$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft File: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft (raw, json) Hash identifier: oJEUEAMWp8w2+bacDjo3TiNQHnnLHRVx7xINN5iK6Gs= Subject key identifier: 3F:07:DE:E0:68:11:3F:0C:62:B3:51:1E:56:80:E8:16:44:A5:A2:0D Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 Certificate issuer: /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Certificate serial: 1B9757F06AEA903C7FF32CAA0998CB32A0E9988C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft Manifest number: 04CE Signing time: Wed 07 May 2025 02:11:14 +0000 Manifest this update: Wed 07 May 2025 02:06:14 +0000 Manifest next update: Sat 10 May 2025 12:00:14 +0000 Files and hashes: 1: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: Nis2CwI3ez8v1WSHl89eT2Oh6FaKWW6bg0hXnRqd+og=) 2: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: 5aELkp52c47kJfpzS6eF8UEMP56gj1U8I8vH3s1IURw=) 3: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl (hash: LiDboXKRLf+jpOIXIFfcFXdaP3HFnvxZAyJnIfqZp4s=) 4: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: cGLu2UMdrJRPRQG7pt7UtR/38tRpV8ciHNgw5Tldj8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 12:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:97:57:f0:6a:ea:90:3c:7f:f3:2c:aa:09:98:cb:32:a0:e9:98:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Validity Not Before: May 7 02:06:14 2025 GMT Not After : May 10 12:00:14 2025 GMT Subject: CN=3F07DEE068113F0C62B3511E5680E81644A5A20D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:e5:c5:b4:d7:09:ab:c8:ad:06:40:3b:c7: 59:13:2a:e0:3c:2e:32:97:04:58:c3:54:fe:ce:7d: 40:03:34:5b:dc:71:12:7a:14:68:e8:2b:1c:28:db: 7e:63:64:ea:e1:02:b0:14:b9:9a:92:d8:31:af:3e: 03:17:fd:53:39:aa:2b:e8:33:61:84:c7:e1:60:72: 59:fc:30:57:55:72:5f:e5:53:6a:ee:db:36:32:83: f5:07:e3:c7:66:ce:1b:7c:7e:f1:a7:43:6a:d8:97: 5f:a6:34:5d:80:e4:a8:25:79:cc:32:ad:62:69:b9: 72:a4:35:ca:6e:49:2d:3f:73:a0:25:42:91:8d:ff: 25:18:e1:3e:e3:ec:c4:16:83:05:05:7f:2f:b2:18: 7a:ff:14:5e:bd:c3:9f:d2:07:ac:0b:c6:5d:cc:66: 19:7e:d9:e4:f9:31:68:d7:6c:db:02:e5:33:12:1f: 19:0c:ef:52:37:11:c2:b4:5f:ad:b9:05:88:6c:9a: 0e:ea:53:13:c4:0a:d3:de:83:09:86:5e:83:49:b3: f9:62:9a:a7:d6:ca:91:17:2d:aa:ac:bf:55:5b:5b: e9:37:30:79:dd:44:51:7e:c0:cc:d8:85:04:8c:d5: bc:12:c5:2f:57:6d:29:09:71:db:8d:01:df:8a:bf: 62:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:07:DE:E0:68:11:3F:0C:62:B3:51:1E:56:80:E8:16:44:A5:A2:0D X509v3 Authority Key Identifier: keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9b:99:55:26:02:3c:f4:fb:87:cb:e3:68:6b:9d:f9:b5:9b: 49:67:6d:32:33:4c:c9:73:ad:17:e8:09:5b:dc:c9:3a:a7:af: 74:bf:47:e4:22:a7:19:78:c1:cb:22:b1:b0:3c:23:8e:f7:08: e7:1c:f2:49:b8:6c:a1:2c:62:84:a4:f3:d1:f4:39:ac:85:4d: 01:cd:20:aa:cb:1a:fe:a1:92:80:51:b6:73:2c:e7:d7:84:04: f9:21:46:99:f6:e5:39:71:c1:02:a5:50:f5:66:89:dd:51:6b: 3b:70:c8:88:b1:d4:92:a7:a5:00:00:5e:ba:00:16:18:22:0a: b4:33:b8:ba:87:47:01:07:08:2c:b8:a5:e0:79:ed:66:76:9f: de:01:ae:1c:ce:3d:b3:aa:60:06:20:99:7b:07:c6:64:be:de: e2:c8:83:02:c1:97:db:1b:38:32:b6:f0:49:53:4b:92:79:1a: 32:6c:2e:c7:7c:42:e3:04:1b:76:2d:36:8e:7a:3d:f4:4b:34: ab:ac:78:fd:c2:13:23:01:74:04:bd:e9:82:c2:ce:e5:4d:e2: fc:06:81:05:53:d6:fe:ce:8d:e0:df:5c:6a:89:d6:14:f8:a5: 52:6a:28:3c:2a:72:3c:56:f4:62:2f:68:a5:52:1e:18:0c:af: a4:44:85:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5dX8GrqkDx/8yyqCZjLMqDpmIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENC NUFEQkQyODAeFw0yNTA1MDcwMjA2MTRaFw0yNTA1MTAxMjAwMTRaMDMxMTAvBgNV BAMTKDNGMDdERUUwNjgxMTNGMEM2MkIzNTExRTU2ODBFODE2NDRBNUEyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7+XFtNcJq8itBkA7x1kTKuA8 LjKXBFjDVP7OfUADNFvccRJ6FGjoKxwo235jZOrhArAUuZqS2DGvPgMX/VM5qivo M2GEx+Fgcln8MFdVcl/lU2ru2zYyg/UH48dmzht8fvGnQ2rYl1+mNF2A5Kglecwy rWJpuXKkNcpuSS0/c6AlQpGN/yUY4T7j7MQWgwUFfy+yGHr/FF69w5/SB6wLxl3M Zhl+2eT5MWjXbNsC5TMSHxkM71I3EcK0X625BYhsmg7qUxPECtPegwmGXoNJs/li mqfWypEXLaqsv1VbW+k3MHndRFF+wMzYhQSM1bwSxS9XbSkJcduNAd+Kv2JDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPwfe4GgRPwxis1EeVoDoFkSlog0wHwYDVR0j BBgwFoAUNWa2zwDXsLZz+LUmxWrr3LWtvSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2I4YWU5Ny02ODE4LTQ4YTktYWJlNC1lZGI5NjA0OWYzYzgvMC8zNTY2QjZDRjAw RDdCMEI2NzNGOEI1MjZDNTZBRUJEQ0I1QURCRDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENCNUFE QkQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVC RENCNUFEQkQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHObmVUmAjz0+4fL42hrnfm1m0lnbTIzTMlz rRfoCVvcyTqnr3S/R+Qipxl4wcsisbA8I473COcc8km4bKEsYoSk89H0OayFTQHN IKrLGv6hkoBRtnMs59eEBPkhRpn25TlxwQKlUPVmid1RaztwyIix1JKnpQAAXroA FhgiCrQzuLqHRwEHCCy4peB57WZ2n94BrhzOPbOqYAYgmXsHxmS+3uLIgwLBl9sb ODK28ElTS5J5GjJsLsd8QuMEG3YtNo56PfRLNKuseP3CEyMBdAS96YLCzuVN4vwG gQVT1v7OjeDfXGqJ1hT4pVJqKDwqcjxW9GIvaKVSHhgMr6REhTs= -----END CERTIFICATE-----Generated at Thu May 8 17:22:50 2025 by rpki-client