$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: LlTIzmJQy08+sJwx7A/t/tXGIaT/H6Et1QQHux0ShTg= Subject key identifier: CC:4E:1F:25:2E:30:74:14:FA:5C:C3:2C:0C:51:E0:6F:25:B1:52:10 Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 7589C544AB0F920C7F294EB0C797B83E9122E959 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 01A1 Signing time: Sun 29 Jun 2025 14:01:18 +0000 Manifest this update: Sun 29 Jun 2025 13:56:18 +0000 Manifest next update: Thu 03 Jul 2025 00:01:18 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: 7nSWcEou3PgiDQnI7TH6eKvakkcaoDWL7Nubue786p8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:89:c5:44:ab:0f:92:0c:7f:29:4e:b0:c7:97:b8:3e:91:22:e9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Jun 29 13:56:18 2025 GMT Not After : Jul 3 00:01:18 2025 GMT Subject: CN=CC4E1F252E307414FA5CC32C0C51E06F25B15210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d8:2b:55:8f:c8:f5:77:bb:c4:c8:f8:41:80: a4:3a:e7:92:27:a1:3d:f0:4e:44:a6:93:fd:6b:21: 09:41:61:ed:cf:48:48:ac:7e:e4:68:9a:6f:97:87: 12:82:25:07:9f:4a:3f:59:19:08:71:db:aa:6d:a5: 5a:14:0a:01:2a:57:62:63:80:d9:54:3d:6d:0f:44: b8:ef:83:f3:75:3e:29:6c:3d:2c:bb:9e:8c:63:e7: b2:0a:77:0c:74:14:c9:8d:7f:34:5c:10:d4:32:ec: 53:6a:b9:51:01:5d:dc:d6:e3:41:3e:2e:f3:d4:11: 71:dc:f3:02:99:76:7a:96:83:d8:e7:ad:91:37:0b: 84:fd:ce:5e:7d:8e:f7:59:cd:f0:14:1d:b7:90:d1: e1:8f:b3:36:3c:87:87:fe:ec:0f:9e:4a:95:6e:7a: a9:36:39:d7:bd:32:ab:2a:4b:35:18:d4:7f:1a:84: 05:6f:a2:ac:eb:c9:12:77:04:96:59:8c:23:7c:52: 9e:e8:2e:c6:d0:cd:20:de:c5:b0:81:e7:d6:1f:5e: 1a:4f:18:8a:91:08:07:3d:87:07:72:10:f1:2d:11: b5:a5:15:86:a2:f5:54:aa:e2:73:ca:cc:b0:e8:f6: 3e:e7:2e:cd:82:a2:a5:a5:b8:e6:d8:9c:8d:a2:b4: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4E:1F:25:2E:30:74:14:FA:5C:C3:2C:0C:51:E0:6F:25:B1:52:10 X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:dc:98:9b:ba:98:1e:09:eb:fa:3f:be:51:83:2e:50:fe:19: f9:e8:a5:e3:85:04:35:87:e3:9b:f5:98:d8:41:53:45:a3:a6: 4b:b7:65:e4:71:a2:15:c0:95:4f:4f:19:6e:79:4e:17:4f:00: 05:6a:26:64:51:fb:f9:0b:67:1f:aa:d3:34:1c:c0:f3:61:9b: 94:3e:07:6c:27:11:bd:53:46:88:e5:58:3e:81:26:c0:44:d4: c8:7c:9e:a6:ac:23:01:90:86:42:2b:89:b8:cc:3a:50:dc:ef: 20:6f:56:5d:37:54:62:05:ec:22:97:4c:a4:5e:08:6f:de:80: 22:3f:3b:2d:8b:fd:cb:f0:1f:09:54:90:33:a8:1f:e4:5c:6c: 36:57:e5:8a:74:46:1a:29:3d:62:ac:15:b3:94:14:aa:66:96: 7f:eb:a6:89:37:77:78:e5:3f:63:4d:32:14:5d:de:5f:f3:fe: 45:67:53:44:a6:ce:a6:81:ba:d0:95:22:80:7b:45:75:ce:8b: ef:00:f2:bc:8a:21:0f:7c:ce:17:df:01:c2:3c:79:8d:61:bd: 6c:e5:85:1f:b2:57:f5:de:db:7f:ba:f8:07:7b:e5:e6:a1:1f: f4:f2:49:a8:cb:bd:4a:4b:56:9f:8d:ec:e9:f9:d3:a6:4e:74: 6a:9c:03:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYnFRKsPkgx/KU6wx5e4PpEi6VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNTA2MjkxMzU2MThaFw0yNTA3MDMwMDAxMThaMDMxMTAvBgNV BAMTKENDNEUxRjI1MkUzMDc0MTRGQTVDQzMyQzBDNTFFMDZGMjVCMTUyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw2CtVj8j1d7vEyPhBgKQ655In oT3wTkSmk/1rIQlBYe3PSEisfuRomm+XhxKCJQefSj9ZGQhx26ptpVoUCgEqV2Jj gNlUPW0PRLjvg/N1PilsPSy7noxj57IKdwx0FMmNfzRcENQy7FNquVEBXdzW40E+ LvPUEXHc8wKZdnqWg9jnrZE3C4T9zl59jvdZzfAUHbeQ0eGPszY8h4f+7A+eSpVu eqk2Ode9MqsqSzUY1H8ahAVvoqzryRJ3BJZZjCN8Up7oLsbQzSDexbCB59YfXhpP GIqRCAc9hwdyEPEtEbWlFYai9VSq4nPKzLDo9j7nLs2CoqWluObYnI2itAEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzE4fJS4wdBT6XMMsDFHgbyWxUhAwHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPcmJu6mB4J6/o/vlGDLlD+GfnopeOFBDWH 45v1mNhBU0Wjpku3ZeRxohXAlU9PGW55ThdPAAVqJmRR+/kLZx+q0zQcwPNhm5Q+ B2wnEb1TRojlWD6BJsBE1Mh8nqasIwGQhkIribjMOlDc7yBvVl03VGIF7CKXTKRe CG/egCI/Oy2L/cvwHwlUkDOoH+RcbDZX5Yp0RhopPWKsFbOUFKpmln/rpok3d3jl P2NNMhRd3l/z/kVnU0SmzqaButCVIoB7RXXOi+8A8ryKIQ98zhffAcI8eY1hvWzl hR+yV/Xe23+6+Ad75eahH/TySajLvUpLVp+N7On506ZOdGqcA08= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:00 2025 by rpki-client