$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: CuYinMFyfn+50tt/+YEREC9HRCtp5b/8awRCpVzFOfo= Subject key identifier: 9E:8E:95:DF:D7:57:F3:8E:3D:4D:A3:8E:02:5E:1C:11:67:64:4A:1F Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 6030C4E5AC77CF334749695B7C4610D756B9EDDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 0144 Signing time: Sun 11 May 2025 04:21:53 +0000 Manifest this update: Sun 11 May 2025 04:16:53 +0000 Manifest next update: Wed 14 May 2025 05:37:53 +0000 Files and hashes: 1: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) 2: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: 6Bgc09fEDgFm4Gyhg/X7D8CHJqjWQ/UtlMz5M5M03e0=) 3: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 05:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:30:c4:e5:ac:77:cf:33:47:49:69:5b:7c:46:10:d7:56:b9:ed:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: May 11 04:16:53 2025 GMT Not After : May 14 05:37:53 2025 GMT Subject: CN=9E8E95DFD757F38E3D4DA38E025E1C1167644A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:32:33:c9:71:d3:a4:b0:ad:34:34:29:5c: 40:25:0c:63:55:30:2e:07:8e:39:13:98:51:a5:0b: 0f:b0:8b:f2:21:34:e8:8a:77:a5:85:89:d9:7f:b1: 7c:82:c8:75:f7:1f:07:bc:e1:7c:1b:dc:74:4a:7b: 43:17:76:be:ae:7a:bd:b8:c1:6d:51:a2:61:d3:26: 37:ae:3a:3d:89:7f:dd:4e:6d:9b:ab:e2:39:6d:e8: f1:81:d5:9c:a1:56:68:e1:23:ab:0c:91:30:07:ef: ce:33:f2:f9:f7:86:4c:4f:c4:c3:d9:57:ae:24:36: 0d:77:96:72:ea:6b:4c:15:4d:03:86:80:43:23:2d: ae:2f:dd:64:5b:82:b5:c3:68:da:8b:7f:1f:f0:5e: 49:bd:80:28:57:7b:28:6d:8c:d3:65:10:20:c9:5a: 29:76:04:ae:6e:bc:f8:94:d4:06:e3:b0:1f:d8:57: 4d:e5:63:e1:73:71:5f:0e:bb:d7:3e:58:19:ce:67: 7c:e6:9b:43:38:af:03:ab:eb:86:46:ae:58:c2:48: 1a:c3:a2:a9:bb:a0:c2:51:34:65:8a:aa:ea:42:9f: 40:b6:03:ef:41:1d:c3:1d:f8:1a:d2:08:07:92:a6: aa:1b:d4:10:d8:78:90:c4:15:7b:28:9a:bb:fb:d2: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8E:95:DF:D7:57:F3:8E:3D:4D:A3:8E:02:5E:1C:11:67:64:4A:1F X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d2:81:42:9b:c3:64:db:59:8b:27:85:e9:0e:71:8c:44:bd: 72:c0:87:5b:d6:5a:16:68:c1:3a:dc:cf:72:a4:a4:16:91:1d: 9d:39:73:0c:77:d9:5d:cf:07:39:66:36:e6:8a:34:29:f9:55: 9f:95:a1:ef:b1:44:14:ec:18:6d:a7:e6:c1:8c:e6:f9:66:87: e6:dc:7a:69:d6:62:2e:f7:d9:f6:f2:7b:ca:1d:19:18:16:04: ac:38:39:dc:13:9d:30:58:f9:51:1e:86:c4:ab:d5:31:b3:2c: 5f:22:8c:97:36:f7:63:3c:e9:aa:ae:99:6f:bb:4e:92:50:d3: 3b:ae:be:c7:32:ef:52:d3:5e:f0:dd:ed:d2:7a:8f:aa:d2:04: d3:56:31:94:c2:e3:af:3d:be:cd:23:aa:9d:e3:d3:a2:b0:ad: ef:eb:bc:22:2a:30:ab:50:e7:09:c6:8f:d7:99:01:7f:3b:f3: 91:6b:d6:f6:5a:ef:9e:81:3f:05:ac:53:aa:1b:5a:7a:85:2d: 9b:05:6f:12:45:33:f2:4b:0f:83:ea:b4:f1:fb:84:82:da:67: 17:a5:3a:31:2c:69:e5:d4:87:b1:0b:4d:96:fd:b8:03:87:95: 52:52:56:60:6d:40:ba:ff:9d:68:0e:30:18:6b:4e:5e:da:d5: 08:fd:99:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDDE5ax3zzNHSWlbfEYQ11a57d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNTA1MTEwNDE2NTNaFw0yNTA1MTQwNTM3NTNaMDMxMTAvBgNV BAMTKDlFOEU5NURGRDc1N0YzOEUzRDREQTM4RTAyNUUxQzExNjc2NDRBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsjIzyXHTpLCtNDQpXEAlDGNV MC4HjjkTmFGlCw+wi/IhNOiKd6WFidl/sXyCyHX3Hwe84Xwb3HRKe0MXdr6uer24 wW1RomHTJjeuOj2Jf91ObZur4jlt6PGB1ZyhVmjhI6sMkTAH784z8vn3hkxPxMPZ V64kNg13lnLqa0wVTQOGgEMjLa4v3WRbgrXDaNqLfx/wXkm9gChXeyhtjNNlECDJ Wil2BK5uvPiU1AbjsB/YV03lY+FzcV8Ou9c+WBnOZ3zmm0M4rwOr64ZGrljCSBrD oqm7oMJRNGWKqupCn0C2A+9BHcMd+BrSCAeSpqob1BDYeJDEFXsomrv70iedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUno6V39dX8449TaOOAl4cEWdkSh8wHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDSgUKbw2TbWYsnhekOcYxEvXLAh1vWWhZo wTrcz3KkpBaRHZ05cwx32V3PBzlmNuaKNCn5VZ+Voe+xRBTsGG2n5sGM5vlmh+bc emnWYi732fbye8odGRgWBKw4OdwTnTBY+VEehsSr1TGzLF8ijJc292M86aqumW+7 TpJQ0zuuvscy71LTXvDd7dJ6j6rSBNNWMZTC4689vs0jqp3j06Kwre/rvCIqMKtQ 5wnGj9eZAX8785Fr1vZa756BPwWsU6obWnqFLZsFbxJFM/JLD4PqtPH7hILaZxel OjEsaeXUh7ELTZb9uAOHlVJSVmBtQLr/nWgOMBhrTl7a1Qj9mXY= -----END CERTIFICATE-----Generated at Sun May 11 21:21:49 2025 by rpki-client