$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: eSTuioVauLinbiz0ijt1/PdXVZvcC4iu10BxSc+yDhc= Subject key identifier: 37:BA:9F:DA:BD:76:2A:DE:2B:88:18:68:57:82:B7:05:18:1B:70:3D Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 436FD7B623A259AEDD0CFFB028387B0AF968CC3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: 9A Signing time: Sat 28 Jun 2025 16:52:20 +0000 Manifest this update: Sat 28 Jun 2025 16:47:20 +0000 Manifest next update: Tue 01 Jul 2025 19:02:20 +0000 Files and hashes: 1: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=) 2: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: CXArUEfQU6Jc7Ki7vQd8S3hBSTfjFBeosmv7IWc5x60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 19:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6f:d7:b6:23:a2:59:ae:dd:0c:ff:b0:28:38:7b:0a:f9:68:cc:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Jun 28 16:47:20 2025 GMT Not After : Jul 1 19:02:20 2025 GMT Subject: CN=37BA9FDABD762ADE2B8818685782B705181B703D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ca:7d:78:f3:d9:f7:0d:c4:4f:49:7e:7e:ea: 70:aa:98:63:8f:44:3c:db:76:7f:f1:34:f3:88:c6: 44:cc:fe:c0:b8:78:d8:7a:6c:89:5e:8d:26:1c:0e: 2b:a9:75:2e:eb:65:a9:b6:96:63:b6:af:ec:23:d6: c3:09:05:81:e4:97:b8:05:d1:6c:04:9e:cb:f1:6b: 98:35:d7:e7:12:1f:03:44:fd:55:33:9e:3c:0a:0d: 12:72:01:a0:e8:45:db:bc:26:44:d2:7f:05:6e:21: 56:74:2a:9b:c3:c1:cf:bf:01:54:53:6e:e5:bf:9b: d8:48:38:5b:b2:c2:36:bd:62:72:2d:2a:67:13:c9: fe:c3:59:b8:24:33:9e:07:94:22:29:ee:7a:7d:cf: 95:cc:cc:a3:16:b7:cd:9c:ed:f8:b3:35:e4:b9:f8: e3:29:8e:84:4d:f1:b1:ac:e5:80:8b:4f:7e:83:dd: e6:83:92:f2:31:16:5d:f3:96:11:2c:10:0f:ce:17: 4a:46:db:1f:bf:2a:2a:1e:bf:9d:00:ea:cc:38:47: 03:8b:95:27:99:5e:50:f2:28:ab:97:c2:84:fa:95: 70:a4:66:a2:94:fb:64:73:ba:8b:76:f5:34:bc:a2: db:24:7a:3c:8a:b2:59:17:a6:ae:e8:ae:23:ac:92: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BA:9F:DA:BD:76:2A:DE:2B:88:18:68:57:82:B7:05:18:1B:70:3D X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d2:1e:20:32:41:b5:a9:80:50:5c:05:a8:59:a6:2f:27:1d: 7c:5d:4c:bd:ca:40:f8:dd:9e:44:7a:0a:f9:7e:39:49:c8:18: 1b:ac:a3:d2:83:45:97:ba:3c:07:25:d5:89:07:9e:63:fc:64: 09:3c:8d:c1:da:9b:fe:97:a9:de:00:70:51:3b:c5:b8:07:c2: 96:67:7b:07:5f:b2:08:99:02:b2:bb:56:b9:33:3f:46:ad:e5: 18:67:67:7c:6c:2f:44:f6:dd:81:8f:a9:f6:9d:58:c5:79:0c: 36:16:57:86:ca:55:c8:c2:f9:85:d0:39:8d:29:75:71:98:42: fd:76:db:a7:cf:c9:19:b2:a3:ce:d0:76:1b:f3:19:ae:01:eb: fe:8d:f9:83:d7:fe:6d:21:49:f9:74:d2:f4:1a:d1:c2:50:08: 8a:46:b7:ff:eb:89:74:67:18:57:68:ef:a6:77:51:81:7e:b3: 83:5c:25:f7:dc:57:bc:c9:a3:66:b0:9a:ad:0b:6d:23:b2:58: af:ae:58:dc:0e:e7:89:f0:6a:a7:53:db:2b:b1:01:10:04:bb: a3:79:1e:0e:94:4b:38:02:86:d1:82:aa:5a:1c:b2:c8:d6:04: 88:25:67:88:40:8c:33:ee:12:a7:ab:8f:df:e9:c2:1b:2e:26: f0:68:9c:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2/XtiOiWa7dDP+wKDh7CvlozDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNTA2MjgxNjQ3MjBaFw0yNTA3MDExOTAyMjBaMDMxMTAvBgNV BAMTKDM3QkE5RkRBQkQ3NjJBREUyQjg4MTg2ODU3ODJCNzA1MTgxQjcwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyn1489n3DcRPSX5+6nCqmGOP RDzbdn/xNPOIxkTM/sC4eNh6bIlejSYcDiupdS7rZam2lmO2r+wj1sMJBYHkl7gF 0WwEnsvxa5g11+cSHwNE/VUznjwKDRJyAaDoRdu8JkTSfwVuIVZ0KpvDwc+/AVRT buW/m9hIOFuywja9YnItKmcTyf7DWbgkM54HlCIp7np9z5XMzKMWt82c7fizNeS5 +OMpjoRN8bGs5YCLT36D3eaDkvIxFl3zlhEsEA/OF0pG2x+/Kioev50A6sw4RwOL lSeZXlDyKKuXwoT6lXCkZqKU+2Rzuot29TS8otskejyKslkXpq7oriOskn/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN7qf2r12Kt4riBhoV4K3BRgbcD0wHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbSHiAyQbWpgFBcBahZpi8nHXxdTL3KQPjd nkR6Cvl+OUnIGBuso9KDRZe6PAcl1YkHnmP8ZAk8jcHam/6Xqd4AcFE7xbgHwpZn ewdfsgiZArK7VrkzP0at5RhnZ3xsL0T23YGPqfadWMV5DDYWV4bKVcjC+YXQOY0p dXGYQv1226fPyRmyo87QdhvzGa4B6/6N+YPX/m0hSfl00vQa0cJQCIpGt//riXRn GFdo76Z3UYF+s4NcJffcV7zJo2awmq0LbSOyWK+uWNwO54nwaqdT2yuxARAEu6N5 Hg6USzgChtGCqlocssjWBIglZ4hAjDPuEqerj9/pwhsuJvBonC4= -----END CERTIFICATE-----Generated at Mon Jun 30 10:18:32 2025 by rpki-client