$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: N4kSJxQlzNLcsOntfLFsoFVrNaiBnzAO9tMZNCn8YfM= Subject key identifier: 71:0D:C7:CF:27:68:A0:55:55:28:34:F3:37:EC:75:D0:D4:8A:97:C0 Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 6594FC8F5CA7C834C7C2E6CB26BEB7C1E2DB405B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 01CF Signing time: Sat 10 May 2025 06:01:32 +0000 Manifest this update: Sat 10 May 2025 05:56:32 +0000 Manifest next update: Tue 13 May 2025 11:27:32 +0000 Files and hashes: 1: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: nAKPsdA+p5EXUw52llJGaXoJBbYQMzHFK+nhkzmqL/E=) 2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: 2OJ/wtKeIZAaX++aUeHXj+pN9DRnOhjC4MRVlbyCCIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 11:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:94:fc:8f:5c:a7:c8:34:c7:c2:e6:cb:26:be:b7:c1:e2:db:40:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: May 10 05:56:32 2025 GMT Not After : May 13 11:27:32 2025 GMT Subject: CN=710DC7CF2768A055552834F337EC75D0D48A97C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:20:14:67:7b:cb:88:e7:0e:1d:b9:30:5f: 57:f4:7e:46:9f:e0:05:27:35:4b:37:c2:db:77:a2: e1:25:49:35:26:42:30:42:3f:2e:53:d2:f0:64:2e: 37:db:aa:93:91:56:e1:7e:cd:fd:21:63:74:58:15: 07:31:a4:49:a4:97:e5:80:6b:d2:2b:da:31:b4:8a: 39:a7:3e:a9:23:8d:ae:5a:2c:58:98:e0:1a:d0:81: 6d:3b:b2:85:db:de:b1:c4:26:fd:76:7d:f1:ea:5a: 8f:3d:7b:a3:05:a7:eb:42:7d:bd:08:6a:38:b8:ca: 13:fc:72:8a:a2:fb:e9:55:e7:fa:1a:0b:55:62:6f: 94:2f:59:ac:ca:92:f7:aa:b1:b1:c3:f0:22:c7:f3: f8:8d:b7:1b:41:a9:eb:bd:6b:3d:cd:4c:3b:2f:a4: d6:b3:20:b4:b1:3f:ed:07:09:63:b9:d2:ff:3b:9b: 33:02:63:38:f8:52:e6:6f:bf:0a:35:ca:ba:db:ec: 85:4e:cd:d5:9e:79:75:98:16:d0:73:94:21:26:1c: c7:58:99:23:76:5e:8d:f5:69:db:6e:fb:86:a8:d4: cc:2e:70:c4:f5:c6:c0:27:77:4a:39:ac:0b:4a:04: da:b0:20:55:6f:86:29:42:e3:56:7b:19:66:af:34: a5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0D:C7:CF:27:68:A0:55:55:28:34:F3:37:EC:75:D0:D4:8A:97:C0 X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:87:8c:68:62:1a:4d:d7:75:e4:ee:ef:64:e3:c8:fb:bd:b3: 18:b8:d8:3b:91:7d:b7:b5:38:68:6e:32:87:b7:be:22:e7:00: c6:07:8c:b6:9f:be:a2:80:8b:9e:da:9b:be:01:cb:05:03:43: d9:35:f3:bf:b9:9d:ce:7e:fd:31:6e:f9:90:f3:39:d5:65:fb: 07:c0:c1:b7:f8:14:0d:98:1e:c2:86:47:30:5b:6e:7b:26:70: 08:b3:11:98:69:9f:f6:a4:17:ac:00:24:a2:d1:24:05:34:9f: 79:57:1b:5e:cd:a4:21:37:03:2a:8a:05:4a:2a:c8:53:65:09: 42:57:71:a4:66:97:5a:4e:d3:13:59:40:f4:0c:fd:cc:3a:54: 93:9e:ef:b7:62:2e:0e:92:57:e0:a2:b6:9e:85:c6:67:60:92: 23:8f:0f:cb:70:aa:14:1f:65:61:fc:0a:32:99:c2:2b:2f:81: d1:05:e8:24:af:c8:87:15:aa:0e:7b:82:6b:ae:b0:4c:8f:07: 60:9e:b0:a8:15:34:3c:e0:36:33:e7:17:b8:25:30:0f:c6:b3: 6b:df:1b:3e:6a:0a:64:66:e6:19:41:a1:ac:5c:2a:bf:d5:cf: d8:42:69:eb:c6:08:51:4a:d2:b5:90:20:13:13:31:32:0c:57: 3d:83:19:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZT8j1ynyDTHwubLJr63weLbQFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNTA1MTAwNTU2MzJaFw0yNTA1MTMxMTI3MzJaMDMxMTAvBgNV BAMTKDcxMERDN0NGMjc2OEEwNTU1NTI4MzRGMzM3RUM3NUQwRDQ4QTk3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJCAUZ3vLiOcOHbkwX1f0fkaf 4AUnNUs3wtt3ouElSTUmQjBCPy5T0vBkLjfbqpORVuF+zf0hY3RYFQcxpEmkl+WA a9Ir2jG0ijmnPqkjja5aLFiY4BrQgW07soXb3rHEJv12ffHqWo89e6MFp+tCfb0I aji4yhP8coqi++lV5/oaC1Vib5QvWazKkveqsbHD8CLH8/iNtxtBqeu9az3NTDsv pNazILSxP+0HCWO50v87mzMCYzj4UuZvvwo1yrrb7IVOzdWeeXWYFtBzlCEmHMdY mSN2Xo31adtu+4ao1MwucMT1xsAnd0o5rAtKBNqwIFVvhilC41Z7GWavNKUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQ3HzydooFVVKDTzN+x10NSKl8AwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGHjGhiGk3XdeTu72TjyPu9sxi42DuRfbe1 OGhuMoe3viLnAMYHjLafvqKAi57am74BywUDQ9k187+5nc5+/TFu+ZDzOdVl+wfA wbf4FA2YHsKGRzBbbnsmcAizEZhpn/akF6wAJKLRJAU0n3lXG17NpCE3AyqKBUoq yFNlCUJXcaRml1pO0xNZQPQM/cw6VJOe77diLg6SV+Citp6FxmdgkiOPD8twqhQf ZWH8CjKZwisvgdEF6CSvyIcVqg57gmuusEyPB2CesKgVNDzgNjPnF7glMA/Gs2vf Gz5qCmRm5hlBoaxcKr/Vz9hCaevGCFFK0rWQIBMTMTIMVz2DGT8= -----END CERTIFICATE-----Generated at Sun May 11 05:38:44 2025 by rpki-client