$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json) Hash identifier: Uon4EXef03B+3Qy8HmOeMBtF2Km9J8L+sqGhXvmwGpY= Subject key identifier: D3:0A:92:B1:B2:E2:EC:9C:65:ED:7E:EA:92:68:03:07:CE:51:97:1F Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 616CC2BEFEF1C75DEC3A5B8739C988EFF78C7826 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft Manifest number: B5 Signing time: Sun 04 May 2025 14:40:52 +0000 Manifest this update: Sun 04 May 2025 14:35:52 +0000 Manifest next update: Wed 07 May 2025 22:50:52 +0000 Files and hashes: 1: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: uyjSRskgL9BJCMKxVifWZ7TJaXQpE36bCbtIhaZsOr4=) 2: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: H0wYI7FRwf+SxEpdPl6SOQzaEiXZ8TSncXCtvTrA/RY=) 3: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: YasvvxbCzsiYxjm39PQuEFNka/y9AUBvJZG9vLwVOCc=) 4: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: gfWNy9lIc/MVIMgNjSxC32IkW0PrSYj/0GoqdaAmvtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 22:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6c:c2:be:fe:f1:c7:5d:ec:3a:5b:87:39:c9:88:ef:f7:8c:78:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: May 4 14:35:52 2025 GMT Not After : May 7 22:50:52 2025 GMT Subject: CN=D30A92B1B2E2EC9C65ED7EEA92680307CE51971F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:dd:75:ad:60:a9:4b:9e:32:ca:c0:fd:37: 67:8d:c4:f3:b3:41:94:b1:da:08:88:65:61:31:6a: 46:68:4c:a8:ea:68:a9:e7:b9:f7:10:25:ae:64:ef: 56:99:5a:09:13:c8:b7:d8:79:6a:e8:0f:e3:e3:d8: 94:28:5b:06:22:92:7f:0d:df:fe:ad:e6:42:bd:ca: 78:37:80:a4:5a:32:05:53:fd:54:0a:d9:4a:1e:e6: 79:d9:9c:85:05:0d:ec:f6:5e:0e:d3:73:2d:0e:fd: be:35:97:24:8c:8c:f7:2c:e2:12:ad:a7:56:54:8b: 63:9d:24:d6:80:4f:48:bc:a3:e6:44:68:88:cb:98: fd:cc:16:30:d5:42:f7:0b:a5:59:c6:6c:31:c2:ff: e7:ca:6f:40:3b:cc:c0:cc:61:cf:5e:02:6c:bc:e2: 9a:3f:56:8a:59:da:ac:f2:fd:00:5a:d8:c4:51:1a: 9a:79:a3:8f:43:ca:85:3c:c5:99:45:5d:46:01:80: b8:a5:1b:9c:4f:f2:32:0d:97:1d:87:1f:88:8c:4c: a3:31:bb:36:5a:88:1d:14:a6:6a:c9:05:66:81:39: c9:bc:99:3a:a0:7c:39:87:08:80:fd:cd:e5:4e:99: ab:32:97:86:d0:b0:9e:01:e0:a1:bd:af:d5:20:89: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0A:92:B1:B2:E2:EC:9C:65:ED:7E:EA:92:68:03:07:CE:51:97:1F X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e6:16:c9:18:c8:0e:20:e3:08:a4:60:95:0b:3e:7c:75:c6: 8e:4a:51:e0:6e:81:59:3a:3f:2a:83:9c:2a:fd:69:43:5a:2f: ca:f7:39:4a:8a:57:91:fc:bc:18:af:83:fc:e9:59:27:7e:8b: de:3a:8d:29:c7:a2:1b:66:28:c9:31:06:c9:14:89:94:f4:a0: 1e:4d:87:8f:77:60:ac:37:ef:29:38:b2:9c:c1:20:6b:2f:29: 8f:d4:53:72:ce:28:ea:04:60:04:85:41:c8:12:62:31:67:ee: 89:af:5e:49:e5:1d:82:e2:68:fa:86:ca:a7:2c:53:1f:5a:b5: 77:d2:2a:0d:8a:7b:a4:6c:d6:8f:58:40:7b:09:a7:4c:34:78: e9:0c:8a:2a:44:0a:a0:1b:17:d2:17:69:f2:ff:e7:4f:7c:37: ec:c8:9f:cf:cf:f4:d3:c9:ae:2b:53:c1:ba:20:85:fc:2a:22: ef:5a:f6:c2:38:a6:a4:1e:04:53:43:7e:72:40:31:bd:13:4c: 44:e9:db:5c:a7:98:a4:f6:f3:1e:42:84:a3:ee:3c:a3:07:c5: 62:29:3b:2e:1c:45:52:5e:a3:24:54:e8:a9:8f:9a:ff:01:9b: 0f:d7:45:86:a5:55:35:ff:98:57:67:31:05:6f:0a:2b:7e:ad: b5:45:46:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYWzCvv7xx13sOluHOcmI7/eMeCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNTA1MDQxNDM1NTJaFw0yNTA1MDcyMjUwNTJaMDMxMTAvBgNV BAMTKEQzMEE5MkIxQjJFMkVDOUM2NUVEN0VFQTkyNjgwMzA3Q0U1MTk3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QN11rWCpS54yysD9N2eNxPOz QZSx2giIZWExakZoTKjqaKnnufcQJa5k71aZWgkTyLfYeWroD+Pj2JQoWwYikn8N 3/6t5kK9yng3gKRaMgVT/VQK2Uoe5nnZnIUFDez2Xg7Tcy0O/b41lySMjPcs4hKt p1ZUi2OdJNaAT0i8o+ZEaIjLmP3MFjDVQvcLpVnGbDHC/+fKb0A7zMDMYc9eAmy8 4po/VopZ2qzy/QBa2MRRGpp5o49DyoU8xZlFXUYBgLilG5xP8jINlx2HH4iMTKMx uzZaiB0UpmrJBWaBOcm8mTqgfDmHCID9zeVOmasyl4bQsJ4B4KG9r9UgiWwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wqSsbLi7Jxl7X7qkmgDB85Rlx8wHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzmFskYyA4g4wikYJULPnx1xo5KUeBugVk6 PyqDnCr9aUNaL8r3OUqKV5H8vBivg/zpWSd+i946jSnHohtmKMkxBskUiZT0oB5N h493YKw37yk4spzBIGsvKY/UU3LOKOoEYASFQcgSYjFn7omvXknlHYLiaPqGyqcs Ux9atXfSKg2Ke6Rs1o9YQHsJp0w0eOkMiipECqAbF9IXafL/5098N+zIn8/P9NPJ ritTwboghfwqIu9a9sI4pqQeBFNDfnJAMb0TTETp21ynmKT28x5ChKPuPKMHxWIp Oy4cRVJeoyRU6KmPmv8Bmw/XRYalVTX/mFdnMQVvCit+rbVFRhA= -----END CERTIFICATE-----Generated at Tue May 6 22:47:24 2025 by rpki-client