$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: 22Bw9La4a6P7jiRqOPw5Vs/vIrocr0c9zqRkuKWLp9k= Subject key identifier: 60:E9:59:CB:8F:9A:14:3A:6F:AE:CF:5D:26:04:76:DE:F5:00:D8:0A Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 536CFC497E7C8B18CFF69AE18C1F4777CC6F525D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 015C Signing time: Mon 16 Jun 2025 04:32:12 +0000 Manifest this update: Mon 16 Jun 2025 04:27:12 +0000 Manifest next update: Thu 19 Jun 2025 04:39:12 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: dP59sPJl1C8GmiARiCsslrYt3Kajp+I69ywfFLHtJ8s=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6c:fc:49:7e:7c:8b:18:cf:f6:9a:e1:8c:1f:47:77:cc:6f:52:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Jun 16 04:27:12 2025 GMT Not After : Jun 19 04:39:12 2025 GMT Subject: CN=60E959CB8F9A143A6FAECF5D260476DEF500D80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7d:a1:2b:1b:ec:34:99:e0:2c:ff:88:90:db: cb:6c:db:b7:5f:f0:76:30:f0:87:a5:68:76:ae:b7: dc:44:20:4e:1d:0b:43:2f:24:e7:50:7c:77:fe:69: 43:33:8e:9b:7d:56:4c:c4:58:9c:ee:99:bd:b1:9d: a2:06:f3:b8:ea:fa:d7:bd:12:f3:08:6a:83:94:8b: 35:15:0d:a4:c6:21:c3:6e:2e:e2:42:4c:fb:ec:b2: c3:a1:ad:dc:71:d1:b9:7b:69:cb:2f:99:f1:64:a9: 54:a0:53:55:fb:a0:b7:e9:c1:ef:75:ee:4c:d8:4b: 77:50:cc:90:db:52:08:c8:e5:1c:7b:e7:5b:be:30: 87:08:fa:c8:ef:d5:2d:6a:5e:96:55:c9:a2:34:93: f4:8c:78:65:47:4b:d4:9a:97:74:87:3c:1a:f9:30: 28:d4:01:05:99:6c:d2:ea:84:fc:26:0c:99:87:93: c3:0e:16:22:57:fe:ff:f9:f7:2b:df:4d:93:16:ba: 43:9d:16:59:24:06:9a:6a:95:89:ca:8b:63:16:85: 4b:52:71:70:a3:73:ea:cb:6e:bf:7f:a7:e8:74:05: ba:4d:fe:46:13:32:9c:b2:9c:cf:11:98:86:77:6f: 84:ec:cb:4a:2b:31:aa:a7:23:fa:ae:c6:2f:57:87: df:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E9:59:CB:8F:9A:14:3A:6F:AE:CF:5D:26:04:76:DE:F5:00:D8:0A X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:46:0a:a5:b3:d5:67:e2:42:47:68:01:78:bd:98:b5:f3:3c: 0d:9a:e9:1d:fb:3b:3b:cd:84:a6:fa:4b:ff:f9:99:29:d2:36: c5:a8:51:8a:1c:39:fa:59:0e:48:89:14:d7:bb:c0:01:f6:c4: d2:06:94:80:0a:4d:c7:11:31:26:68:c1:c9:1a:3e:1a:e3:77: d1:ad:97:ad:00:e1:8a:8d:90:ed:89:d5:ce:0e:25:f4:a1:05: c7:7b:20:41:76:fc:e1:9e:77:71:82:e9:03:77:12:68:79:2f: 99:f0:59:4c:3f:32:a4:2a:36:d7:b2:b1:f8:d5:b3:cc:da:26: d7:5d:c7:ba:03:09:be:f9:43:02:e9:7d:55:3e:16:f8:4f:51: 0a:35:d0:50:97:9c:62:c4:d9:0b:04:4b:e7:64:a3:1c:fd:6e: b6:1f:79:21:21:31:8e:5a:ef:86:39:06:de:75:46:c4:30:17: bf:4d:63:bb:28:ea:3f:d0:10:5b:5a:48:39:a3:6b:6a:6f:00: 22:cb:d9:7e:0c:e4:7f:6f:d4:97:7d:20:37:96:8f:32:89:bf: c3:3b:79:7a:16:b2:3f:6b:05:35:5d:5c:52:e4:06:2c:68:e3: e2:92:d8:3c:92:45:1c:c7:d3:9f:8b:81:8d:7b:04:36:71:df: e8:ae:d2:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2z8SX58ixjP9prhjB9Hd8xvUl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTA2MTYwNDI3MTJaFw0yNTA2MTkwNDM5MTJaMDMxMTAvBgNV BAMTKDYwRTk1OUNCOEY5QTE0M0E2RkFFQ0Y1RDI2MDQ3NkRFRjUwMEQ4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwfaErG+w0meAs/4iQ28ts27df 8HYw8IelaHaut9xEIE4dC0MvJOdQfHf+aUMzjpt9VkzEWJzumb2xnaIG87jq+te9 EvMIaoOUizUVDaTGIcNuLuJCTPvsssOhrdxx0bl7acsvmfFkqVSgU1X7oLfpwe91 7kzYS3dQzJDbUgjI5Rx751u+MIcI+sjv1S1qXpZVyaI0k/SMeGVHS9Sal3SHPBr5 MCjUAQWZbNLqhPwmDJmHk8MOFiJX/v/59yvfTZMWukOdFlkkBppqlYnKi2MWhUtS cXCjc+rLbr9/p+h0BbpN/kYTMpyynM8RmIZ3b4Tsy0orMaqnI/quxi9Xh9+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYOlZy4+aFDpvrs9dJgR23vUA2AowHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVGCqWz1WfiQkdoAXi9mLXzPA2a6R37OzvN hKb6S//5mSnSNsWoUYocOfpZDkiJFNe7wAH2xNIGlIAKTccRMSZowckaPhrjd9Gt l60A4YqNkO2J1c4OJfShBcd7IEF2/OGed3GC6QN3Emh5L5nwWUw/MqQqNteysfjV s8zaJtddx7oDCb75QwLpfVU+FvhPUQo10FCXnGLE2QsES+dkoxz9brYfeSEhMY5a 74Y5Bt51RsQwF79NY7so6j/QEFtaSDmja2pvACLL2X4M5H9v1Jd9IDeWjzKJv8M7 eXoWsj9rBTVdXFLkBixo4+KS2DySRRzH05+LgY17BDZx3+iu0nc= -----END CERTIFICATE-----Generated at Mon Jun 16 12:52:34 2025 by rpki-client