$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: MRUKXS5/IsSFdWwSzsbUqTaI0RAlfYl2sNqMtl1VjJI= Subject key identifier: 72:A6:BD:A8:F4:B4:8C:6D:37:34:07:DB:E0:2D:28:14:CF:A3:44:7B Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 50E492352C7B397057F44B2BB34A22D736DA828E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: 57 Signing time: Sat 10 May 2025 10:20:53 +0000 Manifest this update: Sat 10 May 2025 10:15:53 +0000 Manifest next update: Tue 13 May 2025 13:51:53 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: M1ygL/zniTidDoNSm6Yz3NsK8nm9YN33b2XsjQWWWwE=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: 6pByXgAQ6YR6dUDH4dJy61wrtOMRHMSvLiETBeP3xAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 13:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e4:92:35:2c:7b:39:70:57:f4:4b:2b:b3:4a:22:d7:36:da:82:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: May 10 10:15:53 2025 GMT Not After : May 13 13:51:53 2025 GMT Subject: CN=72A6BDA8F4B48C6D373407DBE02D2814CFA3447B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:61:0f:9b:a6:dc:be:ac:3e:00:56:7e:7c:38: 8b:e9:ec:81:36:c1:c8:98:5a:5c:17:53:ba:0c:ad: 2f:b1:73:67:2e:57:87:86:6f:c9:84:cc:1a:f5:9d: 88:16:d4:1e:95:73:60:58:6d:3f:cd:10:1b:a8:e0: 45:ca:2f:d1:fb:21:74:ec:35:63:10:3e:dd:6a:55: 2a:2f:58:a1:92:df:be:8e:15:e1:d9:58:32:b1:e6: 98:b8:57:72:66:79:cb:b8:36:d1:05:57:c6:eb:5d: 17:9f:ef:61:26:65:84:3a:58:c4:e0:c7:f8:b5:58: f7:51:f4:a6:a9:89:7a:54:dc:ab:bb:7f:71:47:43: 59:9c:fa:02:df:31:1a:26:f7:cd:ce:d8:de:fc:28: 51:ed:25:15:b9:45:98:d2:6c:55:a8:63:3a:c2:3e: f0:17:15:e9:7e:22:c1:1d:61:63:0d:02:7a:16:b6: 4b:89:0c:05:46:f1:74:31:b2:d1:8b:44:00:f5:69: db:d6:65:10:6f:ff:a9:7e:16:d3:c8:82:0d:ed:83: 6e:85:5e:55:d4:d8:5b:07:3e:b8:b8:73:42:50:ab: 34:ab:ca:09:83:a7:ba:6e:8c:d9:af:06:b7:2d:a2: 78:b6:b6:7e:15:c8:6e:3b:7e:cd:62:22:d0:5c:96: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A6:BD:A8:F4:B4:8C:6D:37:34:07:DB:E0:2D:28:14:CF:A3:44:7B X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:61:ce:df:70:68:bb:f5:65:2a:12:b1:5c:ae:cc:14:ff:50: 2b:0d:67:1e:d2:f8:4f:40:7d:60:c4:48:5a:f5:ec:0c:ec:83: fb:67:a0:9b:bf:84:23:66:f3:7a:80:34:8c:07:cb:f1:c3:83: ab:50:42:bc:df:1f:29:d3:1c:04:ea:cf:65:3e:69:91:c7:1f: a6:c6:7c:32:fb:2f:0d:aa:ce:89:76:9c:86:ca:79:72:53:3d: 78:d5:29:29:60:eb:02:7c:60:c6:f1:31:d0:57:f6:63:ca:7f: 03:b6:fa:4d:28:94:4c:c7:24:fc:ce:ca:7a:63:71:b9:20:16: 06:dc:fc:1f:c2:d7:14:3f:80:86:c3:e9:73:26:7c:8d:d7:96: 0a:2f:19:ad:e5:e4:32:35:f2:8e:80:f7:8c:3f:fd:ab:87:fd: db:28:9c:7b:c3:2e:91:1e:83:18:3d:e9:5b:ef:c8:3b:1b:08: 8d:dc:f5:c9:8f:b0:02:86:90:0d:19:2c:39:39:92:76:e8:f7: bd:c4:8a:17:69:5e:d4:f6:f0:0e:85:28:72:b9:e5:40:cd:35: 2f:2b:a2:ae:cc:94:81:8d:b4:01:a6:ff:ba:a9:aa:3c:50:1c: 6f:3c:0f:d3:a1:c4:6f:f4:c6:a1:85:e9:c7:f0:91:db:db:84: 98:b0:c6:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUOSSNSx7OXBX9Esrs0oi1zbago4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNTA1MTAxMDE1NTNaFw0yNTA1MTMxMzUxNTNaMDMxMTAvBgNV BAMTKDcyQTZCREE4RjRCNDhDNkQzNzM0MDdEQkUwMkQyODE0Q0ZBMzQ0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpYQ+bpty+rD4AVn58OIvp7IE2 wciYWlwXU7oMrS+xc2cuV4eGb8mEzBr1nYgW1B6Vc2BYbT/NEBuo4EXKL9H7IXTs NWMQPt1qVSovWKGS376OFeHZWDKx5pi4V3Jmecu4NtEFV8brXRef72EmZYQ6WMTg x/i1WPdR9KapiXpU3Ku7f3FHQ1mc+gLfMRom983O2N78KFHtJRW5RZjSbFWoYzrC PvAXFel+IsEdYWMNAnoWtkuJDAVG8XQxstGLRAD1advWZRBv/6l+FtPIgg3tg26F XlXU2FsHPri4c0JQqzSrygmDp7pujNmvBrctoni2tn4VyG47fs1iItBclobFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqa9qPS0jG03NAfb4C0oFM+jRHswHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFhzt9waLv1ZSoSsVyuzBT/UCsNZx7S+E9A fWDESFr17Azsg/tnoJu/hCNm83qANIwHy/HDg6tQQrzfHynTHATqz2U+aZHHH6bG fDL7Lw2qzol2nIbKeXJTPXjVKSlg6wJ8YMbxMdBX9mPKfwO2+k0olEzHJPzOynpj cbkgFgbc/B/C1xQ/gIbD6XMmfI3XlgovGa3l5DI18o6A94w//auH/dsonHvDLpEe gxg96VvvyDsbCI3c9cmPsAKGkA0ZLDk5knbo973EihdpXtT28A6FKHK55UDNNS8r oq7MlIGNtAGm/7qpqjxQHG88D9OhxG/0xqGF6cfwkdvbhJiwxrM= -----END CERTIFICATE-----Generated at Sun May 11 01:11:28 2025 by rpki-client