$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: ev1x9qF7hUiuZa+paFNxCIIeUHOUpzMPzxNTP6O2aGs= Subject key identifier: D6:96:29:3F:01:E9:27:86:B5:E7:4E:AB:9E:D1:92:E4:72:A3:AB:9F Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 055AC956FD6C7C4D23BE9BC34A5BCB29F2D8756E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 0193 Signing time: Sat 28 Jun 2025 03:40:41 +0000 Manifest this update: Sat 28 Jun 2025 03:35:41 +0000 Manifest next update: Tue 01 Jul 2025 05:45:41 +0000 Files and hashes: 1: 3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa (hash: V7RFCHjDQmX/bycVf9vGUXwZyU+bAqqIJro21SU5i0w=) 2: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: DzFcpLERJXI3OELGTKHhDPkfXoMXIbCKaKoHfG66BIk=) 3: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5a:c9:56:fd:6c:7c:4d:23:be:9b:c3:4a:5b:cb:29:f2:d8:75:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Jun 28 03:35:41 2025 GMT Not After : Jul 1 05:45:41 2025 GMT Subject: CN=D696293F01E92786B5E74EAB9ED192E472A3AB9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:02:53:ee:71:07:5a:53:c0:b1:b3:6f:15: 81:40:41:e8:4d:15:9e:c0:33:31:1c:3e:96:70:0e: c4:bc:c6:3b:2c:0e:0a:e6:bb:0b:c0:7e:7c:80:f3: ca:8f:93:bd:b7:6b:4d:1a:0f:5c:70:38:12:f4:f6: 1f:9d:80:48:9d:e4:08:03:b5:90:a1:62:5b:5f:9a: 31:10:e4:cc:51:53:d5:a2:5d:83:42:85:b4:a4:eb: 7a:d9:50:0f:50:04:db:7d:6e:91:3f:27:b2:1d:96: 56:3a:94:ae:69:68:02:4a:d3:7a:3e:de:9d:42:45: 67:3c:51:5c:8d:38:d6:c7:7a:5c:9d:17:b2:e0:b4: 91:07:8f:90:c1:3f:66:5e:94:1d:da:2b:42:57:2e: f5:84:c4:1b:5a:15:34:7b:70:2e:17:37:1a:4d:5b: 3e:ea:e1:01:54:e7:7b:a9:23:b9:97:e6:95:97:af: 6a:15:a4:1c:ed:87:d4:c4:1b:ee:05:41:48:2e:ab: bf:81:fa:51:a8:5d:92:25:10:a8:6c:2e:7b:20:0e: 8b:5d:0c:f9:2d:4b:a1:82:03:62:02:aa:0d:1a:34: 65:1b:95:21:ea:bc:1a:e6:25:4d:29:22:30:3e:a2: a0:da:a3:3f:e0:5a:c7:10:aa:f9:53:57:7f:6d:b6: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:96:29:3F:01:E9:27:86:B5:E7:4E:AB:9E:D1:92:E4:72:A3:AB:9F X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:db:32:22:d7:f3:fd:1f:10:1e:be:4c:65:80:d6:e3:2a:4d: ce:58:d3:73:48:bf:3f:e6:54:8a:57:1b:20:80:4b:85:02:7a: 4c:c8:83:9c:b2:5f:73:68:fd:fe:66:b6:81:22:f7:2e:0e:95: 63:79:8b:c9:b2:f4:9a:47:a9:20:c8:b3:66:7e:84:8e:56:b1: 51:00:55:f2:b4:9d:fe:0d:c5:1f:e1:a0:be:b7:20:ea:7a:93: 28:ff:e8:6d:90:65:a0:b1:c1:d6:63:5e:6c:59:49:25:ec:a1: f2:41:c7:51:c0:a5:d8:94:ad:7b:03:e3:65:94:52:cc:2b:65: f8:38:56:ca:44:3d:5a:b9:fe:a7:b5:7e:c5:f4:58:74:ff:cb: 75:23:02:6d:18:ec:a9:56:50:9a:a9:52:ca:0d:64:c4:db:95: 34:77:55:46:83:7d:7f:70:89:9b:e1:d3:ba:6f:8b:04:2f:f4: ac:76:90:cb:29:40:bc:e2:48:42:69:ec:72:04:77:53:37:60: 67:6b:1d:44:32:50:13:20:ea:bc:6c:12:94:19:58:13:5e:c8: 49:90:bd:1e:3f:e3:fb:a8:a9:cc:fc:0e:6b:06:a8:20:72:3a: 07:a6:d0:36:57:48:90:f6:87:ab:63:c8:85:44:8d:37:3a:40: 5d:94:70:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVrJVv1sfE0jvpvDSlvLKfLYdW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNTA2MjgwMzM1NDFaFw0yNTA3MDEwNTQ1NDFaMDMxMTAvBgNV BAMTKEQ2OTYyOTNGMDFFOTI3ODZCNUU3NEVBQjlFRDE5MkU0NzJBM0FCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qgJT7nEHWlPAsbNvFYFAQehN FZ7AMzEcPpZwDsS8xjssDgrmuwvAfnyA88qPk723a00aD1xwOBL09h+dgEid5AgD tZChYltfmjEQ5MxRU9WiXYNChbSk63rZUA9QBNt9bpE/J7IdllY6lK5paAJK03o+ 3p1CRWc8UVyNONbHelydF7LgtJEHj5DBP2ZelB3aK0JXLvWExBtaFTR7cC4XNxpN Wz7q4QFU53upI7mX5pWXr2oVpBzth9TEG+4FQUguq7+B+lGoXZIlEKhsLnsgDotd DPktS6GCA2ICqg0aNGUblSHqvBrmJU0pIjA+oqDaoz/gWscQqvlTV39ttvsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1pYpPwHpJ4a1506rntGS5HKjq58wHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrbMiLX8/0fEB6+TGWA1uMqTc5Y03NIvz/m VIpXGyCAS4UCekzIg5yyX3No/f5mtoEi9y4OlWN5i8my9JpHqSDIs2Z+hI5WsVEA VfK0nf4NxR/hoL63IOp6kyj/6G2QZaCxwdZjXmxZSSXsofJBx1HApdiUrXsD42WU UswrZfg4VspEPVq5/qe1fsX0WHT/y3UjAm0Y7KlWUJqpUsoNZMTblTR3VUaDfX9w iZvh07pviwQv9Kx2kMspQLziSEJp7HIEd1M3YGdrHUQyUBMg6rxsEpQZWBNeyEmQ vR4/4/uoqcz8DmsGqCByOgem0DZXSJD2h6tjyIVEjTc6QF2UcLA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:35 2025 by rpki-client