$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: qBD/0jKvdFB0Neo6KFG+kBfoh5kkBHIZ/fmulzlztng= Subject key identifier: 53:EE:F4:9D:0A:75:8E:43:E9:7F:3B:F2:AB:41:F7:89:8E:A8:60:4F Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 5030BB11DF06032F61F1B07FC200203DBEFADBA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: DB Signing time: Mon 30 Jun 2025 08:41:57 +0000 Manifest this update: Mon 30 Jun 2025 08:36:57 +0000 Manifest next update: Thu 03 Jul 2025 19:59:57 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: jdqP8ZWZFquDvYwbW3wTKk2z/rwrtFe5PnlHsmyYzu4=) 2: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=) 3: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 18:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:30:bb:11:df:06:03:2f:61:f1:b0:7f:c2:00:20:3d:be:fa:db:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Jun 30 08:36:57 2025 GMT Not After : Jul 3 19:59:57 2025 GMT Subject: CN=53EEF49D0A758E43E97F3BF2AB41F7898EA8604F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:eb:60:52:d5:9f:cf:f7:00:f8:1a:3d:ee: 39:4c:85:b6:53:bf:06:20:49:0a:f3:46:00:65:14: ed:25:43:e0:40:f6:26:ab:d0:75:3b:bb:fc:9a:ec: 97:ed:24:df:ce:89:5f:e2:96:70:b5:72:92:0e:a2: 58:f2:d4:58:2b:a4:86:e0:73:e6:8f:d3:56:ca:ba: 36:78:51:30:2b:ba:5b:f7:f7:90:79:de:5d:bc:c1: 38:25:2f:95:8e:7c:fb:4a:20:c7:ba:92:75:98:7f: 72:6a:1f:3a:36:0e:7c:a5:bb:95:d0:8d:68:6e:54: 36:e0:7f:10:c9:b8:49:1b:b9:64:dd:90:8b:3e:3c: 5a:ef:c6:ad:14:e8:74:02:82:94:2d:a8:0a:d8:30: b9:3f:33:d5:aa:88:82:b3:1d:1b:4b:f2:a3:e0:f8: 3c:de:f7:45:a9:79:c3:7f:ad:ab:0a:6f:0a:1c:fc: 29:91:98:e4:83:3a:8b:31:a4:ca:68:23:ab:66:28: 0b:89:5d:b7:2a:a0:04:fa:fa:32:40:6b:7a:b8:b0: a6:40:81:7a:dc:28:05:5d:98:41:cb:7e:91:c1:70: 4a:e8:9a:37:53:da:1f:a4:fe:d3:41:c0:60:e8:fe: 85:f7:1c:bf:49:c6:3f:ef:ab:41:71:9d:49:49:c8: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EE:F4:9D:0A:75:8E:43:E9:7F:3B:F2:AB:41:F7:89:8E:A8:60:4F X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3f:56:a3:8b:e5:63:be:a4:d4:ff:53:95:12:cd:ba:52:ed: 3a:18:0f:e7:94:87:6e:1f:c8:17:01:87:a4:ce:d7:06:46:02: 4e:e7:c3:4f:63:a4:63:78:67:65:ee:93:de:8c:23:0b:89:54: d6:c2:d6:61:33:84:6c:71:50:77:74:a1:98:ec:4a:ea:a4:3a: 2e:ec:8b:87:18:a8:8b:5a:f4:37:a5:a6:93:e4:21:dd:ea:54: 8e:0f:9b:23:9e:d8:f0:1d:ac:f5:47:ad:6d:5f:f7:1a:0d:5d: 1d:2c:fd:0d:37:ab:54:d2:e4:cd:64:05:6e:92:f0:bb:e1:de: 67:03:9a:c5:f4:ed:bc:42:8c:26:a3:f8:21:9e:bd:d1:18:27: b1:1a:a2:84:b3:c2:c0:55:83:da:d3:63:96:eb:5e:3a:18:97: 5b:df:a1:d4:4d:f7:ac:d0:31:32:ac:4d:1c:8b:dc:19:e8:e5: f9:3c:a3:3b:1e:a0:c4:5e:7e:e8:17:3e:e0:3c:f6:79:c8:69: 14:76:c5:a9:00:7d:b0:63:31:29:b5:f3:c2:69:5f:2f:20:43: 4e:e7:36:02:12:c6:6b:cb:9d:fd:d5:d6:45:a8:3c:a2:c6:11: 7a:20:0e:99:39:ae:b1:6e:d3:7a:94:24:52:56:09:c3:e8:9e: 4a:46:22:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUDC7Ed8GAy9h8bB/wgAgPb7626UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNTA2MzAwODM2NTdaFw0yNTA3MDMxOTU5NTdaMDMxMTAvBgNV BAMTKDUzRUVGNDlEMEE3NThFNDNFOTdGM0JGMkFCNDFGNzg5OEVBODYwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQ+tgUtWfz/cA+Bo97jlMhbZT vwYgSQrzRgBlFO0lQ+BA9iar0HU7u/ya7JftJN/OiV/ilnC1cpIOoljy1FgrpIbg c+aP01bKujZ4UTArulv395B53l28wTglL5WOfPtKIMe6knWYf3JqHzo2Dnylu5XQ jWhuVDbgfxDJuEkbuWTdkIs+PFrvxq0U6HQCgpQtqArYMLk/M9WqiIKzHRtL8qPg +Dze90WpecN/rasKbwoc/CmRmOSDOosxpMpoI6tmKAuJXbcqoAT6+jJAa3q4sKZA gXrcKAVdmEHLfpHBcEromjdT2h+k/tNBwGDo/oX3HL9Jxj/vq0FxnUlJyDknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU+70nQp1jkPpfzvyq0H3iY6oYE8wHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU/VqOL5WO+pNT/U5USzbpS7ToYD+eUh24f yBcBh6TO1wZGAk7nw09jpGN4Z2Xuk96MIwuJVNbC1mEzhGxxUHd0oZjsSuqkOi7s i4cYqIta9DelppPkId3qVI4PmyOe2PAdrPVHrW1f9xoNXR0s/Q03q1TS5M1kBW6S 8Lvh3mcDmsX07bxCjCaj+CGevdEYJ7EaooSzwsBVg9rTY5brXjoYl1vfodRN96zQ MTKsTRyL3Bno5fk8ozseoMRefugXPuA89nnIaRR2xakAfbBjMSm188JpXy8gQ07n NgISxmvLnf3V1kWoPKLGEXogDpk5rrFu03qUJFJWCcPonkpGIn8= -----END CERTIFICATE-----Generated at Mon Jun 30 16:31:05 2025 by rpki-client