$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: XTmmQWAwA2MeCGqlEYTydBFMKKLxNOjWr7QDFs+ElYU= Subject key identifier: 64:FE:57:F9:DD:C3:A9:50:68:29:6F:F0:8D:36:BA:0F:75:E6:69:76 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 5E0DD154C900B89D88FF6E0FC2222989DC96E7D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 014B Signing time: Thu 08 May 2025 17:42:15 +0000 Manifest this update: Thu 08 May 2025 17:37:15 +0000 Manifest next update: Mon 12 May 2025 05:28:15 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: 8HfNdF+xJkhAOXeFOGk37igvWCgyglLOlU4Nlel7qf0=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0d:d1:54:c9:00:b8:9d:88:ff:6e:0f:c2:22:29:89:dc:96:e7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: May 8 17:37:15 2025 GMT Not After : May 12 05:28:15 2025 GMT Subject: CN=64FE57F9DDC3A95068296FF08D36BA0F75E66976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:38:1c:41:be:90:34:c0:6c:05:57:4f:19: b8:44:d4:a2:ed:29:ec:c4:ec:d8:c6:bc:64:9a:7b: ab:c9:5b:fd:64:d3:7e:a1:53:b6:79:c7:2c:5d:83: 90:2a:86:5b:62:41:8f:f2:24:11:33:59:7d:7a:23: 78:79:98:75:4a:bb:b6:18:91:83:0c:23:19:e8:ed: df:fd:b3:d9:6c:d7:ea:89:e5:e0:c0:17:0e:ab:8d: 17:b3:0e:a5:6b:a7:e5:8e:25:4f:17:1e:34:99:38: 82:e4:9f:a9:87:c0:e0:a6:3e:86:55:21:7d:cd:c1: 9e:c6:dd:c6:46:43:93:54:b9:cb:1e:0a:8f:89:23: 27:41:9a:c8:5e:1a:57:b4:47:b7:ba:e4:d9:2d:86: d2:34:d5:62:a5:33:9c:98:97:86:17:23:c0:c9:f1: 39:ba:c1:03:18:0f:58:a8:95:0e:73:5a:79:0a:13: 24:2b:3a:15:93:11:47:f2:4b:c8:c4:5f:9f:b7:24: 8a:6b:9f:10:87:13:53:ce:2d:53:9b:6b:d9:c6:22: 6d:85:6b:b3:63:30:5b:49:72:fa:48:0a:02:19:1a: 2f:5c:e9:d3:6f:21:7e:4e:51:45:74:2a:8d:2f:58: 97:e2:b6:00:b2:f7:66:f3:6b:41:29:91:d7:93:ed: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:57:F9:DD:C3:A9:50:68:29:6F:F0:8D:36:BA:0F:75:E6:69:76 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6a:73:1d:7f:69:88:79:50:c8:50:0e:2a:51:16:8f:40:2f: f1:05:2c:f1:3d:55:ee:15:31:31:39:74:03:45:82:cd:14:e1: 4a:48:da:24:32:6f:40:d6:6c:94:ee:f6:8b:9d:cb:58:90:e6: 01:81:31:3b:c5:3a:9b:16:f7:62:c6:f2:1a:26:26:8e:e0:09: f0:ad:46:da:43:46:cc:b1:68:bd:1d:ee:63:23:bd:ed:1e:df: a0:d7:bc:3c:98:4d:97:7c:04:53:5e:47:dc:e4:01:cb:0b:7c: ce:1e:df:e9:c8:04:32:24:ab:a3:4b:ac:10:14:1a:46:c9:20: 32:6d:c6:87:c5:10:38:4e:ef:c4:e3:30:b5:ea:62:eb:36:3d: 90:02:60:b8:b1:e6:41:b0:be:ae:ed:53:a0:15:8a:ac:42:7a: e4:49:c2:9c:fe:3e:39:ea:6c:86:aa:2a:1a:50:4c:7d:ba:17: 70:4b:53:18:1d:c3:50:04:26:cb:91:03:87:9c:4d:e4:37:32: 52:1d:ef:d0:87:9c:9f:ee:14:ae:c4:9c:56:09:fe:39:1d:de: b1:2a:31:43:bb:50:bb:99:ad:61:49:7e:0d:44:76:bf:e5:91: e1:c8:58:9e:74:5f:01:cb:23:29:6f:b6:c5:40:4b:06:f9:46: 43:dc:76:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXg3RVMkAuJ2I/24PwiIpidyW59kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTA1MDgxNzM3MTVaFw0yNTA1MTIwNTI4MTVaMDMxMTAvBgNV BAMTKDY0RkU1N0Y5RERDM0E5NTA2ODI5NkZGMDhEMzZCQTBGNzVFNjY5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJejgcQb6QNMBsBVdPGbhE1KLt KezE7NjGvGSae6vJW/1k036hU7Z5xyxdg5AqhltiQY/yJBEzWX16I3h5mHVKu7YY kYMMIxno7d/9s9ls1+qJ5eDAFw6rjRezDqVrp+WOJU8XHjSZOILkn6mHwOCmPoZV IX3NwZ7G3cZGQ5NUucseCo+JIydBmsheGle0R7e65NkthtI01WKlM5yYl4YXI8DJ 8Tm6wQMYD1iolQ5zWnkKEyQrOhWTEUfyS8jEX5+3JIprnxCHE1POLVOba9nGIm2F a7NjMFtJcvpICgIZGi9c6dNvIX5OUUV0Ko0vWJfitgCy92bza0EpkdeT7csbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZP5X+d3DqVBoKW/wjTa6D3XmaXYwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhqcx1/aYh5UMhQDipRFo9AL/EFLPE9Ve4V MTE5dANFgs0U4UpI2iQyb0DWbJTu9oudy1iQ5gGBMTvFOpsW92LG8homJo7gCfCt RtpDRsyxaL0d7mMjve0e36DXvDyYTZd8BFNeR9zkAcsLfM4e3+nIBDIkq6NLrBAU GkbJIDJtxofFEDhO78TjMLXqYus2PZACYLix5kGwvq7tU6AViqxCeuRJwpz+Pjnq bIaqKhpQTH26F3BLUxgdw1AEJsuRA4ecTeQ3MlId79CHnJ/uFK7EnFYJ/jkd3rEq MUO7ULuZrWFJfg1Edr/lkeHIWJ50XwHLIylvtsVASwb5RkPcdhA= -----END CERTIFICATE-----Generated at Fri May 9 12:40:53 2025 by rpki-client