$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: yEA7ELny+RofbWDM7vwD0lwMIpOHP3ecXWFFrkCBMxQ= Subject key identifier: 10:56:59:C3:2D:B9:F5:E5:ED:9B:12:22:B9:11:57:E0:21:30:85:31 Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 66E28DC4B3D629ED07AD1F4B2C42D216C19617EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: 6E Signing time: Mon 30 Jun 2025 16:40:53 +0000 Manifest this update: Mon 30 Jun 2025 16:35:53 +0000 Manifest next update: Fri 04 Jul 2025 04:01:53 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: JN2eCDfno9SgxVcdq8ivD2+ZDXdq107huI6aPzui8yo=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: 6pByXgAQ6YR6dUDH4dJy61wrtOMRHMSvLiETBeP3xAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e2:8d:c4:b3:d6:29:ed:07:ad:1f:4b:2c:42:d2:16:c1:96:17:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Jun 30 16:35:53 2025 GMT Not After : Jul 4 04:01:53 2025 GMT Subject: CN=105659C32DB9F5E5ED9B1222B91157E021308531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:b8:79:19:73:4f:47:c2:a0:ad:ef:07:01: a6:3b:3e:c5:90:3c:77:f1:04:0c:6b:b8:69:ae:3b: a7:9d:20:d2:72:99:0f:2b:dd:dc:5f:7e:5e:33:63: 89:3c:e1:79:2e:5f:06:25:62:3c:fa:2d:0f:68:83: 68:ef:2f:da:05:f6:70:73:2f:66:e4:53:1f:4d:57: 71:07:e8:27:9e:f8:80:48:ac:68:ce:ff:5c:89:5e: d9:0e:b1:3c:f9:3b:7e:bb:45:12:9b:88:fb:7b:71: 07:d6:68:0f:5d:0a:3b:3e:39:e0:ab:6f:04:e5:0b: 29:4b:76:73:fe:01:08:6c:bf:6a:eb:22:b7:b4:8a: 9d:ca:fa:4f:3a:13:f5:2f:c2:bf:7a:22:59:d2:18: 96:8c:14:f3:cd:f7:a9:0f:55:9a:44:2e:9c:91:d5: 79:4f:2e:a6:98:e1:2c:78:13:b9:54:76:80:e5:f3: 4a:6d:c2:da:5b:b3:4c:7c:b5:cc:e5:35:4d:55:d3: b0:95:79:9a:ac:b2:a9:4b:fe:78:c1:6f:82:2f:f6: b9:db:ec:90:a0:82:22:40:6d:be:3f:dc:f0:43:7b: 6a:34:a0:38:5c:4e:af:3a:fa:73:79:4b:95:6c:b1: 2a:7b:7d:ed:aa:d6:85:47:4a:f9:fa:0d:af:7f:e0: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:56:59:C3:2D:B9:F5:E5:ED:9B:12:22:B9:11:57:E0:21:30:85:31 X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a8:5c:0d:0c:7d:d9:5f:ff:b9:99:d2:9b:f1:99:5a:37:5f: 67:b8:55:00:af:be:6f:ac:63:95:1f:03:6b:95:e3:7a:85:58: d2:9c:16:39:2c:9f:ae:f5:79:81:56:f7:5c:17:cc:36:90:40: 7d:ad:1d:82:45:e0:75:21:72:74:04:cc:fb:11:cb:c5:09:ea: 33:a6:22:89:81:b2:bb:47:d6:96:dc:a8:d8:db:e8:17:93:0f: a5:9c:38:59:ed:24:6c:a6:49:b7:eb:26:78:a9:55:d2:55:9c: d5:03:52:31:ef:5c:08:28:8e:f1:08:93:a8:b2:c7:44:86:5f: 53:ee:f9:74:7e:7e:e3:97:1b:18:e9:01:bf:0b:b1:e5:de:c4: eb:16:b4:6c:44:ce:fc:b5:af:1e:8c:3f:1c:29:8d:8c:ea:06: c7:6c:62:39:aa:e0:1a:06:40:93:0b:f7:b9:5c:23:76:49:75: 71:4e:93:6c:a5:24:45:26:2e:ac:5e:bf:d7:ed:d2:af:e3:61: ef:ea:5f:5d:c5:b9:87:93:40:bf:e7:db:31:cc:d5:69:bb:21: 4e:29:b6:95:35:d4:d7:8d:6d:af:2e:75:5a:01:69:1a:a0:f0: ef:f2:53:7d:8a:22:36:b5:28:bb:0f:31:bf:a5:34:b1:82:c4: 62:e6:92:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuKNxLPWKe0HrR9LLELSFsGWF+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNTA2MzAxNjM1NTNaFw0yNTA3MDQwNDAxNTNaMDMxMTAvBgNV BAMTKDEwNTY1OUMzMkRCOUY1RTVFRDlCMTIyMkI5MTE1N0UwMjEzMDg1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/rh5GXNPR8Kgre8HAaY7PsWQ PHfxBAxruGmuO6edINJymQ8r3dxffl4zY4k84XkuXwYlYjz6LQ9og2jvL9oF9nBz L2bkUx9NV3EH6Cee+IBIrGjO/1yJXtkOsTz5O367RRKbiPt7cQfWaA9dCjs+OeCr bwTlCylLdnP+AQhsv2rrIre0ip3K+k86E/Uvwr96IlnSGJaMFPPN96kPVZpELpyR 1XlPLqaY4Sx4E7lUdoDl80ptwtpbs0x8tczlNU1V07CVeZqssqlL/njBb4Iv9rnb 7JCggiJAbb4/3PBDe2o0oDhcTq86+nN5S5VssSp7fe2q1oVHSvn6Da9/4DVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEFZZwy259eXtmxIiuRFX4CEwhTEwHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOoXA0Mfdlf/7mZ0pvxmVo3X2e4VQCvvm+s Y5UfA2uV43qFWNKcFjksn671eYFW91wXzDaQQH2tHYJF4HUhcnQEzPsRy8UJ6jOm IomBsrtH1pbcqNjb6BeTD6WcOFntJGymSbfrJnipVdJVnNUDUjHvXAgojvEIk6iy x0SGX1Pu+XR+fuOXGxjpAb8LseXexOsWtGxEzvy1rx6MPxwpjYzqBsdsYjmq4BoG QJML97lcI3ZJdXFOk2ylJEUmLqxev9ft0q/jYe/qX13FuYeTQL/n2zHM1Wm7IU4p tpU11NeNba8udVoBaRqg8O/yU32KIja1KLsPMb+lNLGCxGLmkiw= -----END CERTIFICATE-----Generated at Tue Jul 1 01:07:16 2025 by rpki-client