$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: 3o2xmwPYQjU5opSTq4hWFkIjahfdQAwxrKDhALdqs2Q= Subject key identifier: 6F:C4:D3:EF:3E:2F:56:56:E5:C0:4B:04:9B:FF:45:B1:6E:B0:EB:D3 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 6E4AFEFE0598AAE0C15D42EAD40AB7FC5260335C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: D4 Signing time: Fri 09 May 2025 07:20:42 +0000 Manifest this update: Fri 09 May 2025 07:15:42 +0000 Manifest next update: Mon 12 May 2025 10:51:42 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: edAN+kqy5PsrD18PwseFlDbTvnu4kCbMSnvvUsOD6VU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 10:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4a:fe:fe:05:98:aa:e0:c1:5d:42:ea:d4:0a:b7:fc:52:60:33:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: May 9 07:15:42 2025 GMT Not After : May 12 10:51:42 2025 GMT Subject: CN=6FC4D3EF3E2F5656E5C04B049BFF45B16EB0EBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ec:05:12:30:80:db:81:b9:aa:1b:bb:de:94: 96:9a:2f:6a:a2:18:22:ec:f6:d5:87:35:10:92:e7: d5:94:9a:22:ee:ae:b4:f1:43:c5:e7:8a:ba:ef:0a: 56:23:7b:ca:b5:c3:25:5c:5b:19:b2:c3:51:38:06: 23:85:f8:67:3d:5a:fd:ce:3d:31:83:4c:a8:d9:71: 9c:d0:d3:4a:9a:6d:7e:7d:b2:ae:d7:07:0d:7a:21: ce:6c:41:88:34:ae:98:dc:1c:5c:76:e6:71:45:eb: f3:72:9f:49:09:d5:4e:18:a7:bf:4a:0f:65:22:54: 01:10:7d:8e:61:0d:45:8f:3f:f3:0c:28:7e:73:fd: eb:73:0a:51:1f:75:8c:6c:a2:87:77:34:f6:c9:05: 98:a1:51:6f:77:45:c5:97:17:fc:5a:d0:4f:27:f3: 55:8c:f5:92:dc:3f:ed:df:8e:0b:3a:5a:75:75:32: c1:b3:df:a8:db:5d:1d:cd:e2:82:0d:7a:0b:7e:10: 0e:c3:e8:33:f9:fb:a8:07:72:f0:ad:60:c4:51:31: 8b:59:76:dd:87:e0:ec:31:38:df:52:5e:1a:60:9c: 29:5f:00:59:55:5a:c8:7e:16:87:c3:cf:c7:4f:cb: f7:78:e2:fc:8b:14:56:05:f2:1b:37:b7:01:c7:cf: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C4:D3:EF:3E:2F:56:56:E5:C0:4B:04:9B:FF:45:B1:6E:B0:EB:D3 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:8d:74:d9:5e:be:54:b7:11:d0:41:aa:4c:dc:fa:b1:14:69: 85:f1:21:73:03:fd:12:67:3c:3c:f2:65:18:f4:4e:60:08:3f: 99:41:cf:79:3b:2d:bc:87:49:b3:4e:9f:be:1d:f2:49:38:64: 95:24:40:15:aa:0f:05:0b:ed:55:f3:20:88:80:76:53:ce:0c: 52:04:73:58:56:b4:b5:35:c3:cd:1c:d7:5f:5b:0a:36:83:39: 9c:d1:7d:db:70:48:3b:fe:4d:16:cc:bd:3d:c2:03:25:3d:fc: f7:b0:84:8a:c4:1c:2f:d2:6c:9c:ad:ef:40:fb:52:9c:80:2b: 6e:90:cc:57:b3:ce:cc:4b:6f:e3:33:50:bc:c3:4d:cd:8b:b6: a2:ed:4d:4a:8c:6e:df:45:2a:d3:98:f8:16:13:f4:15:15:64: b3:23:7d:3b:f8:24:10:dd:7b:e3:7e:d1:05:f4:09:a0:c3:f1: 70:bd:c0:5a:74:ea:43:ff:5b:46:9a:49:25:e4:d8:83:2e:01: b6:ee:a9:30:17:d7:64:f0:b3:3c:91:5e:e6:da:86:16:c9:8f: 84:58:b8:e3:2d:6a:63:c1:95:bb:49:c2:e4:f9:40:de:a7:6f: 17:71:de:aa:c8:f6:c3:d9:07:cc:87:5f:e7:c2:11:92:e1:86: ab:05:2f:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbkr+/gWYquDBXULq1Aq3/FJgM1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTA1MDkwNzE1NDJaFw0yNTA1MTIxMDUxNDJaMDMxMTAvBgNV BAMTKDZGQzREM0VGM0UyRjU2NTZFNUMwNEIwNDlCRkY0NUIxNkVCMEVCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7AUSMIDbgbmqG7velJaaL2qi GCLs9tWHNRCS59WUmiLurrTxQ8XnirrvClYje8q1wyVcWxmyw1E4BiOF+Gc9Wv3O PTGDTKjZcZzQ00qabX59sq7XBw16Ic5sQYg0rpjcHFx25nFF6/Nyn0kJ1U4Yp79K D2UiVAEQfY5hDUWPP/MMKH5z/etzClEfdYxsood3NPbJBZihUW93RcWXF/xa0E8n 81WM9ZLcP+3fjgs6WnV1MsGz36jbXR3N4oINegt+EA7D6DP5+6gHcvCtYMRRMYtZ dt2H4OwxON9SXhpgnClfAFlVWsh+FofDz8dPy/d44vyLFFYF8hs3twHHzycPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb8TT7z4vVlblwEsEm/9FsW6w69MwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN+NdNlevlS3EdBBqkzc+rEUaYXxIXMD/RJn PDzyZRj0TmAIP5lBz3k7LbyHSbNOn74d8kk4ZJUkQBWqDwUL7VXzIIiAdlPODFIE c1hWtLU1w80c119bCjaDOZzRfdtwSDv+TRbMvT3CAyU9/PewhIrEHC/SbJyt70D7 UpyAK26QzFezzsxLb+MzULzDTc2LtqLtTUqMbt9FKtOY+BYT9BUVZLMjfTv4JBDd e+N+0QX0CaDD8XC9wFp06kP/W0aaSSXk2IMuAbbuqTAX12TwszyRXubahhbJj4RY uOMtamPBlbtJwuT5QN6nbxdx3qrI9sPZB8yHX+fCEZLhhqsFLyo= -----END CERTIFICATE-----Generated at Sun May 11 09:24:38 2025 by rpki-client