$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: gzP+74p5dypu53JzqwinlvPrgA5irx7SQJpZ0+Cm8ko= Subject key identifier: 18:EF:3E:BC:78:FA:1C:DB:6A:0B:CD:13:82:D9:42:43:07:9C:3E:C3 Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 75AE3891B0CC57AF3A76B1719C5C9F76DAE364BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 02B7 Signing time: Fri 02 May 2025 08:02:05 +0000 Manifest this update: Fri 02 May 2025 07:57:05 +0000 Manifest next update: Mon 05 May 2025 08:05:05 +0000 Files and hashes: 1: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: W8ClzTsHtt1GwJ6w0dXGo9QyAT6erVT9hmtFBaYiURc=) 2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: P8Omv4YMdnsvaEIej+qb+BBba9eBf1ssCLAulJkcHdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 08:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ae:38:91:b0:cc:57:af:3a:76:b1:71:9c:5c:9f:76:da:e3:64:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: May 2 07:57:05 2025 GMT Not After : May 5 08:05:05 2025 GMT Subject: CN=18EF3EBC78FA1CDB6A0BCD1382D94243079C3EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:1a:2d:c8:06:d3:7a:69:4e:39:64:ff:01: c5:2a:f7:53:62:a1:8a:f4:93:92:a3:9e:c8:9d:6c: 4a:b6:73:aa:b7:df:ca:4a:3a:96:0e:3a:1e:ca:a8: cb:a1:c6:f8:79:3d:28:fb:20:15:74:63:41:33:d9: 33:48:5c:b7:df:88:78:de:f3:81:b1:bd:3f:b2:fc: a0:e1:f7:d9:bc:af:f0:8f:b5:f8:72:1d:cf:20:ee: f5:73:a0:1a:2f:42:1c:94:ab:6e:da:e6:ed:50:31: 09:77:63:de:d1:21:28:26:63:76:6c:63:38:77:05: df:94:bb:a5:e7:9c:83:08:b7:4f:1e:6b:d8:01:4d: e3:5e:eb:ba:67:5f:0f:90:a9:5b:17:40:c1:9a:91: 8d:36:c9:4b:74:95:a7:b0:c4:d3:3a:fc:ad:ef:25: f1:b9:5b:09:a1:d6:db:25:b0:2a:4c:ff:b7:13:ac: d9:36:39:5f:72:d1:a0:1b:9d:77:c3:b2:56:12:47: 47:c4:f0:28:9d:db:06:e5:0a:69:5c:04:14:d0:2f: 33:d4:d6:d5:1c:56:99:72:38:f7:63:f6:62:2a:e5: e5:85:e7:58:c8:29:a9:a6:3e:44:da:1f:ac:57:ee: 05:6c:6c:fd:82:65:4f:22:1c:e9:f3:69:56:4b:91: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EF:3E:BC:78:FA:1C:DB:6A:0B:CD:13:82:D9:42:43:07:9C:3E:C3 X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a2:f5:09:73:d4:10:8f:eb:c2:23:d3:6d:71:e7:ef:ce:f7: d2:4b:64:25:c7:f0:8e:9f:02:f9:ef:0d:95:98:ad:36:55:df: 59:a0:fb:2f:11:34:28:93:e0:26:6e:be:ad:62:db:8e:1c:c5: db:c8:64:73:ef:39:1f:74:bf:21:02:4d:3e:af:95:cd:7f:5e: d9:40:7f:f1:aa:3c:8c:90:c0:d2:86:5f:43:da:79:7e:46:4a: 88:39:e8:32:c5:cd:0d:e2:7f:03:40:4f:3a:0b:5a:a2:91:b8: 9d:8c:0a:13:29:84:78:70:30:12:d3:a0:49:58:3d:49:8b:87: a6:9c:74:bc:e2:05:27:cc:82:80:d6:a5:f9:36:5d:44:08:56: a8:a3:45:76:a7:f6:05:b2:38:f1:bf:00:66:80:f3:bb:c0:ad: cf:9a:08:67:f0:6c:99:f7:dd:67:03:95:a3:8c:fa:1e:0b:99: 31:69:8b:2b:7f:b4:42:ba:83:2b:31:39:bc:d3:fd:1b:b0:89: 78:63:6d:3e:8b:f8:bf:22:47:4b:4b:3b:b2:c1:37:6f:c4:88: bf:17:e6:39:84:10:7a:05:7f:62:2a:42:1c:39:81:64:b0:95: 48:a2:6b:1b:a7:5b:82:ba:89:00:68:d5:74:90:06:16:7e:04: 50:d2:99:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUda44kbDMV686drFxnFyfdtrjZL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNTA1MDIwNzU3MDVaFw0yNTA1MDUwODA1MDVaMDMxMTAvBgNV BAMTKDE4RUYzRUJDNzhGQTFDREI2QTBCQ0QxMzgyRDk0MjQzMDc5QzNFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiexotyAbTemlOOWT/AcUq91Ni oYr0k5KjnsidbEq2c6q338pKOpYOOh7KqMuhxvh5PSj7IBV0Y0Ez2TNIXLffiHje 84GxvT+y/KDh99m8r/CPtfhyHc8g7vVzoBovQhyUq27a5u1QMQl3Y97RISgmY3Zs Yzh3Bd+Uu6XnnIMIt08ea9gBTeNe67pnXw+QqVsXQMGakY02yUt0laewxNM6/K3v JfG5Wwmh1tslsCpM/7cTrNk2OV9y0aAbnXfDslYSR0fE8Cid2wblCmlcBBTQLzPU 1tUcVplyOPdj9mIq5eWF51jIKammPkTaH6xX7gVsbP2CZU8iHOnzaVZLkbl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGO8+vHj6HNtqC80TgtlCQwecPsMwHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyi9Qlz1BCP68Ij021x5+/O99JLZCXH8I6f AvnvDZWYrTZV31mg+y8RNCiT4CZuvq1i244cxdvIZHPvOR90vyECTT6vlc1/XtlA f/GqPIyQwNKGX0PaeX5GSog56DLFzQ3ifwNATzoLWqKRuJ2MChMphHhwMBLToElY PUmLh6acdLziBSfMgoDWpfk2XUQIVqijRXan9gWyOPG/AGaA87vArc+aCGfwbJn3 3WcDlaOM+h4LmTFpiyt/tEK6gysxObzT/RuwiXhjbT6L+L8iR0tLO7LBN2/EiL8X 5jmEEHoFf2IqQhw5gWSwlUiiaxunW4K6iQBo1XSQBhZ+BFDSmfs= -----END CERTIFICATE-----Generated at Sat May 3 12:33:35 2025 by rpki-client