$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: WWqiTbQSy60RPZmV2JGgm6dqCZVs6H9kGZsGQVLBrls= Subject key identifier: BC:F8:D0:11:03:22:EE:E7:BC:06:E0:F3:1C:D7:81:26:A7:16:5A:CB Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 0EEF5286D973AFF72928E0540A884A1A2ABB9567 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 04CF Signing time: Wed 07 May 2025 12:20:36 +0000 Manifest this update: Wed 07 May 2025 12:15:36 +0000 Manifest next update: Sat 10 May 2025 21:50:36 +0000 Files and hashes: 1: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: at/jUohil7LAzq96KihpVZV4Z7RsHbe95DBys1eopfY=) 2: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: Maowy9ZefjHDMfvujJn0ro1tBo40XSiT/nD665jrUOE=) 3: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: RzpF8tFy62QFxO5rx50rJvqckeHeBS/lfFxDrWgg/Gw=) 4: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: s19IDj9mMJ0lErBIJsliZ5CjEuGnp4A/oBPXh9EeGJ0=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: Dshq7FLG/8IwFv2djPDoFCF11ZS5aruhkwaXf8oFx88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 21:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ef:52:86:d9:73:af:f7:29:28:e0:54:0a:88:4a:1a:2a:bb:95:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: May 7 12:15:36 2025 GMT Not After : May 10 21:50:36 2025 GMT Subject: CN=BCF8D0110322EEE7BC06E0F31CD78126A7165ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2a:cb:eb:ca:ce:b4:29:c2:67:a6:83:a5:30: e5:60:07:c0:c7:b6:b7:81:9c:68:fc:09:67:0a:21: d6:5d:3f:27:d0:2f:a0:2b:81:fc:20:d7:0b:f9:6d: 4f:9c:cd:d6:5e:70:c7:d0:06:44:cb:50:ce:5c:5c: a0:61:9d:71:a7:d0:81:02:47:fa:2b:06:73:82:f3: f4:7c:27:69:fd:60:df:d1:ad:94:33:97:75:73:d7: a4:71:ec:64:40:82:6b:81:de:0b:1b:8c:11:26:c5: 3a:4a:3c:df:34:9f:a1:d8:a0:de:80:5e:8f:0f:1d: 5c:ef:a0:7b:40:df:6c:ff:ab:9f:43:5c:4e:be:e9: 9d:a0:4c:5f:f6:79:d4:c9:25:45:aa:92:a8:24:8b: c0:15:a4:15:88:87:65:09:0d:6f:e1:24:e8:6f:88: 6c:45:cc:e8:7a:f1:f3:33:fe:12:d3:14:99:0a:40: 00:18:89:61:46:77:04:65:93:2d:1f:92:15:c4:de: 3c:fa:56:cb:5e:ba:b0:72:03:9c:81:b9:72:f3:e6: 98:f6:6d:ed:26:57:35:46:e6:8d:a2:e3:86:01:ca: a5:7d:da:16:bc:1a:ec:28:d7:89:8e:65:2b:62:ba: dc:85:db:19:58:e8:8b:4e:7d:76:f6:55:11:47:fd: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F8:D0:11:03:22:EE:E7:BC:06:E0:F3:1C:D7:81:26:A7:16:5A:CB X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e9:4d:3d:e5:0a:10:47:c3:79:53:79:01:7e:06:b7:64:f0: c9:57:f4:04:d4:24:88:aa:b3:f4:04:49:0f:9d:3a:20:f7:2c: 52:19:94:e7:7e:0d:f2:65:bb:a1:ac:71:99:cc:1f:86:b2:56: 28:69:2f:bf:0f:d6:4b:95:2d:2c:06:1c:21:dd:4a:7d:d4:1b: 7e:9f:fd:c2:67:55:f9:51:c9:c2:f2:41:4d:59:f8:0a:3d:ba: d5:a5:a2:1f:64:0b:ef:f7:62:5f:b1:c7:3e:44:54:4e:34:b8: fb:1c:94:c4:6a:24:47:40:df:8c:45:43:f1:b3:f4:69:09:ab: 3f:7c:30:d6:49:07:16:2a:a4:ad:5f:df:0d:95:1b:ae:9e:3b: 63:8b:10:23:cf:54:34:3e:15:4f:97:89:f5:22:03:95:d2:69: 28:2f:8f:43:fa:f3:75:51:d4:7f:20:bd:20:ac:50:b4:88:14: 03:4a:be:5e:29:3d:2b:25:cb:53:7b:fa:18:14:14:bf:c3:b4: e4:25:64:0e:3e:6a:3a:b4:2f:ba:88:77:58:5a:bc:02:96:41: 42:04:92:f4:3c:b4:63:cd:db:93:ce:ef:81:e7:e7:ef:77:c6: eb:c2:ae:d3:3a:31:22:1d:2a:c1:66:56:2b:d1:71:25:ff:dc: 4a:bd:a5:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDu9Shtlzr/cpKOBUCohKGiq7lWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTA1MDcxMjE1MzZaFw0yNTA1MTAyMTUwMzZaMDMxMTAvBgNV BAMTKEJDRjhEMDExMDMyMkVFRTdCQzA2RTBGMzFDRDc4MTI2QTcxNjVBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvKsvrys60KcJnpoOlMOVgB8DH treBnGj8CWcKIdZdPyfQL6Argfwg1wv5bU+czdZecMfQBkTLUM5cXKBhnXGn0IEC R/orBnOC8/R8J2n9YN/RrZQzl3Vz16Rx7GRAgmuB3gsbjBEmxTpKPN80n6HYoN6A Xo8PHVzvoHtA32z/q59DXE6+6Z2gTF/2edTJJUWqkqgki8AVpBWIh2UJDW/hJOhv iGxFzOh68fMz/hLTFJkKQAAYiWFGdwRlky0fkhXE3jz6VsteurByA5yBuXLz5pj2 be0mVzVG5o2i44YByqV92ha8Guwo14mOZStiutyF2xlY6ItOfXb2VRFH/ZKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvPjQEQMi7ue8BuDzHNeBJqcWWsswHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjpTT3lChBHw3lTeQF+Brdk8MlX9ATUJIiq s/QESQ+dOiD3LFIZlOd+DfJlu6GscZnMH4ayVihpL78P1kuVLSwGHCHdSn3UG36f /cJnVflRycLyQU1Z+Ao9utWloh9kC+/3Yl+xxz5EVE40uPsclMRqJEdA34xFQ/Gz 9GkJqz98MNZJBxYqpK1f3w2VG66eO2OLECPPVDQ+FU+XifUiA5XSaSgvj0P683VR 1H8gvSCsULSIFANKvl4pPSsly1N7+hgUFL/DtOQlZA4+ajq0L7qId1havAKWQUIE kvQ8tGPN25PO74Hn5+93xuvCrtM6MSIdKsFmVivRcSX/3Eq9pe0= -----END CERTIFICATE-----Generated at Fri May 9 11:57:04 2025 by rpki-client