$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: wSXYUoQR/TmUmKi/iqXRBHuyuXtMOFjzmJ8Sp5ZIxKQ= Subject key identifier: 29:64:4B:7F:2A:94:12:2C:D1:07:8A:AF:D9:A6:D4:0B:EF:04:41:FF Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 253FAA34CF67FF810E892EB45875F44CF13C6E9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: 019D Signing time: Thu 08 May 2025 08:11:36 +0000 Manifest this update: Thu 08 May 2025 08:06:36 +0000 Manifest next update: Sun 11 May 2025 13:10:36 +0000 Files and hashes: 1: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: HZR3zP3zok3s7nBbnISinOIlfsvjzflgEnRmY60SeBU=) 2: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: PjOq+FNFeb3w0yAtv/+Tz1G1o/STxOGd/kpIjtd+xeA=) 3: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: 7T58fOq0DPMtcC4WYKEb/YqZbz0lw8nZtLVxYnso2b8=) 4: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=) 5: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=) 6: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=) 7: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=) 8: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=) 9: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: f4mlj6WVkyFeaaLH9aybOm9Xb5biRZ9xz41w+irFc4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 13:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:3f:aa:34:cf:67:ff:81:0e:89:2e:b4:58:75:f4:4c:f1:3c:6e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: May 8 08:06:36 2025 GMT Not After : May 11 13:10:36 2025 GMT Subject: CN=29644B7F2A94122CD1078AAFD9A6D40BEF0441FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:74:69:92:75:ff:8a:8c:2f:7d:f7:c1:ff: ab:82:60:4b:19:fb:1a:1e:2d:c9:64:c9:3b:ea:54: f1:1f:be:e3:76:33:d1:89:c0:7f:11:4d:7b:c8:5b: 40:7f:8e:b4:e2:0e:bd:c4:d4:ad:c2:1e:c2:4a:0b: 9f:95:89:2a:a9:b1:a5:f6:8a:3f:af:86:ab:fd:ee: bc:3a:cb:ab:c9:6a:8d:64:66:57:a4:54:f6:2c:a9: 8e:bb:f0:77:da:a2:1f:c7:3f:1f:5b:22:2f:86:5d: 6b:17:49:6d:e6:fe:03:6f:1b:84:76:6b:f4:22:8d: 99:8e:38:be:b1:25:a9:7a:02:db:35:16:81:0f:4e: 93:3a:93:de:ff:88:99:aa:50:0d:bb:7f:c5:a5:5b: 35:09:4b:61:c6:09:b0:a5:24:56:4d:0e:79:6f:a5: f4:73:8d:d0:81:24:55:3c:b1:d6:b4:a0:a9:52:52: 77:e5:2c:3f:b3:00:66:36:98:3a:e1:28:f0:1c:d1: f3:58:1e:51:08:01:d2:5a:e7:e5:19:83:df:f3:90: cf:3c:11:65:01:e9:79:76:c5:c7:89:2b:be:3d:e7: aa:b2:e9:d5:df:69:fe:10:4c:db:cd:c6:95:45:d1: e6:0f:f2:8b:6c:c3:f3:e3:93:a7:27:98:dc:03:88: a9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:64:4B:7F:2A:94:12:2C:D1:07:8A:AF:D9:A6:D4:0B:EF:04:41:FF X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a5:1d:ac:53:e2:ed:cd:a3:48:80:2d:a8:11:93:8c:87:8b: e8:ac:48:d7:23:fa:22:dd:c5:63:58:77:05:53:75:a3:9b:df: 11:28:b0:66:29:78:5b:48:0f:05:2c:4b:51:e4:ab:16:3c:16: c7:48:3a:17:ac:99:ae:35:cf:9f:6c:3a:20:01:ff:c2:27:2e: 31:a0:e2:49:89:f4:da:29:5b:ec:1e:b1:d9:f2:5b:b3:39:5a: 71:1a:a3:9e:44:27:34:83:35:61:71:97:65:d3:aa:72:5e:3c: d8:fa:d6:bc:f0:19:ec:5c:57:2e:f6:39:6d:1e:2a:56:72:76: 6b:ce:a6:6e:12:7e:64:d8:4a:d2:89:44:44:8d:a0:33:61:f9: d2:c5:e0:84:ae:fa:b7:31:0e:02:45:da:cf:8d:18:b1:00:e5: b7:0d:f9:ab:a0:9f:84:47:3c:98:6a:95:d5:b2:7b:cd:eb:52: e4:da:09:b2:0b:1a:22:01:ca:50:56:e1:c7:f7:a8:f2:75:0d: b5:c5:20:d5:01:fe:b1:a4:de:6b:a7:4b:65:c1:d2:f4:f9:01: 7f:a2:a7:5d:4c:f9:73:e5:b6:3c:bb:2f:0f:ab:09:88:4d:a4: 96:69:9b:e0:11:20:23:e0:b4:fa:5d:e7:83:9c:8b:d6:5d:8b: b5:4b:37:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJT+qNM9n/4EOiS60WHX0TPE8bpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTA1MDgwODA2MzZaFw0yNTA1MTExMzEwMzZaMDMxMTAvBgNV BAMTKDI5NjQ0QjdGMkE5NDEyMkNEMTA3OEFBRkQ5QTZENDBCRUYwNDQxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vHRpknX/iowvfffB/6uCYEsZ +xoeLclkyTvqVPEfvuN2M9GJwH8RTXvIW0B/jrTiDr3E1K3CHsJKC5+ViSqpsaX2 ij+vhqv97rw6y6vJao1kZlekVPYsqY678Hfaoh/HPx9bIi+GXWsXSW3m/gNvG4R2 a/QijZmOOL6xJal6Ats1FoEPTpM6k97/iJmqUA27f8WlWzUJS2HGCbClJFZNDnlv pfRzjdCBJFU8sda0oKlSUnflLD+zAGY2mDrhKPAc0fNYHlEIAdJa5+UZg9/zkM88 EWUB6Xl2xceJK74956qy6dXfaf4QTNvNxpVF0eYP8otsw/Pjk6cnmNwDiKmRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKWRLfyqUEizRB4qv2abUC+8EQf8wHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEilHaxT4u3No0iALagRk4yHi+isSNcj+iLd xWNYdwVTdaOb3xEosGYpeFtIDwUsS1HkqxY8FsdIOhesma41z59sOiAB/8InLjGg 4kmJ9NopW+wesdnyW7M5WnEao55EJzSDNWFxl2XTqnJePNj61rzwGexcVy72OW0e KlZydmvOpm4SfmTYStKJRESNoDNh+dLF4ISu+rcxDgJF2s+NGLEA5bcN+augn4RH PJhqldWye83rUuTaCbILGiIBylBW4cf3qPJ1DbXFINUB/rGk3munS2XB0vT5AX+i p11M+XPltjy7Lw+rCYhNpJZpm+ARICPgtPpd54Oci9Zdi7VLN6E= -----END CERTIFICATE-----Generated at Fri May 9 10:45:55 2025 by rpki-client