$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: Svz37olOvVmxmEs9Wg6BJamNWw7aSmOFD186Ch+rAmU= Subject key identifier: 21:93:64:27:D6:2B:96:4D:32:3F:84:F1:56:C5:73:82:F2:CA:74:7A Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 2F5E44F6E4D0CB584EE169B71328C6DF33423F04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 0158 Signing time: Wed 07 May 2025 11:12:13 +0000 Manifest this update: Wed 07 May 2025 11:07:13 +0000 Manifest next update: Sat 10 May 2025 21:42:13 +0000 Files and hashes: 1: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) 2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) 3: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: 9FTZJYx6RQp4+nhfyWFg2873v8EVdLfixR3AXHCJSIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 21:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5e:44:f6:e4:d0:cb:58:4e:e1:69:b7:13:28:c6:df:33:42:3f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: May 7 11:07:13 2025 GMT Not After : May 10 21:42:13 2025 GMT Subject: CN=21936427D62B964D323F84F156C57382F2CA747A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:15:b9:e3:74:fd:fa:55:99:1c:2f:1e:bd:f0: 3d:66:d3:a1:48:d5:65:46:dd:6c:0b:06:8f:e0:e3: c2:96:56:44:1e:52:11:2e:16:d6:bd:3e:77:9f:fd: 83:b8:97:03:83:c0:97:69:aa:d5:aa:c9:9c:8a:75: 83:ef:07:bb:49:a7:f6:94:e8:a5:3d:38:f1:32:ce: d7:c0:1c:9f:84:44:ef:2a:9b:de:b7:24:5b:9b:82: 12:3f:4d:3f:e0:bf:e7:73:10:f8:ac:f2:6c:91:bf: 55:b0:e8:88:20:97:e3:72:7e:7a:c2:71:6b:f1:eb: e1:c6:ec:dc:01:4a:e2:ca:2d:4e:7f:16:03:72:01: a2:c3:6b:3c:c8:e0:b1:d2:07:ac:60:2e:65:67:87: bd:cd:11:51:c1:54:f6:87:34:ed:e1:13:fb:3d:f9: fa:b3:1d:76:c0:1f:40:c3:ac:bf:03:0e:0a:d2:55: 35:cb:52:1f:58:82:b0:28:47:e6:bd:6a:5c:5c:f5: 11:25:f2:e9:c9:5a:3b:1f:2e:ea:33:4e:0e:3c:66: ff:6c:f5:57:54:29:bf:38:bc:a5:00:4b:07:5f:42: b0:ba:64:35:6e:b5:88:9d:03:98:9a:de:59:e4:7c: 71:02:15:56:06:af:fb:11:19:0a:af:8a:ac:6a:7b: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:93:64:27:D6:2B:96:4D:32:3F:84:F1:56:C5:73:82:F2:CA:74:7A X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:16:d1:6f:1a:59:81:57:5c:ea:6b:b1:de:79:69:f6:74:8d: 8d:7b:36:ea:17:dd:80:67:7b:fb:92:c3:ae:88:c7:23:e6:be: 0a:49:e4:10:06:70:c6:46:f2:68:9f:78:8a:19:ae:2b:ae:c0: 55:0e:08:80:e1:b0:06:56:f3:0c:14:32:df:70:86:58:ec:df: 71:9e:60:ea:09:5c:1c:28:ec:3b:b0:6a:f7:61:8c:fc:43:95: c6:3a:a6:56:1b:d6:22:45:7d:82:5f:c9:8d:9b:55:fe:14:76: 09:fd:2f:71:6c:f1:35:5e:2d:37:b0:37:99:56:19:1e:a6:ef: b5:8b:94:ce:1f:86:71:b6:d0:f0:2e:17:4e:63:e7:3e:a4:a8: 7a:17:3f:ad:13:98:79:1c:e9:42:68:14:99:d2:34:e1:7b:44: 9b:e9:a8:2a:03:03:92:bc:b5:ce:39:56:fd:c2:d3:48:14:9b: c7:d4:a3:fd:06:34:f7:5d:2d:bd:ef:d9:3b:50:39:6a:3f:17: 79:8d:e0:b8:69:d6:1f:af:a5:6a:ec:c3:2d:ed:71:59:36:57: ca:84:eb:af:fc:88:b7:00:95:b5:b7:0c:54:5e:c3:87:72:a4: d4:52:7b:89:9a:2e:ed:c8:70:c0:8e:db:e4:6c:27:c3:ed:3f: d4:b6:bb:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL15E9uTQy1hO4Wm3EyjG3zNCPwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTA1MDcxMTA3MTNaFw0yNTA1MTAyMTQyMTNaMDMxMTAvBgNV BAMTKDIxOTM2NDI3RDYyQjk2NEQzMjNGODRGMTU2QzU3MzgyRjJDQTc0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhFbnjdP36VZkcLx698D1m06FI 1WVG3WwLBo/g48KWVkQeUhEuFta9Pnef/YO4lwODwJdpqtWqyZyKdYPvB7tJp/aU 6KU9OPEyztfAHJ+ERO8qm963JFubghI/TT/gv+dzEPis8myRv1Ww6Iggl+NyfnrC cWvx6+HG7NwBSuLKLU5/FgNyAaLDazzI4LHSB6xgLmVnh73NEVHBVPaHNO3hE/s9 +fqzHXbAH0DDrL8DDgrSVTXLUh9YgrAoR+a9alxc9REl8unJWjsfLuozTg48Zv9s 9VdUKb84vKUASwdfQrC6ZDVutYidA5ia3lnkfHECFVYGr/sRGQqviqxqe9tJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIZNkJ9Yrlk0yP4TxVsVzgvLKdHowHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoW0W8aWYFXXOprsd55afZ0jY17NuoX3YBn e/uSw66IxyPmvgpJ5BAGcMZG8mifeIoZriuuwFUOCIDhsAZW8wwUMt9whljs33Ge YOoJXBwo7DuwavdhjPxDlcY6plYb1iJFfYJfyY2bVf4Udgn9L3Fs8TVeLTewN5lW GR6m77WLlM4fhnG20PAuF05j5z6kqHoXP60TmHkc6UJoFJnSNOF7RJvpqCoDA5K8 tc45Vv3C00gUm8fUo/0GNPddLb3v2TtQOWo/F3mN4Lhp1h+vpWrswy3tcVk2V8qE 66/8iLcAlbW3DFRew4dypNRSe4maLu3IcMCO2+RsJ8PtP9S2u8Y= -----END CERTIFICATE-----Generated at Wed May 7 23:09:37 2025 by rpki-client