$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: I0WsxGASabHcd9vW1E4Ij/iy/dfBBZYYmIzNpCJjnAQ= Subject key identifier: 35:56:97:C4:5B:CB:AB:7E:90:32:D6:CF:30:00:5D:07:01:70:90:51 Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 35642A04F3F82FD9BC6FF2C27FD9052FED1083D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 01FF Signing time: Fri 13 Jun 2025 15:31:02 +0000 Manifest this update: Fri 13 Jun 2025 15:26:02 +0000 Manifest next update: Mon 16 Jun 2025 22:19:02 +0000 Files and hashes: 1: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: 4b1m8QzmM/ddHSTl1RtNC0dVoHGlTEKWYL57fBr/kO0=) 2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 22:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:64:2a:04:f3:f8:2f:d9:bc:6f:f2:c2:7f:d9:05:2f:ed:10:83:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Jun 13 15:26:02 2025 GMT Not After : Jun 16 22:19:02 2025 GMT Subject: CN=355697C45BCBAB7E9032D6CF30005D0701709051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:f8:65:fb:ba:94:cf:10:1c:87:89:9c:50: 22:4a:79:a5:40:a4:ca:57:df:d4:f7:c6:2d:6d:db: 0c:e2:6b:58:6b:19:20:35:9c:9e:ac:64:08:96:1a: a7:a9:f7:5e:65:a4:1c:01:36:38:3a:8b:76:41:02: ec:c3:01:05:08:19:d9:60:da:74:a1:fa:ca:ad:38: 8a:34:4f:af:ce:36:13:b7:c0:9f:07:95:15:1e:45: c9:3f:31:91:79:c5:1e:76:e0:06:c8:fc:f0:5a:8f: fb:cf:c1:fa:06:86:c7:b5:34:25:fe:cd:8c:07:1e: 45:12:57:98:cd:ff:30:d8:12:48:08:c5:13:e1:bc: 7b:5e:b2:af:91:46:e4:cd:82:7c:30:24:4a:54:c9: c3:5f:e8:9a:21:5c:86:42:61:a4:7e:28:b6:b6:f2: bf:4d:b3:2d:f1:56:c5:81:98:48:59:db:8f:96:3f: 9b:00:43:67:43:b2:5e:43:36:7a:20:c4:08:98:4c: 0d:51:a7:c6:cb:b5:a7:4e:1c:5e:86:42:a8:56:df: 28:7c:fe:2b:0d:db:81:d2:b4:bf:89:15:86:5f:72: bb:d3:e7:c2:52:1f:a7:ea:4b:a2:32:5c:99:f0:1d: 3e:93:90:76:0e:6d:1e:bf:5f:21:07:2e:de:f6:4b: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:56:97:C4:5B:CB:AB:7E:90:32:D6:CF:30:00:5D:07:01:70:90:51 X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5d:f5:78:d4:04:c5:af:08:4d:df:73:7c:9e:63:df:3f:9c: 96:b0:11:62:4f:f7:f2:7c:f8:f6:ac:90:8e:76:6a:66:02:13: 89:e0:df:db:79:25:05:0c:f6:1c:51:ae:40:60:29:fa:e4:bd: a5:f3:86:22:35:ce:f4:77:a6:99:e2:de:3a:af:ed:2b:22:96: 04:0b:2c:ae:0f:0a:0a:8b:59:f9:70:db:db:fa:e2:44:f7:54: fe:b3:65:9b:32:b9:35:18:13:1c:60:2d:ac:b3:12:ae:1f:a4: 2b:be:33:5f:1a:02:2d:e3:02:d5:4a:81:56:e3:04:a0:91:5e: 3a:1f:89:8b:1d:9e:c6:1a:e4:c4:e3:14:a8:46:0b:53:0a:b6: 2b:fc:3b:fd:4b:67:6f:0e:ad:1c:1c:b0:f0:c6:bf:40:f0:c1: c9:bf:43:64:f8:56:03:f5:65:23:ce:32:48:54:81:26:85:88: 26:17:17:b1:0f:76:3e:9e:13:80:73:c4:25:68:4b:19:f8:c5: f4:33:f8:01:e1:a8:23:84:50:b2:d4:08:95:1f:44:1f:ba:84: 0b:8d:92:e1:f6:7d:70:23:75:3d:46:5a:bd:1e:7f:74:f2:76: d7:0d:bb:67:de:7a:3b:f7:5c:96:64:4c:ad:2a:b4:33:1e:25: 69:d9:90:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWQqBPP4L9m8b/LCf9kFL+0Qg9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTA2MTMxNTI2MDJaFw0yNTA2MTYyMjE5MDJaMDMxMTAvBgNV BAMTKDM1NTY5N0M0NUJDQkFCN0U5MDMyRDZDRjMwMDA1RDA3MDE3MDkwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtvhl+7qUzxAch4mcUCJKeaVA pMpX39T3xi1t2wzia1hrGSA1nJ6sZAiWGqep915lpBwBNjg6i3ZBAuzDAQUIGdlg 2nSh+sqtOIo0T6/ONhO3wJ8HlRUeRck/MZF5xR524AbI/PBaj/vPwfoGhse1NCX+ zYwHHkUSV5jN/zDYEkgIxRPhvHtesq+RRuTNgnwwJEpUycNf6JohXIZCYaR+KLa2 8r9Nsy3xVsWBmEhZ24+WP5sAQ2dDsl5DNnogxAiYTA1Rp8bLtadOHF6GQqhW3yh8 /isN24HStL+JFYZfcrvT58JSH6fqS6IyXJnwHT6TkHYObR6/XyEHLt72S1eVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNVaXxFvLq36QMtbPMABdBwFwkFEwHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItd9XjUBMWvCE3fc3yeY98/nJawEWJP9/J8 +PaskI52amYCE4ng39t5JQUM9hxRrkBgKfrkvaXzhiI1zvR3ppni3jqv7SsilgQL LK4PCgqLWflw29v64kT3VP6zZZsyuTUYExxgLayzEq4fpCu+M18aAi3jAtVKgVbj BKCRXjofiYsdnsYa5MTjFKhGC1MKtiv8O/1LZ28OrRwcsPDGv0Dwwcm/Q2T4VgP1 ZSPOMkhUgSaFiCYXF7EPdj6eE4BzxCVoSxn4xfQz+AHhqCOEULLUCJUfRB+6hAuN kuH2fXAjdT1GWr0ef3TydtcNu2feejv3XJZkTK0qtDMeJWnZkGs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:47:22 2025 by rpki-client