$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft (raw, json) Hash identifier: 1U4d504BvKJu/OKQuvFxFqEpLGLe08z0PlOkSuV9s8c= Subject key identifier: 90:3C:47:4F:58:48:CC:29:D5:CB:9C:58:D3:32:58:CD:EB:EA:BB:0B Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 1C1A02B4ACD975BE0F15D84828FF6A34FE0A5A17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft Manifest number: 0147 Signing time: Sun 29 Jun 2025 19:01:05 +0000 Manifest this update: Sun 29 Jun 2025 18:56:05 +0000 Manifest next update: Thu 03 Jul 2025 05:57:05 +0000 Files and hashes: 1: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: D5hukbaY+N3AjWmkuBGFFTwqc+CzamYmFL0amMEyMMM=) 2: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: Ew2OSWEohUTuvmIQMM4jLPYBjKqzXCpLNwLiyPu5TfM=) 3: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl (hash: jlkWsvaAKVJfCRGRoTpxrRelrL97RW3/IcxfHxEAXGk=) 4: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: vmw9bcS7HYiEIqjVICRaVcatSeJQ8ZNuTTgtgTfawew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1a:02:b4:ac:d9:75:be:0f:15:d8:48:28:ff:6a:34:fe:0a:5a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: Jun 29 18:56:05 2025 GMT Not After : Jul 3 05:57:05 2025 GMT Subject: CN=903C474F5848CC29D5CB9C58D33258CDEBEABB0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:c6:cc:4f:11:3c:90:60:5e:15:d6:dc:19: 02:5e:1e:ad:8e:6f:db:4b:79:17:ed:88:5d:9e:09: 5e:f2:34:4e:a4:1b:91:eb:1c:f7:d2:ac:15:e5:41: 9f:64:ae:a8:27:1b:6f:29:3a:4a:89:09:c7:e7:14: be:07:12:10:6a:03:f0:bf:64:1f:0c:2d:55:19:4e: de:65:c8:28:d3:fe:06:aa:07:39:ce:db:a7:72:b9: 28:01:19:a9:a7:d4:d8:fc:24:f0:d7:f2:df:bb:82: 3c:45:a9:3c:0e:1c:17:a8:cd:48:aa:d9:20:40:52: c9:71:a0:de:e2:7f:0e:07:ef:e9:2d:ec:21:ce:0d: 6e:01:f2:6f:bc:a0:34:cf:fb:c0:ec:a2:3a:33:04: c8:33:47:75:b8:4a:62:90:cc:7b:cb:a5:9f:44:bb: c7:85:6f:de:ee:3e:b9:6b:40:c9:c4:a4:00:3c:9e: 21:4b:90:7d:94:b0:2e:fc:72:48:b0:d1:0e:f9:29: ce:7f:a4:7e:94:ff:c3:9b:48:5b:11:68:8c:27:d9: cb:4f:a9:34:86:a6:ca:93:98:c6:3a:f2:91:61:83: f3:48:66:b0:b7:cf:cf:ee:a8:87:46:03:4e:02:22: 9f:98:10:ce:5f:bf:75:1e:0b:88:91:f8:da:c0:d6: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3C:47:4F:58:48:CC:29:D5:CB:9C:58:D3:32:58:CD:EB:EA:BB:0B X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:10:79:21:b1:07:64:a0:14:70:0f:df:54:e0:97:34:da:50: 35:a4:9d:d8:c0:d4:23:61:57:e3:58:6f:e3:6a:42:f9:7f:6c: 90:21:6b:10:1b:c1:da:40:04:ee:02:58:e0:49:06:ee:87:c1: d7:1c:69:c1:ba:a3:44:32:48:01:a4:29:07:c9:5e:9a:a5:e9: fb:c3:43:0f:d7:4b:51:44:33:a2:39:d3:18:db:b3:4d:46:f0: 50:3a:01:52:63:d5:07:bd:b4:14:7a:c9:87:63:33:fd:f4:9c: 76:7c:5b:a4:27:e4:d9:46:7f:46:49:f1:ec:ce:2e:db:47:b1: b6:ea:b5:5d:7d:95:54:93:f3:66:a4:e8:d3:37:00:ca:0a:98: 0d:40:bb:97:bf:3a:e8:c7:4d:da:d3:4c:a5:f6:79:c3:2c:dd: d9:b3:b9:1d:36:c1:dc:55:1c:3d:72:aa:98:0b:95:60:e8:0f: 96:01:c1:a7:02:59:07:d0:65:a7:8e:f9:0d:36:55:91:a5:8c: 27:b7:8b:37:38:e0:13:6c:92:78:a2:03:2a:0d:25:e5:11:00: 9a:97:a6:48:45:71:cb:55:07:eb:01:db:ae:b5:4a:ad:57:cb: 8b:b0:fb:65:0c:43:d0:40:0b:8a:0b:fa:d3:87:3f:f9:d9:15: ae:dc:67:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBoCtKzZdb4PFdhIKP9qNP4KWhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNTA2MjkxODU2MDVaFw0yNTA3MDMwNTU3MDVaMDMxMTAvBgNV BAMTKDkwM0M0NzRGNTg0OENDMjlENUNCOUM1OEQzMzI1OENERUJFQUJCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHsbMTxE8kGBeFdbcGQJeHq2O b9tLeRftiF2eCV7yNE6kG5HrHPfSrBXlQZ9krqgnG28pOkqJCcfnFL4HEhBqA/C/ ZB8MLVUZTt5lyCjT/gaqBznO26dyuSgBGamn1Nj8JPDX8t+7gjxFqTwOHBeozUiq 2SBAUslxoN7ifw4H7+kt7CHODW4B8m+8oDTP+8DsojozBMgzR3W4SmKQzHvLpZ9E u8eFb97uPrlrQMnEpAA8niFLkH2UsC78ckiw0Q75Kc5/pH6U/8ObSFsRaIwn2ctP qTSGpsqTmMY68pFhg/NIZrC3z8/uqIdGA04CIp+YEM5fv3UeC4iR+NrA1qxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkDxHT1hIzCnVy5xY0zJYzevquwswHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFE NEM1MDg1MkE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsQeSGxB2SgFHAP31TglzTaUDWkndjA1CNh V+NYb+NqQvl/bJAhaxAbwdpABO4CWOBJBu6HwdccacG6o0QySAGkKQfJXpql6fvD Qw/XS1FEM6I50xjbs01G8FA6AVJj1Qe9tBR6yYdjM/30nHZ8W6Qn5NlGf0ZJ8ezO LttHsbbqtV19lVST82ak6NM3AMoKmA1Au5e/OujHTdrTTKX2ecMs3dmzuR02wdxV HD1yqpgLlWDoD5YBwacCWQfQZaeO+Q02VZGljCe3izc44BNskniiAyoNJeURAJqX pkhFcctVB+sB2661Sq1Xy4uw+2UMQ9BAC4oL+tOHP/nZFa7cZ+M= -----END CERTIFICATE-----Generated at Mon Jun 30 15:26:43 2025 by rpki-client