$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: 3vQ825xA0GodH6JrEtkwGg+hOT+EubItBJH0RbgroAM= Subject key identifier: 88:F9:56:AE:3B:16:11:28:53:AB:13:DD:57:1D:02:5D:25:82:99:2E Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 08457F1AE3270F5E265009585FD82B5A979CC2B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 01B8 Signing time: Sat 26 Apr 2025 14:01:56 +0000 Manifest this update: Sat 26 Apr 2025 13:56:56 +0000 Manifest next update: Tue 29 Apr 2025 18:49:56 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: OtR5QDPiIlOE8R6tAVQNMwDez94T84Oy3nqMNKHUt/s=) 2: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: qlmvtDjfIunJcMoH2vCHbVtacKOgPyoQOrPUxE/P/dQ=) 3: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: r4qCVyd3k26szOGZkVLoPrnQYgvd4y2QFV5EAdd6F0w=) 4: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: r8z7bDbjNyHi7VzYSSCbno+5xl3u6VN0WnpOY+FTh0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 18:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:45:7f:1a:e3:27:0f:5e:26:50:09:58:5f:d8:2b:5a:97:9c:c2:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Apr 26 13:56:56 2025 GMT Not After : Apr 29 18:49:56 2025 GMT Subject: CN=88F956AE3B16112853AB13DD571D025D2582992E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:19:94:b1:f1:1e:33:64:98:00:82:c4:19: 18:43:fa:a5:9b:0f:5a:a4:d2:45:71:2a:9d:f4:c5: 22:da:cb:cf:c1:51:97:7f:f5:c8:48:e5:c1:b5:6e: 11:bc:8f:66:04:b9:fd:f3:8f:85:76:b3:7c:5f:c5: a7:d6:21:33:95:75:7e:ab:81:e9:09:f5:e2:41:67: 0f:9f:4c:20:32:d2:df:b8:f6:d3:78:b8:41:17:29: d9:62:0d:d5:40:26:6e:c6:73:2b:2e:c1:b9:1d:e0: 7c:1f:1f:10:e5:74:a8:0f:2c:f7:a2:00:e4:6c:74: 71:c6:89:99:fe:e0:03:2b:58:f9:41:4d:bf:1b:71: 68:0d:8d:01:65:0b:6d:5f:5d:1d:b2:dd:36:45:5c: a2:02:02:21:40:03:df:79:c8:85:61:87:3c:5d:bb: 11:ac:2b:0a:9a:b8:f1:8f:4f:59:76:65:20:87:d6: 6f:5b:ec:3b:1d:82:ef:92:0c:78:d7:e1:f3:12:23: 1e:d0:b7:ea:81:0f:88:dd:d5:0f:e0:14:37:3a:ae: 51:64:ff:dd:db:5e:e1:4a:2b:21:c4:83:36:75:cb: 89:be:41:cf:eb:57:ce:24:77:29:31:bc:61:60:d6: 15:ea:8c:4e:d2:ff:37:bf:d2:dc:f8:cb:82:b9:81: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F9:56:AE:3B:16:11:28:53:AB:13:DD:57:1D:02:5D:25:82:99:2E X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:86:90:bb:e7:90:94:80:db:ce:34:38:bc:71:a7:dd:b7:43: 32:48:cd:4f:d5:36:90:14:81:35:b4:4a:7f:77:57:59:16:a0: f8:45:9b:b0:7e:48:2e:99:b8:90:25:47:e5:ed:8b:be:67:b0: 90:2f:27:5f:07:86:4e:aa:5a:e8:b4:c9:86:7d:42:dd:8c:43: 51:ed:34:16:ea:37:ac:3f:2a:87:c1:af:fc:6f:9a:8a:4a:bb: 53:d3:31:2c:64:74:52:3a:3c:45:f7:c3:4b:66:a8:f0:95:c5: 55:64:bc:5b:43:6d:41:e1:35:37:e3:f4:97:b8:db:0d:69:b0: 44:1d:94:51:8a:f7:c8:b9:f8:da:9b:f5:d9:c7:79:67:88:6c: 50:fe:69:dc:f8:5a:c1:21:cf:1f:08:8f:ea:b3:f8:6b:80:bb: 5f:de:f9:ce:e3:1d:41:ff:10:b9:86:5f:d4:21:34:a8:9b:15: 55:a5:d8:1e:27:2b:8f:45:c0:70:aa:85:0c:9d:18:3e:73:d4: c0:16:6c:bf:31:e9:7d:92:1c:02:0f:80:53:ec:4a:2c:04:b3: 18:ed:27:be:4a:5d:90:1a:53:d2:b1:24:f7:53:fb:ad:bd:a8: e7:05:f9:7d:5a:44:cd:20:cb:7e:1e:5e:fe:94:fe:f1:6e:49: dc:3c:22:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEV/GuMnD14mUAlYX9grWpecwrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTA0MjYxMzU2NTZaFw0yNTA0MjkxODQ5NTZaMDMxMTAvBgNV BAMTKDg4Rjk1NkFFM0IxNjExMjg1M0FCMTNERDU3MUQwMjVEMjU4Mjk5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRihmUsfEeM2SYAILEGRhD+qWb D1qk0kVxKp30xSLay8/BUZd/9chI5cG1bhG8j2YEuf3zj4V2s3xfxafWITOVdX6r gekJ9eJBZw+fTCAy0t+49tN4uEEXKdliDdVAJm7Gcysuwbkd4HwfHxDldKgPLPei AORsdHHGiZn+4AMrWPlBTb8bcWgNjQFlC21fXR2y3TZFXKICAiFAA995yIVhhzxd uxGsKwqauPGPT1l2ZSCH1m9b7Dsdgu+SDHjX4fMSIx7Qt+qBD4jd1Q/gFDc6rlFk /93bXuFKKyHEgzZ1y4m+Qc/rV84kdykxvGFg1hXqjE7S/ze/0tz4y4K5gU5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiPlWrjsWEShTqxPdVx0CXSWCmS4wHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGGkLvnkJSA2840OLxxp923QzJIzU/VNpAU gTW0Sn93V1kWoPhFm7B+SC6ZuJAlR+Xti75nsJAvJ18Hhk6qWui0yYZ9Qt2MQ1Ht NBbqN6w/KofBr/xvmopKu1PTMSxkdFI6PEX3w0tmqPCVxVVkvFtDbUHhNTfj9Je4 2w1psEQdlFGK98i5+Nqb9dnHeWeIbFD+adz4WsEhzx8Ij+qz+GuAu1/e+c7jHUH/ ELmGX9QhNKibFVWl2B4nK49FwHCqhQydGD5z1MAWbL8x6X2SHAIPgFPsSiwEsxjt J75KXZAaU9KxJPdT+629qOcF+X1aRM0gy34eXv6U/vFuSdw8Ip8= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:08 2025 by rpki-client