$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: yh5B9sqG/xuUJdJRIX9GcJXGOio4UBGpzXG2QLwqiJI= Subject key identifier: 07:BC:6E:67:5B:6B:4B:55:AA:69:B2:B6:C7:EA:CD:3F:A4:3F:0C:12 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 114C9D04A2E0C19B2F1F3522A463B9195563CB18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04A0 Signing time: Wed 07 May 2025 16:50:56 +0000 Manifest this update: Wed 07 May 2025 16:45:56 +0000 Manifest next update: Sat 10 May 2025 18:17:56 +0000 Files and hashes: 1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: ucASMxaw5oYsEObo8AgMJzEMocfl1zthB76wz+vDw50=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: hy7MHDWEDjxGDvk+/qutfkgc+zuRrswWd+OhRhF5XYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 18:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4c:9d:04:a2:e0:c1:9b:2f:1f:35:22:a4:63:b9:19:55:63:cb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: May 7 16:45:56 2025 GMT Not After : May 10 18:17:56 2025 GMT Subject: CN=07BC6E675B6B4B55AA69B2B6C7EACD3FA43F0C12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:32:de:0f:aa:44:85:52:5f:f6:24:26:c1: 8c:70:56:4f:15:56:7a:17:9e:70:a1:63:53:a1:2d: 20:3f:61:c2:46:7d:31:41:f0:9a:cf:f6:d7:30:72: 9d:b9:e2:c0:6a:15:68:a3:fd:4a:8a:ed:10:07:63: 3f:98:e6:c9:f5:97:c6:89:14:e0:ff:05:27:6d:44: 5a:c2:2a:ba:ca:e6:2f:9b:7d:76:7e:59:0d:d9:72: ed:1c:78:13:df:94:da:ce:2b:57:98:59:74:19:2a: c2:61:71:65:44:1f:e2:55:5d:77:19:81:1b:91:06: c5:32:1e:10:f2:8c:d7:cb:f8:fd:d8:e4:1f:75:47: 79:6b:5e:d2:b4:96:5b:e1:0b:bd:08:d8:a6:79:be: 54:3f:a2:02:7b:c2:2d:d3:17:bb:3b:16:93:fc:c9: 62:6e:04:90:01:00:24:81:f3:ff:67:4d:b2:5d:c8: 31:0d:5e:dd:52:f6:ae:53:eb:63:8e:30:4b:44:4e: a3:7b:ee:24:04:05:4d:2e:2e:80:3b:00:ab:b7:92: e1:15:2c:70:98:df:3b:04:d2:df:4c:4f:81:49:a8: 36:c3:8b:37:74:a5:fb:13:b2:6a:7f:22:95:c6:07: 4d:53:9d:75:2d:0c:f0:7e:d6:34:da:0d:c0:f7:a3: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BC:6E:67:5B:6B:4B:55:AA:69:B2:B6:C7:EA:CD:3F:A4:3F:0C:12 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c0:eb:e9:1f:c3:98:d2:b7:f4:ac:e3:61:e5:e3:a5:03:32: 3e:8e:7d:b9:69:55:b4:cf:f6:81:69:45:e8:5f:08:38:d1:5e: 7c:e8:65:22:f4:e5:a7:ad:6b:49:ae:f3:f2:12:37:28:e5:71: 57:eb:03:70:e5:57:92:4a:7d:21:fe:4a:b9:fc:73:d3:f6:50: 12:d8:7b:57:bd:bd:35:f8:0c:3b:5c:9d:6c:4a:59:dc:7b:ab: 56:89:b6:49:44:28:0b:41:5c:8a:ff:16:1f:8c:0f:9f:e0:80: f5:57:f4:e7:43:ba:cb:b9:30:b7:bd:3f:17:d1:1e:23:d1:49: 97:5c:38:10:3b:3e:ea:bc:aa:a2:fb:5c:e2:3e:22:73:19:10: 9d:5f:19:9f:38:82:b9:a2:9f:35:6f:93:e2:da:fd:ce:f2:6f: 85:60:7f:59:2c:e0:51:19:c5:5d:95:06:07:c2:d5:b5:82:c0: fd:b6:6d:d3:46:4f:be:6f:29:a3:af:00:7b:31:6b:4a:c0:7f: 91:96:ba:fc:14:d4:0b:44:8e:c8:5a:6b:cb:db:8e:fe:de:a5: 98:21:67:b2:88:ff:a5:a2:17:04:00:ab:2e:24:58:89:08:fa: 63:36:7f:b3:8e:0f:a9:a2:68:3d:2d:b6:4e:f3:cd:a0:2a:2b: d6:6b:99:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEUydBKLgwZsvHzUipGO5GVVjyxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTA1MDcxNjQ1NTZaFw0yNTA1MTAxODE3NTZaMDMxMTAvBgNV BAMTKDA3QkM2RTY3NUI2QjRCNTVBQTY5QjJCNkM3RUFDRDNGQTQzRjBDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHTLeD6pEhVJf9iQmwYxwVk8V VnoXnnChY1OhLSA/YcJGfTFB8JrP9tcwcp254sBqFWij/UqK7RAHYz+Y5sn1l8aJ FOD/BSdtRFrCKrrK5i+bfXZ+WQ3Zcu0ceBPflNrOK1eYWXQZKsJhcWVEH+JVXXcZ gRuRBsUyHhDyjNfL+P3Y5B91R3lrXtK0llvhC70I2KZ5vlQ/ogJ7wi3TF7s7FpP8 yWJuBJABACSB8/9nTbJdyDENXt1S9q5T62OOMEtETqN77iQEBU0uLoA7AKu3kuEV LHCY3zsE0t9MT4FJqDbDizd0pfsTsmp/IpXGB01TnXUtDPB+1jTaDcD3o5tlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB7xuZ1trS1WqabK2x+rNP6Q/DBIwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/A6+kfw5jSt/Ss42Hl46UDMj6OfblpVbTP 9oFpRehfCDjRXnzoZSL05aeta0mu8/ISNyjlcVfrA3DlV5JKfSH+Srn8c9P2UBLY e1e9vTX4DDtcnWxKWdx7q1aJtklEKAtBXIr/Fh+MD5/ggPVX9OdDusu5MLe9PxfR HiPRSZdcOBA7Puq8qqL7XOI+InMZEJ1fGZ84grminzVvk+La/c7yb4Vgf1ks4FEZ xV2VBgfC1bWCwP22bdNGT75vKaOvAHsxa0rAf5GWuvwU1AtEjshaa8vbjv7epZgh Z7KI/6WiFwQAqy4kWIkI+mM2f7OOD6miaD0ttk7zzaAqK9Zrmak= -----END CERTIFICATE-----Generated at Thu May 8 10:35:41 2025 by rpki-client