$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: iTlK+QSjdyNFgocQXlhXzdoW7Eaww6RYPqyWoHdRQIM= Subject key identifier: 78:95:25:87:D2:A7:A9:1F:AC:F6:3C:D6:2C:5B:51:AA:53:EE:CC:4C Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 319AB6190194865FA6364F889B58FAF1E3EF0BBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 04EF Signing time: Mon 16 Jun 2025 06:52:01 +0000 Manifest this update: Mon 16 Jun 2025 06:47:01 +0000 Manifest next update: Thu 19 Jun 2025 15:17:01 +0000 Files and hashes: 1: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: bFn5Y7JpqG3baSv58HSYajbj+++aONkagR6UZgJDf70=) 2: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: E6XmK1t6H2i7DnMzin3eXEnNRLj+glllDjzpw3yQ+tE=) 3: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: f+KL9sRBKYThjcUf6Fn4ETIt2vwAYX6+xVDk6HrJGjI=) 4: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: SDpHmQWrvR6QYeGR7FQ79oyRI2YwxolyxjXNhlqbQOw=) 5: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) 6: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: ek0XY8L6RP2MkhhIdzlJcoCqbkOYFf2qcC9eCM2jGNA=) 7: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: vI68Gh5Oh59Rb2lPrZHZHoQWOjb0zjzOJoq8Na+SUkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9a:b6:19:01:94:86:5f:a6:36:4f:88:9b:58:fa:f1:e3:ef:0b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Jun 16 06:47:01 2025 GMT Not After : Jun 19 15:17:01 2025 GMT Subject: CN=78952587D2A7A91FACF63CD62C5B51AA53EECC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:ef:2e:fb:07:ef:0a:99:b5:d2:e7:4d:13: 1b:d9:00:0c:b5:4f:44:62:0c:f4:e2:85:9a:8b:d7: 43:ca:12:eb:b8:e3:f5:b6:0c:97:d9:5e:c2:d1:64: b2:de:60:8d:b4:91:27:f3:34:2a:88:03:95:78:24: ea:60:09:87:e9:94:c3:dd:0c:93:b5:95:2b:d6:7e: 2b:89:0b:63:f4:e7:03:a9:e4:ff:ad:c3:bf:6e:87: 20:82:a5:c2:18:3e:ca:bc:d1:01:77:b8:47:a2:a7: fd:e4:a0:43:1d:e2:ca:07:c9:bf:1f:cf:32:8b:aa: 3c:98:09:a0:b3:6e:22:9b:28:89:70:95:1b:30:b2: 36:c7:f5:fe:ac:99:ae:dc:52:78:a9:94:08:c4:87: f0:17:d8:10:90:ae:76:3e:6c:c7:15:f6:8b:76:2c: 01:14:e2:c5:45:c6:b7:f3:ab:63:ce:84:60:49:6f: 19:72:19:54:9e:fb:9e:12:d3:bd:e0:90:01:13:11: 03:12:02:2c:fd:e1:01:75:da:f2:82:25:2b:85:4e: a1:ee:0f:e5:ed:9f:40:bb:a5:ca:36:5e:9d:41:f5: e7:a0:c4:47:16:2f:8d:2f:80:d8:d1:50:29:2d:c3: 04:ad:f8:cc:97:27:4e:a0:f9:32:18:cf:9c:6d:b6: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:95:25:87:D2:A7:A9:1F:AC:F6:3C:D6:2C:5B:51:AA:53:EE:CC:4C X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:80:c1:7f:aa:ec:67:87:26:93:c4:1d:da:e1:16:25:04:40: b6:c9:ba:8a:aa:5a:80:37:66:95:ac:72:49:13:b4:64:dc:79: ec:dc:fa:ad:31:de:64:cf:7f:21:95:3a:52:24:67:24:86:03: ac:8b:19:7a:ba:6b:c3:df:7e:08:7f:92:5c:dc:b5:66:62:f0: 75:27:be:0b:e8:ec:eb:74:30:80:73:bf:96:52:8b:8f:6f:b3: f9:49:b8:f5:9f:54:22:76:48:62:e2:61:9b:11:4b:f4:b9:35: a3:6e:07:59:8e:a6:8e:9c:14:80:bd:fb:ae:95:f3:eb:6f:98: ea:19:be:5b:0e:1f:ab:59:f8:16:6d:4d:da:7a:ba:49:0e:52: 93:da:60:0b:22:bf:e2:62:2b:77:1f:a5:19:58:fe:90:b5:b7: 0c:53:1f:66:92:1e:b6:d5:6f:77:a9:5b:7c:ee:74:e3:98:55: 00:90:85:ba:42:09:1a:a9:cc:f9:2d:13:97:de:81:03:c7:45: db:65:39:19:66:17:51:e4:16:aa:b0:1f:ed:3a:45:fb:85:a4: 90:ad:62:99:f5:0e:e6:61:42:2c:e4:3b:ef:ac:4d:e7:7d:71: e8:9d:0c:19:02:2a:1d:a1:33:8b:c4:d4:c1:24:c4:f8:9b:3d: 88:ac:6a:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZq2GQGUhl+mNk+Im1j68ePvC7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNTA2MTYwNjQ3MDFaFw0yNTA2MTkxNTE3MDFaMDMxMTAvBgNV BAMTKDc4OTUyNTg3RDJBN0E5MUZBQ0Y2M0NENjJDNUI1MUFBNTNFRUNDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveu8u+wfvCpm10udNExvZAAy1 T0RiDPTihZqL10PKEuu44/W2DJfZXsLRZLLeYI20kSfzNCqIA5V4JOpgCYfplMPd DJO1lSvWfiuJC2P05wOp5P+tw79uhyCCpcIYPsq80QF3uEeip/3koEMd4soHyb8f zzKLqjyYCaCzbiKbKIlwlRswsjbH9f6sma7cUniplAjEh/AX2BCQrnY+bMcV9ot2 LAEU4sVFxrfzq2POhGBJbxlyGVSe+54S073gkAETEQMSAiz94QF12vKCJSuFTqHu D+Xtn0C7pco2Xp1B9eegxEcWL40vgNjRUCktwwSt+MyXJ06g+TIYz5xttvC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeJUlh9KnqR+s9jzWLFtRqlPuzEwwHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyAwX+q7GeHJpPEHdrhFiUEQLbJuoqqWoA3 ZpWsckkTtGTceezc+q0x3mTPfyGVOlIkZySGA6yLGXq6a8Pffgh/klzctWZi8HUn vgvo7Ot0MIBzv5ZSi49vs/lJuPWfVCJ2SGLiYZsRS/S5NaNuB1mOpo6cFIC9+66V 8+tvmOoZvlsOH6tZ+BZtTdp6ukkOUpPaYAsiv+JiK3cfpRlY/pC1twxTH2aSHrbV b3epW3zudOOYVQCQhbpCCRqpzPktE5fegQPHRdtlORlmF1HkFqqwH+06RfuFpJCt Ypn1DuZhQizkO++sTed9ceidDBkCKh2hM4vE1MEkxPibPYisakE= -----END CERTIFICATE-----Generated at Mon Jun 16 15:33:26 2025 by rpki-client