$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json) Hash identifier: d2t+1XTi3JiwLJtOVOgmpGf1XAgVbGOT/aQTq9r5+2U= Subject key identifier: 90:0E:54:7F:5B:80:AF:4B:E3:4A:BE:0D:B2:5B:EF:B6:84:C2:8F:0C Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 797D4D6E56DEC2D2BBE46AD86C38E8BD1E606D62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft Manifest number: C1 Signing time: Tue 17 Jun 2025 10:02:16 +0000 Manifest this update: Tue 17 Jun 2025 09:57:16 +0000 Manifest next update: Fri 20 Jun 2025 10:55:16 +0000 Files and hashes: 1: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: Hv2jdXQUlOnlnToQUuoVlZDHe+biYftXfxb3LM1GOc0=) 2: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: db2ZBDbPQBZ+1fLhUcrVMNSFZdZMKLIQU1qfyXpKY5M=) 3: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: azmIwktH3vpajsF8gQt8znOMbH0C7Vn9MDVUjZva6CY=) 4: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: EV9DFisiiygvSyZKF0tZ0Lxf1X12CCisGawptespLsI=) 5: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: K3szfbfpta/c7DEa6+TwyT40lOKn2JoSra28rT1Xy/0=) 6: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jVBeyFMPWkiATlRCTVFrCw8EykcpuEgYVgn4T3UPT6M=) 7: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: Csz/yUZ7Lzvn/nuu4THB9U+el9Pek+D7VdsMj61HX6w=) 8: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: cpQ+yGOPRMcycDguY5pOMH22P4g6dN/h+7VVRFd0gvs=) 9: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: ldyK2huQ95pUCINHnT0U5z7ALHHC4dFAFsmJktUnRJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 10:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7d:4d:6e:56:de:c2:d2:bb:e4:6a:d8:6c:38:e8:bd:1e:60:6d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Jun 17 09:57:16 2025 GMT Not After : Jun 20 10:55:16 2025 GMT Subject: CN=900E547F5B80AF4BE34ABE0DB25BEFB684C28F0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:0e:18:20:4b:9e:a0:9b:fc:db:8c:95:2b: 34:a1:53:1b:bf:41:81:98:67:23:a7:4d:96:f4:71: 5a:fe:c7:10:76:97:8f:87:6d:04:13:d0:d6:6d:45: a5:be:21:57:f0:f1:19:ea:84:68:20:ab:04:79:09: 08:f2:dc:97:42:01:86:11:85:a3:49:09:c8:8f:d4: 5a:bc:f3:b2:6f:df:99:a5:04:2a:d4:bf:fd:d2:7a: c9:d3:30:0e:33:fc:3d:31:93:90:90:bc:5e:33:c7: 59:dd:85:a2:9c:ad:4b:41:6d:ed:23:61:ac:d6:c9: 02:b7:a2:78:11:dd:6b:1d:67:ba:b0:c8:e2:e9:d4: a7:4a:87:f4:b6:30:dd:fd:50:1c:6d:2e:5f:18:a8: d4:a6:04:77:ed:a8:f7:d7:59:22:09:6e:91:02:73: a7:cd:5c:48:1c:5b:63:ed:55:9c:c5:5a:8e:7a:0c: f5:97:b5:17:f8:5f:20:52:20:fc:9a:45:43:a1:da: 9a:da:e4:23:b7:3c:71:a0:b1:ca:ca:e5:28:b1:2f: 47:ad:10:19:0e:d0:40:a4:18:17:72:6b:c3:fb:cd: 03:c5:eb:65:28:51:2d:e2:fe:a9:46:09:23:17:77: 95:ea:a7:02:1b:48:03:93:aa:a4:cd:1a:f5:bf:22: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0E:54:7F:5B:80:AF:4B:E3:4A:BE:0D:B2:5B:EF:B6:84:C2:8F:0C X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c3:54:de:da:0a:bd:42:fb:54:b8:fb:47:fd:09:2c:99:d9: cd:4c:20:35:5c:3f:4d:c2:1a:5e:99:b2:53:9c:10:b4:dc:6e: fd:ae:36:4c:da:c6:aa:ef:98:f5:d1:72:75:84:58:89:fb:01: 04:d3:88:e8:86:1e:bc:22:5c:46:e3:c9:ad:5e:87:f6:c9:85: 24:6a:e4:9b:0f:fc:b5:10:0c:1f:5e:af:b8:20:73:07:35:84: d5:64:b6:30:cc:98:da:82:b3:94:bc:63:28:0d:7c:2a:86:34: 61:be:8e:a6:86:99:08:53:bb:23:05:cc:84:e5:ac:14:8c:5c: 16:62:b6:a8:76:a7:9b:30:26:be:30:30:a4:99:5f:1a:3a:62: 89:96:46:bf:26:5d:9e:44:41:f1:96:84:0f:ca:e8:4b:82:cc: 6b:9d:2d:fd:a8:84:b3:2a:ee:10:7b:ad:cb:c4:a3:fc:1e:62: 2e:91:ba:6b:0b:99:81:5b:57:25:a4:c4:a9:77:45:94:66:5b: 8e:d8:2a:b1:e0:95:bd:32:04:2b:4e:61:a3:34:59:c1:04:d7: 0b:e1:02:7a:f0:df:b5:6e:63:7c:bc:4a:1a:f8:ba:3c:5c:ac: 65:4e:41:9f:9b:08:23:65:e0:a2:db:6f:26:fd:1f:d0:56:f7: 9b:ea:94:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeX1NblbewtK75GrYbDjovR5gbWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNTA2MTcwOTU3MTZaFw0yNTA2MjAxMDU1MTZaMDMxMTAvBgNV BAMTKDkwMEU1NDdGNUI4MEFGNEJFMzRBQkUwREIyNUJFRkI2ODRDMjhGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGQ4YIEueoJv824yVKzShUxu/ QYGYZyOnTZb0cVr+xxB2l4+HbQQT0NZtRaW+IVfw8RnqhGggqwR5CQjy3JdCAYYR haNJCciP1Fq887Jv35mlBCrUv/3SesnTMA4z/D0xk5CQvF4zx1ndhaKcrUtBbe0j YazWyQK3ongR3WsdZ7qwyOLp1KdKh/S2MN39UBxtLl8YqNSmBHftqPfXWSIJbpEC c6fNXEgcW2PtVZzFWo56DPWXtRf4XyBSIPyaRUOh2pra5CO3PHGgscrK5SixL0et EBkO0ECkGBdya8P7zQPF62UoUS3i/qlGCSMXd5XqpwIbSAOTqqTNGvW/IqYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkA5Uf1uAr0vjSr4NslvvtoTCjwwwHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUx RDc0Q0MyODE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXDVN7aCr1C+1S4+0f9CSyZ2c1MIDVcP03C Gl6ZslOcELTcbv2uNkzaxqrvmPXRcnWEWIn7AQTTiOiGHrwiXEbjya1eh/bJhSRq 5JsP/LUQDB9er7ggcwc1hNVktjDMmNqCs5S8YygNfCqGNGG+jqaGmQhTuyMFzITl rBSMXBZitqh2p5swJr4wMKSZXxo6YomWRr8mXZ5EQfGWhA/K6EuCzGudLf2ohLMq 7hB7rcvEo/weYi6RumsLmYFbVyWkxKl3RZRmW47YKrHglb0yBCtOYaM0WcEE1wvh Anrw37VuY3y8Shr4ujxcrGVOQZ+bCCNl4KLbbyb9H9BW95vqlN8= -----END CERTIFICATE-----Generated at Wed Jun 18 05:35:34 2025 by rpki-client