$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: UtJRFY8S8s3pH2HkBYUHpYM6KzczNaZAw8W+Abo+1yE= Subject key identifier: 4C:5E:70:83:F7:BE:96:3A:91:CE:13:1F:8D:A7:F7:C2:06:0E:17:C7 Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 7E887A2C91DE5B31C0B00840D7FD9A75C113597A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 0161 Signing time: Sun 15 Jun 2025 21:41:44 +0000 Manifest this update: Sun 15 Jun 2025 21:36:44 +0000 Manifest next update: Thu 19 Jun 2025 09:02:44 +0000 Files and hashes: 1: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) 2: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) 3: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: B4qCk708NkRJVQ2tBufSl0g3EcA1JjXuWuiuHK/WQNw=) 4: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) 5: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 09:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:88:7a:2c:91:de:5b:31:c0:b0:08:40:d7:fd:9a:75:c1:13:59:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Jun 15 21:36:44 2025 GMT Not After : Jun 19 09:02:44 2025 GMT Subject: CN=4C5E7083F7BE963A91CE131F8DA7F7C2060E17C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:ce:75:48:47:b4:be:5b:96:38:65:dd:6f: e4:29:9a:11:f6:bc:c4:6a:f5:61:d7:09:5d:54:9f: 53:42:b5:29:af:95:42:f7:3f:c0:17:e8:a1:3a:8f: e5:4e:b6:60:75:cd:14:c6:e7:d7:93:37:b9:15:9a: 7d:a8:ca:b3:00:f9:a7:4d:1d:c8:5f:5a:74:47:cd: 6e:c1:b1:f6:a9:51:3f:90:82:a6:f7:08:8f:89:4f: da:c2:03:22:b5:aa:e5:6e:46:af:e0:ff:31:e0:fa: 86:e4:24:7d:92:c9:36:b4:fd:63:12:ab:9c:0e:e3: a7:f7:02:33:d0:57:3a:ab:7a:d5:a8:8b:d3:4b:f6: 34:df:1e:2e:81:47:14:22:2a:68:f2:03:07:fd:3d: 05:3d:14:00:ca:b4:47:d1:90:d3:b6:25:63:78:64: d1:2a:28:90:69:90:89:21:7b:98:c0:0d:4d:cd:39: 8c:c0:45:12:54:d5:04:fc:7c:9e:6d:c5:57:97:8c: 43:ce:72:9d:96:f3:d3:5c:13:ea:76:91:f6:9c:da: 98:2d:4d:03:ef:a2:2c:45:4f:39:0e:78:d7:13:fe: e1:da:4b:b3:cf:31:9f:bb:e8:97:5c:53:00:89:a8: 23:14:63:72:85:8f:15:c3:7e:db:14:ef:10:d8:88: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5E:70:83:F7:BE:96:3A:91:CE:13:1F:8D:A7:F7:C2:06:0E:17:C7 X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e1:e5:cf:a8:87:4f:2e:ba:ac:05:a6:92:4b:8c:43:4e:1f: 23:d1:bf:47:fb:51:eb:99:3b:c4:a5:e2:25:62:d8:19:bb:93: 6a:8f:99:07:a4:4f:08:21:9f:95:b4:8b:bc:1d:91:e9:b1:20: 9b:1c:4f:36:b8:07:3e:27:86:b1:00:f4:40:04:66:26:b9:85: a6:47:0d:68:e5:bf:3a:d6:31:26:ba:76:74:76:81:e6:01:bd: 21:78:69:81:b3:21:4a:d7:77:65:79:c4:f3:fb:e0:de:a5:81: b9:39:98:d1:76:0f:2b:72:db:94:8c:49:28:dd:d1:ad:40:49: a9:63:5b:ba:9b:57:05:87:21:62:b1:ff:13:15:92:85:d6:05: 1e:94:3c:67:00:95:af:7b:3e:04:8b:0d:4f:55:78:f3:80:d3: 3a:07:3b:91:1d:dc:60:13:63:c0:a1:58:1d:44:7b:57:04:8a: 7c:1f:cf:4f:1d:bf:85:69:82:e4:8b:4d:e2:24:1c:f7:ce:94: b3:3b:66:3c:78:4c:8a:59:60:d5:5a:e8:56:23:87:5e:7a:3f: f4:06:fd:21:4a:35:2d:77:6f:72:67:59:be:79:32:7b:5c:59: 88:47:82:bf:1d:51:ff:fc:47:86:7a:b9:91:3d:6c:79:b7:4a: e2:7e:c5:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoh6LJHeWzHAsAhA1/2adcETWXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNTA2MTUyMTM2NDRaFw0yNTA2MTkwOTAyNDRaMDMxMTAvBgNV BAMTKDRDNUU3MDgzRjdCRTk2M0E5MUNFMTMxRjhEQTdGN0MyMDYwRTE3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94851SEe0vluWOGXdb+QpmhH2 vMRq9WHXCV1Un1NCtSmvlUL3P8AX6KE6j+VOtmB1zRTG59eTN7kVmn2oyrMA+adN HchfWnRHzW7BsfapUT+Qgqb3CI+JT9rCAyK1quVuRq/g/zHg+obkJH2SyTa0/WMS q5wO46f3AjPQVzqretWoi9NL9jTfHi6BRxQiKmjyAwf9PQU9FADKtEfRkNO2JWN4 ZNEqKJBpkIkhe5jADU3NOYzARRJU1QT8fJ5txVeXjEPOcp2W89NcE+p2kfac2pgt TQPvoixFTzkOeNcT/uHaS7PPMZ+76JdcUwCJqCMUY3KFjxXDftsU7xDYiNglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTF5wg/e+ljqRzhMfjaf3wgYOF8cwHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzh5c+oh08uuqwFppJLjENOHyPRv0f7UeuZ O8Sl4iVi2Bm7k2qPmQekTwghn5W0i7wdkemxIJscTza4Bz4nhrEA9EAEZia5haZH DWjlvzrWMSa6dnR2geYBvSF4aYGzIUrXd2V5xPP74N6lgbk5mNF2Dyty25SMSSjd 0a1ASaljW7qbVwWHIWKx/xMVkoXWBR6UPGcAla97PgSLDU9VePOA0zoHO5Ed3GAT Y8ChWB1Ee1cEinwfz08dv4VpguSLTeIkHPfOlLM7Zjx4TIpZYNVa6FYjh156P/QG /SFKNS13b3JnWb55MntcWYhHgr8dUf/8R4Z6uZE9bHm3SuJ+xfc= -----END CERTIFICATE-----Generated at Mon Jun 16 15:44:43 2025 by rpki-client