$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: GMEu9uc5I44CHwlxs9qjASYNrQx9Ni0yAlj7+J6vEqQ= Subject key identifier: 79:C0:C6:E6:6D:F6:E4:95:F0:1B:AB:32:B8:58:ED:A4:4A:66:35:EE Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 2256D677C4438F0CE540A500BC13CE1A99E731AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 02CB Signing time: Mon 16 Jun 2025 11:42:05 +0000 Manifest this update: Mon 16 Jun 2025 11:37:05 +0000 Manifest next update: Thu 19 Jun 2025 17:45:05 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: P8Omv4YMdnsvaEIej+qb+BBba9eBf1ssCLAulJkcHdw=) 2: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: JiOeoyglFxcIBKSME1TuKxOoh2Q7zlsZgc/zQ18Vv7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:56:d6:77:c4:43:8f:0c:e5:40:a5:00:bc:13:ce:1a:99:e7:31:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: Jun 16 11:37:05 2025 GMT Not After : Jun 19 17:45:05 2025 GMT Subject: CN=79C0C6E66DF6E495F01BAB32B858EDA44A6635EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:e2:d4:63:5d:26:2c:a0:c9:3d:75:4e:7f: 42:d2:69:e2:a9:b7:da:b5:be:1b:bd:0b:dd:17:5b: d3:35:58:2e:17:1c:0a:b5:8d:c2:0e:41:f0:3d:9d: 41:23:48:79:9d:60:45:f8:92:46:80:45:d1:ea:bf: 14:eb:ed:2e:cc:97:fd:37:f0:82:d4:69:b8:95:98: 64:6a:8b:5c:2e:6d:2e:39:ab:7b:42:59:3d:98:88: 2f:f2:d7:40:69:57:d9:43:bf:bb:91:94:9e:c5:54: ef:e4:6b:7a:dd:60:31:14:a2:ec:07:86:e1:fa:d5: 97:cf:ad:2a:5d:9d:79:d2:8c:d2:79:53:c8:e0:70: d9:93:61:ef:67:b4:7f:06:a8:7b:19:1a:c9:f4:b1: d0:82:8d:2d:42:1c:37:57:bf:86:72:32:93:ab:4c: 83:48:9b:ef:cf:1e:d1:dd:7b:73:32:55:24:78:11: f7:d4:ae:53:75:87:3c:0c:2b:4d:09:f5:3b:eb:d4: 4a:d4:bc:12:a0:bd:a0:06:c9:fc:3c:43:44:61:4c: 6a:84:f0:e8:9e:de:1b:81:04:9b:92:b4:f5:2c:5e: 94:e2:1d:ec:22:84:01:b5:12:32:f4:c8:17:09:90: 23:66:e1:55:c4:90:60:34:33:76:d7:1d:db:7f:24: 83:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C0:C6:E6:6D:F6:E4:95:F0:1B:AB:32:B8:58:ED:A4:4A:66:35:EE X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:dc:77:30:bc:58:ff:c7:e1:c2:43:fc:68:d1:74:34:4a:b1: e8:79:c1:5c:9b:ce:d7:f0:d2:b5:f8:64:0a:07:81:64:42:81: e7:38:0e:d8:50:9c:05:7f:c1:fa:10:50:3d:17:75:f4:33:ef: c0:f8:f3:87:5a:fa:e2:11:18:74:3d:63:3b:27:99:90:cf:86: 7f:d1:70:c4:32:5c:4d:b7:a5:a3:85:a5:e9:c0:45:1d:73:74: 75:5e:bf:77:d4:c6:c9:8a:a7:e9:da:54:c1:05:eb:a4:d4:28: 19:2f:76:17:b9:6a:18:ed:78:00:79:13:16:65:54:92:b0:de: bb:21:d5:27:f1:6a:9d:8f:e0:09:de:ee:fd:10:c1:b5:35:4a: 58:3f:fe:33:94:78:b6:0f:0d:d0:2c:fb:ac:19:cd:4e:07:4d: 6d:d2:13:cd:ab:9e:08:bb:91:42:1d:58:44:63:8b:73:f0:60: 14:9c:2e:82:4a:e9:08:46:56:30:1a:cb:74:4f:d1:9b:d7:4a: 35:11:27:b4:4d:f6:e2:85:fa:aa:2b:f5:20:94:69:8f:89:d7: 87:af:31:4b:5c:c9:1a:7f:44:7b:01:35:75:78:eb:e9:42:0a: 20:21:52:09:4b:4a:57:13:b9:0c:e1:bd:0a:2d:70:c9:aa:a9: e7:ed:8f:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlbWd8RDjwzlQKUAvBPOGpnnMa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNTA2MTYxMTM3MDVaFw0yNTA2MTkxNzQ1MDVaMDMxMTAvBgNV BAMTKDc5QzBDNkU2NkRGNkU0OTVGMDFCQUIzMkI4NThFREE0NEE2NjM1RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aOLUY10mLKDJPXVOf0LSaeKp t9q1vhu9C90XW9M1WC4XHAq1jcIOQfA9nUEjSHmdYEX4kkaARdHqvxTr7S7Ml/03 8ILUabiVmGRqi1wubS45q3tCWT2YiC/y10BpV9lDv7uRlJ7FVO/ka3rdYDEUouwH huH61ZfPrSpdnXnSjNJ5U8jgcNmTYe9ntH8GqHsZGsn0sdCCjS1CHDdXv4ZyMpOr TINIm+/PHtHde3MyVSR4EffUrlN1hzwMK00J9Tvr1ErUvBKgvaAGyfw8Q0RhTGqE 8Oie3huBBJuStPUsXpTiHewihAG1EjL0yBcJkCNm4VXEkGA0M3bXHdt/JIMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUecDG5m325JXwG6syuFjtpEpmNe4wHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7cdzC8WP/H4cJD/GjRdDRKseh5wVybztfw 0rX4ZAoHgWRCgec4DthQnAV/wfoQUD0XdfQz78D484da+uIRGHQ9YzsnmZDPhn/R cMQyXE23paOFpenARR1zdHVev3fUxsmKp+naVMEF66TUKBkvdhe5ahjteAB5ExZl VJKw3rsh1Sfxap2P4Ane7v0QwbU1Slg//jOUeLYPDdAs+6wZzU4HTW3SE82rngi7 kUIdWERji3PwYBScLoJK6QhGVjAay3RP0ZvXSjURJ7RN9uKF+qor9SCUaY+J14ev MUtcyRp/RHsBNXV46+lCCiAhUglLSlcTuQzhvQotcMmqqeftj/8= -----END CERTIFICATE-----Generated at Wed Jun 18 01:53:43 2025 by rpki-client