$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: lqYUe4OEKY1R+GyvEWoGBD14ytOohb1PcI7cdIzzLJs= Subject key identifier: DA:C4:7D:30:84:0A:60:E1:ED:E7:6B:23:1E:28:23:DE:8C:35:82:D6 Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 44F8EBB096EC0F062DEB9B4479346B8BFC22A4EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 01DE Signing time: Sun 29 Jun 2025 10:50:05 +0000 Manifest this update: Sun 29 Jun 2025 10:45:05 +0000 Manifest next update: Wed 02 Jul 2025 20:59:05 +0000 Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: wUN0Izu+1jvS2QJEMcI/REBlf+WT4oRYhW3TrlPnH1I=) 2: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: D9y+lWtyTngW6sfMaxrUfjys6FaIqAZQ0N08HWxzk3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f8:eb:b0:96:ec:0f:06:2d:eb:9b:44:79:34:6b:8b:fc:22:a4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Jun 29 10:45:05 2025 GMT Not After : Jul 2 20:59:05 2025 GMT Subject: CN=DAC47D30840A60E1EDE76B231E2823DE8C3582D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e0:4e:00:b5:de:ea:66:f2:ec:46:36:c0:f6: 29:c0:2d:72:5a:2c:de:a0:8d:1f:1c:cf:f7:1f:24: c4:6a:1f:56:08:70:e2:4a:d2:d8:23:05:6b:38:8d: 6a:99:e0:d5:24:af:89:8a:9c:b9:0b:43:df:9e:24: d9:dc:72:6f:07:54:20:d8:49:ec:5e:3a:a5:aa:30: d2:d6:e5:14:b9:7e:b8:71:31:b3:b0:fc:1e:62:ef: e3:d0:89:19:36:28:a7:0e:c9:0a:2e:18:89:bb:d7: f4:db:7a:0a:07:58:81:05:6e:0f:79:c3:84:85:05: 7a:60:55:ae:b8:6d:38:f2:a2:d7:81:98:1c:27:72: 4f:da:e2:82:be:6f:81:85:be:8d:de:44:0c:6e:4c: b7:85:ce:e1:eb:5c:ee:47:31:60:f1:4e:70:f2:6e: 4b:66:7d:42:13:06:03:63:11:65:4f:d9:e1:89:b0: 86:74:ac:b8:28:c7:35:80:c9:16:71:56:0f:78:eb: 43:db:b4:35:6b:21:9f:a3:b0:f0:d4:e9:46:7c:0d: 6c:00:95:29:0a:18:b4:2e:ba:3a:da:17:ae:37:2c: 3a:7b:0b:b4:00:14:46:1b:38:91:69:e3:87:ef:c8: af:1d:61:ae:6a:9e:58:90:74:57:fc:ce:8a:1b:80: bd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C4:7D:30:84:0A:60:E1:ED:E7:6B:23:1E:28:23:DE:8C:35:82:D6 X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:2d:a3:90:11:ce:f0:28:e8:fc:6e:a0:c2:1a:ac:cf:d3:11: 0a:48:e0:19:35:cc:7e:0d:03:27:fd:ab:79:6c:bd:6a:76:f1: 95:5d:d5:36:20:5a:c7:1c:5a:95:e9:c5:69:92:2a:59:7c:62: fb:fd:4f:51:06:e7:6e:0f:05:53:d8:f3:6c:7f:1b:ca:b2:d4: 0e:a9:8b:e0:8b:2c:b7:6c:76:3c:6f:31:ac:67:8e:25:83:ba: 32:c2:e7:0b:b1:5d:46:d1:e9:a5:ea:aa:89:a0:0b:ba:fb:c3: 58:fa:bd:dc:7b:40:35:4c:26:59:62:1b:79:aa:49:d1:46:cf: ae:a2:33:3f:b7:c1:bb:4d:1c:2b:13:d3:7f:cd:64:a7:55:ad: a6:4f:52:e1:23:28:56:4d:4e:40:33:20:d0:ba:04:81:cd:d9: 31:02:b3:f0:8a:23:58:a0:d1:74:f5:f5:d0:8c:77:7f:d9:c2: 4c:74:3a:8e:94:52:13:f0:f4:96:17:17:ac:54:76:20:d5:0b: fb:a2:58:f7:42:52:e8:54:ff:26:9b:f8:6c:c8:41:83:67:4b: a8:4d:84:0c:7b:b9:3c:2c:cb:cd:e5:40:87:07:40:9d:94:07: 96:7d:8b:29:17:e8:d7:c9:13:ce:8c:9e:e8:42:4f:e4:10:bf: 4d:c5:33:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPjrsJbsDwYt65tEeTRri/wipOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNTA2MjkxMDQ1MDVaFw0yNTA3MDIyMDU5MDVaMDMxMTAvBgNV BAMTKERBQzQ3RDMwODQwQTYwRTFFREU3NkIyMzFFMjgyM0RFOEMzNTgyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj4E4Atd7qZvLsRjbA9inALXJa LN6gjR8cz/cfJMRqH1YIcOJK0tgjBWs4jWqZ4NUkr4mKnLkLQ9+eJNnccm8HVCDY SexeOqWqMNLW5RS5frhxMbOw/B5i7+PQiRk2KKcOyQouGIm71/TbegoHWIEFbg95 w4SFBXpgVa64bTjyoteBmBwnck/a4oK+b4GFvo3eRAxuTLeFzuHrXO5HMWDxTnDy bktmfUITBgNjEWVP2eGJsIZ0rLgoxzWAyRZxVg9460PbtDVrIZ+jsPDU6UZ8DWwA lSkKGLQuujraF643LDp7C7QAFEYbOJFp44fvyK8dYa5qnliQdFf8zoobgL3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2sR9MIQKYOHt52sjHigj3ow1gtYwHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIto5ARzvAo6PxuoMIarM/TEQpI4Bk1zH4N Ayf9q3lsvWp28ZVd1TYgWsccWpXpxWmSKll8Yvv9T1EG524PBVPY82x/G8qy1A6p i+CLLLdsdjxvMaxnjiWDujLC5wuxXUbR6aXqqomgC7r7w1j6vdx7QDVMJlliG3mq SdFGz66iMz+3wbtNHCsT03/NZKdVraZPUuEjKFZNTkAzINC6BIHN2TECs/CKI1ig 0XT19dCMd3/Zwkx0Oo6UUhPw9JYXF6xUdiDVC/uiWPdCUuhU/yab+GzIQYNnS6hN hAx7uTwsy83lQIcHQJ2UB5Z9iykX6NfJE86MnuhCT+QQv03FM/Q= -----END CERTIFICATE-----Generated at Sun Jun 29 22:11:52 2025 by rpki-client