$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: UbkHux7rE53BC2pxa1LIeOi7z0LC6o81J8ZuBlt6620= Subject key identifier: AA:74:B1:28:3C:25:FB:07:25:5F:26:09:A9:5E:66:15:B7:B2:EA:5D Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 581EDE4D27FAB6EFC61E4954622C43555C53E33E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 01D8 Signing time: Mon 16 Jun 2025 04:40:05 +0000 Manifest this update: Mon 16 Jun 2025 04:35:05 +0000 Manifest next update: Thu 19 Jun 2025 08:40:05 +0000 Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) 2: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: VEdmJh1T4guZLQgJmhyXmRv6ZcqjlUrrkhq6jUzfQzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 08:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1e:de:4d:27:fa:b6:ef:c6:1e:49:54:62:2c:43:55:5c:53:e3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Jun 16 04:35:05 2025 GMT Not After : Jun 19 08:40:05 2025 GMT Subject: CN=AA74B1283C25FB07255F2609A95E6615B7B2EA5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:cd:13:37:9e:55:53:ca:67:d6:09:cb:0e: fd:68:3a:39:60:39:8c:c3:15:75:82:08:c8:b0:15: 32:6a:df:96:4a:0a:dc:ea:12:ea:1b:ac:f1:e1:43: 84:93:d9:c3:0a:51:37:76:66:3c:6b:64:ae:a6:63: c7:8c:31:5b:12:ec:03:28:e0:7d:53:0b:bb:5f:d4: b0:de:f9:26:fc:e5:7a:c1:5e:a1:8f:a8:f1:cc:8e: f2:d7:90:d7:c4:c0:ee:f4:92:09:01:38:26:01:3c: f7:c6:ee:51:43:17:19:57:84:7c:c8:19:92:5f:e3: 98:a4:3e:01:6f:2b:7c:1d:44:9e:e3:56:12:1e:72: b9:4c:83:d4:d7:c6:59:37:56:ef:e7:90:58:29:de: 73:7e:e5:57:56:5d:8d:ee:a5:8c:4b:bb:d4:02:8a: cb:10:15:24:c8:59:ad:23:ff:b8:d1:7f:30:02:45: df:f3:76:bf:51:b7:b9:18:a8:1d:d2:18:b9:97:9d: 08:28:67:0f:07:3e:77:79:9c:ad:77:e6:0f:d5:ba: 14:33:ee:5e:5e:9e:35:66:80:eb:5c:d7:88:ff:f8: d1:7e:3b:e6:e9:1c:96:e8:55:fa:f9:5a:91:b9:de: 38:7f:f3:44:ce:c4:56:56:14:a8:82:f4:eb:ce:45: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:74:B1:28:3C:25:FB:07:25:5F:26:09:A9:5E:66:15:B7:B2:EA:5D X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:46:14:dd:80:90:15:3c:8f:bd:59:0b:d9:74:26:d7:0b:97: 37:37:02:6f:d4:e2:4b:23:d3:8f:be:08:28:24:7d:3a:98:95: 8b:4c:3a:a3:ce:84:5a:90:82:c1:93:80:08:31:0a:11:ac:df: a9:23:cf:c1:97:b0:c1:3f:cd:f0:e1:a6:b3:67:12:f3:56:8d: 2e:e4:c5:ab:94:69:6b:da:b2:4b:06:27:d9:60:f0:a9:9e:3e: 05:bd:b8:80:de:d8:53:f6:a1:50:01:43:e7:e3:64:b7:ad:34: 8f:5b:21:8a:16:fd:47:52:e1:49:97:60:80:3f:6b:4a:5d:ae: 9a:fd:d4:cf:1a:f6:a4:65:f3:29:b3:7e:a0:0f:c9:90:9d:bb: bb:8a:1f:3a:3c:ab:69:92:97:ce:0e:36:73:6a:9e:c8:a1:67: d3:d5:ee:74:db:14:68:e5:2e:3a:a8:7f:0e:e6:bc:7f:59:4e: 1a:97:03:cc:ca:51:78:9a:91:42:0f:74:25:3b:e6:c5:f6:f6: bd:50:0d:d4:d3:f9:f5:89:2f:c2:bc:b5:85:9b:ed:64:76:5d: 82:7b:6a:a7:d2:04:e1:ca:96:de:df:dc:dc:34:31:00:57:72: 1a:7d:47:19:0c:27:06:9c:8b:47:82:0e:3a:29:00:2b:97:fa: ff:9c:cc:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWB7eTSf6tu/GHklUYixDVVxT4z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTA2MTYwNDM1MDVaFw0yNTA2MTkwODQwMDVaMDMxMTAvBgNV BAMTKEFBNzRCMTI4M0MyNUZCMDcyNTVGMjYwOUE5NUU2NjE1QjdCMkVBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ480TN55VU8pn1gnLDv1oOjlg OYzDFXWCCMiwFTJq35ZKCtzqEuobrPHhQ4ST2cMKUTd2ZjxrZK6mY8eMMVsS7AMo 4H1TC7tf1LDe+Sb85XrBXqGPqPHMjvLXkNfEwO70kgkBOCYBPPfG7lFDFxlXhHzI GZJf45ikPgFvK3wdRJ7jVhIecrlMg9TXxlk3Vu/nkFgp3nN+5VdWXY3upYxLu9QC issQFSTIWa0j/7jRfzACRd/zdr9Rt7kYqB3SGLmXnQgoZw8HPnd5nK135g/VuhQz 7l5enjVmgOtc14j/+NF+O+bpHJboVfr5WpG53jh/80TOxFZWFKiC9OvORT4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqnSxKDwl+wclXyYJqV5mFbey6l0wHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRGFN2AkBU8j71ZC9l0JtcLlzc3Am/U4ksj 04++CCgkfTqYlYtMOqPOhFqQgsGTgAgxChGs36kjz8GXsME/zfDhprNnEvNWjS7k xauUaWvasksGJ9lg8KmePgW9uIDe2FP2oVABQ+fjZLetNI9bIYoW/UdS4UmXYIA/ a0pdrpr91M8a9qRl8ymzfqAPyZCdu7uKHzo8q2mSl84ONnNqnsihZ9PV7nTbFGjl Ljqofw7mvH9ZThqXA8zKUXiakUIPdCU75sX29r1QDdTT+fWJL8K8tYWb7WR2XYJ7 aqfSBOHKlt7f3Nw0MQBXchp9RxkMJwaci0eCDjopACuX+v+czIY= -----END CERTIFICATE-----Generated at Mon Jun 16 15:37:58 2025 by rpki-client