fe:ef:6a: d1:03:9f:1a:58:c7:33:1c:03:ef:56:c7:8d:98:0b: 27:61:e6:cd:53:2c:a5:0e:2e:26:62:4a:ee:85:4c: c9:e6:32:e4:5f:94:47:e7:71:33:36:0d:f0:2b:f7: 04:5b:db:66:35:d8:b8:bf:68:a9:25:b6:21:81:1a: fd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AB:44:B0:7D:26:DA:EA:A6:12:C4:2E:62:70:0A:F9:BB:56:0E:74 X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7e:03:74:60:c6:92:65:4f:b2:16:5f:d8:af:bb:f9:92:4d: e7:d7:ca:6b:9c:e8:24:ed:05:6f:15:73:46:7b:fd:1f:ed:a2: 59:78:b0:9a:4b:0a:ec:ff:8f:5d:37:af:3b:5b:82:02:3e:bd: 2c:b2:6f:07:ab:13:25:7e:e4:6f:11:21:95:00:09:23:8c:ed: c5:b3:2f:68:9b:da:1d:69:85:3a:10:8e:96:02:5e:4e:05:e3: 35:73:b3:db:13:32:bc:0b:1b:13:94:99:6d:98:bc:30:14:15: b7:a9:af:62:ce:27:33:b2:35:9e:73:60:76:8a:d2:21:3d:c9: 6d:f5:97:85:b5:1a:7c:7a:f6:7f:c9:60:f2:ae:60:3e:4c:b9: 4f:39:62:5a:6b:75:5f:be:98:f4:6b:a1:78:34:45:42:be:21: e9:f2:9d:77:dd:09:34:9b:ff:06:b0:35:f9:19:11:ff:20:45: 85:21:2b:75:40:a8:bf:1c:26:12:ee:b9:9d:81:45:2a:6c:84: a4:a1:79:3c:b8:ea:aa:b8:db:e4:8f:6c:f3:f5:85:7c:82:c6: e8:c0:a0:0e:e0:40:17:fd:22:f8:11:47:5e:a8:73:96:83:2e: 15:7a:4c:b1:4e:0f:e2:57:07:07:be:40:f6:96:95:82:5a:07: f8:9b:a3:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO37mjxlm8ZhCrq5EySrKkFrHBSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTA0MjkwOTU2MzFaFw0yNTA1MDIxNjIyMzFaMDMxMTAvBgNV BAMTKENBQUI0NEIwN0QyNkRBRUFBNjEyQzQyRTYyNzAwQUY5QkI1NjBFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCef+VrnvREULiqDrJRqp3pfwE3 jI6/ZzRMJjioz8LhZlOElDBmEeB974bV3WhfKuUCPDDS/xnQcDPp4vA/yRTweFLh 2BrLL1+9z/S27pcL4JRqzrQi27mGAmOJ2PQKV3mhxwmLzu9RQ2VIhqq4gPbxgp6F 5XPIqVoDNXHXptPHmSRY7G9fp7c49Uz7GB/fXOkizOm2KC41aReQbcuCVLofxSFf j/Ag+QSFf33V9prpoTUffOhRCp+g9l2RyZLxyP7vatEDnxpYxzMcA+9Wx42YCydh 5s1TLKUOLiZiSu6FTMnmMuRflEfncTM2DfAr9wRb22Y12Li/aKkltiGBGv2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyqtEsH0m2uqmEsQuYnAK+btWDnQwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1+A3RgxpJlT7IWX9ivu/mSTefXymuc6CTt BW8Vc0Z7/R/toll4sJpLCuz/j103rztbggI+vSyybwerEyV+5G8RIZUACSOM7cWz L2ib2h1phToQjpYCXk4F4zVzs9sTMrwLGxOUmW2YvDAUFbepr2LOJzOyNZ5zYHaK 0iE9yW31l4W1Gnx69n/JYPKuYD5MuU85YlprdV++mPRroXg0RUK+IenynXfdCTSb /wawNfkZEf8gRYUhK3VAqL8cJhLuuZ2BRSpshKSheTy46qq42+SPbPP1hXyCxujA oA7gQBf9IvgRR16oc5aDLhV6TLFOD+JXBwe+QPaWlYJaB/ibo04= -----END CERTIFICATE-----Generated at Wed Apr 30 03:48:02 2025 by rpki-client