$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft File: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft (raw, json) Hash identifier: urjB27AsxUQhtpXDbOM73PktpiMSX6CvVABxAoqH7ZY= Subject key identifier: 75:A8:EC:C1:4A:5B:17:32:8C:2D:B1:F0:9A:BD:6F:84:1E:74:6B:40 Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 Certificate issuer: /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Certificate serial: 40272DBB2701AC49E94C8C879E06D1E337EB594E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft Manifest number: 04E8 Signing time: Wed 02 Jul 2025 21:31:13 +0000 Manifest this update: Wed 02 Jul 2025 21:26:13 +0000 Manifest next update: Sun 06 Jul 2025 08:16:13 +0000 Files and hashes: 1: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: Xkph31LntzUaI1/CJr8Ltj+zXZ7Nq1uWNrqZKmCZlP8=) 2: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: NswJoPlTbkW1QbykJdu3UOhV7IqDYlomNhuRwW/poHY=) 3: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl (hash: Ild4fZDy2qTk1Mz4DyMfhAQAlqWRywsJlNH7fjkGqMo=) 4: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: GyTvAyiqDcz4HqvEtyjLwFP+vqa6W3Rz6dNaGJkDvBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 08:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:27:2d:bb:27:01:ac:49:e9:4c:8c:87:9e:06:d1:e3:37:eb:59:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Validity Not Before: Jul 2 21:26:13 2025 GMT Not After : Jul 6 08:16:13 2025 GMT Subject: CN=75A8ECC14A5B17328C2DB1F09ABD6F841E746B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:f0:f8:3d:ed:55:cb:d7:c0:ea:a9:c1:63: 62:9d:8b:36:e8:23:bf:61:f2:64:b0:f4:67:05:9b: 8e:b2:1e:2a:f3:d4:12:a9:83:13:0f:0e:c3:9d:fd: 89:05:97:7c:27:39:90:43:c8:23:31:c8:45:b3:c9: f7:9a:b1:26:f0:01:93:bc:be:e1:25:b4:94:1a:e9: 1c:eb:9a:57:97:3a:22:6b:8d:14:f6:05:0d:b7:46: 6c:c5:c4:be:77:58:87:b0:8b:75:e0:93:32:80:14: 04:7b:9f:dd:2f:8a:94:aa:b9:83:e5:1a:6c:33:e8: e0:9c:8d:5f:4c:cb:88:35:49:08:49:01:ae:5c:46: c1:ed:5c:92:85:8b:c7:6c:c9:1a:bb:22:8b:17:7e: f0:82:7d:86:3f:61:d4:93:06:e9:df:a6:e5:17:ec: d2:73:ce:38:6d:b8:69:b5:78:2e:09:1f:1d:bb:f0: 55:c4:11:78:eb:83:27:fc:05:9e:81:7a:1d:9e:2a: f7:48:14:69:fe:94:82:82:56:16:2e:41:3f:30:7e: d1:69:0f:a5:57:ff:1d:76:79:55:33:27:a5:98:8c: f1:91:f7:20:05:d3:10:ba:55:d4:91:94:3e:1a:7a: 54:6f:1a:84:2b:ce:33:8d:7b:4b:20:9f:e8:4e:bc: 37:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A8:EC:C1:4A:5B:17:32:8C:2D:B1:F0:9A:BD:6F:84:1E:74:6B:40 X509v3 Authority Key Identifier: keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:88:c6:3f:38:77:5a:1b:d3:49:b5:be:e5:1b:bb:2a:87:46: e8:ca:9b:71:99:de:e2:a3:4f:7c:1b:5a:91:08:c1:c6:ed:4f: b1:d2:76:fc:84:2a:94:b9:33:54:1d:e1:87:70:4c:bd:9d:5c: f0:10:8a:c4:c9:1b:e7:eb:27:6c:04:f4:fd:88:f2:ec:8a:05: 85:05:be:0d:7c:da:e1:0a:7c:63:41:ba:f6:4c:3d:83:73:97: 33:e7:82:e2:7e:83:1a:77:9f:33:83:92:55:ff:6a:cf:45:cc: 1d:83:cb:34:fe:7d:77:7f:2e:7d:4c:20:56:7d:bb:83:cf:9f: e3:ea:72:d7:18:bd:b2:94:6d:49:65:57:70:a0:93:8e:67:13: 78:a4:4d:8d:2d:a1:6e:05:cd:a7:6f:af:ad:8c:74:47:80:18: 1a:67:48:06:19:5e:a1:81:8c:1d:54:e6:d4:6f:31:f8:c6:e1: 57:68:e5:84:c0:6b:a2:ac:fb:dc:c4:87:eb:38:37:22:84:9b: 0c:dd:51:78:8b:ae:07:3c:45:45:ef:79:1a:31:e7:04:e0:78: 5e:d0:c7:47:e3:c8:bb:5a:6a:b4:a2:6b:6a:2f:25:7c:62:1d: 1c:a1:6a:e9:b9:9b:b2:c5:c0:ea:e2:17:d7:77:31:34:48:99: ea:b0:eb:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCctuycBrEnpTIyHngbR4zfrWU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENC NUFEQkQyODAeFw0yNTA3MDIyMTI2MTNaFw0yNTA3MDYwODE2MTNaMDMxMTAvBgNV BAMTKDc1QThFQ0MxNEE1QjE3MzI4QzJEQjFGMDlBQkQ2Rjg0MUU3NDZCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/PD4Pe1Vy9fA6qnBY2Kdizbo I79h8mSw9GcFm46yHirz1BKpgxMPDsOd/YkFl3wnOZBDyCMxyEWzyfeasSbwAZO8 vuEltJQa6RzrmleXOiJrjRT2BQ23RmzFxL53WIewi3XgkzKAFAR7n90vipSquYPl Gmwz6OCcjV9My4g1SQhJAa5cRsHtXJKFi8dsyRq7IosXfvCCfYY/YdSTBunfpuUX 7NJzzjhtuGm1eC4JHx278FXEEXjrgyf8BZ6Beh2eKvdIFGn+lIKCVhYuQT8wftFp D6VX/x12eVUzJ6WYjPGR9yAF0xC6VdSRlD4aelRvGoQrzjONe0sgn+hOvDeRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdajswUpbFzKMLbHwmr1vhB50a0AwHwYDVR0j BBgwFoAUNWa2zwDXsLZz+LUmxWrr3LWtvSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2I4YWU5Ny02ODE4LTQ4YTktYWJlNC1lZGI5NjA0OWYzYzgvMC8zNTY2QjZDRjAw RDdCMEI2NzNGOEI1MjZDNTZBRUJEQ0I1QURCRDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENCNUFE QkQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVC RENCNUFEQkQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaIxj84d1ob00m1vuUbuyqHRujKm3GZ3uKj T3wbWpEIwcbtT7HSdvyEKpS5M1Qd4YdwTL2dXPAQisTJG+frJ2wE9P2I8uyKBYUF vg182uEKfGNBuvZMPYNzlzPnguJ+gxp3nzODklX/as9FzB2DyzT+fXd/Ln1MIFZ9 u4PPn+PqctcYvbKUbUllV3Cgk45nE3ikTY0toW4Fzadvr62MdEeAGBpnSAYZXqGB jB1U5tRvMfjG4Vdo5YTAa6Ks+9zEh+s4NyKEmwzdUXiLrgc8RUXveRox5wTgeF7Q x0fjyLtaarSia2ovJXxiHRyhaum5m7LFwOriF9d3MTRImeqw6zs= -----END CERTIFICATE-----Generated at Fri Jul 4 06:08:21 2025 by rpki-client