$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft File: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json) Hash identifier: q2iBYZ+Y1Y8VBMqAATvvt59mf8nWAWVmjAIpfPd0bH4= Subject key identifier: 5A:78:93:15:72:E1:72:22:D9:E5:88:11:13:29:A3:86:7A:E5:EE:50 Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 4BFD5FEA6CF412D59A29291B0D2C4B282421EF56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft Manifest number: 01D2 Signing time: Sat 14 Jun 2025 19:10:02 +0000 Manifest this update: Sat 14 Jun 2025 19:05:02 +0000 Manifest next update: Wed 18 Jun 2025 05:53:02 +0000 Files and hashes: 1: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: D6xVrarR741Tat/B/aD4Gr/765oFGk3PkG8sC2eJZzQ=) 2: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: u4NoFqVyyFqHI8VrRJJU5o8UKOJMJykYNFUtpxCJD/Y=) 3: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: hK06HKoqFlnupfPGbH4fj+kvbHmFb9y+Qhw58DcH1q0=) 4: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: fKyStuZP+cGYGL12Gl7DPoMVPGekA2LHOpNgfBK7K54=) 5: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: VpjDP2oZ/B1yei8Hfwo7pH5vGmOKYQBwxJOGVD0RFQE=) 6: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: j+Zw4PYXsDm3FCW4gxkOm57vE+hfChSUWekJOHoPpLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fd:5f:ea:6c:f4:12:d5:9a:29:29:1b:0d:2c:4b:28:24:21:ef:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Jun 14 19:05:02 2025 GMT Not After : Jun 18 05:53:02 2025 GMT Subject: CN=5A78931572E17222D9E588111329A3867AE5EE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:4f:e9:f2:fc:f6:fb:2a:ee:1e:67:f9:31: ca:1a:11:5f:b5:f4:57:23:3b:07:09:d2:96:33:82: ce:20:62:68:64:fa:1e:25:46:3d:8f:83:ed:1c:cc: 6e:5d:36:26:e8:6c:74:95:78:0a:89:a3:e6:81:02: eb:ed:e8:8b:d9:93:51:a4:d5:3c:1d:fe:7d:0e:4c: 0a:1a:c1:c1:1a:f2:91:db:f2:33:30:6c:f6:fd:5a: 6f:96:0c:00:69:ad:10:58:a6:bc:1d:3f:10:dd:9e: 36:eb:3c:88:58:59:a7:72:e7:15:b0:d2:37:4d:39: 5b:bb:48:85:37:8a:7a:a7:18:03:b1:62:2c:e6:4e: ce:d6:fd:e3:be:18:bb:30:17:04:59:7a:89:61:2a: 65:ba:5c:81:39:9d:a8:a4:d2:0f:1d:30:52:6f:c5: d8:bb:d1:87:05:bc:84:45:7c:b7:2f:14:99:f1:71: db:9d:93:cb:2c:c6:99:4d:4f:42:57:b0:0a:c4:68: 19:b2:8c:98:95:79:21:76:e6:00:45:97:42:57:7d: fd:84:6b:b5:f1:f5:22:76:9b:36:5f:91:3e:29:67: 5d:c6:44:f0:94:c9:df:46:90:c1:8e:f6:a2:9c:70: 5a:3c:d0:83:fe:d6:a3:4c:77:9c:17:3e:0a:b5:15: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:78:93:15:72:E1:72:22:D9:E5:88:11:13:29:A3:86:7A:E5:EE:50 X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:61:05:13:c0:db:72:f6:e0:c8:18:52:3a:73:f1:37:3e:9e: 5a:81:02:c4:ee:23:83:44:cf:1a:7e:3c:c8:ff:e8:a8:b6:44: 2b:62:b9:13:77:9a:57:18:82:c9:c6:4a:1d:b4:97:ef:f6:6b: c7:43:eb:27:98:91:2e:ef:d4:92:f7:7a:f8:0a:90:16:9d:35: a9:ea:da:c7:77:1b:af:41:8d:ab:3c:1b:fa:41:75:a1:88:3f: f4:e1:ae:bb:34:e4:d5:33:a1:5c:b8:9a:57:2f:e0:53:63:f2: d5:f1:eb:37:a1:b0:3a:7c:ac:f2:f6:e4:3b:45:c0:da:32:1a: 78:2a:40:e0:bb:33:f7:f3:ad:7d:b7:c6:0e:b8:d7:1a:94:10: b0:1d:49:14:c8:ba:88:58:89:52:24:5b:50:d9:72:13:6e:cb: d4:51:28:9b:76:04:c7:4c:9b:45:a3:73:20:fa:88:50:a4:7d: 0f:76:3a:01:84:fe:c9:a2:09:6e:54:d8:06:54:62:84:9d:63: f4:d3:49:10:74:b0:a7:38:31:82:cd:37:24:64:4c:c9:8b:53: 1e:e1:c4:89:c4:8f:95:07:cc:3d:29:ee:96:45:70:70:ef:42: ec:a2:46:e4:3b:07:20:9e:d6:30:58:f4:84:42:77:18:66:9b: 4b:12:e5:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/1f6mz0EtWaKSkbDSxLKCQh71YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNTA2MTQxOTA1MDJaFw0yNTA2MTgwNTUzMDJaMDMxMTAvBgNV BAMTKDVBNzg5MzE1NzJFMTcyMjJEOUU1ODgxMTEzMjlBMzg2N0FFNUVFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIk/p8vz2+yruHmf5McoaEV+1 9FcjOwcJ0pYzgs4gYmhk+h4lRj2Pg+0czG5dNibobHSVeAqJo+aBAuvt6IvZk1Gk 1Twd/n0OTAoawcEa8pHb8jMwbPb9Wm+WDABprRBYprwdPxDdnjbrPIhYWady5xWw 0jdNOVu7SIU3inqnGAOxYizmTs7W/eO+GLswFwRZeolhKmW6XIE5naik0g8dMFJv xdi70YcFvIRFfLcvFJnxcdudk8ssxplNT0JXsArEaBmyjJiVeSF25gBFl0JXff2E a7Xx9SJ2mzZfkT4pZ13GRPCUyd9GkMGO9qKccFo80IP+1qNMd5wXPgq1FQVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWniTFXLhciLZ5YgREymjhnrl7lAwHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkND NjcyN0Q2RTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJhBRPA23L24MgYUjpz8Tc+nlqBAsTuI4NE zxp+PMj/6Ki2RCtiuRN3mlcYgsnGSh20l+/2a8dD6yeYkS7v1JL3evgKkBadNanq 2sd3G69Bjas8G/pBdaGIP/Thrrs05NUzoVy4mlcv4FNj8tXx6zehsDp8rPL25DtF wNoyGngqQOC7M/fzrX23xg641xqUELAdSRTIuohYiVIkW1DZchNuy9RRKJt2BMdM m0WjcyD6iFCkfQ92OgGE/smiCW5U2AZUYoSdY/TTSRB0sKc4MYLNNyRkTMmLUx7h xInEj5UHzD0p7pZFcHDvQuyiRuQ7ByCe1jBY9IRCdxhmm0sS5aw= -----END CERTIFICATE-----Generated at Mon Jun 16 04:31:27 2025 by rpki-client