$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: xZOuGOILyPgr+gSDzoGXlqynYlMzCFN2yEstKEonLB8= Subject key identifier: D1:81:CA:7C:4C:FA:6F:8A:B1:9D:24:4B:88:48:4C:FA:53:6B:4D:C8 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 6C5E18C4A4CF4FFF61F915AF0FD702749E985F13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 04E1 Signing time: Sun 15 Jun 2025 13:10:37 +0000 Manifest this update: Sun 15 Jun 2025 13:05:37 +0000 Manifest next update: Wed 18 Jun 2025 19:12:37 +0000 Files and hashes: 1: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) 2: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 3: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 4: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: 4ax950JRjqsWVIZl1th33Ddhz8duHP632/ZZ5nddbEU=) 5: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 19:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5e:18:c4:a4:cf:4f:ff:61:f9:15:af:0f:d7:02:74:9e:98:5f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Jun 15 13:05:37 2025 GMT Not After : Jun 18 19:12:37 2025 GMT Subject: CN=D181CA7C4CFA6F8AB19D244B88484CFA536B4DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:65:98:46:49:0e:58:a7:b1:67:36:d6:e4: 4a:ca:16:3c:99:b3:6d:d5:c8:0b:dc:e1:e1:03:c3: 25:29:b9:f4:a5:57:58:53:26:f4:aa:1c:63:85:24: 28:c9:4c:6b:c6:67:29:b6:32:df:90:6a:6a:31:93: b7:a1:78:20:ce:3f:0a:c9:f0:f0:62:6d:15:a1:98: cc:7c:af:cc:ba:39:48:22:84:95:3b:96:a4:4f:49: 47:82:4b:ae:fe:d4:c0:5b:ea:bc:54:b7:65:ba:48: c5:0d:b4:97:0c:d7:ca:e3:35:97:35:c3:a2:37:52: 85:fc:a3:fb:0e:47:9f:56:17:08:a2:aa:0d:ae:d3: f3:a5:f8:f3:52:83:76:9f:9a:d4:1b:f1:67:24:47: 26:29:49:ba:c4:de:ae:6d:3a:02:a4:17:49:19:c5: 93:32:2c:33:50:5f:da:ea:bf:3d:3d:e7:8b:6a:f0: 9b:e8:4a:11:4d:82:c0:9d:2e:fd:16:61:04:4e:7b: 61:18:e1:d0:42:b0:19:2f:57:05:42:81:cd:b0:42: e7:0b:91:7b:44:9b:6d:97:f2:46:53:01:9d:a8:bc: ce:b0:6b:92:17:53:94:8a:8a:01:d9:12:3b:78:41: d0:b3:3e:ab:d8:9f:84:c1:d5:10:6a:53:56:ae:84: 17:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:81:CA:7C:4C:FA:6F:8A:B1:9D:24:4B:88:48:4C:FA:53:6B:4D:C8 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e2:19:46:b1:46:59:91:23:b3:34:12:c0:1d:3d:1a:4a:c0: e9:62:27:05:d8:75:f0:d8:de:0a:06:3f:b8:5e:ea:e4:03:3c: a7:d9:63:2e:f4:59:3d:3e:b6:c6:76:5b:26:3e:f2:58:7a:dd: f1:ed:f6:43:1b:af:6b:de:65:08:8c:79:b6:04:18:96:c6:df: 2d:4c:21:b9:d4:eb:4b:d4:7f:5c:e5:5b:64:ad:2d:db:18:ab: d9:92:20:3e:48:77:be:57:a8:3a:e1:44:af:ea:45:ff:66:91: f5:83:42:88:ed:25:36:10:ba:60:f9:57:3b:81:2b:7b:35:19: 60:31:f3:36:6e:b9:96:74:87:47:00:e3:16:89:c0:93:b8:76: 2a:ab:40:b5:c2:2c:9f:f5:0c:b9:bd:f1:d8:dc:6d:29:6e:00: 0b:02:6d:ca:91:d7:4e:f7:a1:b8:a3:55:32:94:0d:f7:5a:79: 87:91:6e:4d:ba:59:c3:f0:0c:67:c0:99:b2:86:bc:3e:f9:cb: 19:36:23:5d:df:c6:2e:a3:ef:a5:8c:9a:fe:49:3c:9a:36:6b: 79:7f:00:b3:ff:be:eb:58:67:00:61:00:82:0b:1c:06:51:cc: bf:c6:0d:93:d1:40:6f:5e:b1:ca:c7:41:07:ca:4b:76:26:82: 6f:35:cc:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbF4YxKTPT/9h+RWvD9cCdJ6YXxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTA2MTUxMzA1MzdaFw0yNTA2MTgxOTEyMzdaMDMxMTAvBgNV BAMTKEQxODFDQTdDNENGQTZGOEFCMTlEMjQ0Qjg4NDg0Q0ZBNTM2QjREQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLl2WYRkkOWKexZzbW5ErKFjyZ s23VyAvc4eEDwyUpufSlV1hTJvSqHGOFJCjJTGvGZym2Mt+Qamoxk7eheCDOPwrJ 8PBibRWhmMx8r8y6OUgihJU7lqRPSUeCS67+1MBb6rxUt2W6SMUNtJcM18rjNZc1 w6I3UoX8o/sOR59WFwiiqg2u0/Ol+PNSg3afmtQb8WckRyYpSbrE3q5tOgKkF0kZ xZMyLDNQX9rqvz0954tq8JvoShFNgsCdLv0WYQROe2EY4dBCsBkvVwVCgc2wQucL kXtEm22X8kZTAZ2ovM6wa5IXU5SKigHZEjt4QdCzPqvYn4TB1RBqU1auhBfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0YHKfEz6b4qxnSRLiEhM+lNrTcgwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7iGUaxRlmRI7M0EsAdPRpKwOliJwXYdfDY 3goGP7he6uQDPKfZYy70WT0+tsZ2WyY+8lh63fHt9kMbr2veZQiMebYEGJbG3y1M IbnU60vUf1zlW2StLdsYq9mSID5Id75XqDrhRK/qRf9mkfWDQojtJTYQumD5VzuB K3s1GWAx8zZuuZZ0h0cA4xaJwJO4diqrQLXCLJ/1DLm98djcbSluAAsCbcqR1073 obijVTKUDfdaeYeRbk26WcPwDGfAmbKGvD75yxk2I13fxi6j76WMmv5JPJo2a3l/ ALP/vutYZwBhAIILHAZRzL/GDZPRQG9escrHQQfKS3Ymgm81zKk= -----END CERTIFICATE-----Generated at Mon Jun 16 12:32:11 2025 by rpki-client