$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: 6elRIUHUQSNf/vOyKvxazLz3RsG89frP9g9oG1VbJcc= Subject key identifier: C2:37:ED:26:62:B2:8F:AA:5C:DE:06:77:03:B5:59:A4:3C:28:36:ED Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 05BA4BFC3264042BB35DBE4C61756425A63F5755 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 04E7 Signing time: Sun 29 Jun 2025 05:10:36 +0000 Manifest this update: Sun 29 Jun 2025 05:05:36 +0000 Manifest next update: Wed 02 Jul 2025 08:18:36 +0000 Files and hashes: 1: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: my6tEJ17cX9gVhhHuyCenAhkt7yiT+Ya7RBjQLVz/do=) 2: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 3: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) 4: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ba:4b:fc:32:64:04:2b:b3:5d:be:4c:61:75:64:25:a6:3f:57:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Jun 29 05:05:36 2025 GMT Not After : Jul 2 08:18:36 2025 GMT Subject: CN=C237ED2662B28FAA5CDE067703B559A43C2836ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:01:63:87:b1:00:42:2a:44:76:e9:fd:f4: cf:24:62:bb:44:c1:90:52:db:53:1d:53:fa:55:5a: 8a:59:ca:4a:c6:a2:ef:1b:38:9a:b3:a6:77:0e:22: cb:d1:13:07:6d:e9:52:e3:73:fd:e9:4f:de:89:59: 89:67:27:e3:9a:de:a1:7f:31:9c:2e:75:b7:4e:08: 76:cd:38:e9:1a:84:3f:59:c8:82:c6:cc:39:f1:23: 90:66:11:ee:12:d1:05:64:ef:9b:2b:7d:99:b5:ea: 57:88:93:7d:7e:25:ec:67:50:7e:b7:ca:84:dc:d8: 5f:64:10:83:76:2e:fe:bb:d4:9b:41:d3:2e:de:ae: 52:cf:96:5b:0c:0b:1f:62:c0:a8:72:55:43:2f:67: 0d:ac:7d:d3:a8:c7:65:eb:99:d9:95:0d:b5:40:5d: 3a:96:02:4a:32:fd:62:cf:5d:b2:d7:ca:6a:ab:b1: a3:56:f6:7d:ae:62:0a:8c:f3:0f:01:61:b8:42:0b: 43:5d:92:62:12:16:24:a8:58:44:ae:bf:be:47:37: af:23:f5:38:dc:8c:57:88:f0:5e:e9:ed:f9:f4:d3: de:ad:ef:4e:50:f4:a1:36:9d:ce:c3:53:9b:12:b0: eb:29:49:7b:fc:ae:6b:46:89:5b:b4:a5:6c:10:af: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:37:ED:26:62:B2:8F:AA:5C:DE:06:77:03:B5:59:A4:3C:28:36:ED X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4a:50:fb:25:19:cf:e1:48:bb:a8:d6:7e:b4:bc:20:59:44: 4c:46:b0:d4:91:86:4e:ad:62:71:3b:b7:0a:78:c6:5c:10:64: 07:10:5a:6c:d1:af:1b:82:de:18:00:42:56:75:a6:79:cd:d1: 18:e0:86:7b:e9:ef:4d:d8:cf:46:64:6a:85:c4:cb:5d:79:c0: ca:df:0d:db:d8:10:16:f2:86:81:3a:da:9f:de:c3:7c:d9:3c: 91:5e:40:0a:2d:cb:9d:60:08:8d:6f:63:ad:05:7d:9e:14:04: fb:9c:cc:ee:63:e4:bd:2c:4b:c6:16:14:ba:2c:b6:37:b4:58: f8:95:c6:12:c4:24:30:1d:b9:d0:8c:1c:dc:03:85:6e:27:77: a5:61:be:4f:7b:b5:36:4f:2c:8b:0a:30:5e:d3:82:d2:62:1d: af:5b:06:37:03:a0:df:88:b0:20:d7:74:39:f5:c5:88:22:15: f2:a0:3f:b0:d6:be:5a:be:66:24:d6:fd:d0:82:2b:37:d0:d0: b8:9f:cf:8c:08:94:37:9b:c0:97:7a:64:45:15:70:37:e1:ed: 0b:30:91:db:0a:c8:c4:67:55:fa:64:c3:c2:49:34:c7:09:12: 4c:62:9b:fd:10:f1:d9:77:47:e0:e2:08:97:11:e2:74:c9:27: 00:63:ae:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbpL/DJkBCuzXb5MYXVkJaY/V1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTA2MjkwNTA1MzZaFw0yNTA3MDIwODE4MzZaMDMxMTAvBgNV BAMTKEMyMzdFRDI2NjJCMjhGQUE1Q0RFMDY3NzAzQjU1OUE0M0MyODM2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EQFjh7EAQipEdun99M8kYrtE wZBS21MdU/pVWopZykrGou8bOJqzpncOIsvREwdt6VLjc/3pT96JWYlnJ+Oa3qF/ MZwudbdOCHbNOOkahD9ZyILGzDnxI5BmEe4S0QVk75srfZm16leIk31+JexnUH63 yoTc2F9kEIN2Lv671JtB0y7erlLPllsMCx9iwKhyVUMvZw2sfdOox2XrmdmVDbVA XTqWAkoy/WLPXbLXymqrsaNW9n2uYgqM8w8BYbhCC0NdkmISFiSoWESuv75HN68j 9TjcjFeI8F7p7fn0096t705Q9KE2nc7DU5sSsOspSXv8rmtGiVu0pWwQryePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjftJmKyj6pc3gZ3A7VZpDwoNu0wHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpKUPslGc/hSLuo1n60vCBZRExGsNSRhk6t YnE7twp4xlwQZAcQWmzRrxuC3hgAQlZ1pnnN0Rjghnvp703Yz0ZkaoXEy115wMrf DdvYEBbyhoE62p/ew3zZPJFeQAoty51gCI1vY60FfZ4UBPuczO5j5L0sS8YWFLos tje0WPiVxhLEJDAdudCMHNwDhW4nd6Vhvk97tTZPLIsKMF7TgtJiHa9bBjcDoN+I sCDXdDn1xYgiFfKgP7DWvlq+ZiTW/dCCKzfQ0Lifz4wIlDebwJd6ZEUVcDfh7Qsw kdsKyMRnVfpkw8JJNMcJEkxim/0Q8dl3R+DiCJcR4nTJJwBjrkk= -----END CERTIFICATE-----Generated at Mon Jun 30 13:24:36 2025 by rpki-client