$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json) Hash identifier: cTb2Tyd7dsGTavZWehUeoWLaFNi3Gz59bpd3u9sXv7s= Subject key identifier: FE:4B:5A:E4:0E:79:8A:7E:DB:AD:D5:CC:83:28:B0:B3:97:BA:BB:B1 Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 77C4E98016ABEFCF5AB20D7A657055843AE0C2C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft Manifest number: 01A9 Signing time: Sun 15 Jun 2025 22:11:42 +0000 Manifest this update: Sun 15 Jun 2025 22:06:42 +0000 Manifest next update: Thu 19 Jun 2025 01:47:42 +0000 Files and hashes: 1: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZsYKQLKtHkVTslRdGYlW0kXwJ9gapNRm2k1uNrTnTX0=) 2: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: 6CUMW/jS1DBNjZpGAB7JSL+OZEl6dg980JngI28ia24=) 3: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: FkjuZkviekb7VaMyMmuCMchrVU1yZ527lgE1cprIhiU=) 4: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: c6BbZqskhId1bW3l6aSuRQLjcbQNOmGBaOGbC28FTXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c4:e9:80:16:ab:ef:cf:5a:b2:0d:7a:65:70:55:84:3a:e0:c2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: Jun 15 22:06:42 2025 GMT Not After : Jun 19 01:47:42 2025 GMT Subject: CN=FE4B5AE40E798A7EDBADD5CC8328B0B397BABBB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:14:af:d9:98:8b:e6:6c:3f:c0:2e:a3:db: 5a:0d:2b:07:00:2d:fc:1c:74:35:ee:db:9e:35:9b: c6:e5:79:83:63:6f:20:e2:ff:45:23:61:43:24:7a: 1a:2c:06:2b:b1:8f:8e:49:37:fd:c4:94:69:d6:a9: 64:72:47:f3:8c:5b:39:63:13:fe:46:ec:62:cb:58: 88:0d:5e:dc:6b:e2:69:66:68:1f:ca:1b:df:c3:ce: c9:f9:1e:11:a0:29:4e:58:74:7f:e8:83:8b:19:19: 81:90:60:77:d8:d8:48:6b:5c:0a:6c:0d:5e:da:30: e8:9e:55:3a:22:7e:d9:c7:d1:8d:32:fb:a4:e2:8e: 83:63:90:41:8e:6c:a8:17:a5:fd:b2:2b:d2:b6:eb: 19:71:f6:60:89:5c:79:3c:7c:0f:9f:d9:54:8a:94: da:bd:30:5b:5c:f7:32:9d:6c:ef:ea:6b:9a:0c:f1: 86:83:c7:1a:3a:d6:f4:c7:0f:01:fb:cb:40:17:d6: a0:18:86:56:99:c0:a6:ce:dd:b6:88:f9:43:34:28: 6a:3d:de:ab:ec:50:1f:d6:df:0c:1c:2e:a7:e0:27: df:c8:a1:78:ed:22:85:e9:72:0c:6a:a3:c1:1c:48: 69:91:f8:51:79:95:d4:96:f4:76:19:1a:81:6b:d5: 7f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4B:5A:E4:0E:79:8A:7E:DB:AD:D5:CC:83:28:B0:B3:97:BA:BB:B1 X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3e:c3:ed:ff:d6:73:de:2c:72:1b:4d:e1:81:84:b1:1a:80: 83:fa:3a:a1:71:cf:d0:a3:08:f9:56:a1:d3:dc:90:88:dd:2e: 63:0b:9b:14:b0:6a:0d:25:50:2b:b9:97:53:4f:9a:8f:ac:98: e9:bf:72:74:ef:15:f9:0a:92:6b:a7:63:94:08:b5:60:01:13: 18:9a:e2:23:38:12:53:89:26:39:35:ee:6b:66:eb:13:e8:20: 1e:88:84:3f:af:19:32:78:a6:d4:42:04:0e:ed:78:ff:bb:bb: 0e:cd:6c:9d:43:86:1e:85:c2:08:34:47:47:44:73:46:7f:8d: d7:cd:de:da:fd:11:e4:e2:ab:7b:b7:96:54:d0:fc:a4:f2:e6: 49:2c:d2:c3:8e:14:f4:ec:0e:88:a7:ce:c7:63:a0:b4:cd:d9: c7:15:03:f5:70:45:97:cb:e5:a5:73:38:4f:84:ef:a6:34:1b: a9:fc:0d:b6:ea:be:cd:0e:fc:d1:17:a3:bb:59:f5:63:a8:6d: 4f:5e:3c:15:39:3a:7e:cd:c3:48:12:89:17:3c:e9:72:c6:30: 3c:a4:98:09:81:07:c2:52:c3:bc:65:b9:81:bc:54:f5:cc:f9: 50:0e:f4:74:f9:13:85:93:7c:02:f0:b6:3f:03:68:44:21:8b: 83:b9:f3:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8TpgBar789asg16ZXBVhDrgwsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVC NkMyMUM3NzAeFw0yNTA2MTUyMjA2NDJaFw0yNTA2MTkwMTQ3NDJaMDMxMTAvBgNV BAMTKEZFNEI1QUU0MEU3OThBN0VEQkFERDVDQzgzMjhCMEIzOTdCQUJCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrBSv2ZiL5mw/wC6j21oNKwcA LfwcdDXu2541m8bleYNjbyDi/0UjYUMkehosBiuxj45JN/3ElGnWqWRyR/OMWzlj E/5G7GLLWIgNXtxr4mlmaB/KG9/Dzsn5HhGgKU5YdH/og4sZGYGQYHfY2EhrXAps DV7aMOieVToiftnH0Y0y+6TijoNjkEGObKgXpf2yK9K26xlx9mCJXHk8fA+f2VSK lNq9MFtc9zKdbO/qa5oM8YaDxxo61vTHDwH7y0AX1qAYhlaZwKbO3baI+UM0KGo9 3qvsUB/W3wwcLqfgJ9/IoXjtIoXpcgxqo8EcSGmR+FF5ldSW9HYZGoFr1X9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/kta5A55in7brdXMgyiws5e6u7EwHwYDVR0j BBgwFoAUPSBSK1GuqkH1lJDi1Vw23rbCHHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTYxZTVhZS1lNDVmLTRlZTMtOGY2Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUx QUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIxQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVCNkMy MUM3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2 REVCNkMyMUM3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw+w+3/1nPeLHIbTeGBhLEagIP6OqFxz9Cj CPlWodPckIjdLmMLmxSwag0lUCu5l1NPmo+smOm/cnTvFfkKkmunY5QItWABExia 4iM4ElOJJjk17mtm6xPoIB6IhD+vGTJ4ptRCBA7teP+7uw7NbJ1Dhh6Fwgg0R0dE c0Z/jdfN3tr9EeTiq3u3llTQ/KTy5kks0sOOFPTsDoinzsdjoLTN2ccVA/VwRZfL 5aVzOE+E76Y0G6n8Dbbqvs0O/NEXo7tZ9WOobU9ePBU5On7Nw0gSiRc86XLGMDyk mAmBB8JSw7xluYG8VPXM+VAO9HT5E4WTfALwtj8DaEQhi4O587g= -----END CERTIFICATE-----Generated at Tue Jun 17 00:18:23 2025 by rpki-client