$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: +vCDgj9A/THx8h1MtP1uOIIMt1HYfoOw2hfSw0RhKRc= Subject key identifier: A3:42:55:A8:5F:1F:CF:53:CF:CC:A6:F7:EF:59:5A:AB:8E:E6:A1:7F Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 5B707AA6326BA961D17C96DCCF3D852C4777F0DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 01EE Signing time: Sun 29 Jun 2025 07:51:50 +0000 Manifest this update: Sun 29 Jun 2025 07:46:50 +0000 Manifest next update: Wed 02 Jul 2025 07:53:50 +0000 Files and hashes: 1: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: 8y5JK94ZhR3xgyaECM453KUX1kpdfDuJgnhaIAM+DdY=) 2: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: j+xMG0Mja1vgbHDmB6Mk1vqe3c5PuIR+QXfVG/S4zas=) 3: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: NUGPffbyK4qv0vZ1VGKXMzFEzlvQ4S7mMBkg8oqJsIU=) 4: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: XWnh1VykZqMD04Gqe6UZfKtVzo0XPT3InbmErZuC12M=) 5: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: R94Jhrt2peQ9VoyHvkm97VBfx7MWEw69Cox/hXCe3MY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:70:7a:a6:32:6b:a9:61:d1:7c:96:dc:cf:3d:85:2c:47:77:f0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Jun 29 07:46:50 2025 GMT Not After : Jul 2 07:53:50 2025 GMT Subject: CN=A34255A85F1FCF53CFCCA6F7EF595AAB8EE6A17F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:67:97:71:e1:a9:e6:32:03:11:05:ad:ec: fa:39:d4:9c:41:80:06:d7:a1:41:a5:29:ea:18:77: 67:27:56:bd:b5:9a:d1:e8:e8:a5:89:fc:d2:a6:ab: 22:8b:ab:94:a5:b8:8d:cb:97:54:38:51:14:42:44: 60:61:60:59:1c:6a:27:79:21:78:ec:fe:14:17:08: c0:70:8c:6f:28:d3:26:93:3f:24:28:0b:ff:56:44: ab:f8:05:e7:c3:12:2a:aa:ea:3e:2b:90:9f:14:7e: d6:48:f0:1a:48:3b:fc:12:11:37:59:25:ec:a0:3b: 76:d6:45:ef:68:93:79:8b:dc:e3:1d:0a:1a:cf:d0: a8:e4:d1:2d:1f:cb:e3:db:83:25:14:8b:75:6a:3a: a2:1e:e7:0a:de:0e:3b:df:69:09:16:bf:16:d9:94: e2:19:21:25:15:d0:6d:0a:1c:cf:17:c3:8d:c4:fa: 3d:83:e9:c1:98:b9:29:79:4e:15:fb:ad:29:20:4f: b2:bd:4f:29:09:98:72:ff:46:73:61:86:39:4b:3a: af:9f:4c:aa:c3:27:93:ab:6a:17:d0:c3:e4:76:ac: 4b:67:77:da:ec:14:ef:5d:a0:ba:ec:f3:88:c6:b1: ac:c1:94:ad:6f:ef:ac:6f:de:89:78:68:79:22:a2: f5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:42:55:A8:5F:1F:CF:53:CF:CC:A6:F7:EF:59:5A:AB:8E:E6:A1:7F X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5a:ee:0d:bf:cf:94:8b:18:2f:cf:0b:94:bf:b1:d4:d0:94: 9e:72:6d:be:0f:d9:f7:f6:d5:f5:c6:ae:43:6b:6b:0d:26:55: ee:4e:9e:af:45:35:75:73:6f:3e:8b:e8:4d:0d:22:44:59:0a: d2:45:cc:25:71:43:33:99:66:4e:02:74:f6:94:90:81:65:c7: 4a:56:ca:27:44:cf:63:56:ab:ca:34:51:79:7b:5d:48:30:d6: ad:a3:01:1b:60:1e:20:09:9c:e4:64:b9:2c:04:73:a2:a4:a5: ae:35:2f:64:c4:3d:4f:76:5d:49:c2:ea:bb:c0:56:5e:36:ef: 71:2e:e4:d9:f3:f4:06:83:77:21:1c:e6:cb:7e:f8:70:8b:b8: 69:82:52:d0:c3:79:ff:91:c7:1f:22:a5:fd:05:b9:71:66:b5: 52:24:5f:79:a9:a5:38:97:29:87:39:3e:d1:80:d1:eb:f6:d8: f7:9c:4e:2e:c1:06:46:f9:32:35:60:dc:f0:a6:60:2c:9b:d4: ca:b3:74:87:8a:3e:7f:db:05:dc:2b:88:55:c5:3c:4d:e9:73: 9e:4d:0d:4d:9a:8b:4e:49:fc:aa:3d:c3:44:37:d2:79:d2:09: 75:c5:bd:10:b9:cc:c3:31:bb:67:d8:1f:97:82:2e:00:f4:cb: 63:30:41:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW3B6pjJrqWHRfJbczz2FLEd38NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTA2MjkwNzQ2NTBaFw0yNTA3MDIwNzUzNTBaMDMxMTAvBgNV BAMTKEEzNDI1NUE4NUYxRkNGNTNDRkNDQTZGN0VGNTk1QUFCOEVFNkExN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDGeXceGp5jIDEQWt7Po51JxB gAbXoUGlKeoYd2cnVr21mtHo6KWJ/NKmqyKLq5SluI3Ll1Q4URRCRGBhYFkcaid5 IXjs/hQXCMBwjG8o0yaTPyQoC/9WRKv4BefDEiqq6j4rkJ8UftZI8BpIO/wSETdZ JeygO3bWRe9ok3mL3OMdChrP0Kjk0S0fy+PbgyUUi3VqOqIe5wreDjvfaQkWvxbZ lOIZISUV0G0KHM8Xw43E+j2D6cGYuSl5ThX7rSkgT7K9TykJmHL/RnNhhjlLOq+f TKrDJ5OrahfQw+R2rEtnd9rsFO9doLrs84jGsazBlK1v76xv3ol4aHkiovVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo0JVqF8fz1PPzKb371laq47moX8wHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZa7g2/z5SLGC/PC5S/sdTQlJ5ybb4P2ff2 1fXGrkNraw0mVe5Onq9FNXVzbz6L6E0NIkRZCtJFzCVxQzOZZk4CdPaUkIFlx0pW yidEz2NWq8o0UXl7XUgw1q2jARtgHiAJnORkuSwEc6Kkpa41L2TEPU92XUnC6rvA Vl4273Eu5Nnz9AaDdyEc5st++HCLuGmCUtDDef+Rxx8ipf0FuXFmtVIkX3mppTiX KYc5PtGA0ev22PecTi7BBkb5MjVg3PCmYCyb1MqzdIeKPn/bBdwriFXFPE3pc55N DU2ai05J/Ko9w0Q30nnSCXXFvRC5zMMxu2fYH5eCLgD0y2MwQfc= -----END CERTIFICATE-----Generated at Mon Jun 30 03:55:19 2025 by rpki-client