$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft File: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json) Hash identifier: ISsLmP00IK+VxqtQqhSZgMaTV8nNjyymQTnkIlhI5IE= Subject key identifier: 26:2A:2E:0D:C2:FE:FB:97:6E:FE:AF:BC:E3:1D:90:A8:01:82:24:2D Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 Certificate issuer: /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Certificate serial: 28196345F47CCF2F83C3517C8EB85ED946D8F88F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject info access: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft Manifest number: 01D7 Signing time: Sun 29 Jun 2025 09:21:22 +0000 Manifest this update: Sun 29 Jun 2025 09:16:22 +0000 Manifest next update: Wed 02 Jul 2025 19:00:22 +0000 Files and hashes: 1: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: QZrvNrtpXCKPjhSgsC8kdyvVzWQ/ADZleC5w3ZKWFT4=) 2: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: YWwHzzA6wpVWpFt7Ui+JzLodFaNGNOvb1RglTAmr99I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:19:63:45:f4:7c:cf:2f:83:c3:51:7c:8e:b8:5e:d9:46:d8:f8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Validity Not Before: Jun 29 09:16:22 2025 GMT Not After : Jul 2 19:00:22 2025 GMT Subject: CN=262A2E0DC2FEFB976EFEAFBCE31D90A80182242D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:be:5c:5b:ed:b1:af:70:83:93:db:fe:e0: 32:8b:7c:0f:87:af:3f:e9:35:dc:d4:12:3d:12:32: 3d:83:c3:87:97:e3:6b:41:d1:28:75:cc:08:51:55: 06:08:bb:3d:29:ba:56:61:f8:cf:a8:ef:62:3d:bc: 8c:75:99:8a:2d:9a:60:d7:31:25:74:9c:84:87:b9: 0e:9e:0f:a8:f7:c3:36:2a:99:0e:d8:5e:76:f7:82: 10:01:e2:88:d1:c8:94:e8:f4:b1:40:9e:d8:b3:a8: 77:79:0f:21:06:cb:94:38:38:a3:81:1f:93:21:d1: d3:58:7f:15:6a:93:64:8d:17:91:e8:28:f1:a2:e5: 27:f4:72:a3:d0:23:8a:69:cc:03:69:b5:9d:86:ca: c0:43:ae:35:4c:82:61:45:aa:09:38:df:22:73:ba: db:00:b7:24:46:f3:94:5a:30:7b:b4:b0:59:f4:34: 8a:78:3c:c9:8c:f4:cd:34:0e:ed:97:31:fc:96:0b: 62:51:cf:af:79:1d:8c:42:3f:63:59:b7:74:18:bc: 99:8a:22:b2:76:a3:91:24:53:9c:6d:2f:61:f8:fa: 87:e1:39:d6:cb:98:14:aa:b4:01:fb:5c:a2:00:3b: 3b:55:9a:ea:b9:fb:17:6b:a7:24:bd:81:ea:4a:58: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2A:2E:0D:C2:FE:FB:97:6E:FE:AF:BC:E3:1D:90:A8:01:82:24:2D X509v3 Authority Key Identifier: keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:80:fc:8e:f6:52:15:66:ab:4e:1c:55:24:c9:13:51:1d:ad: 5d:48:a2:f7:49:a0:63:76:b5:54:d1:8b:0d:20:47:00:65:e9: c5:10:84:bd:07:a0:8e:4b:e7:53:d9:7a:80:31:94:e5:73:f3: 00:3c:60:b8:4b:16:54:6c:dd:6d:67:cf:4b:54:f9:46:79:48: 89:86:7a:a2:1b:dc:ff:17:40:81:52:c4:5c:18:17:bb:bb:a7: e3:b6:16:07:1f:2f:bb:6d:e2:00:2f:ff:ca:a0:f0:e2:f5:96: ee:24:b8:f6:57:a9:d5:e8:df:7d:5a:b0:a4:77:38:78:2d:47: ac:34:0a:f3:dc:3f:e7:c7:10:81:13:a5:fe:e4:1f:08:54:5e: 92:3a:57:6e:74:9e:dc:6c:45:b6:a6:68:49:1b:06:52:94:3a: 8a:d3:1f:24:ad:02:87:51:66:77:5f:f8:29:67:64:6a:3f:37: 77:f6:f0:04:53:80:51:01:90:30:67:da:d2:d5:d7:df:0a:67: 26:08:5e:96:88:90:bc:56:5b:53:d3:8d:ed:08:9c:52:79:36: 94:e4:28:06:92:1d:be:c4:a4:a0:75:e9:ef:bb:32:ce:c8:2d: 0a:7c:4c:12:bc:8f:76:a5:16:1a:01:ee:24:23:ef:73:ae:bc: 3c:1e:d0:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBljRfR8zy+Dw1F8jrhe2UbY+I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZG MjAwRjYxMzAeFw0yNTA2MjkwOTE2MjJaFw0yNTA3MDIxOTAwMjJaMDMxMTAvBgNV BAMTKDI2MkEyRTBEQzJGRUZCOTc2RUZFQUZCQ0UzMUQ5MEE4MDE4MjI0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFb75cW+2xr3CDk9v+4DKLfA+H rz/pNdzUEj0SMj2Dw4eX42tB0Sh1zAhRVQYIuz0pulZh+M+o72I9vIx1mYotmmDX MSV0nISHuQ6eD6j3wzYqmQ7YXnb3ghAB4ojRyJTo9LFAntizqHd5DyEGy5Q4OKOB H5Mh0dNYfxVqk2SNF5HoKPGi5Sf0cqPQI4ppzANptZ2GysBDrjVMgmFFqgk43yJz utsAtyRG85RaMHu0sFn0NIp4PMmM9M00Du2XMfyWC2JRz695HYxCP2NZt3QYvJmK IrJ2o5EkU5xtL2H4+ofhOdbLmBSqtAH7XKIAOztVmuq5+xdrpyS9gepKWMPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJiouDcL++5du/q+84x2QqAGCJC0wHwYDVR0j BBgwFoAUPmSOaoYjxcXd8AFSbQ/cD/IA9hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjFmM2ZhZS1kMGNiLTRhMTctYTU0OC0xYmE2NjMxYjFlMDkvMC8zRTY0OEU2QTg2 MjNDNUM1RERGMDAxNTI2RDBGREMwRkYyMDBGNjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZGMjAw RjYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRD MEZGMjAwRjYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByA/I72UhVmq04cVSTJE1EdrV1IovdJoGN2 tVTRiw0gRwBl6cUQhL0HoI5L51PZeoAxlOVz8wA8YLhLFlRs3W1nz0tU+UZ5SImG eqIb3P8XQIFSxFwYF7u7p+O2FgcfL7tt4gAv/8qg8OL1lu4kuPZXqdXo331asKR3 OHgtR6w0CvPcP+fHEIETpf7kHwhUXpI6V250ntxsRbamaEkbBlKUOorTHyStAodR Zndf+ClnZGo/N3f28ARTgFEBkDBn2tLV198KZyYIXpaIkLxWW1PTje0InFJ5NpTk KAaSHb7EpKB16e+7Ms7ILQp8TBK8j3alFhoB7iQj73OuvDwe0Pw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:09:07 2025 by rpki-client