$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: V9q97Dk7k392Rd6kA/afG7ef18mWNJoDS+TX6TjjK2s= Subject key identifier: 0A:10:33:53:46:7F:3F:14:3F:6E:7F:B7:9D:E4:86:21:57:E9:D0:3D Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 4F650EAF2B6AE98BF34BDB960DFD60344D462B70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 01BD Signing time: Wed 07 May 2025 12:01:56 +0000 Manifest this update: Wed 07 May 2025 11:56:56 +0000 Manifest next update: Sat 10 May 2025 22:14:56 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: r8z7bDbjNyHi7VzYSSCbno+5xl3u6VN0WnpOY+FTh0M=) 2: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: iRjrnZpr55oFzYIFf8kYK3ZyjY9mFdo6IS0cakQMnyQ=) 3: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: r4qCVyd3k26szOGZkVLoPrnQYgvd4y2QFV5EAdd6F0w=) 4: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: OtR5QDPiIlOE8R6tAVQNMwDez94T84Oy3nqMNKHUt/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 22:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:65:0e:af:2b:6a:e9:8b:f3:4b:db:96:0d:fd:60:34:4d:46:2b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: May 7 11:56:56 2025 GMT Not After : May 10 22:14:56 2025 GMT Subject: CN=0A103353467F3F143F6E7FB79DE4862157E9D03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:8c:27:34:06:4c:02:6a:62:e8:46:8a:1a: 81:af:eb:00:4b:da:89:92:b2:85:4a:12:14:15:58: 97:d0:01:4e:a5:da:de:60:57:0b:50:ea:a5:3d:4f: af:6f:f8:b5:ab:f9:4d:12:fd:46:e5:a0:cb:9f:e5: 4a:94:d6:75:65:71:f7:cd:1e:59:51:9b:ac:03:79: 66:74:16:fd:6e:68:ba:c7:be:6d:ba:58:97:08:07: ed:64:d8:cd:a0:78:ea:88:69:14:34:53:35:32:f6: 78:fb:d4:71:3f:5a:3b:34:e5:9d:4f:f6:fc:bf:92: aa:81:98:6c:f3:cf:5b:ab:b4:da:a6:cc:71:39:a3: b2:da:cc:d1:9a:9b:d5:a6:7c:f8:14:63:4a:a8:93: 44:18:31:82:97:8f:73:f5:da:69:1b:2e:49:14:d9: 23:c3:09:40:86:7d:62:fe:7f:d9:86:c6:4a:aa:65: ea:d9:e0:b2:1a:5f:32:a6:32:23:cd:18:dc:0a:29: 41:1f:d8:05:c6:ac:93:af:a5:7d:7f:dd:31:ce:c4: 83:fa:f3:62:18:49:00:bb:8b:cb:fb:7c:2b:02:2b: 39:88:84:34:9e:51:d6:5e:50:ab:21:85:ae:4c:88: 36:80:20:b3:fb:ca:a2:a5:a3:b4:99:da:18:bb:60: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:10:33:53:46:7F:3F:14:3F:6E:7F:B7:9D:E4:86:21:57:E9:D0:3D X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:68:5c:e2:1f:28:f0:a6:96:67:14:dc:a0:f3:b7:be:b1:ba: db:b8:9e:25:7e:2d:30:38:46:d6:0e:fc:4a:8d:0e:69:84:09: 7e:8b:2b:51:d9:55:e0:35:c5:17:83:08:f6:e1:17:57:4a:80: 08:b2:7f:7d:e6:e5:3e:b2:9b:4a:c4:49:fb:cc:99:d2:8f:3c: 22:9b:7e:f1:96:db:04:d6:22:f6:f1:ce:55:1a:a7:54:bf:8b: 62:50:1f:ee:69:f2:e0:eb:02:e2:c7:d6:3f:f7:fc:00:e9:cc: 5d:b1:ec:0a:c0:84:90:22:81:77:f9:5e:be:8e:7c:56:91:29: 94:54:ce:01:18:c8:bf:90:3e:a3:17:5f:cf:85:66:5f:0b:f0: 04:45:62:10:69:77:1f:96:67:20:f9:82:45:fa:ff:ca:9b:ea: de:95:2b:c5:e5:b7:36:81:60:d7:41:45:e1:53:e1:cc:b4:1b: ef:cf:7d:21:88:e1:b1:e9:6b:0b:94:40:b3:55:aa:6a:82:a0: 15:d4:23:bb:dd:8d:5d:b7:33:c6:e1:c6:19:0b:6c:8b:78:50: 86:fd:f2:1c:7b:27:14:5b:e3:d2:ae:29:79:c8:21:09:c6:ed: 09:9b:f9:dc:23:53:53:17:27:17:ef:95:b7:ef:4d:4a:01:c0: 09:77:7e:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT2UOrytq6YvzS9uWDf1gNE1GK3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTA1MDcxMTU2NTZaFw0yNTA1MTAyMjE0NTZaMDMxMTAvBgNV BAMTKDBBMTAzMzUzNDY3RjNGMTQzRjZFN0ZCNzlERTQ4NjIxNTdFOUQwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+IwnNAZMAmpi6EaKGoGv6wBL 2omSsoVKEhQVWJfQAU6l2t5gVwtQ6qU9T69v+LWr+U0S/UbloMuf5UqU1nVlcffN HllRm6wDeWZ0Fv1uaLrHvm26WJcIB+1k2M2geOqIaRQ0UzUy9nj71HE/Wjs05Z1P 9vy/kqqBmGzzz1urtNqmzHE5o7LazNGam9WmfPgUY0qok0QYMYKXj3P12mkbLkkU 2SPDCUCGfWL+f9mGxkqqZerZ4LIaXzKmMiPNGNwKKUEf2AXGrJOvpX1/3THOxIP6 82IYSQC7i8v7fCsCKzmIhDSeUdZeUKshha5MiDaAILP7yqKlo7SZ2hi7YK17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUChAzU0Z/PxQ/bn+3neSGIVfp0D0wHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5oXOIfKPCmlmcU3KDzt76xutu4niV+LTA4 RtYO/EqNDmmECX6LK1HZVeA1xReDCPbhF1dKgAiyf33m5T6ym0rESfvMmdKPPCKb fvGW2wTWIvbxzlUap1S/i2JQH+5p8uDrAuLH1j/3/ADpzF2x7ArAhJAigXf5Xr6O fFaRKZRUzgEYyL+QPqMXX8+FZl8L8ARFYhBpdx+WZyD5gkX6/8qb6t6VK8XltzaB YNdBReFT4cy0G+/PfSGI4bHpawuUQLNVqmqCoBXUI7vdjV23M8bhxhkLbIt4UIb9 8hx7JxRb49KuKXnIIQnG7Qmb+dwjU1MXJxfvlbfvTUoBwAl3fk4= -----END CERTIFICATE-----Generated at Wed May 7 18:31:48 2025 by rpki-client