$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: ik5t73atM8jBe6g/EnXIVidY3ZLxX/awNY6j88lCbko= Subject key identifier: 57:EC:F0:CF:E8:71:AA:EF:14:78:53:38:E3:36:FC:45:44:11:C2:F6 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 58C1059201A50BCD9CABD2CF2E4B76E575AB874E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 11:31:42 +0000 Manifest this update: Sat 28 Jun 2025 11:26:42 +0000 Manifest next update: Tue 01 Jul 2025 17:18:42 +0000 Files and hashes: 1: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) 2: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) 3: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: MJRVAQyVAKQgBMFylNeJp+n8a1XdTNrdmOup7+aKs2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c1:05:92:01:a5:0b:cd:9c:ab:d2:cf:2e:4b:76:e5:75:ab:87:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Jun 28 11:26:42 2025 GMT Not After : Jul 1 17:18:42 2025 GMT Subject: CN=57ECF0CFE871AAEF14785338E336FC454411C2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:86:3c:53:3e:0e:cf:54:41:e6:b6:9b:e1:7a: 6b:ac:f2:e4:80:8b:96:8e:47:54:44:91:d9:5d:51: 75:ed:e7:4a:0b:3c:63:87:cc:a0:af:23:32:77:dd: 52:bd:ef:8d:1f:bd:cd:28:df:cc:6d:c7:e0:2b:b8: ae:ba:92:37:08:50:87:81:5a:bc:1a:73:48:72:8d: 0b:0c:e3:99:23:c6:98:75:13:6d:66:0b:6c:4f:47: 99:4b:33:b9:55:6a:19:2c:e0:1b:64:66:6f:94:f4: 8a:9a:c5:92:bb:b2:7e:e2:80:a7:6a:59:6f:d0:d2: 46:54:4a:aa:cd:56:27:6e:ca:6c:6b:44:34:1b:02: 4c:f0:ec:c6:0d:65:e2:d3:e3:21:76:7a:d0:9d:2c: e1:2f:9e:a3:16:b3:73:44:63:7a:af:f1:09:67:55: 21:a0:77:26:6a:33:c2:f5:7c:5e:a1:c6:0c:f1:11: 81:e3:80:cb:12:9f:3d:5f:29:90:1d:b6:37:3e:03: 18:3a:75:cd:5a:a2:35:f4:0c:90:22:31:01:b8:16: 06:ee:2f:ee:18:b2:cb:16:98:15:d7:3c:fb:79:bb: 3f:e6:18:cb:84:a9:e1:04:d7:bd:b0:9f:7c:ad:54: 8d:ea:7b:b9:5e:cf:62:09:60:07:19:cc:87:45:d3: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EC:F0:CF:E8:71:AA:EF:14:78:53:38:E3:36:FC:45:44:11:C2:F6 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e0:b1:a5:52:5a:fc:05:d4:41:af:bf:d2:56:b4:d0:7c:ff: ac:31:00:27:ed:62:d2:be:93:7f:52:0a:71:12:9d:46:78:f6: 01:41:87:b5:99:85:44:c5:8d:97:15:1c:79:cf:d0:65:a0:70: e1:65:2e:7a:28:3f:a1:2e:a5:90:bf:41:95:81:1a:6d:ae:9f: 4f:51:05:92:dc:55:70:40:a5:9c:7c:d5:4e:6e:3e:44:34:1a: 07:39:94:31:b7:d3:c6:d2:4f:d7:1f:a7:fc:74:8d:19:56:d0: a4:a3:38:a0:ab:12:d2:3b:97:c9:14:12:f6:64:39:94:6a:63: d3:2a:f3:23:a0:80:c9:28:86:28:1c:5b:18:f5:f5:ec:c9:57: 5a:83:7c:dc:6a:82:92:3a:e7:41:82:43:cc:fe:9d:48:b4:83: f9:2a:40:e9:39:d9:28:1c:dd:c6:df:2d:ff:48:ae:6a:d9:39: 29:64:8e:98:ca:c6:2d:21:1c:84:d0:48:da:0c:ec:f8:a1:69: a5:3e:00:52:d2:34:8b:57:30:24:37:d9:5e:9b:1d:55:6a:99: 50:3d:ab:cf:0b:65:fc:5e:6d:71:a6:76:84:8c:a2:23:b5:4e: 4f:c2:05:1b:ae:51:6d:04:10:af:cb:b2:99:6e:4e:0f:8c:c3: fd:4b:e2:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWMEFkgGlC82cq9LPLkt25XWrh04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNTA2MjgxMTI2NDJaFw0yNTA3MDExNzE4NDJaMDMxMTAvBgNV BAMTKDU3RUNGMENGRTg3MUFBRUYxNDc4NTMzOEUzMzZGQzQ1NDQxMUMyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqhjxTPg7PVEHmtpvhemus8uSA i5aOR1REkdldUXXt50oLPGOHzKCvIzJ33VK9740fvc0o38xtx+AruK66kjcIUIeB Wrwac0hyjQsM45kjxph1E21mC2xPR5lLM7lVahks4BtkZm+U9IqaxZK7sn7igKdq WW/Q0kZUSqrNViduymxrRDQbAkzw7MYNZeLT4yF2etCdLOEvnqMWs3NEY3qv8Qln VSGgdyZqM8L1fF6hxgzxEYHjgMsSnz1fKZAdtjc+Axg6dc1aojX0DJAiMQG4Fgbu L+4YsssWmBXXPPt5uz/mGMuEqeEE172wn3ytVI3qe7lez2IJYAcZzIdF09OrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV+zwz+hxqu8UeFM44zb8RUQRwvYwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrgsaVSWvwF1EGvv9JWtNB8/6wxACftYtK+ k39SCnESnUZ49gFBh7WZhUTFjZcVHHnP0GWgcOFlLnooP6EupZC/QZWBGm2un09R BZLcVXBApZx81U5uPkQ0Ggc5lDG308bST9cfp/x0jRlW0KSjOKCrEtI7l8kUEvZk OZRqY9Mq8yOggMkohigcWxj19ezJV1qDfNxqgpI650GCQ8z+nUi0g/kqQOk52Sgc 3cbfLf9IrmrZOSlkjpjKxi0hHITQSNoM7PihaaU+AFLSNItXMCQ32V6bHVVqmVA9 q88LZfxebXGmdoSMoiO1Tk/CBRuuUW0EEK/LspluTg+Mw/1L4jE= -----END CERTIFICATE-----Generated at Mon Jun 30 07:05:03 2025 by rpki-client