$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: +issTK6lHBbsBYbppwy2Tlb7ugnOmc+7tNx9tEvGUQk= Subject key identifier: C1:9E:67:5C:79:8C:88:4D:C1:A0:C9:82:CD:61:71:49:DE:B3:39:8A Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 2371986A40DA1E57650D66DBA3824451F013E782 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 04CE Signing time: Mon 12 May 2025 10:51:15 +0000 Manifest this update: Mon 12 May 2025 10:46:15 +0000 Manifest next update: Thu 15 May 2025 11:24:15 +0000 Files and hashes: 1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: bYiP/gT3tssmEshWDR+uWvBdHdyDVEshU6H8/AUYQ8o=) 2: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: UpxHhCQVDbOv0FlyKw0/1NJf9ZuZX7Q4ZHvhwD0o6ZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 11:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:71:98:6a:40:da:1e:57:65:0d:66:db:a3:82:44:51:f0:13:e7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: May 12 10:46:15 2025 GMT Not After : May 15 11:24:15 2025 GMT Subject: CN=C19E675C798C884DC1A0C982CD617149DEB3398A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:15:4c:d1:77:9d:61:7c:d4:22:e8:28:ac: d2:b1:57:1a:c4:de:ec:8e:57:38:1c:bd:b0:bd:90: e6:84:eb:ef:8e:e2:0a:c1:a8:2e:db:bf:98:88:45: 67:17:26:80:4a:e5:25:53:50:be:16:f1:18:41:d4: d5:dc:a8:ca:a7:16:ce:5f:0c:0f:2b:1c:dc:02:86: f5:5e:94:2a:dc:ba:d8:d1:83:bf:1d:de:67:0b:f7: 34:36:df:24:aa:c9:c6:c2:53:93:a8:e2:58:e6:82: e4:ae:8c:af:92:76:fc:57:1b:81:46:83:68:bf:80: 4d:d2:9c:64:2e:73:73:66:67:ff:02:7d:5c:93:48: 8e:37:36:57:6a:0c:1c:de:d0:c4:98:2f:e9:09:68: 00:de:80:0d:89:5d:29:28:58:c4:68:dd:cf:19:bd: fe:e1:b5:d6:98:a9:2e:a2:8f:15:53:fe:da:9b:f0: 82:53:40:e7:5b:a2:70:37:60:07:c2:5e:2c:ea:e6: 23:ac:bb:df:80:be:79:24:a1:e0:01:91:71:e6:03: 81:64:21:ad:c2:f0:95:86:4e:dd:a3:e8:58:24:58: 8f:3d:8a:f3:04:f0:c1:9e:a7:db:36:cc:e4:5a:eb: df:28:f3:53:08:82:88:64:5e:c9:32:c4:3b:a7:3c: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9E:67:5C:79:8C:88:4D:C1:A0:C9:82:CD:61:71:49:DE:B3:39:8A X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:22:8c:76:3d:99:eb:0f:e7:77:c4:c3:52:de:68:47:e2:ff: 96:58:7c:34:0e:a5:3f:ae:8b:0e:2f:2c:c9:2e:7e:f2:05:91: ac:ab:98:a1:0f:23:81:7d:bb:35:01:c4:87:26:60:be:2a:ba: 2c:ff:e1:ff:d0:14:28:ae:09:ad:b3:00:bb:31:60:cb:48:68: 2d:a3:71:d4:97:c2:dc:be:ef:6d:ba:64:4e:0b:fd:da:78:33: 1d:25:7f:35:8e:6b:89:a4:f7:63:90:d9:ed:82:c0:be:2b:f9: 2d:5a:5e:bf:e5:b3:1e:40:f4:96:24:0e:c4:0d:07:32:30:35: b9:c2:d3:a4:8c:3b:a3:09:d1:c3:aa:ac:32:17:6d:84:5c:0c: fd:f0:b5:cc:6c:27:6f:96:43:22:b6:60:26:b8:8d:c9:7e:88: 29:88:31:aa:13:79:c4:39:4c:e2:04:d9:ca:b3:86:18:58:a0: 19:6b:c7:10:a8:3b:5d:45:b5:66:59:e6:a1:e9:76:bb:62:fa: 6a:e5:cf:af:86:bb:d0:5a:f5:8c:87:8f:54:64:a2:66:d3:3e: 44:25:fd:44:7c:b5:88:e1:73:9a:f6:ff:f7:b6:d2:37:a1:e3: 6a:8c:99:02:ab:1b:49:2c:e4:45:7d:65:a6:10:62:24:83:5e: 43:41:45:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3GYakDaHldlDWbbo4JEUfAT54IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNTA1MTIxMDQ2MTVaFw0yNTA1MTUxMTI0MTVaMDMxMTAvBgNV BAMTKEMxOUU2NzVDNzk4Qzg4NERDMUEwQzk4MkNENjE3MTQ5REVCMzM5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhhVM0XedYXzUIugorNKxVxrE 3uyOVzgcvbC9kOaE6++O4grBqC7bv5iIRWcXJoBK5SVTUL4W8RhB1NXcqMqnFs5f DA8rHNwChvVelCrcutjRg78d3mcL9zQ23ySqycbCU5Oo4ljmguSujK+SdvxXG4FG g2i/gE3SnGQuc3NmZ/8CfVyTSI43NldqDBze0MSYL+kJaADegA2JXSkoWMRo3c8Z vf7htdaYqS6ijxVT/tqb8IJTQOdbonA3YAfCXizq5iOsu9+AvnkkoeABkXHmA4Fk Ia3C8JWGTt2j6FgkWI89ivME8MGep9s2zORa698o81MIgohkXskyxDunPOiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwZ5nXHmMiE3BoMmCzWFxSd6zOYowHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIijHY9mesP53fEw1LeaEfi/5ZYfDQOpT+u iw4vLMkufvIFkayrmKEPI4F9uzUBxIcmYL4quiz/4f/QFCiuCa2zALsxYMtIaC2j cdSXwty+7226ZE4L/dp4Mx0lfzWOa4mk92OQ2e2CwL4r+S1aXr/lsx5A9JYkDsQN BzIwNbnC06SMO6MJ0cOqrDIXbYRcDP3wtcxsJ2+WQyK2YCa4jcl+iCmIMaoTecQ5 TOIE2cqzhhhYoBlrxxCoO11FtWZZ5qHpdrti+mrlz6+Gu9Ba9YyHj1RkombTPkQl /UR8tYjhc5r2//e20jeh42qMmQKrG0ks5EV9ZaYQYiSDXkNBRSE= -----END CERTIFICATE-----Generated at Tue May 13 12:28:00 2025 by rpki-client