$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: Bmtqyg/kd2kM8rvtc5eFdIsfmmBCqOPJy4YoGbfpWcU= Subject key identifier: B6:FF:69:02:B0:58:41:86:A2:C3:E2:CB:39:16:15:BC:BB:4C:88:5B Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 296FE5BBF487D0191B4F169C8D51F6DD6775185C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: 81 Signing time: Sun 04 May 2025 10:12:18 +0000 Manifest this update: Sun 04 May 2025 10:07:18 +0000 Manifest next update: Wed 07 May 2025 20:40:18 +0000 Files and hashes: 1: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: NNQETFHPe7cAAtek2zxUx49WCYn+PKPjmbpFT8/aITA=) 2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: HdQz1dWfKOGxSjvYAjfqgzM8praYpuYX0xMaqB08kJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 20:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6f:e5:bb:f4:87:d0:19:1b:4f:16:9c:8d:51:f6:dd:67:75:18:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: May 4 10:07:18 2025 GMT Not After : May 7 20:40:18 2025 GMT Subject: CN=B6FF6902B0584186A2C3E2CB391615BCBB4C885B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:4c:8e:ce:3e:5f:44:5e:3d:b7:e5:5d:6d: b9:bf:51:59:1f:b8:b3:8c:96:8f:c7:6c:ca:aa:fc: a0:63:ee:a7:d9:4f:c8:d1:38:b3:7b:50:e7:32:ab: b3:20:47:cb:8a:b1:d3:23:3e:57:57:86:6f:78:4f: 93:e2:39:c1:8e:03:e2:35:88:ec:da:a9:04:87:e4: 5c:b1:68:d4:15:74:78:90:68:c5:71:88:38:90:63: 2f:22:b4:0c:d3:28:01:a8:af:ea:80:91:ff:dc:1e: dc:8c:9b:20:0c:dc:e3:4e:2d:7a:f9:4f:bc:fc:95: dc:8a:4f:06:9d:79:aa:4c:3c:bb:33:1c:50:57:c8: 9b:d6:36:1d:a6:e0:f1:6c:9e:a4:26:72:f4:1a:cf: 9c:32:e7:30:0a:be:71:ee:80:79:c0:f9:c3:45:eb: bd:11:d9:39:c3:74:6c:87:6d:35:55:c9:18:22:38: bc:86:14:a1:ed:90:ee:bd:32:76:2c:92:1e:d6:a1: 0e:69:34:cf:8c:c6:b5:c2:e0:02:26:57:9e:a3:35: 83:2c:4b:be:30:54:0a:07:e5:e6:3f:e5:4d:7f:f3: d5:e4:03:e0:5e:38:13:db:b1:98:e6:1b:40:1a:4b: 66:5d:97:85:a4:c0:25:ff:36:59:30:06:ae:11:58: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FF:69:02:B0:58:41:86:A2:C3:E2:CB:39:16:15:BC:BB:4C:88:5B X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:bf:e4:a2:10:e7:8e:70:85:13:a6:04:11:ef:fc:ff:de:c1: 01:c6:4c:1c:ff:8c:e3:3f:8c:ad:d0:7d:4d:78:59:e6:5b:f2: ed:d5:cb:2d:4f:72:bd:e8:55:c1:de:9b:d4:27:f4:65:46:ce: 4a:a4:fb:13:7d:4f:7a:de:c9:ad:cd:f9:d2:e7:8f:6f:c8:92: 50:ae:50:31:8c:1b:c8:91:28:19:f9:c8:03:c7:1a:e5:6e:43: cb:10:e8:b3:02:41:b2:b6:bd:69:b4:87:3c:34:09:65:ca:91: 32:42:01:ce:c5:33:c9:06:9e:ea:2c:30:3d:e3:24:71:3a:bb: 66:86:75:0a:be:87:cb:e8:9e:0a:28:29:39:ce:2e:49:0a:55: 2d:76:a9:63:42:52:a1:cf:81:9a:90:66:53:93:d6:34:5d:c0: ab:e0:60:40:9a:fe:74:8a:f8:3e:dd:e7:d6:5d:4b:91:2e:26: d4:5a:a1:8e:dd:b7:25:bd:93:90:b4:d4:f3:3f:e0:ee:4b:e0: bf:06:ea:35:b9:40:a9:80:1e:b6:4b:a7:7d:6d:32:b6:90:ba: 9c:26:5b:8d:d4:6a:9d:40:32:d6:b1:d0:57:f7:85:98:2e:94: 9b:aa:ea:57:03:7f:68:bd:fc:3b:06:64:21:51:f4:ce:f9:e0: 61:a7:14:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKW/lu/SH0BkbTxacjVH23Wd1GFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNTA1MDQxMDA3MThaFw0yNTA1MDcyMDQwMThaMDMxMTAvBgNV BAMTKEI2RkY2OTAyQjA1ODQxODZBMkMzRTJDQjM5MTYxNUJDQkI0Qzg4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsl0yOzj5fRF49t+Vdbbm/UVkf uLOMlo/HbMqq/KBj7qfZT8jROLN7UOcyq7MgR8uKsdMjPldXhm94T5PiOcGOA+I1 iOzaqQSH5FyxaNQVdHiQaMVxiDiQYy8itAzTKAGor+qAkf/cHtyMmyAM3ONOLXr5 T7z8ldyKTwadeapMPLszHFBXyJvWNh2m4PFsnqQmcvQaz5wy5zAKvnHugHnA+cNF 670R2TnDdGyHbTVVyRgiOLyGFKHtkO69MnYskh7WoQ5pNM+MxrXC4AImV56jNYMs S74wVAoH5eY/5U1/89XkA+BeOBPbsZjmG0AaS2Zdl4WkwCX/NlkwBq4RWBLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtv9pArBYQYaiw+LLORYVvLtMiFswHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKG/5KIQ545whROmBBHv/P/ewQHGTBz/jOM/ jK3QfU14WeZb8u3Vyy1Pcr3oVcHem9Qn9GVGzkqk+xN9T3reya3N+dLnj2/IklCu UDGMG8iRKBn5yAPHGuVuQ8sQ6LMCQbK2vWm0hzw0CWXKkTJCAc7FM8kGnuosMD3j JHE6u2aGdQq+h8vongooKTnOLkkKVS12qWNCUqHPgZqQZlOT1jRdwKvgYECa/nSK +D7d59ZdS5EuJtRaoY7dtyW9k5C01PM/4O5L4L8G6jW5QKmAHrZLp31tMraQupwm W43Uap1AMtax0Ff3hZgulJuq6lcDf2i9/DsGZCFR9M754GGnFIc= -----END CERTIFICATE-----Generated at Wed May 7 02:58:52 2025 by rpki-client