$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: HtYv9Od2KYxF9DUulvpe1IJqPpYVQe28ylORXgMJeek= Subject key identifier: C2:6A:19:BC:D7:C9:8A:BB:4F:3A:6C:82:81:2E:03:B8:45:17:E8:93 Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 7046A5E0A221CB83882B3C0A18D8DAE6E43A1C81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 015A Signing time: Sun 29 Jun 2025 17:31:50 +0000 Manifest this update: Sun 29 Jun 2025 17:26:50 +0000 Manifest next update: Wed 02 Jul 2025 20:30:50 +0000 Files and hashes: 1: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: xrqVOf2tJWM6/EkPCrwSo2Z/+ghOwoGwOgIU29h3Ov4=) 2: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) 3: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:46:a5:e0:a2:21:cb:83:88:2b:3c:0a:18:d8:da:e6:e4:3a:1c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Jun 29 17:26:50 2025 GMT Not After : Jul 2 20:30:50 2025 GMT Subject: CN=C26A19BCD7C98ABB4F3A6C82812E03B84517E893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:e0:0e:e7:a8:c2:44:30:45:e7:b5:86:7b: d8:18:da:63:1f:bc:28:b1:4e:74:9f:38:fe:3f:02: 94:6b:bd:3d:bc:21:a3:61:98:ac:03:bc:67:d2:54: 43:0b:38:65:03:bd:20:e3:91:26:a2:e8:b3:43:05: 9b:6c:c9:d0:a8:58:c8:ef:19:78:c6:5e:9c:f7:b9: 02:67:d9:cf:74:57:c6:df:be:1e:3d:28:d1:89:11: cf:bb:e0:3b:be:36:a3:32:d7:e9:e9:1a:d8:72:10: 81:97:1a:70:af:d3:a1:45:dc:ca:5e:d2:22:b4:f6: b5:5c:9d:ef:49:5f:8f:96:38:41:63:bf:96:3e:37: 26:0d:85:7e:df:27:6a:a9:ee:89:e1:fc:27:d3:f6: 41:4d:8f:27:9d:26:64:aa:22:4b:e7:fc:29:8d:13: 58:da:12:b6:6b:58:e4:c0:3e:c5:61:93:82:08:6f: 97:6b:e0:17:7f:1c:97:58:c8:75:52:51:33:6a:c4: 89:f5:e6:1b:da:7c:c8:4f:24:06:c3:c0:e2:ec:bd: f9:23:ad:9a:77:80:a1:e5:bd:39:d7:22:ea:79:36: 9c:64:f0:97:4b:04:86:70:f3:66:06:56:0c:a9:36: 2b:17:2b:63:86:44:5b:c3:74:b7:9a:75:03:3f:da: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6A:19:BC:D7:C9:8A:BB:4F:3A:6C:82:81:2E:03:B8:45:17:E8:93 X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:11:9d:12:45:47:c0:ab:bf:7e:4e:da:36:46:52:46:89:c8: 4a:12:e2:19:35:59:6b:79:de:91:63:f8:2d:64:f0:01:7e:ab: 03:78:9c:9b:9a:31:97:12:74:44:26:32:60:2f:bd:9c:24:44: cd:2b:b7:d9:df:f5:8a:e1:29:77:e5:82:5c:d6:16:a0:06:82: 14:1a:09:be:7c:41:2f:2e:88:be:a9:fc:1c:a5:1d:43:90:47: b4:9f:27:7f:ba:46:7e:35:52:d9:bd:9a:ca:5e:6c:59:2f:f9: 9b:72:ff:e5:09:f2:29:3d:99:dd:57:10:03:29:0d:39:68:99: f7:3e:d5:e5:52:44:2a:4f:a2:fd:2b:a1:3d:c5:15:3c:e9:2d: 0e:08:b0:4e:17:40:26:92:12:f0:10:b7:0c:dd:1a:71:34:c1: 78:44:75:e0:52:bc:e0:c6:f4:1e:16:55:a5:ce:0c:7e:56:ea: 3f:e4:d0:29:b0:14:ab:f3:c1:c5:13:da:f7:37:1b:a1:5e:d8: 34:63:32:55:cf:77:44:95:ce:d9:fb:ba:f8:8c:14:c3:3a:af: a7:90:8d:3d:f5:fc:9d:16:62:da:45:c2:8d:65:97:f6:61:5f: a2:56:a7:87:55:2d:7a:42:bd:1c:9c:47:97:0c:2b:6f:bc:0d: 52:b1:99:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEal4KIhy4OIKzwKGNja5uQ6HIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTA2MjkxNzI2NTBaFw0yNTA3MDIyMDMwNTBaMDMxMTAvBgNV BAMTKEMyNkExOUJDRDdDOThBQkI0RjNBNkM4MjgxMkUwM0I4NDUxN0U4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPuAO56jCRDBF57WGe9gY2mMf vCixTnSfOP4/ApRrvT28IaNhmKwDvGfSVEMLOGUDvSDjkSai6LNDBZtsydCoWMjv GXjGXpz3uQJn2c90V8bfvh49KNGJEc+74Du+NqMy1+npGthyEIGXGnCv06FF3Mpe 0iK09rVcne9JX4+WOEFjv5Y+NyYNhX7fJ2qp7onh/CfT9kFNjyedJmSqIkvn/CmN E1jaErZrWOTAPsVhk4IIb5dr4Bd/HJdYyHVSUTNqxIn15hvafMhPJAbDwOLsvfkj rZp3gKHlvTnXIup5Npxk8JdLBIZw82YGVgypNisXK2OGRFvDdLeadQM/2rRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwmoZvNfJirtPOmyCgS4DuEUX6JMwHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIRnRJFR8Crv35O2jZGUkaJyEoS4hk1WWt5 3pFj+C1k8AF+qwN4nJuaMZcSdEQmMmAvvZwkRM0rt9nf9YrhKXflglzWFqAGghQa Cb58QS8uiL6p/BylHUOQR7SfJ3+6Rn41Utm9mspebFkv+Zty/+UJ8ik9md1XEAMp DTlomfc+1eVSRCpPov0roT3FFTzpLQ4IsE4XQCaSEvAQtwzdGnE0wXhEdeBSvODG 9B4WVaXODH5W6j/k0CmwFKvzwcUT2vc3G6Fe2DRjMlXPd0SVztn7uviMFMM6r6eQ jT31/J0WYtpFwo1ll/ZhX6JWp4dVLXpCvRycR5cMK2+8DVKxmdg= -----END CERTIFICATE-----Generated at Tue Jul 1 09:54:17 2025 by rpki-client