$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: UwmLwY5qf3irJzLEjeVECsTANmsJH38slJkGJjwEttk= Subject key identifier: 7E:4B:03:74:49:D2:2D:04:99:40:BB:EA:4E:BD:F9:E8:0B:49:D6:D6 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 34D1BDF10205D011CD7431173CDA43518E5F8C7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 04CD Signing time: Thu 08 May 2025 03:51:41 +0000 Manifest this update: Thu 08 May 2025 03:46:41 +0000 Manifest next update: Sun 11 May 2025 14:20:41 +0000 Files and hashes: 1: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) 2: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: Yup3LSSXgdUZ7TIF0NHSoD8M0CsWWRSGseNh+Yk9Mtw=) 3: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: BSvE+OLnytfbf8toiJJMEZBKYqLTRbQfxnqbMWT62fk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d1:bd:f1:02:05:d0:11:cd:74:31:17:3c:da:43:51:8e:5f:8c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: May 8 03:46:41 2025 GMT Not After : May 11 14:20:41 2025 GMT Subject: CN=7E4B037449D22D049940BBEA4EBDF9E80B49D6D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:90:ce:be:48:38:95:eb:a4:12:df:4b:7a: c1:66:f8:f7:86:14:65:a6:47:bb:35:4c:fd:c2:84: b2:96:ba:96:ff:9b:df:e6:90:6d:ad:0c:d6:58:e8: a5:21:24:c9:60:11:85:0d:d0:93:b3:76:7a:48:f2: 42:3d:98:49:8c:5c:ed:26:95:43:69:c6:5d:31:3b: da:00:8a:c2:0d:57:68:7e:e9:2f:2d:48:8f:f6:6e: 93:af:56:00:b4:fb:e5:1a:11:a4:e9:df:29:30:a5: 92:27:d5:73:b6:54:8e:4c:7b:77:f3:34:26:3d:00: f3:22:d1:01:7d:09:9b:56:6d:3f:16:e8:22:56:5b: 00:17:e3:1a:53:5e:30:68:00:11:e8:8b:18:37:77: 5d:45:ef:bf:7a:e6:c3:8e:74:14:e8:95:16:cb:01: fd:2e:a9:63:2c:a8:ba:3b:7d:65:d8:e5:07:c3:25: 4c:ab:a0:0d:82:be:56:83:9c:e7:bc:9c:b4:2e:87: fa:ab:79:19:b1:53:5e:ea:50:e6:05:74:5e:a4:db: 0d:57:71:02:56:ef:f5:d0:c1:7e:e4:d5:9e:a3:17: 81:fa:d4:1e:78:5e:d6:42:14:15:59:c9:7e:39:8b: aa:59:31:b9:00:a3:98:fc:ae:b0:6b:33:34:9f:c7: ac:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4B:03:74:49:D2:2D:04:99:40:BB:EA:4E:BD:F9:E8:0B:49:D6:D6 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:20:0a:3b:c8:a4:43:dc:bb:2d:b9:53:c1:6d:3c:95:7b:35: 23:f9:3c:6e:1c:78:0c:ae:f1:d0:5c:8a:8e:d6:b5:95:c1:66: 98:43:96:58:06:a4:cf:90:26:6a:a6:ce:14:c3:85:5d:8d:2d: aa:a1:f9:de:2e:ce:0b:08:6f:e3:a9:78:1a:fd:1d:e7:d2:7c: 9d:88:99:ea:09:64:97:66:fe:84:4b:7d:9b:c1:95:a1:4a:ef: 33:61:b3:b1:0a:c3:1d:52:1d:a1:19:75:e4:5e:db:b6:9d:00: d2:1a:06:33:29:6b:26:0b:12:30:96:46:4a:c3:f5:75:4e:36: d9:9f:e2:57:91:b6:b3:f7:8c:ac:45:13:b5:95:e7:b9:30:3f: 36:cd:d9:5d:ee:f7:80:cf:94:88:99:d9:f1:48:31:29:73:4b: 5e:15:ee:04:8c:4b:8b:74:37:19:cc:6e:6e:8a:6d:cb:b5:c6: a4:84:ef:cc:2b:ac:f1:7f:63:5c:03:a7:0a:e2:8e:24:65:b7: 4d:f1:ef:1b:a3:47:5e:73:d9:fa:c4:2e:8d:54:79:4d:af:b8: 8c:12:ae:09:17:cc:50:69:df:ac:56:ae:1f:37:3b:d3:be:51: 3b:2f:7a:48:81:39:a8:61:c5:c6:0a:09:5b:9a:5f:d2:24:d4: 45:87:07:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNG98QIF0BHNdDEXPNpDUY5fjH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNTA1MDgwMzQ2NDFaFw0yNTA1MTExNDIwNDFaMDMxMTAvBgNV BAMTKDdFNEIwMzc0NDlEMjJEMDQ5OTQwQkJFQTRFQkRGOUU4MEI0OUQ2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARJDOvkg4leukEt9LesFm+PeG FGWmR7s1TP3ChLKWupb/m9/mkG2tDNZY6KUhJMlgEYUN0JOzdnpI8kI9mEmMXO0m lUNpxl0xO9oAisINV2h+6S8tSI/2bpOvVgC0++UaEaTp3ykwpZIn1XO2VI5Me3fz NCY9APMi0QF9CZtWbT8W6CJWWwAX4xpTXjBoABHoixg3d11F77965sOOdBTolRbL Af0uqWMsqLo7fWXY5QfDJUyroA2CvlaDnOe8nLQuh/qreRmxU17qUOYFdF6k2w1X cQJW7/XQwX7k1Z6jF4H61B54XtZCFBVZyX45i6pZMbkAo5j8rrBrMzSfx6wXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfksDdEnSLQSZQLvqTr356AtJ1tYwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcgCjvIpEPcuy25U8FtPJV7NSP5PG4ceAyu 8dBcio7WtZXBZphDllgGpM+QJmqmzhTDhV2NLaqh+d4uzgsIb+OpeBr9HefSfJ2I meoJZJdm/oRLfZvBlaFK7zNhs7EKwx1SHaEZdeRe27adANIaBjMpayYLEjCWRkrD 9XVONtmf4leRtrP3jKxFE7WV57kwPzbN2V3u94DPlIiZ2fFIMSlzS14V7gSMS4t0 NxnMbm6Kbcu1xqSE78wrrPF/Y1wDpwrijiRlt03x7xujR15z2frELo1UeU2vuIwS rgkXzFBp36xWrh83O9O+UTsvekiBOahhxcYKCVuaX9Ik1EWHBxU= -----END CERTIFICATE-----Generated at Sat May 10 08:13:23 2025 by rpki-client