$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft File: 3D93688202931D72322A7EE0053964A2DD8EB457.mft (raw, json) Hash identifier: jJi9Vfa/KObzJvJJtyAFrVxfChCOJa3gfy4CH4zqvx8= Subject key identifier: 33:95:8A:50:22:D1:5F:C4:C0:88:D4:CB:C1:8F:38:C3:E0:F0:AD:96 Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457 Certificate serial: 69C9B501714E9BF48E9C53BF720554945C596740 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft Manifest number: 01FA Signing time: Mon 28 Apr 2025 17:52:15 +0000 Manifest this update: Mon 28 Apr 2025 17:47:15 +0000 Manifest next update: Fri 02 May 2025 04:49:15 +0000 Files and hashes: 1: 3D93688202931D72322A7EE0053964A2DD8EB457.crl (hash: dILJMY2xObiP3WmnqGx6QRbIDd0aosz0oIWJuofLjOQ=) 2: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: DkL978cCjpD0PQ0XgknN+Mz9vJLe59QDx419VcnHPIA=) 3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: eaULz+kMsRSSqy6h3V303twAaR4RcVJjEt3EXFQ5l2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c9:b5:01:71:4e:9b:f4:8e:9c:53:bf:72:05:54:94:5c:59:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457 Validity Not Before: Apr 28 17:47:15 2025 GMT Not After : May 2 04:49:15 2025 GMT Subject: CN=33958A5022D15FC4C088D4CBC18F38C3E0F0AD96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:93:a9:32:a4:30:aa:6b:63:3b:a7:81:8b: d4:75:4d:2a:b5:62:d7:41:57:17:7d:97:d9:7d:ba: 9c:e1:bd:a7:f0:c5:12:06:48:00:62:99:bf:5f:70: 6a:cb:ae:d2:22:a2:9b:f5:61:4c:26:ea:13:39:da: c6:78:0d:aa:5b:d0:c1:64:d6:3d:81:d8:5e:22:33: 72:26:1b:eb:e4:37:15:d5:dc:45:e9:34:e2:20:72: 9b:81:de:03:6a:96:4e:ee:de:49:6f:e6:af:43:95: 5f:ec:ba:e2:6a:c4:b9:23:eb:39:06:b3:0a:44:4d: f9:a2:ab:d3:af:7d:61:4e:b9:bb:21:5b:4a:3f:b9: 08:82:3b:d6:1e:1a:d7:f6:53:90:68:91:17:0e:14: da:55:cf:84:fa:80:0d:5e:4f:ee:26:76:cf:0b:aa: f2:08:6c:84:a9:50:f8:13:f0:71:4d:b5:45:bd:f1: ee:46:b7:07:f6:a2:24:2b:2a:f6:90:9a:7f:1f:cd: ae:42:94:7f:78:cf:d1:b3:43:4e:03:38:a5:ef:0d: 46:e8:97:30:49:56:84:bc:ab:e0:35:d1:ef:49:ab: 8d:0d:87:53:3a:82:bf:ee:65:43:59:6b:7c:b9:c1: 35:27:75:e2:55:6c:c9:bd:d0:ad:b3:a9:f0:dd:e7: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:95:8A:50:22:D1:5F:C4:C0:88:D4:CB:C1:8F:38:C3:E0:F0:AD:96 X509v3 Authority Key Identifier: keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:06:d6:3b:9f:1a:ca:72:35:40:0f:a1:06:d4:0f:82:cd:22: 98:87:c9:63:15:61:d4:28:ff:fb:9c:0e:47:e0:24:90:72:80: c1:8e:7a:aa:12:c3:0f:f7:bc:20:ad:dc:93:e3:95:f2:bc:a0: b4:16:1e:fb:7b:0d:2f:25:45:cb:da:ce:c8:95:68:f5:8d:4e: 57:b5:d2:47:58:00:93:87:22:ed:38:2a:0e:e8:cb:d7:5c:38: 2b:92:68:ba:09:05:58:76:55:7b:1e:09:bb:00:51:d9:e9:56: 13:db:75:76:f9:eb:c6:66:14:3a:86:ec:59:80:97:f1:bd:f1: 65:fa:f5:57:a2:d7:47:8e:73:ee:80:18:cd:6e:39:c8:42:79: b2:0b:16:f3:37:44:9a:e5:8f:53:cd:a3:ab:ba:93:db:2e:54: 55:f6:2a:a0:ed:2f:7f:06:98:de:b3:49:62:55:01:bb:6b:e2: b1:69:a1:aa:47:d9:3f:e7:3a:97:02:1c:8c:01:e4:83:3b:86: 49:f3:e8:9b:77:b0:75:f5:10:5f:07:55:b1:7a:5c:44:01:5e: 9f:56:5a:b6:b9:0b:77:78:33:02:02:3e:75:fa:f9:5a:96:00: 43:da:9d:aa:22:36:c4:b5:86:c0:53:27:dc:b5:0f:12:38:e6: f7:6d:62:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacm1AXFOm/SOnFO/cgVUlFxZZ0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE RDhFQjQ1NzAeFw0yNTA0MjgxNzQ3MTVaFw0yNTA1MDIwNDQ5MTVaMDMxMTAvBgNV BAMTKDMzOTU4QTUwMjJEMTVGQzRDMDg4RDRDQkMxOEYzOEMzRTBGMEFEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8pOpMqQwqmtjO6eBi9R1TSq1 YtdBVxd9l9l9upzhvafwxRIGSABimb9fcGrLrtIiopv1YUwm6hM52sZ4Dapb0MFk 1j2B2F4iM3ImG+vkNxXV3EXpNOIgcpuB3gNqlk7u3klv5q9DlV/suuJqxLkj6zkG swpETfmiq9OvfWFOubshW0o/uQiCO9YeGtf2U5BokRcOFNpVz4T6gA1eT+4mds8L qvIIbISpUPgT8HFNtUW98e5Gtwf2oiQrKvaQmn8fza5ClH94z9GzQ04DOKXvDUbo lzBJVoS8q+A10e9Jq40Nh1M6gr/uZUNZa3y5wTUndeJVbMm90K2zqfDd54KVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM5WKUCLRX8TAiNTLwY84w+DwrZYwHwYDVR0j BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF QjQ1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0 QTJERDhFQjQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwG1jufGspyNUAPoQbUD4LNIpiHyWMVYdQo //ucDkfgJJBygMGOeqoSww/3vCCt3JPjlfK8oLQWHvt7DS8lRcvazsiVaPWNTle1 0kdYAJOHIu04Kg7oy9dcOCuSaLoJBVh2VXseCbsAUdnpVhPbdXb568ZmFDqG7FmA l/G98WX69Vei10eOc+6AGM1uOchCebILFvM3RJrlj1PNo6u6k9suVFX2KqDtL38G mN6zSWJVAbtr4rFpoapH2T/nOpcCHIwB5IM7hknz6Jt3sHX1EF8HVbF6XEQBXp9W Wra5C3d4MwICPnX6+VqWAEPanaoiNsS1hsBTJ9y1DxI45vdtYjk= -----END CERTIFICATE-----Generated at Tue Apr 29 23:59:11 2025 by rpki-client