$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: c/hz+FusQaoyXB9Fr04+l7mq7id2ls8BLMWBrsuMjb8= Subject key identifier: 08:96:CF:01:95:36:45:DA:0A:3B:BA:F5:1F:56:B7:AE:A2:F3:3C:9B Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 7FEA37A39447743B7BA49E56B93361C7F4FA25C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 03A5 Signing time: Mon 28 Apr 2025 01:40:38 +0000 Manifest this update: Mon 28 Apr 2025 01:35:38 +0000 Manifest next update: Thu 01 May 2025 02:40:38 +0000 Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: 1TOBRX5MwL8nChJl6awL2w3BUZFHaDBm1061l2puz4s=) 2: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: 41R3ZVoWJl3qGiIBloxVJOrxVbthY60QTFVqSZvpvng=) 3: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: pFYo+rYQ4y01OiD99PWpXB905d+F4ZorCo/4HXyMapk=) 4: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 5SkHB/Kz3ud3kzZYvQ/j1QLOIE2ORuolpv99BxFmP4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 02:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ea:37:a3:94:47:74:3b:7b:a4:9e:56:b9:33:61:c7:f4:fa:25:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Apr 28 01:35:38 2025 GMT Not After : May 1 02:40:38 2025 GMT Subject: CN=0896CF01953645DA0A3BBAF51F56B7AEA2F33C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:7d:0a:ad:45:1d:a1:d3:db:7e:c7:fb:e7: 62:d8:6d:80:23:da:62:d7:cd:f9:4b:ca:c7:90:b1: 87:20:31:7c:5e:82:6b:53:45:00:e7:26:25:a0:12: 8f:cf:8a:af:19:f5:66:7f:8e:70:32:8e:94:a0:0d: d5:0a:06:55:65:7f:b4:07:90:c0:3c:27:7e:74:d0: d6:1f:07:8c:42:37:35:e4:99:d5:56:0f:d2:95:33: 29:59:33:e2:f3:14:f1:60:ae:6b:b6:29:51:a0:2c: b2:f3:5c:39:64:27:ca:d3:45:25:b3:eb:8f:0f:5a: 24:e8:24:47:01:b1:71:7f:ef:9d:56:3b:e5:d7:a4: ea:49:3a:7d:12:eb:1a:63:40:82:30:52:00:31:aa: f8:b6:27:3e:90:48:b0:31:1a:99:1d:8e:32:e7:25: ef:88:bf:a8:2a:14:46:d2:ff:a1:2f:2a:a0:35:c8: d9:83:07:bd:c7:a2:18:ca:62:98:72:05:64:f4:e6: 9b:89:f2:8d:a9:2f:c3:6c:54:c3:43:db:29:04:02: 1e:92:bd:24:b5:6a:62:64:6a:57:03:31:ef:6a:a8: 89:c0:fd:7a:08:9f:5a:a7:21:93:a5:fa:eb:eb:3e: 56:13:d9:72:3b:22:77:a7:b3:a5:24:f8:6a:ea:ab: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:96:CF:01:95:36:45:DA:0A:3B:BA:F5:1F:56:B7:AE:A2:F3:3C:9B X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:29:ca:c9:1c:64:44:82:fd:48:e4:b6:bf:24:13:88:d3:da: cb:14:ff:30:00:2c:d3:5c:1f:47:73:a5:fa:ae:81:8d:38:c1: 79:14:c2:c8:0a:a2:57:1a:e0:06:9b:ac:f1:22:74:cf:cb:de: 54:b3:63:fc:21:82:e7:bb:42:b2:36:7e:7e:84:e6:ff:46:63: 71:e3:4f:a0:ff:74:ef:a8:07:fd:68:c1:60:23:8b:d9:54:10: 92:0f:6e:88:93:54:f9:1d:c8:92:c6:0b:8e:d5:5e:d2:47:4f: b9:7f:44:8a:89:1b:45:d7:3e:b7:49:ad:de:ef:b3:c9:72:4f: 1f:43:bc:70:ae:4c:4a:ff:5b:2a:06:3e:90:88:e6:66:67:cb: 5b:87:e3:dc:50:45:c4:83:5b:9a:e8:86:42:56:0e:65:2b:85: 2c:4f:a9:a0:11:e4:ee:9f:43:37:4a:d8:38:c8:c7:0d:b8:d8: 8e:76:ab:a8:67:aa:29:06:01:b8:7e:a8:ae:db:af:0b:80:72: cc:ec:bf:93:61:38:14:88:f7:20:c1:f4:50:4d:59:6e:e1:b6: 26:39:6b:a0:87:cf:74:7d:ea:74:0e:df:83:bd:2b:12:81:ed: 8c:1b:d7:c3:b0:d6:d8:e3:48:ca:54:c2:86:92:c7:f6:b2:ce: 3d:e8:b3:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+o3o5RHdDt7pJ5WuTNhx/T6JckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNTA0MjgwMTM1MzhaFw0yNTA1MDEwMjQwMzhaMDMxMTAvBgNV BAMTKDA4OTZDRjAxOTUzNjQ1REEwQTNCQkFGNTFGNTZCN0FFQTJGMzNDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRH0KrUUdodPbfsf752LYbYAj 2mLXzflLyseQsYcgMXxegmtTRQDnJiWgEo/Piq8Z9WZ/jnAyjpSgDdUKBlVlf7QH kMA8J3500NYfB4xCNzXkmdVWD9KVMylZM+LzFPFgrmu2KVGgLLLzXDlkJ8rTRSWz 648PWiToJEcBsXF/751WO+XXpOpJOn0S6xpjQIIwUgAxqvi2Jz6QSLAxGpkdjjLn Je+Iv6gqFEbS/6EvKqA1yNmDB73HohjKYphyBWT05puJ8o2pL8NsVMND2ykEAh6S vSS1amJkalcDMe9qqInA/XoIn1qnIZOl+uvrPlYT2XI7Inens6Uk+Grqq+WlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCJbPAZU2RdoKO7r1H1a3rqLzPJswHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkpyskcZESC/Ujktr8kE4jT2ssU/zAALNNc H0dzpfqugY04wXkUwsgKolca4AabrPEidM/L3lSzY/whgue7QrI2fn6E5v9GY3Hj T6D/dO+oB/1owWAji9lUEJIPboiTVPkdyJLGC47VXtJHT7l/RIqJG0XXPrdJrd7v s8lyTx9DvHCuTEr/WyoGPpCI5mZny1uH49xQRcSDW5rohkJWDmUrhSxPqaAR5O6f QzdK2DjIxw242I52q6hnqikGAbh+qK7brwuAcszsv5NhOBSI9yDB9FBNWW7htiY5 a6CHz3R96nQO34O9KxKB7Ywb18Ow1tjjSMpUwoaSx/ayzj3os98= -----END CERTIFICATE-----Generated at Tue Apr 29 23:26:11 2025 by rpki-client