$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: q9r8bW/qhJt+PGp7rC+b/M/yV1itNDJMt3qWvKHevvI= Subject key identifier: 38:21:C9:AE:2B:0E:20:9A:9B:7B:A9:A5:36:DF:51:86:06:78:78:4E Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 057A4F95120376F76C36AAA6339B9378577E2743 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 01D8 Signing time: Tue 29 Apr 2025 04:04:27 +0000 Manifest this update: Tue 29 Apr 2025 03:59:27 +0000 Manifest next update: Fri 02 May 2025 06:00:27 +0000 Files and hashes: 1: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) 2: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: 4Kbk1CANWBsB6lQiiPvELSdX2hCnZ6hiX7lPIs77sXE=) 3: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7a:4f:95:12:03:76:f7:6c:36:aa:a6:33:9b:93:78:57:7e:27:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Apr 29 03:59:27 2025 GMT Not After : May 2 06:00:27 2025 GMT Subject: CN=3821C9AE2B0E209A9B7BA9A536DF51860678784E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:27:f7:32:5c:b8:60:57:aa:15:a2:0d:42: 52:4d:e7:f5:ea:5f:cf:01:a0:76:e5:a8:7b:88:7f: 2f:49:93:3c:08:d1:b0:5c:da:78:b3:e6:88:57:0c: 95:6b:49:c3:dc:a8:b8:d9:b7:07:55:9a:8f:30:f9: 86:6a:38:15:ec:f4:69:ad:45:94:4a:68:7d:5c:0e: 2d:21:65:fa:89:1d:11:af:6d:b6:2b:b9:e6:fd:15: b7:4b:df:aa:9e:d4:56:df:3f:b8:26:06:11:2b:ee: 53:e6:fe:5c:07:4b:7d:c4:4d:b8:51:87:f8:c3:77: 77:4b:b1:02:ca:7e:e9:ff:6c:1d:57:f0:65:08:fd: 82:6b:4b:16:5c:f9:60:c4:0e:de:b5:3e:d3:be:28: 23:80:4c:6f:fc:77:55:18:2a:b5:56:7c:18:2b:de: 31:85:ad:3a:09:6d:c1:f2:44:e0:32:ce:82:0d:76: 6d:8a:85:48:72:85:f5:30:c2:b0:97:da:5d:c0:23: 7f:92:e0:ba:b6:f2:6e:0e:e6:ba:32:ce:f1:93:8b: ef:14:93:dc:01:3d:a9:93:f6:7f:96:b6:84:0d:9f: 40:65:44:df:e4:ef:34:84:8a:fb:26:02:ab:15:4e: 2a:c4:19:d8:4e:71:6f:76:9a:7d:c1:40:b1:49:88: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:21:C9:AE:2B:0E:20:9A:9B:7B:A9:A5:36:DF:51:86:06:78:78:4E X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:77:77:52:4b:11:4d:42:1e:dc:2e:47:04:df:66:0a:7c:34: cd:b2:5e:4c:9e:09:d0:d0:bc:e8:e5:05:25:09:aa:14:cb:94: b3:4b:30:b9:fa:59:66:20:3d:b2:2b:94:75:c8:a6:68:84:82: 29:aa:7c:ce:c6:bc:f6:3e:4f:e9:34:5e:a6:c9:c7:d8:0e:17: bb:47:5a:b7:5e:b2:d6:8b:26:a6:6a:e9:b8:fc:30:41:af:6a: 65:1d:db:b8:8f:47:b3:b1:1d:8c:4e:12:8d:2b:55:77:0c:6e: ac:3c:8a:a9:58:65:82:47:2e:11:5a:97:81:3f:59:7a:1b:69: 3a:ab:a1:20:8c:40:e9:d5:76:32:96:e6:b3:36:be:6f:46:4a: 84:2d:ff:24:2f:62:f8:ee:39:1f:0b:cb:c5:51:e1:1a:e3:3c: fa:01:d8:53:1e:95:29:64:42:21:63:e3:cb:d0:e7:7a:41:a6: 35:90:75:9f:f5:e6:39:1a:ea:38:46:80:18:3a:48:fb:2f:b1: 1a:42:58:60:76:69:1f:68:a4:be:b0:fc:7d:9f:d7:77:be:92: a9:51:24:91:f0:8e:04:c6:db:d2:f0:36:93:a1:5f:49:32:b2: b4:c7:6c:7f:07:e7:3c:a7:74:b6:6c:66:d2:e1:a9:5e:ae:d5: c3:4b:bd:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXpPlRIDdvdsNqqmM5uTeFd+J0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTA0MjkwMzU5MjdaFw0yNTA1MDIwNjAwMjdaMDMxMTAvBgNV BAMTKDM4MjFDOUFFMkIwRTIwOUE5QjdCQTlBNTM2REY1MTg2MDY3ODc4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhif3Mly4YFeqFaINQlJN5/Xq X88BoHblqHuIfy9JkzwI0bBc2niz5ohXDJVrScPcqLjZtwdVmo8w+YZqOBXs9Gmt RZRKaH1cDi0hZfqJHRGvbbYrueb9FbdL36qe1FbfP7gmBhEr7lPm/lwHS33ETbhR h/jDd3dLsQLKfun/bB1X8GUI/YJrSxZc+WDEDt61PtO+KCOATG/8d1UYKrVWfBgr 3jGFrToJbcHyROAyzoINdm2KhUhyhfUwwrCX2l3AI3+S4Lq28m4O5royzvGTi+8U k9wBPamT9n+WtoQNn0BlRN/k7zSEivsmAqsVTirEGdhOcW92mn3BQLFJiLdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOCHJrisOIJqbe6mlNt9RhgZ4eE4wHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGl3d1JLEU1CHtwuRwTfZgp8NM2yXkyeCdDQ vOjlBSUJqhTLlLNLMLn6WWYgPbIrlHXIpmiEgimqfM7GvPY+T+k0XqbJx9gOF7tH WrdestaLJqZq6bj8MEGvamUd27iPR7OxHYxOEo0rVXcMbqw8iqlYZYJHLhFal4E/ WXobaTqroSCMQOnVdjKW5rM2vm9GSoQt/yQvYvjuOR8Ly8VR4RrjPPoB2FMelSlk QiFj48vQ53pBpjWQdZ/15jka6jhGgBg6SPsvsRpCWGB2aR9opL6w/H2f13e+kqlR JJHwjgTG29LwNpOhX0kysrTHbH8H5zyndLZsZtLhqV6u1cNLvVg= -----END CERTIFICATE-----Generated at Tue Apr 29 12:39:42 2025 by rpki-client