$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: 8adU37QduWtFuJaYH6CFlLQf5GhohvHMawzxNqOlaXU= Subject key identifier: C3:DA:5D:56:9B:CE:C9:97:93:9A:48:DE:F8:C8:60:35:90:D4:B3:60 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 63D907E9C654273BDC2060FCA2116EAB47D3F7E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 04CA Signing time: Fri 25 Apr 2025 21:30:34 +0000 Manifest this update: Fri 25 Apr 2025 21:25:34 +0000 Manifest next update: Tue 29 Apr 2025 01:56:34 +0000 Files and hashes: 1: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: 0Ce6za3QnsPXRb9+CdCgl3j8dKmr9XN9bvAKigaMcvY=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: s19IDj9mMJ0lErBIJsliZ5CjEuGnp4A/oBPXh9EeGJ0=) 3: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: RzpF8tFy62QFxO5rx50rJvqckeHeBS/lfFxDrWgg/Gw=) 4: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: Maowy9ZefjHDMfvujJn0ro1tBo40XSiT/nD665jrUOE=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: Dshq7FLG/8IwFv2djPDoFCF11ZS5aruhkwaXf8oFx88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 01:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d9:07:e9:c6:54:27:3b:dc:20:60:fc:a2:11:6e:ab:47:d3:f7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Apr 25 21:25:34 2025 GMT Not After : Apr 29 01:56:34 2025 GMT Subject: CN=C3DA5D569BCEC997939A48DEF8C8603590D4B360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:d9:07:7d:e6:8b:ef:71:f5:8a:bb:b0:f5: d5:34:97:be:ce:f7:70:55:62:91:80:c1:e8:6d:c2: 66:54:47:b7:db:a6:ec:08:14:a7:8a:3d:47:cf:c5: 0c:0a:71:ff:c6:81:e1:e8:33:d1:ac:77:92:24:14: 55:87:77:bd:8f:31:ed:9c:00:11:1e:be:ac:60:b6: 89:02:bf:9d:25:fc:45:2f:52:fa:c9:1d:e9:66:9d: b1:74:d8:2b:d1:ed:8b:17:58:69:5c:36:c6:23:48: 63:19:0b:ff:cd:1c:d2:00:06:c6:ae:de:aa:a5:fe: 6a:f4:ec:55:7c:56:06:4d:d4:9d:41:41:41:e3:b2: b1:1c:e6:26:8d:bc:d8:76:f5:9a:51:b3:33:e2:82: 63:f1:4c:a0:a8:cb:cb:58:5d:76:f3:16:e7:66:ee: 9c:f6:3c:76:8a:71:0a:e5:09:f5:7a:ff:aa:46:ce: 5a:49:ad:94:75:e1:ac:a0:a0:9d:49:04:58:f8:04: 4c:b8:90:2e:f3:3b:4c:eb:f5:7c:c5:f6:2e:33:ec: e0:97:39:e8:3e:40:fe:38:1e:ae:81:5c:b9:5d:db: 12:f6:d5:57:5b:b5:74:d3:a8:8f:3e:76:9a:d7:09: 33:50:b3:14:f2:24:46:79:f9:c3:1f:26:62:4a:c3: 4a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DA:5D:56:9B:CE:C9:97:93:9A:48:DE:F8:C8:60:35:90:D4:B3:60 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:00:c8:bc:b7:b7:72:89:d8:6d:3b:f0:83:89:cc:c4:f5:8c: 33:8c:0d:4a:4a:b1:9b:a7:19:f8:be:ec:5f:9d:57:ae:02:3c: de:e6:d6:f9:42:e7:76:1f:62:73:47:f2:98:81:cc:96:67:0b: 98:d0:5b:58:ca:9f:a3:6b:e1:c2:68:58:15:80:68:b0:3e:6c: 0e:93:df:4e:ec:b0:28:c7:bf:66:af:cf:3f:86:40:21:26:a6: 69:0d:4e:3e:da:2e:e6:a8:32:24:ad:3d:64:a0:10:5f:8e:30: 64:1f:fa:82:fa:ef:9f:cb:e6:9a:ee:0a:6c:f7:32:9a:27:3f: 35:31:3f:0a:71:ba:49:7f:3d:bf:7c:6c:e4:7e:8e:54:6a:90: 21:50:89:08:ef:a1:4e:32:15:7e:17:c8:ed:fc:52:04:bb:f3: a6:2a:4c:e8:23:58:7d:4c:e7:fe:54:3c:54:07:dc:d9:2d:d1: bf:b6:90:86:4d:4a:8a:11:01:26:58:1a:7f:15:50:fd:71:6e: c4:8e:bd:17:ce:e3:8c:c8:32:7a:d8:94:ca:c4:c3:d8:91:d3: 67:e1:f6:49:1c:67:52:c9:23:50:fc:b5:ae:1d:5d:91:10:31: 23:fb:bd:e2:76:e7:b0:bc:55:11:b1:c1:f7:72:14:27:95:8b: c1:5a:67:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9kH6cZUJzvcIGD8ohFuq0fT9+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTA0MjUyMTI1MzRaFw0yNTA0MjkwMTU2MzRaMDMxMTAvBgNV BAMTKEMzREE1RDU2OUJDRUM5OTc5MzlBNDhERUY4Qzg2MDM1OTBENEIzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCom9kHfeaL73H1iruw9dU0l77O 93BVYpGAwehtwmZUR7fbpuwIFKeKPUfPxQwKcf/GgeHoM9Gsd5IkFFWHd72PMe2c ABEevqxgtokCv50l/EUvUvrJHelmnbF02CvR7YsXWGlcNsYjSGMZC//NHNIABsau 3qql/mr07FV8VgZN1J1BQUHjsrEc5iaNvNh29ZpRszPigmPxTKCoy8tYXXbzFudm 7pz2PHaKcQrlCfV6/6pGzlpJrZR14aygoJ1JBFj4BEy4kC7zO0zr9XzF9i4z7OCX Oeg+QP44Hq6BXLld2xL21VdbtXTTqI8+dprXCTNQsxTyJEZ5+cMfJmJKw0r5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw9pdVpvOyZeTmkje+MhgNZDUs2AwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8AyLy3t3KJ2G078IOJzMT1jDOMDUpKsZun Gfi+7F+dV64CPN7m1vlC53YfYnNH8piBzJZnC5jQW1jKn6Nr4cJoWBWAaLA+bA6T 307ssCjHv2avzz+GQCEmpmkNTj7aLuaoMiStPWSgEF+OMGQf+oL675/L5pruCmz3 MponPzUxPwpxukl/Pb98bOR+jlRqkCFQiQjvoU4yFX4XyO38UgS786YqTOgjWH1M 5/5UPFQH3Nkt0b+2kIZNSooRASZYGn8VUP1xbsSOvRfO44zIMnrYlMrEw9iR02fh 9kkcZ1LJI1D8ta4dXZEQMSP7veJ257C8VRGxwfdyFCeVi8FaZ7U= -----END CERTIFICATE-----Generated at Mon Apr 28 01:56:52 2025 by rpki-client