$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json) Hash identifier: w2uTvCMWwu/aMOxX02DtCuSsA4YzZnJHc7AKXkPw5cQ= Subject key identifier: CE:EA:45:1B:5C:41:51:B2:59:0C:4D:DB:D1:8B:75:33:39:15:7E:2D Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Certificate serial: 65397FA310291A9F4FE5BDA5005A04763F06FB93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft Manifest number: 04D4 Signing time: Sun 29 Jun 2025 12:20:49 +0000 Manifest this update: Sun 29 Jun 2025 12:15:49 +0000 Manifest next update: Wed 02 Jul 2025 22:01:49 +0000 Files and hashes: 1: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: CG+i+8Yj4knhwhGpIyk9bymfzJqt4a2scJAhOsibkIg=) 2: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: +zMuF2d6C36Qn9OFjFhter7f0zvIprv5Kce2a+7KyYs=) 3: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: Usk9JQ2XeRGm39smNUuLoGkN+7yFDsrjSvIs4nhXd0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:39:7f:a3:10:29:1a:9f:4f:e5:bd:a5:00:5a:04:76:3f:06:fb:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Validity Not Before: Jun 29 12:15:49 2025 GMT Not After : Jul 2 22:01:49 2025 GMT Subject: CN=CEEA451B5C4151B2590C4DDBD18B753339157E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:e7:e3:a9:97:7a:77:ac:fb:e9:fa:1a:b3: b8:1e:4f:61:10:9f:9f:23:76:d6:88:89:d8:45:1b: 16:9e:43:5f:d4:65:d4:79:d2:76:a5:cf:81:73:67: 5c:e2:fc:55:a9:13:55:f1:a7:53:ab:c8:81:59:da: 5e:9d:c1:27:22:81:8d:eb:b7:6d:5c:67:e3:5c:5e: ca:bb:78:15:f9:42:a7:66:47:f1:ae:75:cf:55:b8: cc:4f:0b:f5:24:92:e9:d4:c7:52:92:94:de:f1:f3: e9:2c:7d:38:e6:61:8d:8b:1c:d0:aa:11:53:9e:e7: bb:fb:6c:54:ad:ce:00:fc:0a:10:14:05:54:0c:f6: 4f:be:33:dd:72:9d:6d:02:c8:22:e6:fd:78:5a:9b: bd:6e:ea:4b:f0:11:79:12:7e:0c:7f:e1:42:e2:4e: 54:31:86:ee:6c:64:25:0f:9b:dd:2d:69:cf:16:5c: 48:af:95:4c:0c:bc:75:cb:30:f8:0e:53:d9:d1:c8: ed:f0:a8:d1:a9:94:28:1c:28:20:36:9a:50:93:ac: c1:c3:9c:39:8f:45:aa:3b:e4:c1:7c:4f:e2:96:63: 19:52:8f:63:91:d1:0d:e7:f3:17:00:3d:a1:2c:7f: 03:59:f2:42:f6:b7:f2:af:dd:57:3e:96:fc:f5:b7: d9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EA:45:1B:5C:41:51:B2:59:0C:4D:DB:D1:8B:75:33:39:15:7E:2D X509v3 Authority Key Identifier: keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7a:ae:c6:4f:48:85:fd:af:41:aa:09:70:a8:bb:3a:13:56: 94:b6:9f:9f:30:fc:8d:f8:84:63:56:31:61:94:3b:1a:0c:97: 80:35:b2:e2:1a:3d:9b:e3:09:c9:67:74:62:5f:0e:17:72:68: 1e:0c:9f:55:d6:15:75:3a:c2:00:1b:cd:49:04:58:b4:d7:d2: 2a:ed:3c:71:86:75:ca:c0:6d:52:97:d1:19:b4:e8:b6:6e:73: b8:1a:24:d1:ac:1e:30:c5:6f:6c:14:96:64:93:73:6f:55:a1: 51:76:83:52:fb:6d:5b:d9:fc:a8:f2:46:27:d6:e7:a0:b6:f9: 62:59:68:c1:bd:7c:df:90:7b:31:f5:31:99:c6:76:31:8b:f0: 0a:40:dc:cf:14:15:1c:0e:eb:cf:f6:0c:19:f0:61:ac:a0:a3: 7c:50:3e:4e:72:2b:6c:49:15:e3:45:39:73:e2:d2:25:15:8f: cf:3e:db:b1:b3:b0:0a:a1:9d:fb:65:f1:ff:de:6c:8f:41:c9: cf:04:af:ef:c8:9d:4d:1f:3b:8c:11:ed:17:e8:43:55:12:7e: e6:81:b4:4e:fa:41:53:81:65:a6:ef:bb:70:83:e4:22:96:8f: 69:6d:9b:a9:3c:5d:39:3f:c6:a2:3f:1a:ad:be:66:36:03:5f: d6:d7:a5:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZTl/oxApGp9P5b2lAFoEdj8G+5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4 NDY0NzZBQjAeFw0yNTA2MjkxMjE1NDlaFw0yNTA3MDIyMjAxNDlaMDMxMTAvBgNV BAMTKENFRUE0NTFCNUM0MTUxQjI1OTBDNEREQkQxOEI3NTMzMzkxNTdFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodOfjqZd6d6z76foas7geT2EQ n58jdtaIidhFGxaeQ1/UZdR50nalz4FzZ1zi/FWpE1Xxp1OryIFZ2l6dwScigY3r t21cZ+NcXsq7eBX5QqdmR/Gudc9VuMxPC/UkkunUx1KSlN7x8+ksfTjmYY2LHNCq EVOe57v7bFStzgD8ChAUBVQM9k++M91ynW0CyCLm/Xham71u6kvwEXkSfgx/4ULi TlQxhu5sZCUPm90tac8WXEivlUwMvHXLMPgOU9nRyO3wqNGplCgcKCA2mlCTrMHD nDmPRao75MF8T+KWYxlSj2OR0Q3n8xcAPaEsfwNZ8kL2t/Kv3Vc+lvz1t9kxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzupFG1xBUbJZDE3b0Yt1MzkVfi0wHwYDVR0j BBgwFoAUPm8wZBhFVoPboKyVtP1B4YRkdqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMC8zRTZGMzA2NDE4 NDU1NjgzREJBMEFDOTVCNEZENDFFMTg0NjQ3NkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4NDY0 NzZBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQx RTE4NDY0NzZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ6rsZPSIX9r0GqCXCouzoTVpS2n58w/I34 hGNWMWGUOxoMl4A1suIaPZvjCclndGJfDhdyaB4Mn1XWFXU6wgAbzUkEWLTX0irt PHGGdcrAbVKX0Rm06LZuc7gaJNGsHjDFb2wUlmSTc29VoVF2g1L7bVvZ/KjyRifW 56C2+WJZaMG9fN+QezH1MZnGdjGL8ApA3M8UFRwO68/2DBnwYaygo3xQPk5yK2xJ FeNFOXPi0iUVj88+27GzsAqhnftl8f/ebI9Byc8Er+/InU0fO4wR7RfoQ1USfuaB tE76QVOBZabvu3CD5CKWj2ltm6k8XTk/xqI/Gq2+ZjYDX9bXpdE= -----END CERTIFICATE-----Generated at Sun Jun 29 19:51:27 2025 by rpki-client