$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json) Hash identifier: ozuuLyu/TId+HkEyXXHUc4iXYgo9DKln8SuLod1JQ98= Subject key identifier: 0E:C0:89:24:B8:08:27:91:78:7C:F9:81:39:32:F1:08:BC:FC:F0:5F Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 34FA2A1B13E095B3AFFC8AB61CFE8A79DB2A25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft Manifest number: CE Signing time: Mon 30 Jun 2025 03:20:52 +0000 Manifest this update: Mon 30 Jun 2025 03:15:52 +0000 Manifest next update: Thu 03 Jul 2025 04:59:52 +0000 Files and hashes: 1: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: gfWNy9lIc/MVIMgNjSxC32IkW0PrSYj/0GoqdaAmvtI=) 2: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: nER+gSF4UKxufjDSEvOJBagoqTFFxJ3sFCs3Clp6VMM=) 3: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: YasvvxbCzsiYxjm39PQuEFNka/y9AUBvJZG9vLwVOCc=) 4: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: uyjSRskgL9BJCMKxVifWZ7TJaXQpE36bCbtIhaZsOr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 04:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fa:2a:1b:13:e0:95:b3:af:fc:8a:b6:1c:fe:8a:79:db:2a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Jun 30 03:15:52 2025 GMT Not After : Jul 3 04:59:52 2025 GMT Subject: CN=0EC08924B8082791787CF9813932F108BCFCF05F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:95:08:d1:3a:c4:a4:b9:8e:6a:42:d9:fc: d0:b3:b8:6d:37:a3:da:a8:55:ec:30:f1:a0:01:e2: c8:f6:3a:c2:ef:31:e6:03:b8:13:f8:a3:0c:16:29: bd:6a:9a:67:94:b7:1e:8a:44:6d:ab:bc:d1:81:bb: 3d:2f:6a:d7:d4:b2:87:a7:ea:af:2b:29:b6:14:78: 35:10:cf:9e:f8:a4:ae:be:c3:dd:ab:39:85:52:e1: a0:68:a7:e8:15:b8:89:33:4f:fb:2f:e9:c2:62:ca: 01:fa:8c:d3:b5:bb:b2:97:f1:67:2e:36:79:2c:43: ae:87:58:f2:36:b8:ca:9f:99:a2:3f:0b:e6:e6:6b: d9:21:a1:8d:ae:e9:97:8e:62:1c:1c:cd:63:c7:e1: 68:ab:24:5e:e9:73:b7:0b:0a:93:1b:f3:d2:14:ae: 1d:d6:2a:a1:0d:2d:df:75:66:1f:4c:8d:86:be:c7: cb:ac:10:b7:61:6e:1c:ec:83:56:11:1b:8f:ff:06: 5c:39:11:89:35:6b:13:30:80:45:8c:e7:72:65:32: 27:d6:40:f1:7c:37:36:65:40:0d:3a:1b:df:f6:37: cb:a2:27:7c:fd:6f:f9:a6:49:1d:dd:56:e9:8b:da: 0b:56:39:2f:bb:ac:7e:97:f5:ea:3c:17:ff:2b:1b: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C0:89:24:B8:08:27:91:78:7C:F9:81:39:32:F1:08:BC:FC:F0:5F X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:5b:08:3a:ed:ab:40:2d:d1:e2:f3:65:89:22:ee:66:98:93: 61:66:77:7f:e6:de:3c:e2:d2:77:b7:b7:a5:ae:97:41:86:0c: 4b:dc:e8:9b:13:8b:f8:8a:9c:f0:8e:2c:64:3a:ab:6e:fe:f5: 