$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: cqlhJtZYZDK28yAe+lBkhpFi7tAToq3bowPxwcF8tms= Subject key identifier: 36:82:69:01:A3:13:A0:72:2E:7F:B3:8F:31:EA:65:04:BE:D3:09:4C Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 7DA37144A748FEF11BBE8280F72D528CC1E4220C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: DB Signing time: Sun 29 Jun 2025 02:12:01 +0000 Manifest this update: Sun 29 Jun 2025 02:07:01 +0000 Manifest next update: Wed 02 Jul 2025 05:27:01 +0000 Files and hashes: 1: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: jqfTRowotRE9toTW7s6XxuVzWTLvd0wPa0s2vyImrss=) 2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=) 3: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: iFuVCgiAIyTJyQdPI/VldMd0wU+ytepR3xpApB9OZ20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a3:71:44:a7:48:fe:f1:1b:be:82:80:f7:2d:52:8c:c1:e4:22:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: Jun 29 02:07:01 2025 GMT Not After : Jul 2 05:27:01 2025 GMT Subject: CN=36826901A313A0722E7FB38F31EA6504BED3094C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:5d:63:00:55:d2:7f:40:c4:fc:86:df:17: 99:8f:f0:74:0e:43:54:87:81:48:0d:09:a4:99:4c: 4c:78:6a:95:ff:24:cd:98:9d:99:15:b6:d7:14:72: 2e:c5:4e:41:88:4e:b8:bb:4b:37:c3:a9:06:ff:cc: d2:d8:8a:b3:84:e6:b9:d3:e8:9a:e4:0f:10:76:a7: 7a:ff:54:13:d0:19:f9:d2:2c:15:3f:a7:5c:fc:d1: d7:f0:45:33:fb:ee:84:df:17:fb:3f:8e:e2:81:85: f1:ea:08:eb:72:b4:e0:ce:90:49:9d:3d:ad:fb:12: 5a:3a:a1:c7:cf:16:04:e7:36:3d:00:dd:c4:2c:c9: ed:99:ef:b0:db:e5:14:14:e4:24:60:8a:8f:fd:46: 72:08:71:21:af:1d:e0:33:24:44:7a:04:70:9a:5e: bc:cb:2d:9c:7a:98:75:e1:d6:4d:a3:b4:1b:63:8b: 50:c6:9c:62:59:04:1f:a9:21:dd:89:f7:97:41:6f: 02:17:53:3d:9e:0e:73:37:90:dc:42:10:6e:31:45: 66:36:5b:ac:db:37:8e:80:88:1d:4f:4c:a6:f3:2b: 1c:72:f5:eb:f1:14:41:cd:40:77:6d:3d:7a:59:cf: 9d:a4:c2:32:00:87:62:df:1a:b2:55:06:3f:31:30: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:82:69:01:A3:13:A0:72:2E:7F:B3:8F:31:EA:65:04:BE:D3:09:4C X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f5:58:11:74:e7:e5:a5:34:52:d0:0c:0f:4d:16:5b:8e:4e: a5:c9:45:af:2f:49:67:31:c3:27:13:db:dc:13:87:1a:42:ed: 8c:64:45:dc:0c:02:2b:88:12:a8:f0:78:92:06:9d:fa:e1:bf: 43:ea:6e:92:5e:34:29:19:e9:68:4f:ef:d5:35:ae:90:42:c2: d3:5d:97:60:f5:8f:22:96:bc:c2:32:53:c1:6f:be:b2:99:d4: 3b:1f:f9:1b:8c:25:53:2a:47:ef:b8:30:b5:10:a5:ce:32:08: 70:7a:4e:83:9f:0b:1b:0c:f6:ef:12:0f:d6:9e:85:66:88:c6: fa:af:b5:ec:10:d2:26:54:f6:68:56:11:6f:2b:b9:8c:b3:1b: 68:93:0b:30:a2:59:f0:9a:42:ad:b6:0f:0f:e8:f8:02:a1:cb: 31:6d:ce:10:cb:d6:5e:2b:b9:2a:89:23:38:28:c8:07:03:af: 8a:5d:f0:e7:dc:c4:d4:d6:f3:80:ff:9d:82:89:bc:4c:c8:2d: 30:e5:8c:e5:d0:d7:88:0d:84:0a:90:8b:5d:9c:7c:f6:ac:c0: 65:85:d0:7f:f8:d0:79:62:5b:7c:fc:ed:7b:b8:3f:3e:87:98: 64:8e:98:04:e5:6c:67:88:a3:e6:11:af:dd:64:05:be:68:a8: 31:e6:f8:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfaNxRKdI/vEbvoKA9y1SjMHkIgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNTA2MjkwMjA3MDFaFw0yNTA3MDIwNTI3MDFaMDMxMTAvBgNV BAMTKDM2ODI2OTAxQTMxM0EwNzIyRTdGQjM4RjMxRUE2NTA0QkVEMzA5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWV1jAFXSf0DE/IbfF5mP8HQO Q1SHgUgNCaSZTEx4apX/JM2YnZkVttcUci7FTkGITri7SzfDqQb/zNLYirOE5rnT 6JrkDxB2p3r/VBPQGfnSLBU/p1z80dfwRTP77oTfF/s/juKBhfHqCOtytODOkEmd Pa37Elo6ocfPFgTnNj0A3cQsye2Z77Db5RQU5CRgio/9RnIIcSGvHeAzJER6BHCa XrzLLZx6mHXh1k2jtBtji1DGnGJZBB+pId2J95dBbwIXUz2eDnM3kNxCEG4xRWY2 W6zbN46AiB1PTKbzKxxy9evxFEHNQHdtPXpZz52kwjIAh2LfGrJVBj8xMCSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNoJpAaMToHIuf7OPMeplBL7TCUwwHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGn1WBF05+WlNFLQDA9NFluOTqXJRa8vSWcx wycT29wThxpC7YxkRdwMAiuIEqjweJIGnfrhv0PqbpJeNCkZ6WhP79U1rpBCwtNd l2D1jyKWvMIyU8FvvrKZ1Dsf+RuMJVMqR++4MLUQpc4yCHB6ToOfCxsM9u8SD9ae hWaIxvqvtewQ0iZU9mhWEW8ruYyzG2iTCzCiWfCaQq22Dw/o+AKhyzFtzhDL1l4r uSqJIzgoyAcDr4pd8OfcxNTW84D/nYKJvEzILTDljOXQ14gNhAqQi12cfPaswGWF 0H/40HliW3z87Xu4Pz6HmGSOmATlbGeIo+YRr91kBb5oqDHm+EA= -----END CERTIFICATE-----Generated at Mon Jun 30 16:52:34 2025 by rpki-client