$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft File: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json) Hash identifier: HxvrivMsaW1RFGrlsBt3iB0CWrG/vtLopournE9m2Qo= Subject key identifier: 2D:3A:43:95:C7:F3:B5:07:49:9B:68:75:E1:94:39:17:C3:39:41:BC Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Certificate serial: 5FB88F522B09AE7E0AA59498795D2CE644892314 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft Manifest number: 01B6 Signing time: Sun 29 Jun 2025 04:40:04 +0000 Manifest this update: Sun 29 Jun 2025 04:35:04 +0000 Manifest next update: Wed 02 Jul 2025 05:47:04 +0000 Files and hashes: 1: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: XcGp7ypRIjCrrz2ZlpbT4Kw1Xg8DfR8gu9Z0oSXRJS8=) 2: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: eN2y0bGH6O4abuWW2t4xwXYzgXuaIrs2XZuChUD8dpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b8:8f:52:2b:09:ae:7e:0a:a5:94:98:79:5d:2c:e6:44:89:23:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Validity Not Before: Jun 29 04:35:04 2025 GMT Not After : Jul 2 05:47:04 2025 GMT Subject: CN=2D3A4395C7F3B507499B6875E1943917C33941BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:d4:a4:23:d0:b9:1f:5d:22:12:d0:ce:9e: cd:7f:1a:a2:ab:0e:05:99:6f:87:8d:0a:68:8a:b0: 0a:71:79:12:65:bf:83:67:bd:9e:d7:cd:63:0a:49: 33:cf:71:92:46:9d:3d:1f:ac:61:90:51:25:a9:44: b2:54:b0:1c:e4:4e:2e:8c:3d:31:09:b3:2b:b8:f4: df:17:16:51:6c:f7:31:c7:f6:40:1a:58:eb:d9:3f: 16:fb:0c:9d:5b:29:fd:2c:57:4e:ff:48:5f:3b:44: 05:ca:2e:5a:ac:53:4b:49:71:bb:52:bd:62:60:12: f3:f7:23:9c:7c:77:5c:37:a2:bb:9a:c7:da:67:52: 93:72:e0:54:83:73:e6:6f:bb:24:68:c6:b4:a7:c8: e1:6f:b6:96:88:34:de:44:65:03:c7:fe:b0:9a:66: 70:2a:b1:14:46:02:2c:59:02:ae:26:08:4b:fc:fe: 4b:c8:c8:34:35:01:97:a1:1c:21:43:1f:a6:1a:b8: 4b:9f:82:d6:9e:cb:e7:09:82:3c:ea:4a:26:b1:43: ba:6f:1a:ae:ec:e3:52:ba:b0:25:b6:d2:fb:bd:38: 65:d4:39:7c:32:13:27:82:db:89:8f:00:82:e7:54: a4:69:81:2c:a2:99:02:56:15:44:9c:f5:85:c4:42: e7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3A:43:95:C7:F3:B5:07:49:9B:68:75:E1:94:39:17:C3:39:41:BC X509v3 Authority Key Identifier: keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e3:32:a4:df:53:33:55:ea:d1:6f:05:b9:bf:85:56:fa:3f: 0c:0c:98:a7:1e:6c:e1:d5:15:01:ac:98:5b:e4:70:69:8b:5d: 79:dd:c8:4d:56:21:d8:4c:18:d1:c9:c5:07:d2:d6:df:cc:07: fb:e0:e9:56:0e:eb:70:7c:60:32:26:6f:42:d2:35:c3:39:2c: 9b:31:fe:e6:58:cb:5a:d8:c2:aa:87:fd:62:72:3d:62:de:1e: 90:4a:03:fc:5e:d5:90:f1:a8:44:e2:44:5c:c1:44:c5:3c:d8: 7a:c7:97:81:52:ae:64:42:3a:25:71:46:4e:7b:26:66:53:5d: c0:ef:4a:f4:06:a8:cd:ef:96:91:5e:03:b8:1a:a9:08:9a:9b: 69:32:9a:19:d0:40:c7:70:90:e9:65:b4:3e:91:5a:5b:53:28: 13:c7:20:b7:ec:d3:da:f6:3e:14:4d:b1:08:49:28:b4:72:86: 39:83:4e:e2:a9:fd:2f:3f:02:d5:57:84:39:da:a9:66:b3:04: 46:9d:af:fb:80:f3:50:91:66:18:3c:a4:a3:35:15:f1:f1:74: ed:d7:01:23:91:a7:bc:f0:80:d7:07:9b:e2:71:15:cf:51:4a: 26:7f:b8:8a:b0:75:0f:b1:1a:0e:fb:87:1b:c7:2f:8b:13:72: 67:9c:f2:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX7iPUisJrn4KpZSYeV0s5kSJIxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4 QjQzRjcyNzAeFw0yNTA2MjkwNDM1MDRaFw0yNTA3MDIwNTQ3MDRaMDMxMTAvBgNV BAMTKDJEM0E0Mzk1QzdGM0I1MDc0OTlCNjg3NUUxOTQzOTE3QzMzOTQxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ztSkI9C5H10iEtDOns1/GqKr DgWZb4eNCmiKsApxeRJlv4NnvZ7XzWMKSTPPcZJGnT0frGGQUSWpRLJUsBzkTi6M PTEJsyu49N8XFlFs9zHH9kAaWOvZPxb7DJ1bKf0sV07/SF87RAXKLlqsU0tJcbtS vWJgEvP3I5x8d1w3oruax9pnUpNy4FSDc+ZvuyRoxrSnyOFvtpaINN5EZQPH/rCa ZnAqsRRGAixZAq4mCEv8/kvIyDQ1AZehHCFDH6YauEufgtaey+cJgjzqSiaxQ7pv Gq7s41K6sCW20vu9OGXUOXwyEyeC24mPAILnVKRpgSyimQJWFUSc9YXEQufzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULTpDlcfztQdJm2h14ZQ5F8M5QbwwHwYDVR0j BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz RjcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAz RTQ4QjQzRjcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDjMqTfUzNV6tFvBbm/hVb6PwwMmKcebOHV FQGsmFvkcGmLXXndyE1WIdhMGNHJxQfS1t/MB/vg6VYO63B8YDImb0LSNcM5LJsx /uZYy1rYwqqH/WJyPWLeHpBKA/xe1ZDxqETiRFzBRMU82HrHl4FSrmRCOiVxRk57 JmZTXcDvSvQGqM3vlpFeA7gaqQiam2kymhnQQMdwkOlltD6RWltTKBPHILfs09r2 PhRNsQhJKLRyhjmDTuKp/S8/AtVXhDnaqWazBEadr/uA81CRZhg8pKM1FfHxdO3X ASORp7zwgNcHm+JxFc9RSiZ/uIqwdQ+xGg77hxvHL4sTcmec8lc= -----END CERTIFICATE-----Generated at Tue Jul 1 05:02:14 2025 by rpki-client