$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: GvOo4yB7eyeF5ErIDO9mZmJuR/7okrdNaoRWwJqnQ2s= Subject key identifier: 6B:2D:40:C2:02:57:D8:3A:BE:C8:28:8C:02:33:BB:3C:25:4F:A8:45 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 275C73A97889D42155A391849CF3DE218EAD75B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 0162 Signing time: Sun 29 Jun 2025 07:22:13 +0000 Manifest this update: Sun 29 Jun 2025 07:17:13 +0000 Manifest next update: Wed 02 Jul 2025 14:25:13 +0000 Files and hashes: 1: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) 2: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: VGxoZJnexPNoUPU7YOuEixfeuU0FXSPm/4IzlWybRto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5c:73:a9:78:89:d4:21:55:a3:91:84:9c:f3:de:21:8e:ad:75:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Jun 29 07:17:13 2025 GMT Not After : Jul 2 14:25:13 2025 GMT Subject: CN=6B2D40C20257D83ABEC8288C0233BB3C254FA845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:88:60:1d:92:ad:1a:ed:4c:77:d1:70:85:97: d9:17:e8:2f:07:28:2a:fa:4e:92:a2:b6:28:11:0c: a9:92:e2:19:12:b2:fa:49:3f:f6:a5:b2:d2:f7:00: 18:40:df:17:d1:ee:51:ce:3a:bd:d4:fd:b4:c4:ab: 73:12:5e:60:bc:23:f2:dd:5b:21:b3:b1:ba:cf:82: a1:90:19:91:94:84:e8:60:a2:73:65:12:93:9a:83: 04:f3:fa:36:6f:ec:7b:6a:a2:06:a7:98:32:7e:76: 0b:a5:b7:61:25:91:56:04:d3:8d:e3:4f:40:66:a2: 32:a9:37:8d:e9:b9:a5:df:5a:20:db:33:ea:3d:ba: 35:c4:b4:dd:1f:01:61:4a:5b:70:15:38:c1:ef:19: 3c:c8:e8:ff:4c:16:e6:93:de:c9:49:90:b0:bc:08: c4:2a:3f:1b:53:01:8b:ad:69:cf:d9:3c:99:13:97: 33:75:f9:4d:c0:53:ff:7e:2f:d8:dc:82:4c:17:7a: 38:1c:ce:f5:ac:a9:0a:cc:8e:22:0d:64:09:be:4c: 92:a0:66:71:f0:bc:d8:43:9b:55:93:79:72:93:66: 00:76:a3:5d:ac:0d:08:43:b6:5c:ec:0f:55:b3:df: 9e:4d:ef:27:b2:0c:dd:c8:c4:be:2f:88:16:77:bf: 86:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2D:40:C2:02:57:D8:3A:BE:C8:28:8C:02:33:BB:3C:25:4F:A8:45 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:19:11:d1:a6:bd:7b:00:89:1c:98:d8:a5:bc:65:6d:9d:ce: d7:c7:c1:8a:3d:d7:57:ad:f2:71:9f:b8:35:2e:28:d7:39:96: c8:07:e3:5e:4f:87:84:1b:dc:a9:73:36:bb:27:6a:39:9b:44: 0c:6a:1e:b1:9b:c5:a7:31:bc:e6:38:61:b6:b9:52:4c:b1:a4: 1d:f2:ed:e3:c9:23:88:24:f3:5a:5e:bd:f2:23:9e:9c:dc:bd: e9:e6:4a:99:08:c6:41:23:05:d1:26:0f:0d:c5:f9:af:b1:3d: c2:e5:1c:24:86:37:b6:61:d1:0c:9d:83:57:25:85:e9:a3:fc: fc:ad:16:71:55:8f:95:6e:ca:5a:9e:6b:e2:39:61:00:9c:16: 2b:d1:92:0a:bf:f2:26:c7:bc:8c:47:71:d1:a3:fc:2e:02:3f: 38:63:3d:5c:58:64:58:15:0a:03:df:4d:ba:34:72:7f:e4:1d: 8e:8d:cc:eb:67:5c:2a:42:52:90:74:91:10:c1:c2:21:fc:5c: af:57:d4:4a:27:56:12:8e:a8:ad:2f:1f:fd:07:e0:16:c1:62: 56:a4:ac:3d:0a:01:41:de:67:d3:c2:e3:df:65:6c:5f:65:3a: 96:77:80:c6:cf:ed:bb:5c:8c:ca:2f:4a:1b:27:96:fb:d4:b2: ca:f7:3b:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1xzqXiJ1CFVo5GEnPPeIY6tdbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNTA2MjkwNzE3MTNaFw0yNTA3MDIxNDI1MTNaMDMxMTAvBgNV BAMTKDZCMkQ0MEMyMDI1N0Q4M0FCRUM4Mjg4QzAyMzNCQjNDMjU0RkE4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZiGAdkq0a7Ux30XCFl9kX6C8H KCr6TpKitigRDKmS4hkSsvpJP/alstL3ABhA3xfR7lHOOr3U/bTEq3MSXmC8I/Ld WyGzsbrPgqGQGZGUhOhgonNlEpOagwTz+jZv7HtqoganmDJ+dgult2ElkVYE043j T0BmojKpN43puaXfWiDbM+o9ujXEtN0fAWFKW3AVOMHvGTzI6P9MFuaT3slJkLC8 CMQqPxtTAYutac/ZPJkTlzN1+U3AU/9+L9jcgkwXejgczvWsqQrMjiINZAm+TJKg ZnHwvNhDm1WTeXKTZgB2o12sDQhDtlzsD1Wz355N7yeyDN3IxL4viBZ3v4YhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUay1AwgJX2Dq+yCiMAjO7PCVPqEUwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMZEdGmvXsAiRyY2KW8ZW2dztfHwYo911et 8nGfuDUuKNc5lsgH415Ph4Qb3KlzNrsnajmbRAxqHrGbxacxvOY4Yba5UkyxpB3y 7ePJI4gk81pevfIjnpzcvenmSpkIxkEjBdEmDw3F+a+xPcLlHCSGN7Zh0Qydg1cl hemj/PytFnFVj5Vuylqea+I5YQCcFivRkgq/8ibHvIxHcdGj/C4CPzhjPVxYZFgV CgPfTbo0cn/kHY6NzOtnXCpCUpB0kRDBwiH8XK9X1EonVhKOqK0vH/0H4BbBYlak rD0KAUHeZ9PC499lbF9lOpZ3gMbP7btcjMovShsnlvvUssr3O2Q= -----END CERTIFICATE-----Generated at Mon Jun 30 02:24:17 2025 by rpki-client