$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: ADjNA8Ub2h67bhMOhAlnU16SzbzS4lJpYwgNmYuSpWg= Subject key identifier: 27:F3:54:EA:B2:B5:AA:D1:9A:2B:88:55:86:11:A3:DC:11:88:CB:E8 Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 713CBD9BDD26FB392088C2679759A725B316E41C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 0293 Signing time: Sat 28 Jun 2025 17:01:18 +0000 Manifest this update: Sat 28 Jun 2025 16:56:18 +0000 Manifest next update: Wed 02 Jul 2025 04:11:18 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: KxSyzXMCS0F2X+bdjaxm+kO783kvPIu7+kPUwgGldps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3c:bd:9b:dd:26:fb:39:20:88:c2:67:97:59:a7:25:b3:16:e4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Jun 28 16:56:18 2025 GMT Not After : Jul 2 04:11:18 2025 GMT Subject: CN=27F354EAB2B5AAD19A2B88558611A3DC1188CBE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:12:d0:34:96:37:3b:f9:d9:17:d3:9f:0e: bf:a9:08:b6:a4:27:7c:f7:74:1c:f7:30:c0:be:c8: c6:3e:03:f4:e4:58:ac:a1:f5:b3:63:87:3b:92:d7: 00:3a:59:97:40:09:71:01:08:fd:fd:12:de:76:0b: b8:4f:6d:cb:66:74:51:4e:cb:5f:91:26:aa:d0:cb: 01:05:4b:d1:a5:7f:e4:4f:81:ae:30:5e:e1:75:95: 4a:24:03:9c:78:0b:d1:e3:48:b9:08:28:4d:81:3e: e0:f4:e0:4f:9b:ec:53:d9:fd:33:c4:e9:48:fd:0b: 3c:06:c9:ed:c8:c4:4d:0c:0f:d9:af:30:85:57:eb: 3c:af:80:93:0f:bb:f0:a6:35:7e:ad:4a:6c:30:0d: ce:eb:95:99:9c:16:80:ec:b7:24:b0:36:18:e8:28: 00:cc:43:52:46:e9:65:58:42:b5:d9:bf:7a:65:11: 5f:82:50:ab:2e:42:44:49:d5:20:58:09:e5:74:f2: 95:88:a7:e6:1e:c8:15:13:5c:bf:14:43:6b:95:44: b4:0b:43:70:0d:b5:91:6a:b8:c8:9c:27:39:7b:5a: a1:75:eb:21:0f:13:90:94:ec:56:b5:a3:89:ca:f1: 98:54:9a:c8:32:b7:0e:36:46:fa:03:a0:e7:fd:68: 8a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F3:54:EA:B2:B5:AA:D1:9A:2B:88:55:86:11:A3:DC:11:88:CB:E8 X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:bc:90:0c:37:00:a8:d5:84:7d:f3:7e:63:c6:72:11:97:ce: f7:07:bd:d0:3a:96:18:8d:1b:77:83:cb:72:21:6a:78:f2:ed: 2c:a5:6f:09:41:d0:51:bb:bf:70:50:db:60:e1:3f:3b:56:10: 7e:13:ca:71:82:ba:26:92:f1:ab:95:d2:7d:d3:4e:47:e5:55: 52:4c:a8:fe:3d:5a:d5:f1:3e:e6:47:b8:c4:93:56:84:4e:79: 3d:6c:8e:33:24:ba:74:ea:22:15:9f:44:6e:d8:91:8d:9b:a8: 23:9c:e5:24:c1:22:ed:8b:a9:80:b3:df:8e:5d:b0:36:52:fc: 21:ba:9b:03:e5:44:b8:9a:14:a9:86:ad:b2:57:22:b0:04:a2: 43:8e:e5:02:9d:e1:19:07:5d:38:c3:56:2a:09:d5:b6:cd:df: 1c:41:e6:7f:81:8d:a2:ce:9b:ab:91:41:f0:e5:64:c5:93:96: 23:d5:4e:11:ba:b2:f6:b4:12:bf:0c:09:45:2e:e7:32:00:c8: 72:a2:e3:f6:37:4d:77:d9:1f:56:e0:21:cb:c9:03:eb:91:45: f3:5c:ff:e5:ea:3d:b8:cf:6f:67:00:29:c5:88:0d:2b:4c:6e: dd:dc:5a:99:71:7a:ac:1f:72:70:98:31:2e:77:a6:88:d0:2c: e0:f7:da:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTy9m90m+zkgiMJnl1mnJbMW5BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTA2MjgxNjU2MThaFw0yNTA3MDIwNDExMThaMDMxMTAvBgNV BAMTKDI3RjM1NEVBQjJCNUFBRDE5QTJCODg1NTg2MTFBM0RDMTE4OENCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqxLQNJY3O/nZF9OfDr+pCLak J3z3dBz3MMC+yMY+A/TkWKyh9bNjhzuS1wA6WZdACXEBCP39Et52C7hPbctmdFFO y1+RJqrQywEFS9Glf+RPga4wXuF1lUokA5x4C9HjSLkIKE2BPuD04E+b7FPZ/TPE 6Uj9CzwGye3IxE0MD9mvMIVX6zyvgJMPu/CmNX6tSmwwDc7rlZmcFoDstySwNhjo KADMQ1JG6WVYQrXZv3plEV+CUKsuQkRJ1SBYCeV08pWIp+YeyBUTXL8UQ2uVRLQL Q3ANtZFquMicJzl7WqF16yEPE5CU7Fa1o4nK8ZhUmsgytw42RvoDoOf9aIqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ/NU6rK1qtGaK4hVhhGj3BGIy+gwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGK8kAw3AKjVhH3zfmPGchGXzvcHvdA6lhiN G3eDy3Ihanjy7SylbwlB0FG7v3BQ22DhPztWEH4TynGCuiaS8auV0n3TTkflVVJM qP49WtXxPuZHuMSTVoROeT1sjjMkunTqIhWfRG7YkY2bqCOc5STBIu2LqYCz345d sDZS/CG6mwPlRLiaFKmGrbJXIrAEokOO5QKd4RkHXTjDVioJ1bbN3xxB5n+BjaLO m6uRQfDlZMWTliPVThG6sva0Er8MCUUu5zIAyHKi4/Y3TXfZH1bgIcvJA+uRRfNc /+XqPbjPb2cAKcWIDStMbt3cWplxeqwfcnCYMS53pojQLOD32hw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:12:07 2025 by rpki-client