$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: Pj9m6PUjiJhIgxQoKSL4DJJPw0KYB/OzhUsbjN0GrMM= Subject key identifier: 0D:70:BB:67:7C:A4:F8:20:E1:26:7B:04:8B:80:8F:5A:E9:B5:9A:F4 Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 1A1D0C877DE7C6CE140F8D091BE506CE99058C7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 014E Signing time: Sat 03 May 2025 14:31:41 +0000 Manifest this update: Sat 03 May 2025 14:26:41 +0000 Manifest next update: Tue 06 May 2025 17:27:41 +0000 Files and hashes: 1: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) 2: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: Qtky+GOVBOfLSqLZhiwEK6/Lp7AJlvhbLRqqrF1y6oU=) 3: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) 4: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) 5: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 17:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1d:0c:87:7d:e7:c6:ce:14:0f:8d:09:1b:e5:06:ce:99:05:8c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: May 3 14:26:41 2025 GMT Not After : May 6 17:27:41 2025 GMT Subject: CN=0D70BB677CA4F820E1267B048B808F5AE9B59AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:85:a8:d8:9c:80:27:4b:03:ee:66:ed:72: fe:84:2a:50:97:66:dc:3d:28:48:e3:03:4e:46:c6: 3d:91:f5:43:46:b7:9e:4a:6c:46:58:6e:96:59:d2: 8b:1c:4e:cd:51:7e:8d:3e:2f:46:b1:34:4a:a9:49: c0:a9:c7:4e:be:65:7d:c6:24:d0:27:26:18:ad:74: ce:2e:40:37:0c:a8:c1:fe:97:24:0c:cb:ce:6f:bd: 31:d9:e8:d9:21:d5:3a:82:9d:63:ee:31:09:d1:b3: 1a:30:11:74:e7:66:96:79:c1:c7:e2:d7:a0:62:9f: 0c:27:93:1e:f9:c3:91:cb:c4:ff:f5:17:86:15:20: e6:2f:a5:fd:47:1e:4e:16:f2:a9:63:12:05:ac:c9: 26:87:2d:ed:04:67:fa:78:09:5b:e5:db:da:f6:61: d1:b9:30:81:71:50:eb:a0:90:f4:ae:80:2e:8f:80: 7c:a6:aa:5b:29:5e:32:b2:f4:0b:cb:12:1d:4d:00: 9e:33:41:c6:76:5c:3c:8f:e2:4a:82:a2:d7:07:82: 4e:96:0b:3e:15:4a:ad:1f:f8:4f:10:39:77:a9:df: 7d:e2:89:43:07:68:02:87:a6:fd:28:8d:f0:3f:21: b7:b4:52:4d:d0:df:be:e9:84:a4:59:60:7e:70:2f: 9a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:BB:67:7C:A4:F8:20:E1:26:7B:04:8B:80:8F:5A:E9:B5:9A:F4 X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ad:07:ea:7f:b5:7d:41:36:79:4f:d4:dd:76:7c:52:95:7f: 96:22:48:c7:e1:91:cc:ab:85:34:0a:92:bb:31:88:7e:b0:de: d9:0e:11:62:04:cb:2a:7b:b8:7a:aa:37:e6:41:90:20:9f:02: cb:c4:d1:46:d2:aa:b6:8e:86:6e:c4:7c:17:c5:0a:c2:65:1c: d7:ee:3f:78:d0:17:eb:3a:63:0f:67:9a:c2:0e:41:4e:fa:7d: bd:0e:4c:fa:c5:1f:3c:38:cf:11:2d:88:86:1a:9e:0d:a6:aa: 06:8c:a2:c3:dd:cd:95:73:da:c8:ab:ad:5d:ca:c6:c4:9b:7c: 83:47:e2:f9:d3:ef:d7:1e:ff:77:78:38:5a:b7:1c:80:bc:8a: bb:12:b5:0c:76:4f:46:2f:bf:e9:85:ef:4f:2c:b5:bb:7b:a9: 3d:ee:7c:5a:93:76:f4:fd:57:fc:77:ca:cf:1c:93:4a:01:42: 53:fa:90:95:b0:bd:3b:3c:f9:f4:b7:b6:9e:df:0a:c3:c4:d2: 34:aa:2b:99:96:52:e0:73:db:f1:f0:eb:33:c8:dd:34:6f:81: 63:a9:57:62:90:70:7b:45:8d:df:c9:07:80:a4:e4:82:be:bd: 57:f7:7a:00:c5:98:67:67:6e:95:68:e0:a9:e6:41:9e:ab:af: 7e:e9:b3:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGh0Mh33nxs4UD40JG+UGzpkFjH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNTA1MDMxNDI2NDFaFw0yNTA1MDYxNzI3NDFaMDMxMTAvBgNV BAMTKDBENzBCQjY3N0NBNEY4MjBFMTI2N0IwNDhCODA4RjVBRTlCNTlBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOoWo2JyAJ0sD7mbtcv6EKlCX Ztw9KEjjA05Gxj2R9UNGt55KbEZYbpZZ0oscTs1Rfo0+L0axNEqpScCpx06+ZX3G JNAnJhitdM4uQDcMqMH+lyQMy85vvTHZ6Nkh1TqCnWPuMQnRsxowEXTnZpZ5wcfi 16Binwwnkx75w5HLxP/1F4YVIOYvpf1HHk4W8qljEgWsySaHLe0EZ/p4CVvl29r2 YdG5MIFxUOugkPSugC6PgHymqlspXjKy9AvLEh1NAJ4zQcZ2XDyP4kqCotcHgk6W Cz4VSq0f+E8QOXep333iiUMHaAKHpv0ojfA/Ibe0Uk3Q377phKRZYH5wL5oVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDXC7Z3yk+CDhJnsEi4CPWum1mvQwHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+tB+p/tX1BNnlP1N12fFKVf5YiSMfhkcyr hTQKkrsxiH6w3tkOEWIEyyp7uHqqN+ZBkCCfAsvE0UbSqraOhm7EfBfFCsJlHNfu P3jQF+s6Yw9nmsIOQU76fb0OTPrFHzw4zxEtiIYang2mqgaMosPdzZVz2sirrV3K xsSbfINH4vnT79ce/3d4OFq3HIC8irsStQx2T0Yvv+mF708stbt7qT3ufFqTdvT9 V/x3ys8ck0oBQlP6kJWwvTs8+fS3tp7fCsPE0jSqK5mWUuBz2/Hw6zPI3TRvgWOp V2KQcHtFjd/JB4Ck5IK+vVf3egDFmGdnbpVo4KnmQZ6rr37psy4= -----END CERTIFICATE-----Generated at Mon May 5 19:55:36 2025 by rpki-client