$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft File: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json) Hash identifier: PixvgR9toxu+QM92E6ap/VsbtWqpf8a5Fsp2NtqmHn0= Subject key identifier: 8C:94:DE:0C:04:2E:8B:21:DE:7A:63:7D:7E:08:74:67:9C:B1:B5:70 Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 Certificate issuer: /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Certificate serial: 5AF5E61BB451B67E661A782F5FCEE9BAF4C0B619 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject info access: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft Manifest number: 01BE Signing time: Sat 03 May 2025 11:01:21 +0000 Manifest this update: Sat 03 May 2025 10:56:21 +0000 Manifest next update: Tue 06 May 2025 12:24:21 +0000 Files and hashes: 1: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: YIgREHbcqUPvps9GKLjFgLCJ8Ek/YuwXdt6Dkt0pscI=) 2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: uJ4UndaAGVEWTS0CGBzHtyefGbyYsYBo80wyV0nM7O4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 12:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f5:e6:1b:b4:51:b6:7e:66:1a:78:2f:5f:ce:e9:ba:f4:c0:b6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613 Validity Not Before: May 3 10:56:21 2025 GMT Not After : May 6 12:24:21 2025 GMT Subject: CN=8C94DE0C042E8B21DE7A637D7E0874679CB1B570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:a5:9f:18:ac:d9:fc:b8:d3:c0:c5:a0:d6: fc:e8:48:31:82:ac:16:77:78:c6:66:72:48:e1:c0: b9:88:7b:0e:ee:0c:17:ea:43:c1:89:6f:46:71:2e: f8:a8:5e:ab:06:d4:8c:b2:97:4f:ba:fe:93:09:7b: 6d:35:d2:86:e8:50:3d:8b:fc:7e:5e:43:8a:1e:6a: 11:5a:9f:c4:95:99:14:c0:72:ba:f1:38:3a:3d:7f: b8:7f:c2:48:0b:c5:5a:d9:10:c1:53:83:75:16:eb: 64:b3:67:a2:c7:56:60:15:a9:60:b8:cc:42:9d:cc: 49:f2:f8:0d:f7:03:67:aa:a4:e5:01:aa:7d:fa:12: ad:28:e4:99:13:55:03:09:1a:32:a2:91:71:83:80: ef:39:53:77:68:cb:81:49:ac:b0:34:31:97:6b:c4: 62:cb:52:fe:13:3a:6b:3f:71:7f:7d:77:d3:c4:3e: d2:15:4c:65:54:61:95:7e:ba:52:57:a7:da:63:f1: 61:f3:64:68:28:00:2f:bc:66:17:68:d9:37:c3:98: c7:80:d8:f4:71:d1:a1:03:90:6c:04:60:d3:44:a0: 3d:21:b3:33:20:1b:be:a4:45:50:59:bd:7c:79:89: 8a:6a:c5:ef:77:3c:e1:81:65:75:e6:e0:48:b0:5a: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:94:DE:0C:04:2E:8B:21:DE:7A:63:7D:7E:08:74:67:9C:B1:B5:70 X509v3 Authority Key Identifier: keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:74:df:23:62:f5:09:30:c2:f8:18:48:78:dd:53:86:72:a2: df:16:44:a4:50:a6:d2:f0:d9:02:2e:02:5f:22:ca:33:4b:c6: a4:2e:24:56:48:f7:de:4b:3d:e6:78:61:1c:b0:15:a9:db:1c: 79:65:2b:2e:98:b5:df:7b:9f:91:50:58:2d:66:fc:4f:61:bf: 97:15:c3:eb:04:52:fb:c7:9d:78:49:10:43:d9:9b:c6:70:91: ee:85:54:2c:cd:22:c7:90:f0:b6:66:46:54:f6:cd:38:aa:0f: 7a:6d:e6:d2:46:79:f0:fe:6e:27:1f:71:46:e2:11:a3:22:4e: e4:69:a3:e3:93:e4:93:8c:02:db:3f:2e:98:7e:b2:86:98:0a: c4:f9:69:fb:06:5f:0e:f3:41:33:c0:a8:68:f6:1f:88:dd:89: da:40:f8:18:8a:4f:69:8c:11:82:6c:3a:35:da:e0:23:2d:ea: 88:cc:00:10:bb:c3:2b:46:a3:d2:81:23:8f:6b:c7:91:4c:4a: 52:10:ef:08:6f:80:26:9d:78:b2:e7:3e:6a:fb:1b:92:c4:b4: 95:d6:c2:96:39:7a:4f:f1:25:ca:a2:46:a1:fa:9b:3e:55:c2: 9c:ea:7d:15:9c:64:3f:dd:c4:33:c8:f6:18:a3:02:20:67:17: e0:e1:36:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWvXmG7RRtn5mGngvX87puvTAthkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZG MjAwRjYxMzAeFw0yNTA1MDMxMDU2MjFaFw0yNTA1MDYxMjI0MjFaMDMxMTAvBgNV BAMTKDhDOTRERTBDMDQyRThCMjFERTdBNjM3RDdFMDg3NDY3OUNCMUI1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRaWfGKzZ/LjTwMWg1vzoSDGC rBZ3eMZmckjhwLmIew7uDBfqQ8GJb0ZxLvioXqsG1Iyyl0+6/pMJe2010oboUD2L /H5eQ4oeahFan8SVmRTAcrrxODo9f7h/wkgLxVrZEMFTg3UW62SzZ6LHVmAVqWC4 zEKdzEny+A33A2eqpOUBqn36Eq0o5JkTVQMJGjKikXGDgO85U3doy4FJrLA0MZdr xGLLUv4TOms/cX99d9PEPtIVTGVUYZV+ulJXp9pj8WHzZGgoAC+8Zhdo2TfDmMeA 2PRx0aEDkGwEYNNEoD0hszMgG76kRVBZvXx5iYpqxe93POGBZXXm4EiwWhhnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJTeDAQuiyHeemN9fgh0Z5yxtXAwHwYDVR0j BBgwFoAUPmSOaoYjxcXd8AFSbQ/cD/IA9hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjFmM2ZhZS1kMGNiLTRhMTctYTU0OC0xYmE2NjMxYjFlMDkvMC8zRTY0OEU2QTg2 MjNDNUM1RERGMDAxNTI2RDBGREMwRkYyMDBGNjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRDMEZGMjAw RjYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvM0U2NDhFNkE4NjIzQzVDNURERjAwMTUyNkQwRkRD MEZGMjAwRjYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJ03yNi9QkwwvgYSHjdU4Zyot8WRKRQptLw 2QIuAl8iyjNLxqQuJFZI995LPeZ4YRywFanbHHllKy6Ytd97n5FQWC1m/E9hv5cV w+sEUvvHnXhJEEPZm8Zwke6FVCzNIseQ8LZmRlT2zTiqD3pt5tJGefD+bicfcUbi EaMiTuRpo+OT5JOMAts/Lph+soaYCsT5afsGXw7zQTPAqGj2H4jdidpA+BiKT2mM EYJsOjXa4CMt6ojMABC7wytGo9KBI49rx5FMSlIQ7whvgCadeLLnPmr7G5LEtJXW wpY5ek/xJcqiRqH6mz5VwpzqfRWcZD/dxDPI9hijAiBnF+DhNns= -----END CERTIFICATE-----Generated at Tue May 6 06:44:31 2025 by rpki-client