$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft File: 3D93688202931D72322A7EE0053964A2DD8EB457.mft (raw, json) Hash identifier: 6BvtEDc3iQk6m3SSlqHSfMSNLLMy7B+VIpK4JHPzOEU= Subject key identifier: A5:94:5C:8B:92:BE:5A:27:1E:B6:35:77:0B:6A:C9:D7:19:4B:07:57 Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457 Certificate serial: 3C195393EA3E7CEEA05D32E6BF3E8220EE91E341 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft Manifest number: 020F Signing time: Sun 15 Jun 2025 19:42:29 +0000 Manifest this update: Sun 15 Jun 2025 19:37:29 +0000 Manifest next update: Thu 19 Jun 2025 05:54:29 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: DkL978cCjpD0PQ0XgknN+Mz9vJLe59QDx419VcnHPIA=) 2: 3D93688202931D72322A7EE0053964A2DD8EB457.crl (hash: UPoT21s1LM1kT4oKID6HNYDiXEkk743OGBozWVVoe74=) 3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: eaULz+kMsRSSqy6h3V303twAaR4RcVJjEt3EXFQ5l2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 05:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:19:53:93:ea:3e:7c:ee:a0:5d:32:e6:bf:3e:82:20:ee:91:e3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457 Validity Not Before: Jun 15 19:37:29 2025 GMT Not After : Jun 19 05:54:29 2025 GMT Subject: CN=A5945C8B92BE5A271EB635770B6AC9D7194B0757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:24:8d:40:f1:9e:92:94:b2:71:41:12:96: 98:03:ec:a3:e5:48:50:50:d7:61:fb:ea:57:76:63: bd:7d:42:e3:36:0a:7d:d9:08:a4:df:a8:60:95:8e: 34:43:56:4e:3f:5a:a3:f3:d4:4d:26:f4:d4:c7:eb: a9:21:d4:b0:fc:83:1d:4a:21:6f:04:84:26:e2:c7: 32:4e:fe:41:c3:b3:21:08:02:b1:a6:7c:76:c2:1b: 2e:aa:6c:8e:5f:54:5f:43:6b:02:3b:2e:01:2c:fb: 72:07:41:29:0e:cd:dd:38:54:b4:39:1d:9b:04:15: ec:e5:f7:9a:ce:2d:b0:9a:0d:56:d1:e9:b0:51:f2: c0:0e:5a:1b:81:6e:7c:15:78:76:78:bf:f7:c8:bb: a2:a3:6a:61:58:fc:e6:af:c6:a8:a1:ce:b6:ba:f5: 06:52:17:e7:d2:22:f7:cb:6e:9f:c7:f4:b5:c6:ef: f7:bb:36:f9:39:69:ec:a6:3a:25:c3:5a:7f:70:39: 22:26:56:49:da:66:53:0e:99:40:5a:fe:bb:50:fe: 67:21:2c:fc:2f:bc:35:aa:28:72:53:18:70:21:fa: cf:9c:d2:ff:d7:d8:93:6d:2d:9e:3c:a4:06:ac:9b: 44:ab:13:ba:10:da:c5:1e:c6:80:67:3b:31:46:66: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:94:5C:8B:92:BE:5A:27:1E:B6:35:77:0B:6A:C9:D7:19:4B:07:57 X509v3 Authority Key Identifier: keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1e:0b:13:db:f4:bc:31:e6:66:32:23:d4:a4:02:57:f5:2e: 28:62:6e:1c:7e:d9:a4:95:4d:13:64:f2:7f:97:ac:c4:d0:0e: e3:a8:dd:c9:e0:d9:5b:e5:c8:d7:69:42:1e:b4:da:7e:73:f1: 69:fa:51:08:ea:3d:95:15:a6:a7:44:76:47:9f:b0:ed:9c:c8: 31:14:75:73:99:5f:63:0a:a0:e9:5d:cc:c5:f5:b7:65:88:9b: e2:4e:aa:81:9f:94:40:6f:b6:b4:95:29:e1:8e:cd:a0:54:0d: 59:f9:d9:87:6f:d7:f1:41:f6:94:c8:f6:c6:7e:8f:b9:c9:df: 7b:61:67:aa:8d:13:49:1f:a8:3a:9c:e0:91:a9:e1:fa:72:05: 0f:44:6a:cd:e2:14:ed:76:10:1b:ce:79:0a:c3:98:11:8f:d7: b5:4a:22:7a:4d:b2:4c:da:ba:81:fc:37:d8:1c:d0:e2:0a:9a: 8b:09:82:69:ac:89:a2:49:f4:7d:6e:9b:8f:5e:fb:51:fb:39: b5:cf:9b:20:a9:42:be:d5:4a:34:d0:91:4b:ae:22:ec:ac:f2: 51:65:70:a9:8b:ad:3d:d9:39:d3:cd:6b:1b:b9:f3:af:c7:96: 10:7d:74:74:49:28:3f:12:4b:15:66:55:00:b9:5d:d4:9c:ee: 1d:08:a2:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBlTk+o+fO6gXTLmvz6CIO6R40EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE RDhFQjQ1NzAeFw0yNTA2MTUxOTM3MjlaFw0yNTA2MTkwNTU0MjlaMDMxMTAvBgNV BAMTKEE1OTQ1QzhCOTJCRTVBMjcxRUI2MzU3NzBCNkFDOUQ3MTk0QjA3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCiSNQPGekpSycUESlpgD7KPl SFBQ12H76ld2Y719QuM2Cn3ZCKTfqGCVjjRDVk4/WqPz1E0m9NTH66kh1LD8gx1K IW8EhCbixzJO/kHDsyEIArGmfHbCGy6qbI5fVF9DawI7LgEs+3IHQSkOzd04VLQ5 HZsEFezl95rOLbCaDVbR6bBR8sAOWhuBbnwVeHZ4v/fIu6KjamFY/Oavxqihzra6 9QZSF+fSIvfLbp/H9LXG7/e7Nvk5aeymOiXDWn9wOSImVknaZlMOmUBa/rtQ/mch LPwvvDWqKHJTGHAh+s+c0v/X2JNtLZ48pAasm0SrE7oQ2sUexoBnOzFGZmxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZRci5K+WicetjV3C2rJ1xlLB1cwHwYDVR0j BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF QjQ1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0 QTJERDhFQjQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoeCxPb9Lwx5mYyI9SkAlf1Lihibhx+2aSV TRNk8n+XrMTQDuOo3cng2VvlyNdpQh602n5z8Wn6UQjqPZUVpqdEdkefsO2cyDEU dXOZX2MKoOldzMX1t2WIm+JOqoGflEBvtrSVKeGOzaBUDVn52Ydv1/FB9pTI9sZ+ j7nJ33thZ6qNE0kfqDqc4JGp4fpyBQ9Eas3iFO12EBvOeQrDmBGP17VKInpNskza uoH8N9gc0OIKmosJgmmsiaJJ9H1um49e+1H7ObXPmyCpQr7VSjTQkUuuIuys8lFl cKmLrT3ZOdPNaxu586/HlhB9dHRJKD8SSxVmVQC5XdSc7h0Ioio= -----END CERTIFICATE-----Generated at Wed Jun 18 07:27:05 2025 by rpki-client