$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft (raw, json) Hash identifier: KsZmM2+MBkzM6R+Hccr1hLG9yGQIPe8XLOC7L0yVFFs= Subject key identifier: F4:74:16:F0:40:B3:B5:CD:A5:7C:E5:7B:82:16:94:CF:DE:36:A9:98 Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 5E859E1EF2A1E274293BBF7BC6286CD09636E6E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft Manifest number: 0130 Signing time: Fri 09 May 2025 23:20:58 +0000 Manifest this update: Fri 09 May 2025 23:15:58 +0000 Manifest next update: Tue 13 May 2025 05:19:58 +0000 Files and hashes: 1: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: Lyic6tpyx8dE3BSp7Wiu55L5Zbno6Dp9EUOJ8PKwjfM=) 2: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl (hash: WwkRX4iGHM9Rp62fw1YIkAV94slkamMECpzKmrCMc8s=) 3: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: ndDFlzQ0IuA3S69ND6C8Jsle8tJZdiO7+mspElCpg00=) 4: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 5H4JKwnq4oresa7MkpV7TriW3ivumi6N3jRxijZ21Fs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 05:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:85:9e:1e:f2:a1:e2:74:29:3b:bf:7b:c6:28:6c:d0:96:36:e6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: May 9 23:15:58 2025 GMT Not After : May 13 05:19:58 2025 GMT Subject: CN=F47416F040B3B5CDA57CE57B821694CFDE36A998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:e8:40:ea:ec:9a:93:03:c0:f2:2c:c6:6b: 4f:dd:6e:63:5d:21:54:87:f9:01:89:00:34:27:3a: df:09:25:93:be:97:a5:58:cf:93:d8:51:70:ad:5f: b6:60:bb:4f:29:13:58:01:51:87:58:b4:6d:e4:92: fc:8d:89:8c:d3:df:b9:d5:07:c2:3f:53:50:0a:34: ae:72:39:9d:b8:60:50:11:6b:24:66:99:3a:b4:3f: f6:27:bf:07:f3:10:16:86:8e:78:c6:e9:37:be:da: 5b:e8:2a:b0:57:dc:96:c1:a6:56:1e:81:7e:e7:57: 89:24:87:c4:f7:45:29:e7:cd:ad:dc:c0:18:7d:31: 3d:30:2c:db:ad:62:37:b8:ce:51:7c:d3:a4:f6:70: 2c:24:0d:18:df:d2:3a:87:5e:63:bb:f9:9b:a9:6f: 94:a4:2c:02:07:85:c0:f2:06:3e:c4:21:a6:50:7e: 84:2a:70:64:2c:6a:20:61:41:72:b7:41:88:dd:ef: 34:6a:8d:90:fe:05:e1:37:b7:44:63:94:2c:4f:bc: fb:c2:2f:84:9e:d4:46:eb:6b:d4:de:26:8b:38:a4: bc:bf:8e:7b:e0:98:84:25:ee:32:d3:83:34:ef:53: f1:a2:27:b3:2d:f2:34:ae:91:53:44:46:bc:16:66: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:74:16:F0:40:B3:B5:CD:A5:7C:E5:7B:82:16:94:CF:DE:36:A9:98 X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:db:18:b1:8e:58:31:c5:9c:05:e7:c0:e3:ba:45:b9:f2:0d: c3:45:72:9d:7f:8b:80:a1:4e:77:0c:e3:23:7d:fe:6c:f6:ef: 0d:47:21:da:dc:77:93:2c:f7:2e:4b:eb:fa:1b:7b:b8:70:84: b0:be:13:f6:0b:bf:0a:88:7a:b4:fb:90:0d:5d:48:00:ae:e7: a8:7c:d1:ae:1e:7f:1e:36:67:13:3a:14:36:03:e1:bd:4a:3c: 73:a0:d0:83:eb:90:6a:cc:5f:09:2e:1b:d9:61:3d:cd:d3:cf: 5e:c8:fe:08:dc:2f:7f:03:62:8a:34:5e:9f:3e:93:b0:c1:6e: 95:80:23:9c:c0:83:e9:93:ef:d1:ca:db:66:b3:96:ca:44:f7: 56:c6:a4:5d:9d:64:fd:4a:ae:bb:25:48:30:8a:27:84:8d:7e: a8:49:78:1f:9f:f5:7e:46:7b:35:fa:c1:e6:af:fa:0f:5e:2c: c9:92:c7:88:49:df:8e:0a:92:6e:43:69:93:ad:41:cd:20:b5: 33:54:4d:b5:21:26:24:2b:98:b6:6b:68:3e:3d:1d:e9:7b:bf: 1f:f7:72:9b:8e:46:d2:03:68:ae:3f:57:82:9b:28:19:e4:4a: a7:3e:8f:1f:4f:51:93:8e:bb:bb:46:05:33:70:5d:56:7d:7f: 31:3c:1b:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXoWeHvKh4nQpO797xihs0JY25ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNTA1MDkyMzE1NThaFw0yNTA1MTMwNTE5NThaMDMxMTAvBgNV BAMTKEY0NzQxNkYwNDBCM0I1Q0RBNTdDRTU3QjgyMTY5NENGREUzNkE5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2uhA6uyakwPA8izGa0/dbmNd IVSH+QGJADQnOt8JJZO+l6VYz5PYUXCtX7Zgu08pE1gBUYdYtG3kkvyNiYzT37nV B8I/U1AKNK5yOZ24YFARayRmmTq0P/YnvwfzEBaGjnjG6Te+2lvoKrBX3JbBplYe gX7nV4kkh8T3RSnnza3cwBh9MT0wLNutYje4zlF806T2cCwkDRjf0jqHXmO7+Zup b5SkLAIHhcDyBj7EIaZQfoQqcGQsaiBhQXK3QYjd7zRqjZD+BeE3t0RjlCxPvPvC L4Se1Ebra9TeJos4pLy/jnvgmIQl7jLTgzTvU/GiJ7Mt8jSukVNERrwWZjPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9HQW8ECztc2lfOV7ghaUz942qZgwHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFE NEM1MDg1MkE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATbGLGOWDHFnAXnwOO6RbnyDcNFcp1/i4Ch TncM4yN9/mz27w1HIdrcd5Ms9y5L6/obe7hwhLC+E/YLvwqIerT7kA1dSACu56h8 0a4efx42ZxM6FDYD4b1KPHOg0IPrkGrMXwkuG9lhPc3Tz17I/gjcL38DYoo0Xp8+ k7DBbpWAI5zAg+mT79HK22azlspE91bGpF2dZP1KrrslSDCKJ4SNfqhJeB+f9X5G ezX6weav+g9eLMmSx4hJ344Kkm5DaZOtQc0gtTNUTbUhJiQrmLZraD49Hel7vx/3 cpuORtIDaK4/V4KbKBnkSqc+jx9PUZOOu7tGBTNwXVZ9fzE8Gxg= -----END CERTIFICATE-----Generated at Sat May 10 10:11:48 2025 by rpki-client