$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json) Hash identifier: +L09tI93feQzdNgzmKo3JSy4LJxyMj5oaSL9JFVgNjM= Subject key identifier: 13:8D:05:AB:CC:0B:56:15:D8:19:3D:26:8A:CE:CC:76:17:62:C6:BE Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 5B6E71AF2567FEB750A6060280DF569CDBF87B32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft Manifest number: 01DC Signing time: Tue 17 Jun 2025 09:30:56 +0000 Manifest this update: Tue 17 Jun 2025 09:25:56 +0000 Manifest next update: Fri 20 Jun 2025 10:15:56 +0000 Files and hashes: 1: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: 6pWVSpFXVKH6EqJrCt3rmPa2Bj+n9pO/wL1SNQ2qvtg=) 2: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: wWpy82tytI2ad4aIDQgEBICZnF0sHZCHNQb/3D/Q1fE=) 3: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: 5ODCvpJsl+XnXZcZjU6a9g5frNriLFm4lEWGxVY15JQ=) 4: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: YfWdCVoIH1DQu9Nb8zknsBq3gjAx6STdl7+GflAiVVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 10:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6e:71:af:25:67:fe:b7:50:a6:06:02:80:df:56:9c:db:f8:7b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Jun 17 09:25:56 2025 GMT Not After : Jun 20 10:15:56 2025 GMT Subject: CN=138D05ABCC0B5615D8193D268ACECC761762C6BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:d9:73:ba:e5:de:98:35:64:3e:d0:ee:c5: cd:69:f0:73:cd:92:8c:83:b1:44:34:b1:35:2c:90: 07:2f:70:a3:e3:f2:d4:e6:33:84:ce:f4:e6:94:fd: 27:1b:76:9c:cc:2c:2b:95:77:f5:2d:e1:9a:bd:b0: ea:05:db:8c:1f:d1:5e:7c:b3:c1:f9:54:35:83:4f: fe:6d:08:e5:a3:61:7b:b5:31:5f:ba:32:49:97:f9: 2f:1b:a4:40:3f:6d:d3:46:87:d6:64:5d:c8:d7:0f: 4d:b6:5c:1a:39:9e:00:ef:d1:af:d3:e0:13:ca:d8: d8:3b:ed:b5:c1:a6:af:ff:1a:27:ec:11:9f:be:97: d2:78:45:10:5e:8b:76:73:51:d8:d6:7a:67:1c:1e: 21:1a:c0:b6:1b:e6:b2:a8:f1:2a:26:7e:e1:3f:e0: f9:58:33:91:33:6c:a6:3b:b0:37:f3:31:d5:83:32: 8e:2d:81:63:34:6d:ae:98:d5:0a:e8:de:ad:91:aa: fb:12:5b:00:53:05:21:a1:cc:a9:60:16:96:3a:85: 9f:f3:de:14:02:cc:c2:e4:a2:4a:ef:b7:ab:09:5b: 5d:a2:40:13:14:9e:29:49:9f:70:22:ff:08:9e:10: 96:0d:85:b1:80:5e:8e:b2:8e:58:cd:d0:c6:ac:ce: 2b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8D:05:AB:CC:0B:56:15:D8:19:3D:26:8A:CE:CC:76:17:62:C6:BE X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1a:f9:7c:07:d7:5f:67:ea:17:a8:85:0c:6c:70:8f:a1:1c: 31:f7:05:e7:b2:56:9c:03:6b:78:4a:80:97:59:42:02:e1:cf: 9f:b5:5b:ca:ec:38:d5:ce:10:9c:6d:75:38:19:71:13:e4:f3: 1c:e7:0e:e7:f9:fa:38:f8:e6:7a:5b:04:be:08:c0:14:11:08: 49:dd:68:30:33:f1:44:bb:ab:25:e0:64:4f:48:63:cc:28:3f: a7:22:77:42:f6:17:49:44:d3:95:bc:b7:8c:18:4f:87:2a:d9: 36:35:c9:f4:2c:83:cd:f3:76:94:fc:8b:97:32:e7:80:71:e8: 78:28:c2:c2:e5:e1:2f:48:bb:4e:fe:51:58:fd:dd:35:ae:77: 82:1f:b6:84:e9:24:e1:60:57:86:b0:e6:c3:a3:c1:6e:4a:30: fe:b2:36:25:46:7b:3c:fa:12:0e:68:91:f0:8c:37:86:b2:2d: b9:1e:4b:06:5b:a4:4d:af:f7:73:cb:78:5f:4b:db:14:92:59: 06:17:d5:d6:08:a3:28:31:67:82:13:68:0e:db:78:93:80:7b: 9b:39:28:08:62:50:e3:de:38:83:63:b3:37:85:83:03:d1:78: ad:74:0e:a3:dd:46:7c:bd:fb:c3:4c:ce:63:0f:8e:75:34:ca: f9:cf:d0:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW25xryVn/rdQpgYCgN9WnNv4ezIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNTA2MTcwOTI1NTZaFw0yNTA2MjAxMDE1NTZaMDMxMTAvBgNV BAMTKDEzOEQwNUFCQ0MwQjU2MTVEODE5M0QyNjhBQ0VDQzc2MTc2MkM2QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrtlzuuXemDVkPtDuxc1p8HPN koyDsUQ0sTUskAcvcKPj8tTmM4TO9OaU/ScbdpzMLCuVd/Ut4Zq9sOoF24wf0V58 s8H5VDWDT/5tCOWjYXu1MV+6MkmX+S8bpEA/bdNGh9ZkXcjXD022XBo5ngDv0a/T 4BPK2Ng77bXBpq//GifsEZ++l9J4RRBei3ZzUdjWemccHiEawLYb5rKo8SomfuE/ 4PlYM5EzbKY7sDfzMdWDMo4tgWM0ba6Y1Qro3q2RqvsSWwBTBSGhzKlgFpY6hZ/z 3hQCzMLkokrvt6sJW12iQBMUnilJn3Ai/wieEJYNhbGAXo6yjljN0MaszivJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE40Fq8wLVhXYGT0mis7Mdhdixr4wHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGca+XwH119n6heohQxscI+hHDH3BeeyVpwD a3hKgJdZQgLhz5+1W8rsONXOEJxtdTgZcRPk8xznDuf5+jj45npbBL4IwBQRCEnd aDAz8US7qyXgZE9IY8woP6cid0L2F0lE05W8t4wYT4cq2TY1yfQsg83zdpT8i5cy 54Bx6HgowsLl4S9Iu07+UVj93TWud4IftoTpJOFgV4aw5sOjwW5KMP6yNiVGezz6 Eg5okfCMN4ayLbkeSwZbpE2v93PLeF9L2xSSWQYX1dYIoygxZ4ITaA7beJOAe5s5 KAhiUOPeOINjszeFgwPReK10DqPdRny9+8NMzmMPjnU0yvnP0Kk= -----END CERTIFICATE-----Generated at Tue Jun 17 20:53:15 2025 by rpki-client