$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: /YVvrfcjmqOkIECLQl5zV1H3tY6E5mBbWOA7bK0jbqw= Subject key identifier: D2:E3:79:20:DC:06:05:2E:72:84:19:AC:10:4A:F6:41:82:07:10:2C Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 791D1CFED41515B4FDCE8BA481FEEE1A340713DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: CC Signing time: Thu 08 May 2025 09:41:58 +0000 Manifest this update: Thu 08 May 2025 09:36:58 +0000 Manifest next update: Sun 11 May 2025 10:52:58 +0000 Files and hashes: 1: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: 2sgMNPvdPKPmSXukXACjrwvtdQ3QHDjRcB3RK3DeklA=) 2: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: mMVF2hYAKg0sTXxaBuy+2bvelwvkw1QteJi5RAQF2oo=) 3: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: WAQXkiPrJsaFYXXQWtEX02AuZsAbbWrymDv7NG1EYxw=) 4: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: G0a1IDIDp/6OW+B4SPVbcSdJGPsXh5ci397pwO85gSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 10:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1d:1c:fe:d4:15:15:b4:fd:ce:8b:a4:81:fe:ee:1a:34:07:13:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: May 8 09:36:58 2025 GMT Not After : May 11 10:52:58 2025 GMT Subject: CN=D2E37920DC06052E728419AC104AF6418207102C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:d2:66:28:d3:c4:81:62:41:5a:b4:db:4d: 08:71:01:95:5a:27:b0:4f:4a:f4:11:e0:4a:fe:94: 30:ed:cc:c0:7a:9e:7d:b2:59:c4:f2:ef:48:b1:27: c0:60:06:9e:56:7c:d5:87:02:3f:67:ee:e6:2a:2e: df:78:fc:40:74:da:a8:a4:51:f1:69:b3:13:a1:ef: 01:fa:e9:1f:92:a6:62:10:d0:f0:5b:94:53:35:2c: d2:31:16:6f:c8:f6:c5:f6:cb:62:61:34:ee:c3:09: 25:8d:c1:7a:13:a4:0d:c9:98:63:ba:ab:e0:e4:67: 8b:dc:d2:3a:1b:47:9f:d4:80:cd:dc:f6:d1:08:06: 84:80:fb:72:b3:a7:1e:b7:9b:6f:b1:9d:d4:e5:9f: d3:c9:03:b4:50:34:91:eb:e1:e4:a7:90:6f:46:50: c8:c7:0e:eb:9d:7a:09:ee:c6:18:39:b7:42:f0:3f: cd:f9:91:0b:52:46:3b:68:c4:ef:93:36:86:7d:2f: 71:72:6b:14:3c:d5:4a:e4:a5:d2:ac:4b:6a:0a:64: 7a:14:0d:0f:90:5e:e6:72:6d:0f:88:a7:5c:77:76: 6e:2b:f5:c8:91:90:1c:98:9a:c4:85:74:58:00:cb: 22:6c:76:95:e3:72:2a:3a:d3:6f:3d:05:03:b3:de: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E3:79:20:DC:06:05:2E:72:84:19:AC:10:4A:F6:41:82:07:10:2C X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:48:98:ef:47:1b:92:d8:07:21:67:b9:76:3e:5a:a7:21:c1: a9:e5:f9:59:05:17:6f:77:83:61:b9:39:dc:9c:df:77:25:d9: f3:b0:77:69:52:66:e6:41:94:c4:6f:ff:b4:8f:0e:75:24:6b: bc:2e:7d:8c:d7:f5:a6:4e:4c:43:b2:94:77:b7:37:49:0f:fb: 51:14:bb:96:d6:8d:25:86:ba:57:dd:a5:db:95:95:31:20:2f: 73:fa:19:4b:90:13:e0:57:e1:84:a4:10:02:51:ff:2c:a4:6e: f0:fd:62:56:87:ff:b7:42:be:4e:f8:9c:49:07:88:35:9a:0f: 15:ca:35:b0:b7:85:5f:d2:a4:b3:08:2a:95:27:81:f4:5f:90: c2:55:3e:d9:d5:8b:f2:52:4e:fc:c8:11:28:25:42:89:52:c4: 0f:41:a3:0b:5b:fc:e4:29:59:79:fc:7a:fe:8e:ee:55:c8:46: f7:b5:e8:f2:18:d3:e4:93:74:7c:5b:fa:26:aa:28:06:a4:cd: d9:82:b9:14:12:46:7a:b5:2c:ad:da:4b:e2:2b:80:e4:5b:12: 02:fa:ba:68:a3:dd:3a:b5:7c:4c:e2:a5:5c:69:82:c6:0e:1d: fa:67:87:02:9f:26:8e:ed:1b:5f:ea:de:da:88:20:8e:71:27: d9:5f:62:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeR0c/tQVFbT9zoukgf7uGjQHE94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTA1MDgwOTM2NThaFw0yNTA1MTExMDUyNThaMDMxMTAvBgNV BAMTKEQyRTM3OTIwREMwNjA1MkU3Mjg0MTlBQzEwNEFGNjQxODIwNzEwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2D9JmKNPEgWJBWrTbTQhxAZVa J7BPSvQR4Er+lDDtzMB6nn2yWcTy70ixJ8BgBp5WfNWHAj9n7uYqLt94/EB02qik UfFpsxOh7wH66R+SpmIQ0PBblFM1LNIxFm/I9sX2y2JhNO7DCSWNwXoTpA3JmGO6 q+DkZ4vc0jobR5/UgM3c9tEIBoSA+3Kzpx63m2+xndTln9PJA7RQNJHr4eSnkG9G UMjHDuudegnuxhg5t0LwP835kQtSRjtoxO+TNoZ9L3FyaxQ81UrkpdKsS2oKZHoU DQ+QXuZybQ+Ip1x3dm4r9ciRkByYmsSFdFgAyyJsdpXjcio60289BQOz3pF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0uN5INwGBS5yhBmsEEr2QYIHECwwHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItImO9HG5LYByFnuXY+Wqchwanl+VkFF293 g2G5Odyc33cl2fOwd2lSZuZBlMRv/7SPDnUka7wufYzX9aZOTEOylHe3N0kP+1EU u5bWjSWGulfdpduVlTEgL3P6GUuQE+BX4YSkEAJR/yykbvD9YlaH/7dCvk74nEkH iDWaDxXKNbC3hV/SpLMIKpUngfRfkMJVPtnVi/JSTvzIESglQolSxA9Bowtb/OQp WXn8ev6O7lXIRve16PIY0+STdHxb+iaqKAakzdmCuRQSRnq1LK3aS+IrgORbEgL6 umij3Tq1fEzipVxpgsYOHfpnhwKfJo7tG1/q3tqIII5xJ9lfYvA= -----END CERTIFICATE-----Generated at Fri May 9 02:42:33 2025 by rpki-client