37:26:fa:e6:33:29:eb:70:9e:cc:93:9c:9a:4e:b4:75:39:7f: fb:da:2f:c7:73:91:c1:54:17:37:8f:1b:bc:f2:52:b0:83:db: 0d:34:ff:fb:b3:ed:f9:3d:d1:85:df:f1:65:0b:58:82:7f:a6: de:57:d7:c7:51:09:97:0f:a5:04:71:8b:3f:06:b0:2d:22:08: 9e:0d:e4:b1:31:f7:eb:2a:e1:82:48:5c:9d:c4:c5:2a:a9:d1: 5c:38:05:ca:82:4b:9b:de:ef:96:8b:b4:66:0f:c6:4b:74:db: e5:a1:20:e8:4b:3d:cf:67:eb:48:21:52:9d:29:c6:43:59:60: ba:d8:31:b6:21:dc:bf:2b:c3:5d:51:fc:48:dd:d7:fe:ea:af: 10:eb:2c:3f:08:50:c6:4f:d3:9e:6e:a3:42:66:28:66:50:74: 91:4f:68:b4:a7:89:dc:9f:73:51:55:aa:7c:06:50:dd:72:30: da:bb:91:15:74:55:52:68:b8:f7:f6:b6:39:32:d7:a0:0e:b2: f7:88:22:a3 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITNPoqGxPglbOv/Iq2HP6KedsqJTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzQzZENzQ4NUQ2MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUz NEQyOUFCMB4XDTI1MDYzMDAzMTU1MloXDTI1MDcwMzA0NTk1MlowMzExMC8GA1UE AxMoMEVDMDg5MjRCODA4Mjc5MTc4N0NGOTgxMzkzMkYxMDhCQ0ZDRjA1RjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALuzlQjROsSkuY5qQtn80LO4bTej 2qhV7DDxoAHiyPY6wu8x5gO4E/ijDBYpvWqaZ5S3HopEbau80YG7PS9q19Syh6fq ryspthR4NRDPnvikrr7D3as5hVLhoGin6BW4iTNP+y/pwmLKAfqM07W7spfxZy42 eSxDrodY8ja4yp+Zoj8L5uZr2SGhja7pl45iHBzNY8fhaKskXulztwsKkxvz0hSu HdYqoQ0t33VmH0yNhr7Hy6wQt2FuHOyDVhEbj/8GXDkRiTVrEzCARYzncmUyJ9ZA 8Xw3NmVADTob3/Y3y6InfP1v+aZJHd1W6YvaC1Y5L7usfpf16jwX/ysbobkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQOwIkkuAgnkXh8+YE5MvEIvPzwXzAfBgNVHSME GDAWgBQ8bXSF1hrVQiYVLl2KgT1w400pqzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Qx NTlhMzYyLTk1MGMtNDVjMi1hZWNjLTgyYjIxNGJjZTQ3NC8wLzNDNkQ3NDg1RDYx QUQ1NDIyNjE1MkU1RDhBODEzRDcwRTM0RDI5QUIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMS8zQzZENzQ4NUQ2MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQy OUFCLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9kMTU5YTM2Mi05NTBjLTQ1YzItYWVj Yy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2MUFENTQyMjYxNTJFNUQ4QTgxM0Q3 MEUzNEQyOUFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAhVsIOu2rQC3R4vNliSLuZpiTYWZ3f+bePOLS d7e3pa6XQYYMS9zomxOL+Iqc8I4sZDqrbv71Nyb65jMp63CezJOcmk60dTl/+9ov x3ORwVQXN48bvPJSsIPbDTT/+7Pt+T3Rhd/xZQtYgn+m3lfXx1EJlw+lBHGLPwaw LSIIng3ksTH36yrhgkhcncTFKqnRXDgFyoJLm97vlou0Zg/GS3Tb5aEg6Es9z2fr SCFSnSnGQ1lgutgxtiHcvyvDXVH8SN3X/uqvEOssPwhQxk/Tnm6jQmYoZlB0kU9o tKeJ3J9zUVWqfAZQ3XIw2ruRFXRVUmi49/a2OTLXoA6y94giow== -----END CERTIFICATE-----Generated at Mon Jun 30 10:21:05 2025 by rpki-client