$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: 4k5HA1ozkwX7A+qoIeoYNthpFDKCFveQ4Nv9wSezB8k= Subject key identifier: 24:67:57:B9:03:93:2B:13:DD:0E:22:87:A9:82:2B:72:13:8D:7C:0B Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 2473E10B327A24FE7A0310C73AE9F87629D65F4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: EE Signing time: Mon 16 Jun 2025 21:51:09 +0000 Manifest this update: Mon 16 Jun 2025 21:46:09 +0000 Manifest next update: Fri 20 Jun 2025 08:13:09 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: FzoVuJnm9jKqgtF7hNXCC0smdQRs7NY06wA+VobP0Mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:73:e1:0b:32:7a:24:fe:7a:03:10:c7:3a:e9:f8:76:29:d6:5f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Jun 16 21:46:09 2025 GMT Not After : Jun 20 08:13:09 2025 GMT Subject: CN=246757B903932B13DD0E2287A9822B72138D7C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:01:98:5a:b1:2f:06:94:7e:6f:80:45:65: 59:52:79:2d:ba:8c:98:01:6f:ac:10:86:88:de:20: b9:dc:95:bb:a9:9f:d1:3b:5e:b9:ea:2a:2c:ec:16: 9c:a1:1f:33:38:2b:8c:69:5a:49:14:6b:1d:8d:82: dd:36:7b:58:6a:a4:b5:72:e0:35:4a:6a:e9:75:a4: dc:94:23:49:52:21:ec:b0:84:b1:b3:4a:28:8c:ad: 8e:ff:ed:d5:71:5d:29:48:e5:5b:6d:4b:16:31:99: f1:fd:1c:9f:27:65:58:e8:c7:0d:a5:5b:79:a8:3c: 30:6d:2f:52:cb:c2:be:f8:dc:23:ee:bc:57:23:80: a0:1f:93:90:f2:c6:58:c4:e1:66:9e:8d:82:53:3d: 44:9e:89:5b:4c:4b:68:e8:e8:52:9e:c2:80:f7:d4: 30:64:cc:bc:2c:c5:ca:ca:f9:09:70:b1:af:de:13: 97:3d:2f:d7:f2:33:bf:89:7a:fa:10:43:75:24:7a: 94:29:4a:b1:2b:b2:13:38:5d:64:b7:43:85:8d:75: 71:bc:8f:f1:bc:79:15:09:a6:3f:d0:90:ea:5c:b6: ca:f5:cb:ab:75:18:de:87:91:7c:07:99:6a:40:c8: ef:4c:e8:90:62:a5:bf:15:1d:d8:2e:1c:d4:b4:06: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:67:57:B9:03:93:2B:13:DD:0E:22:87:A9:82:2B:72:13:8D:7C:0B X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:65:4c:7c:c4:ae:37:b3:71:23:fa:d7:d3:d8:98:0b:ad:ab: 8d:18:b2:3c:ec:2e:29:c9:85:70:62:44:f8:88:be:88:99:c6: a5:1d:3a:56:9d:6c:88:07:1c:db:b5:d5:25:9f:5d:8d:d6:3c: 0f:2d:3f:df:76:9d:70:4a:30:0a:11:1f:9f:09:00:3c:a5:fc: aa:59:62:98:eb:a3:8a:cf:e7:b4:ee:e5:cb:73:e9:00:97:dc: c8:4f:6e:6e:30:86:87:ef:55:b0:e5:69:fd:c7:22:fa:8d:32: dd:e0:5b:e5:57:a2:a8:d0:8e:94:9d:90:48:89:51:04:14:d4: 26:e2:48:97:43:30:71:2c:4d:36:5a:38:e6:8a:e2:75:05:d8: 0b:40:99:7d:13:d2:5d:1d:b4:19:99:1d:0a:b0:d8:2e:c0:76: 19:6a:21:45:b0:e6:bd:7e:c1:1a:9c:f7:26:45:51:38:39:a5: 08:96:8c:e5:d6:74:f2:14:a1:74:1d:e0:cb:3f:01:13:b4:26: d9:9f:87:0a:92:61:3f:1f:67:3f:3a:34:a4:de:4f:41:7d:d8: d4:49:32:58:f8:b0:de:51:cb:80:64:07:42:ac:57:1d:9c:d6: ea:cb:79:91:de:66:c9:3e:67:40:02:4e:c2:0f:0c:03:82:81: d8:36:49:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHPhCzJ6JP56AxDHOun4dinWX04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTA2MTYyMTQ2MDlaFw0yNTA2MjAwODEzMDlaMDMxMTAvBgNV BAMTKDI0Njc1N0I5MDM5MzJCMTNERDBFMjI4N0E5ODIyQjcyMTM4RDdDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25QGYWrEvBpR+b4BFZVlSeS26 jJgBb6wQhojeILnclbupn9E7XrnqKizsFpyhHzM4K4xpWkkUax2Ngt02e1hqpLVy 4DVKaul1pNyUI0lSIeywhLGzSiiMrY7/7dVxXSlI5VttSxYxmfH9HJ8nZVjoxw2l W3moPDBtL1LLwr743CPuvFcjgKAfk5DyxljE4WaejYJTPUSeiVtMS2jo6FKewoD3 1DBkzLwsxcrK+Qlwsa/eE5c9L9fyM7+JevoQQ3UkepQpSrErshM4XWS3Q4WNdXG8 j/G8eRUJpj/QkOpctsr1y6t1GN6HkXwHmWpAyO9M6JBipb8VHdguHNS0BrF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJGdXuQOTKxPdDiKHqYIrchONfAswHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRlTHzErjezcSP619PYmAutq40YsjzsLinJ hXBiRPiIvoiZxqUdOladbIgHHNu11SWfXY3WPA8tP992nXBKMAoRH58JADyl/KpZ Ypjro4rP57Tu5ctz6QCX3MhPbm4whofvVbDlaf3HIvqNMt3gW+VXoqjQjpSdkEiJ UQQU1CbiSJdDMHEsTTZaOOaK4nUF2AtAmX0T0l0dtBmZHQqw2C7AdhlqIUWw5r1+ wRqc9yZFUTg5pQiWjOXWdPIUoXQd4Ms/ARO0JtmfhwqSYT8fZz86NKTeT0F92NRJ Mlj4sN5Ry4BkB0KsVx2c1urLeZHeZsk+Z0ACTsIPDAOCgdg2ScQ= -----END CERTIFICATE-----Generated at Tue Jun 17 12:30:28 2025 by rpki-client