$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: QshDCnawDspKBQUiM60Zp+4Qx0SkmR8vkC+lIa6wF6c= Subject key identifier: 65:06:A4:38:58:37:3D:29:54:0B:B1:1D:01:71:F4:72:60:3E:EF:AE Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 5A9E19136927DFF650D1447C89C52BA145B09709 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 0188 Signing time: Sun 04 May 2025 14:21:19 +0000 Manifest this update: Sun 04 May 2025 14:16:19 +0000 Manifest next update: Wed 07 May 2025 16:13:19 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: czilf8LM7E8V2V7kTj/fZOyvhFwuXIjUXM8bdVfISu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 16:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9e:19:13:69:27:df:f6:50:d1:44:7c:89:c5:2b:a1:45:b0:97:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: May 4 14:16:19 2025 GMT Not After : May 7 16:13:19 2025 GMT Subject: CN=6506A43858373D29540BB11D0171F472603EEFAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:fc:4b:fe:58:05:4e:7c:19:0a:5c:a7:6f: 78:cb:64:98:54:47:7b:2b:41:4f:1f:4e:25:a8:65: 39:9c:1c:74:0e:8c:b5:99:e9:5e:39:02:8c:72:08: 6c:48:35:5f:45:19:3b:2f:8e:e6:b4:f2:f1:bb:2f: 54:eb:70:81:ad:e5:ec:43:90:d2:5a:8b:b8:a0:61: 9f:4a:6f:f8:a3:27:ee:cd:af:6c:87:7c:74:ac:3e: 3d:5c:70:50:25:74:ca:98:76:08:53:5c:5f:87:18: 12:cb:49:2c:37:8b:20:e3:6d:98:d6:f2:d2:0f:ba: 43:fa:1b:ee:ac:13:c4:37:a8:31:65:41:a6:f3:d9: 32:53:c9:4d:8b:52:1c:19:96:53:e0:d1:ca:6b:b4: d7:01:2b:d2:38:22:69:ce:25:6c:11:41:69:b8:34: a6:4d:d6:b2:b7:73:21:81:2e:65:89:bb:1f:1c:e6: 5b:ce:41:60:d3:bd:4d:99:8f:5c:59:e3:df:da:0f: 14:9b:73:34:9b:70:89:71:d9:75:b8:7f:1c:ac:b4: 1b:5e:66:0c:b5:64:fd:92:07:4b:69:af:2e:99:aa: c3:9b:25:23:96:1f:5b:ee:ef:52:3d:2e:9b:0c:4b: 7a:2a:5f:d6:ba:e6:15:48:e8:f5:0d:c2:07:4c:67: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:06:A4:38:58:37:3D:29:54:0B:B1:1D:01:71:F4:72:60:3E:EF:AE X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:bd:ba:4f:cd:73:6f:e9:96:8c:24:48:dc:6c:ec:92:e9:68: f6:bc:3e:71:d2:63:c1:28:91:84:d9:7c:6c:a8:95:4e:f8:70: d9:e5:b1:40:07:fb:c9:18:0f:c0:6e:cc:f8:9b:09:e4:cb:ca: ba:73:3a:c3:63:27:37:58:93:36:cd:84:b5:7b:de:64:f1:30: de:dc:07:75:60:63:0c:70:2b:13:4b:7e:fd:b9:9b:26:87:9f: 6c:f7:b7:27:e8:d5:d1:1e:b1:40:35:c4:ff:cc:e0:fb:94:42: 4c:b1:8b:67:bf:14:41:25:52:33:4f:f2:22:4c:d9:4c:61:6c: ea:d6:a8:19:51:96:6a:11:d6:09:28:d0:a9:bb:94:e7:c1:7d: 0b:aa:6c:f1:8e:85:8d:d4:d3:d6:f5:44:c5:81:80:75:10:b1: 1b:f3:b2:8d:83:8a:5e:78:ec:dc:92:35:e7:66:ec:e2:8d:4a: 64:15:e6:2b:9a:dd:53:6f:4f:53:81:c8:f3:30:59:41:04:44: 50:29:66:c0:c8:92:8b:ca:1d:94:72:da:74:c9:20:dc:c7:92: af:9c:1c:1f:44:1f:47:7a:32:35:f1:9f:62:31:1a:d2:d4:65: 45:01:61:1b:28:68:17:0d:b6:62:82:3e:a4:ed:5b:b7:b9:2a: fe:9d:4d:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWp4ZE2kn3/ZQ0UR8icUroUWwlwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNTA1MDQxNDE2MTlaFw0yNTA1MDcxNjEzMTlaMDMxMTAvBgNV BAMTKDY1MDZBNDM4NTgzNzNEMjk1NDBCQjExRDAxNzFGNDcyNjAzRUVGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8APxL/lgFTnwZClynb3jLZJhU R3srQU8fTiWoZTmcHHQOjLWZ6V45AoxyCGxINV9FGTsvjua08vG7L1TrcIGt5exD kNJai7igYZ9Kb/ijJ+7Nr2yHfHSsPj1ccFAldMqYdghTXF+HGBLLSSw3iyDjbZjW 8tIPukP6G+6sE8Q3qDFlQabz2TJTyU2LUhwZllPg0cprtNcBK9I4ImnOJWwRQWm4 NKZN1rK3cyGBLmWJux8c5lvOQWDTvU2Zj1xZ49/aDxSbczSbcIlx2XW4fxystBte Zgy1ZP2SB0tpry6ZqsObJSOWH1vu71I9LpsMS3oqX9a65hVI6PUNwgdMZ1YDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZQakOFg3PSlUC7EdAXH0cmA+764wHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALS9uk/Nc2/plowkSNxs7JLpaPa8PnHSY8Eo kYTZfGyolU74cNnlsUAH+8kYD8BuzPibCeTLyrpzOsNjJzdYkzbNhLV73mTxMN7c B3VgYwxwKxNLfv25myaHn2z3tyfo1dEesUA1xP/M4PuUQkyxi2e/FEElUjNP8iJM 2UxhbOrWqBlRlmoR1gko0Km7lOfBfQuqbPGOhY3U09b1RMWBgHUQsRvzso2Dil54 7NySNedm7OKNSmQV5iua3VNvT1OByPMwWUEERFApZsDIkovKHZRy2nTJINzHkq+c HB9EH0d6MjXxn2IxGtLUZUUBYRsoaBcNtmKCPqTtW7e5Kv6dTYM= -----END CERTIFICATE-----Generated at Wed May 7 06:38:34 2025 by rpki-client