$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: ma5nclymZJJSaISxLSvMEW2ohH5e2C7ABvVQu/ngKSI= Subject key identifier: 00:92:E6:7B:70:3A:F8:E6:76:28:E9:90:D5:CC:09:E5:EB:38:99:2B Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 3DEFD3B06190FE54D21B98D7DCC9A86622D7F6B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 01C0 Signing time: Mon 28 Apr 2025 10:50:05 +0000 Manifest this update: Mon 28 Apr 2025 10:45:05 +0000 Manifest next update: Thu 01 May 2025 11:26:05 +0000 Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e2034383030.roa (hash: 9MtyVzSA4VMwDCupiOyuohqq8njDtlZpU7JiCPF6EBI=) 2: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: 5VYrgn1zUEMmFB5PjMK8gcq3fn0Pc+poasFslffQwao=) 3: 3130332e3132302e3233332e302f32342d3234203d3e203138303539.roa (hash: 29FTCQnuC21Ap5vakoRZNLBbApxQn5AAoQOxBARKH6Q=) 4: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: RUBN01H40MliXmjpyHSRIEwKDarE2VE3C7QjHLexgXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 11:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ef:d3:b0:61:90:fe:54:d2:1b:98:d7:dc:c9:a8:66:22:d7:f6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Apr 28 10:45:05 2025 GMT Not After : May 1 11:26:05 2025 GMT Subject: CN=0092E67B703AF8E67628E990D5CC09E5EB38992B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:43:ee:2b:48:1e:cf:e8:c0:cb:51:02:32: 02:45:68:37:8d:aa:4e:24:7d:64:90:b4:a7:19:67: 38:42:58:c4:1d:e5:9e:59:bc:40:8f:d0:1b:8c:18: ed:56:11:66:eb:9d:0c:86:f0:44:44:d1:0d:09:4e: 88:e7:5d:3d:da:94:52:69:9d:8d:12:74:4b:03:01: e3:a0:8e:cd:86:bc:32:f1:a6:60:32:89:43:01:4f: a1:7e:16:8a:e8:c4:7d:ac:2e:ac:0f:d1:75:10:de: 68:87:b3:df:0d:a6:7b:7f:ff:65:0c:f0:d4:1c:a9: 23:45:45:57:fa:05:36:bf:3d:12:7c:0c:ed:77:36: 79:4e:08:61:b5:fc:03:1a:65:6b:ff:72:66:6a:97: bd:8a:c6:c0:b6:2b:94:4a:97:10:d6:48:14:db:d8: 90:3f:25:fa:f1:62:2f:56:68:cd:b4:48:f9:b8:78: a9:2a:a2:f4:8b:20:a7:62:0b:62:62:54:f1:28:50: fb:9c:78:5a:46:80:32:5a:45:c2:65:88:2c:96:d4: 43:1b:e4:74:8a:a9:4f:9a:a7:3c:89:72:03:7a:9b: 99:0a:8a:a6:65:ef:ff:2a:f8:51:d5:8c:e8:b4:e5: 16:0a:05:ba:bd:e2:5a:74:a6:7d:06:69:e6:aa:d4: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:92:E6:7B:70:3A:F8:E6:76:28:E9:90:D5:CC:09:E5:EB:38:99:2B X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:bc:4d:21:cb:34:97:64:f3:5f:61:4c:ef:4d:5e:be:ca:26: ea:be:42:70:85:78:13:25:88:aa:c3:ff:64:76:75:81:8f:01: 5a:05:f4:cb:3e:72:dc:90:49:ed:13:e5:bf:91:7d:c5:88:ce: e3:12:8f:9b:62:17:68:a7:3b:7f:08:38:00:86:41:03:09:fe: 4d:75:c1:c5:92:c2:97:cf:1a:87:0b:c1:8a:ab:29:bd:82:7b: 3e:b9:15:c8:ed:2f:36:7d:28:ce:a2:f4:c0:b0:12:b8:42:07: 03:29:27:ea:7f:7e:0b:50:3b:cd:e9:ae:f4:21:2f:22:83:33: 13:b4:e6:62:82:03:44:12:d3:27:26:6c:44:e1:2f:51:23:1f: c5:e5:a3:e2:c0:4b:ff:89:1a:7d:ef:32:bf:30:e6:54:c2:7b: ed:d1:f6:7f:4e:71:cc:0d:c3:d6:5d:ed:4b:65:cf:85:d0:97: 8b:31:9b:c7:64:78:31:7e:d9:95:f7:77:ee:d9:a8:b6:51:9d: a3:ae:f1:11:06:36:28:f0:df:ea:6e:03:20:e1:b0:bb:d2:2a: cb:d8:a4:00:0e:fb:cb:9f:ea:43:e0:f3:b6:69:ba:d1:0e:3d: 6c:fc:27:b5:78:54:6e:89:9e:95:7f:16:0f:ab:dd:33:7b:84: cc:fe:13:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPe/TsGGQ/lTSG5jX3MmoZiLX9rMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTA0MjgxMDQ1MDVaFw0yNTA1MDExMTI2MDVaMDMxMTAvBgNV BAMTKDAwOTJFNjdCNzAzQUY4RTY3NjI4RTk5MEQ1Q0MwOUU1RUIzODk5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JEPuK0gez+jAy1ECMgJFaDeN qk4kfWSQtKcZZzhCWMQd5Z5ZvECP0BuMGO1WEWbrnQyG8ERE0Q0JTojnXT3alFJp nY0SdEsDAeOgjs2GvDLxpmAyiUMBT6F+ForoxH2sLqwP0XUQ3miHs98Npnt//2UM 8NQcqSNFRVf6BTa/PRJ8DO13NnlOCGG1/AMaZWv/cmZql72KxsC2K5RKlxDWSBTb 2JA/JfrxYi9WaM20SPm4eKkqovSLIKdiC2JiVPEoUPuceFpGgDJaRcJliCyW1EMb 5HSKqU+apzyJcgN6m5kKiqZl7/8q+FHVjOi05RYKBbq94lp0pn0Gaeaq1H91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAJLme3A6+OZ2KOmQ1cwJ5es4mSswHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG8TSHLNJdk819hTO9NXr7KJuq+QnCFeBMl iKrD/2R2dYGPAVoF9Ms+ctyQSe0T5b+RfcWIzuMSj5tiF2inO38IOACGQQMJ/k11 wcWSwpfPGocLwYqrKb2Cez65FcjtLzZ9KM6i9MCwErhCBwMpJ+p/fgtQO83prvQh LyKDMxO05mKCA0QS0ycmbEThL1EjH8Xlo+LAS/+JGn3vMr8w5lTCe+3R9n9OccwN w9Zd7Utlz4XQl4sxm8dkeDF+2ZX3d+7ZqLZRnaOu8REGNijw3+puAyDhsLvSKsvY pAAO+8uf6kPg87ZputEOPWz8J7V4VG6JnpV/Fg+r3TN7hMz+EzQ= -----END CERTIFICATE-----Generated at Tue Apr 29 23:15:53 2025 by rpki-client