$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: tVYMaR9/LXODiZUL0K/h/p3HmY+CyBNvfyqx94oFWLc= Subject key identifier: A9:0B:3D:38:6D:42:3C:15:E2:62:30:1F:73:29:78:EB:52:10:AF:C1 Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 6B57050A2E6499866C4D6C04E3CDCA0E51A0BCEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: E4 Signing time: Mon 30 Jun 2025 10:11:56 +0000 Manifest this update: Mon 30 Jun 2025 10:06:56 +0000 Manifest next update: Thu 03 Jul 2025 13:41:56 +0000 Files and hashes: 1: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: pqKWfgLtO8sfx0JACPMKeWZIQdB1ccl26NjepyVzIa4=) 2: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: 2sgMNPvdPKPmSXukXACjrwvtdQ3QHDjRcB3RK3DeklA=) 3: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: mMVF2hYAKg0sTXxaBuy+2bvelwvkw1QteJi5RAQF2oo=) 4: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: G0a1IDIDp/6OW+B4SPVbcSdJGPsXh5ci397pwO85gSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 13:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:57:05:0a:2e:64:99:86:6c:4d:6c:04:e3:cd:ca:0e:51:a0:bc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Jun 30 10:06:56 2025 GMT Not After : Jul 3 13:41:56 2025 GMT Subject: CN=A90B3D386D423C15E262301F732978EB5210AFC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:08:e9:be:11:13:06:cd:4f:8e:ca:09:c1:19: 21:cd:b1:be:63:a5:72:7b:9f:c2:9a:89:97:bf:69: c1:94:41:48:ef:a1:03:b8:26:2a:6f:3a:1c:83:07: fa:fe:27:97:27:ad:dc:80:9e:da:8f:34:25:48:c9: 2e:86:7a:37:c4:91:5f:ba:76:56:8c:1f:d4:a4:1c: c2:cc:ae:4b:73:b5:a9:83:ea:3c:74:64:0a:f4:53: 9b:8f:da:e7:fb:c1:64:2a:18:1e:b8:be:43:9c:90: 1d:59:af:49:44:ea:d6:2a:51:f3:d0:f6:b8:e0:35: 5a:c5:08:f3:44:d2:e0:86:49:85:7b:db:1b:70:be: 46:f2:34:f8:fc:61:d4:5e:ce:79:65:f3:de:3b:e7: 85:5b:16:ea:30:2e:1e:90:d3:a7:aa:1b:be:87:c1: 3c:fe:7f:20:54:43:25:11:5b:e7:d1:7d:8c:e1:42: 69:de:88:6b:12:cf:8f:f2:8a:33:af:94:2d:2e:0e: c1:bf:c7:de:06:16:b6:c1:b1:56:16:53:20:7e:d0: c7:3b:91:7b:6e:c4:9c:1c:f0:23:a7:bd:55:5e:a0: fc:5b:8a:03:c4:a9:ad:fb:2e:83:8a:31:e5:47:b9: 87:26:a7:3b:d2:3a:ce:cc:9d:1f:be:f1:9f:58:0d: 22:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0B:3D:38:6D:42:3C:15:E2:62:30:1F:73:29:78:EB:52:10:AF:C1 X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:29:b1:4c:cf:aa:80:b0:75:8a:c9:f7:10:2f:d0:20:dc:34: 18:cb:62:83:07:d2:39:b8:54:92:61:6b:94:ff:a7:d9:41:05: 92:21:70:86:d1:88:09:29:39:ec:ab:98:7e:09:3b:30:79:40: 26:39:94:5b:b5:01:e3:51:e8:75:0e:b0:a1:4d:41:fb:f8:d6: ed:56:b7:dc:64:d4:41:7e:cd:34:08:28:3d:33:e8:98:4c:cc: f4:ce:41:61:2b:21:52:5b:9b:ce:eb:61:18:82:9a:a7:27:bf: 75:1a:2d:96:6d:99:09:2c:a4:7b:d0:19:d2:1d:10:73:57:cc: 54:a5:ad:55:26:91:a7:13:3b:21:4d:49:80:d8:f5:1d:ad:69: 1f:dd:0b:c7:fb:d2:7d:70:fc:a9:1b:7e:06:5f:33:91:07:f3: f8:5c:73:8f:20:93:16:b2:32:cb:c5:e6:11:65:ba:47:65:3a: 35:2e:70:d0:d9:9a:56:84:ee:78:39:da:59:55:9f:37:23:11: f6:04:df:89:2b:db:94:36:65:fe:94:3d:56:47:5a:60:c2:9b: da:92:9b:5c:e9:fe:ae:de:90:7c:32:a2:34:42:7b:47:d6:00: f7:d9:c1:33:48:41:8c:91:0e:b8:a8:b4:21:3e:a3:2f:1d:51: ce:45:d3:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1cFCi5kmYZsTWwE483KDlGgvOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTA2MzAxMDA2NTZaFw0yNTA3MDMxMzQxNTZaMDMxMTAvBgNV BAMTKEE5MEIzRDM4NkQ0MjNDMTVFMjYyMzAxRjczMjk3OEVCNTIxMEFGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCOm+ERMGzU+OygnBGSHNsb5j pXJ7n8KaiZe/acGUQUjvoQO4JipvOhyDB/r+J5cnrdyAntqPNCVIyS6GejfEkV+6 dlaMH9SkHMLMrktztamD6jx0ZAr0U5uP2uf7wWQqGB64vkOckB1Zr0lE6tYqUfPQ 9rjgNVrFCPNE0uCGSYV72xtwvkbyNPj8YdReznll894754VbFuowLh6Q06eqG76H wTz+fyBUQyURW+fRfYzhQmneiGsSz4/yijOvlC0uDsG/x94GFrbBsVYWUyB+0Mc7 kXtuxJwc8COnvVVeoPxbigPEqa37LoOKMeVHuYcmpzvSOs7MnR++8Z9YDSLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQs9OG1CPBXiYjAfcyl461IQr8EwHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwpsUzPqoCwdYrJ9xAv0CDcNBjLYoMH0jm4 VJJha5T/p9lBBZIhcIbRiAkpOeyrmH4JOzB5QCY5lFu1AeNR6HUOsKFNQfv41u1W t9xk1EF+zTQIKD0z6JhMzPTOQWErIVJbm87rYRiCmqcnv3UaLZZtmQkspHvQGdId EHNXzFSlrVUmkacTOyFNSYDY9R2taR/dC8f70n1w/KkbfgZfM5EH8/hcc48gkxay MsvF5hFlukdlOjUucNDZmlaE7ng52llVnzcjEfYE34kr25Q2Zf6UPVZHWmDCm9qS m1zp/q7ekHwyojRCe0fWAPfZwTNIQYyRDriotCE+oy8dUc5F06M= -----END CERTIFICATE-----Generated at Tue Jul 1 19:30:11 2025 by rpki-client