$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: pao3uLn0tmfkDp+Ptbd4Wmv4Kj4eE+p/w+8uW3y7+1E= Subject key identifier: 16:6D:B3:D1:DF:B1:EB:F4:DE:3F:A2:C0:F7:D4:52:92:FA:52:26:99 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 3A93C174F30D4C220C71CDF922905369C8A14739 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 01E5 Signing time: Sun 29 Jun 2025 00:31:31 +0000 Manifest this update: Sun 29 Jun 2025 00:26:31 +0000 Manifest next update: Wed 02 Jul 2025 07:27:31 +0000 Files and hashes: 1: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: G3lvbyYacy+j4CtfJ5N6THLW9FjDCVAz7bytXjVNj0M=) 2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:93:c1:74:f3:0d:4c:22:0c:71:cd:f9:22:90:53:69:c8:a1:47:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Jun 29 00:26:31 2025 GMT Not After : Jul 2 07:27:31 2025 GMT Subject: CN=166DB3D1DFB1EBF4DE3FA2C0F7D45292FA522699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:26:ea:25:66:38:d6:d5:c0:64:0b:6a:15:16: 6d:41:0e:e4:51:85:9c:6d:c0:4f:e2:92:22:7f:69: 75:75:86:03:68:b6:52:1b:8a:a8:2d:e1:05:de:b4: ab:12:e8:e4:b1:b3:84:02:cb:24:5e:b1:f3:d3:60: e8:88:57:26:75:4b:21:79:5f:28:1b:ec:6a:93:01: 28:a7:85:07:33:92:46:05:70:47:97:36:fc:91:69: 8c:f6:96:fd:26:34:b9:04:3a:e0:20:7f:67:50:12: 4d:bb:e9:13:45:78:b6:db:17:10:93:41:47:ab:d3: 00:75:6a:fe:85:11:03:5a:29:69:01:2c:fa:be:13: 39:bb:54:24:ca:a7:40:36:76:fe:c0:ad:fd:d1:2d: 3b:46:f5:82:a0:00:61:29:d6:d5:4b:57:44:0e:bb: e4:de:d2:30:4f:e4:ca:0e:54:cd:40:8a:8c:8c:7c: c3:b8:01:10:19:95:76:63:71:9b:f3:54:0d:5d:86: ad:ef:b0:b0:c5:20:bf:2c:53:d3:28:a9:59:65:0c: c4:5d:a2:97:87:32:46:a5:aa:30:a8:0e:ee:6d:c0: 25:35:de:be:3d:ab:0f:c5:35:a7:d4:6f:70:11:8c: d3:52:8c:93:5f:13:1f:c8:60:ec:27:2b:fb:52:df: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6D:B3:D1:DF:B1:EB:F4:DE:3F:A2:C0:F7:D4:52:92:FA:52:26:99 X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:bc:1e:e7:ae:8f:90:55:32:39:44:c6:25:d6:07:7d:2d:57: 41:52:3b:26:35:10:6e:97:4d:8e:d0:30:ce:39:66:b2:45:46: f0:a5:47:52:be:4c:82:df:6f:fe:45:04:fe:f2:4c:4c:be:29: bb:7d:fd:ae:68:00:eb:73:9c:96:76:97:d5:d4:44:52:94:3a: a6:36:5a:c8:eb:e5:1b:f5:bd:75:16:b9:53:e4:6f:14:b7:ff: 86:9f:6b:e5:07:17:47:90:8e:46:60:4b:9e:e0:56:de:03:d2: 0a:79:18:11:0a:49:1f:54:8c:75:98:76:47:f9:26:2d:d6:0a: 8e:dd:3b:34:b0:e2:aa:50:58:95:83:5e:e5:07:a2:b6:aa:f8: ad:78:fc:10:d2:b8:c5:03:b2:30:03:57:60:e0:d7:1c:f8:f8: 69:df:c2:b0:4a:a9:c2:c5:58:4b:2d:c6:dc:52:38:f8:55:cb: ce:79:27:8f:e5:8f:bb:1d:43:b6:09:16:12:d3:46:30:38:b5: 12:5d:6a:8b:de:b2:f5:68:0f:a6:f6:11:c1:de:23:1c:6f:f5: a4:a7:94:7d:9c:a5:65:69:52:8d:8d:89:bb:ad:76:94:42:d6: 31:6b:9d:6b:a5:0e:10:12:45:76:51:d6:a7:e1:c4:0b:99:6b: 61:fb:25:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpPBdPMNTCIMcc35IpBTacihRzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTA2MjkwMDI2MzFaFw0yNTA3MDIwNzI3MzFaMDMxMTAvBgNV BAMTKDE2NkRCM0QxREZCMUVCRjRERTNGQTJDMEY3RDQ1MjkyRkE1MjI2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvJuolZjjW1cBkC2oVFm1BDuRR hZxtwE/ikiJ/aXV1hgNotlIbiqgt4QXetKsS6OSxs4QCyyResfPTYOiIVyZ1SyF5 Xygb7GqTASinhQczkkYFcEeXNvyRaYz2lv0mNLkEOuAgf2dQEk276RNFeLbbFxCT QUer0wB1av6FEQNaKWkBLPq+Ezm7VCTKp0A2dv7Arf3RLTtG9YKgAGEp1tVLV0QO u+Te0jBP5MoOVM1AioyMfMO4ARAZlXZjcZvzVA1dhq3vsLDFIL8sU9MoqVllDMRd opeHMkalqjCoDu5twCU13r49qw/FNafUb3ARjNNSjJNfEx/IYOwnK/tS30SFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFm2z0d+x6/TeP6LA99RSkvpSJpkwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGK8Hueuj5BVMjlExiXWB30tV0FSOyY1EG6X TY7QMM45ZrJFRvClR1K+TILfb/5FBP7yTEy+Kbt9/a5oAOtznJZ2l9XURFKUOqY2 Wsjr5Rv1vXUWuVPkbxS3/4afa+UHF0eQjkZgS57gVt4D0gp5GBEKSR9UjHWYdkf5 Ji3WCo7dOzSw4qpQWJWDXuUHoraq+K14/BDSuMUDsjADV2Dg1xz4+GnfwrBKqcLF WEstxtxSOPhVy855J4/lj7sdQ7YJFhLTRjA4tRJdaovesvVoD6b2EcHeIxxv9aSn lH2cpWVpUo2NibutdpRC1jFrnWulDhASRXZR1qfhxAuZa2H7JXs= -----END CERTIFICATE-----Generated at Sun Jun 29 19:51:27 2025 by rpki-client