$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft File: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json) Hash identifier: 3U59OEaZqvHcb3l+8niH2A6Zn1INqVBSgiS9zPs455M= Subject key identifier: 1C:14:51:AB:29:56:B8:DE:1D:7B:CE:2A:0D:92:B1:B6:02:61:24:BF Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 493ACCF90792CBD954EAEA74BC3B5167FEE1A320 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft Manifest number: 020D Signing time: Sun 29 Jun 2025 15:32:16 +0000 Manifest this update: Sun 29 Jun 2025 15:27:16 +0000 Manifest next update: Wed 02 Jul 2025 20:22:16 +0000 Files and hashes: 1: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: E7Xvq+98P7calV+Tra/HI6VBncPkJLZ2WfRUwzVpBzQ=) 2: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: gQMVqNF5pbofU8fWwfLf24IOx5Rve68FRF/gYFgAFMM=) 3: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: Cyd8edGnk1or4qruzydr8WhI8AI2/IpkJLhyHtz0W0E=) 4: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: FzI5GbnAo75yoelWpGp51ySqxG4wQ2wlQL4r6iiASgc=) 5: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: VDmzAE5nsSn3VcTtdUYB+JjYbBbEx+qEZDLzkKkFw30=) 6: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: lQ+fQzdjr0S1DLs1lSSCMj5N6c3fuO+jsggHmQtAADw=) 7: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: aZ1nkOt0ZwL5bWsxMWDTHMMRjscg2q9LS9hs3Z383Ew=) 8: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: 74adhrSbVzuFjVRQo3T/YKEFIp0ssVu9vw6ZXWstTjg=) 9: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: YHuUg4uxFrthFFepE05C4PM9gH2UZAw5dOg3ZxdbMHs=) 10: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: OXb58XdJvFeTkl1pb8qqXtG1NjsRZSztJ+uUatv4+8w=) 11: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64=) 12: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: iGn1V/gq7zu3cpw0mI8Bqv3oMJsgKj/I69u4ba5O7zE=) 13: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: fmU/gB/7itVGB2sFtyfrKlK+5/0j2F7s2JNU9ipGEtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3a:cc:f9:07:92:cb:d9:54:ea:ea:74:bc:3b:51:67:fe:e1:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Jun 29 15:27:16 2025 GMT Not After : Jul 2 20:22:16 2025 GMT Subject: CN=1C1451AB2956B8DE1D7BCE2A0D92B1B6026124BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:49:97:bd:00:d7:13:02:1a:b3:68:4f:0f:95: dd:4c:23:0a:7e:5a:fc:14:d2:8b:f3:f0:65:88:f1: 69:f3:14:51:d7:24:39:57:c6:a8:be:01:77:ee:7b: 9b:ba:83:cc:2d:af:1f:6c:01:71:74:cb:df:d2:01: 8e:25:83:be:1d:7d:e8:30:13:1f:e0:28:5e:62:5c: e9:be:b1:6f:7e:9b:3a:d6:65:67:40:82:1f:1a:75: 42:5f:9e:4a:b6:b8:76:f7:a6:6a:5b:a0:e5:24:16: ae:74:80:dc:85:0e:20:64:20:29:82:d9:f9:7a:e0: e3:29:71:42:84:ba:f6:af:39:5b:9d:e1:79:69:14: 34:24:fb:7b:6e:97:96:27:e4:af:cd:0a:ca:09:5d: 13:f9:56:28:9d:c3:69:08:3d:c0:9c:83:50:e4:2e: 9d:9c:53:08:7e:54:9d:a4:54:c3:79:34:9c:e8:d0: 2a:45:24:de:3b:49:f5:c1:eb:35:bf:d0:a3:db:d2: 70:80:be:ee:1c:6f:9f:02:b5:3d:4c:c9:ef:b8:19: 25:8f:b4:56:bf:82:f7:6d:21:a0:5e:14:6b:cc:0b: 8e:77:cd:0e:2e:e8:be:5e:b9:73:95:27:de:6d:a2: 5d:85:8a:bc:05:9c:08:01:51:17:fc:47:3c:53:c3: 67:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:51:AB:29:56:B8:DE:1D:7B:CE:2A:0D:92:B1:B6:02:61:24:BF X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d4:fc:3c:4c:2d:21:c1:ed:cf:7d:6a:e8:e4:ef:11:ed:7d: 40:a9:34:6f:9a:c2:d5:3e:f8:3d:d0:48:8d:f1:49:0c:3e:e2: 99:60:a6:56:72:89:1d:c4:2f:a3:34:fb:bd:46:53:78:76:c9: 60:44:9d:38:79:39:ef:04:70:c5:9b:65:0b:2e:94:93:03:4b: 93:3d:d8:08:b5:a2:f1:68:1a:f8:19:aa:ee:7b:a9:f7:d9:2d: 30:a7:40:05:60:c4:1b:4b:75:b1:3c:63:20:f9:fb:46:9b:2f: ce:ff:a6:49:18:57:9a:76:8e:27:f1:14:02:ed:b9:b8:69:d3: 76:a0:1a:2b:fc:9e:8e:a0:df:a5:02:af:c6:83:35:b0:1c:67: 62:4a:ec:8c:d7:e8:4a:18:27:ca:51:82:85:6f:a4:d6:52:82: 39:da:30:39:31:4e:5b:02:bb:b4:73:cb:d4:39:57:a3:8b:8c: da:40:97:fd:27:3b:fa:d6:71:ac:48:e2:99:a5:96:4f:e0:bb: 1a:94:2b:6f:51:78:93:ba:41:46:57:30:2e:5b:03:d2:3e:76: 39:bf:20:3f:a9:44:bf:2d:c8:60:5f:e1:8f:95:68:22:02:fd: 52:4d:7c:5a:fb:93:7b:1b:09:c8:68:27:36:b1:f2:b1:44:a0: b5:d3:e5:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTrM+QeSy9lU6up0vDtRZ/7hoyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNTA2MjkxNTI3MTZaFw0yNTA3MDIyMDIyMTZaMDMxMTAvBgNV BAMTKDFDMTQ1MUFCMjk1NkI4REUxRDdCQ0UyQTBEOTJCMUI2MDI2MTI0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSZe9ANcTAhqzaE8Pld1MIwp+ WvwU0ovz8GWI8WnzFFHXJDlXxqi+AXfue5u6g8wtrx9sAXF0y9/SAY4lg74dfegw Ex/gKF5iXOm+sW9+mzrWZWdAgh8adUJfnkq2uHb3pmpboOUkFq50gNyFDiBkICmC 2fl64OMpcUKEuvavOVud4XlpFDQk+3tul5Yn5K/NCsoJXRP5Viidw2kIPcCcg1Dk Lp2cUwh+VJ2kVMN5NJzo0CpFJN47SfXB6zW/0KPb0nCAvu4cb58CtT1Mye+4GSWP tFa/gvdtIaBeFGvMC453zQ4u6L5euXOVJ95tol2FirwFnAgBURf8RzxTw2dPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBRRqylWuN4de84qDZKxtgJhJL8wHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTRE MzU3QUM2NkE4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLU/DxMLSHB7c99aujk7xHtfUCpNG+awtU+ +D3QSI3xSQw+4plgplZyiR3EL6M0+71GU3h2yWBEnTh5Oe8EcMWbZQsulJMDS5M9 2Ai1ovFoGvgZqu57qffZLTCnQAVgxBtLdbE8YyD5+0abL87/pkkYV5p2jifxFALt ubhp03agGiv8no6g36UCr8aDNbAcZ2JK7IzX6EoYJ8pRgoVvpNZSgjnaMDkxTlsC u7Rzy9Q5V6OLjNpAl/0nO/rWcaxI4pmllk/guxqUK29ReJO6QUZXMC5bA9I+djm/ ID+pRL8tyGBf4Y+VaCIC/VJNfFr7k3sbCchoJzax8rFEoLXT5S0= -----END CERTIFICATE-----Generated at Sun Jun 29 18:15:49 2025 by rpki-client