$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: bMXV/ZJjTuj0AEi+/+GXian1R4Gxb+MPJnFdfrX5FqA= Subject key identifier: EC:70:3E:F7:B9:96:68:AF:42:50:09:0E:D4:D7:81:79:F0:19:4D:1C Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 0825C0085E6A20E29C442127B1F110FC06EC948B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 03C0 Signing time: Sat 28 Jun 2025 19:00:42 +0000 Manifest this update: Sat 28 Jun 2025 18:55:42 +0000 Manifest next update: Tue 01 Jul 2025 23:17:42 +0000 Files and hashes: 1: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 5SkHB/Kz3ud3kzZYvQ/j1QLOIE2ORuolpv99BxFmP4E=) 2: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: pFYo+rYQ4y01OiD99PWpXB905d+F4ZorCo/4HXyMapk=) 3: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: Ho5qBTtfgtZVjAwbLqrN2j0iAWSUruLMDMR+VpPo7cw=) 4: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: 1TOBRX5MwL8nChJl6awL2w3BUZFHaDBm1061l2puz4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:25:c0:08:5e:6a:20:e2:9c:44:21:27:b1:f1:10:fc:06:ec:94:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Jun 28 18:55:42 2025 GMT Not After : Jul 1 23:17:42 2025 GMT Subject: CN=EC703EF7B99668AF4250090ED4D78179F0194D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:f1:4d:fe:d7:1c:5b:f9:da:d8:e8:b4:b3: 0c:5a:c3:5d:10:71:ce:0f:51:37:0a:a3:3f:ec:89: 51:23:2b:79:38:0f:d1:c3:99:89:6a:b9:c0:c6:37: e7:6f:eb:b1:2a:cb:90:8d:d5:cb:f1:bb:7b:e4:27: b4:98:41:0e:84:45:de:aa:d0:23:12:08:fd:76:1c: 3e:54:0c:9d:7a:74:7d:75:00:f5:e8:fe:66:99:b2: 4c:13:d3:c6:42:11:31:77:f2:93:13:68:b9:9a:94: e0:6a:fc:bf:fe:66:04:7d:52:93:34:40:96:1d:f3: d2:af:f2:41:be:a9:a6:e3:90:25:2c:52:0d:bc:32: 80:29:17:2c:a2:9c:6e:87:f4:21:bc:c4:10:7d:ac: be:03:f8:1e:9a:d3:6b:8c:9a:21:6e:fa:f4:5b:09: f3:e8:db:9d:24:3a:4d:45:8b:6e:36:8f:9a:00:69: 8c:19:08:6c:94:a2:06:8a:96:b7:ff:a3:a2:14:cf: e2:ed:be:17:14:8d:ef:24:fc:59:1f:ee:15:7f:b1: de:e4:32:5a:4a:cb:ce:58:8b:79:a9:07:be:7d:93: f5:35:02:9b:e5:b4:0e:de:2c:21:eb:dc:2e:a1:af: 46:6a:ab:34:79:c4:ac:68:2a:f0:40:94:ea:69:bc: 66:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:70:3E:F7:B9:96:68:AF:42:50:09:0E:D4:D7:81:79:F0:19:4D:1C X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:fb:07:d2:87:c1:80:4f:89:59:06:6c:63:f8:85:7a:84:95: da:25:b1:fe:42:16:cb:66:6e:3e:aa:50:04:d8:ef:86:e6:33: d8:0b:6d:55:b7:0a:00:43:cf:c6:af:3b:0c:5c:1d:dc:73:65: 1d:f1:7a:6c:ce:85:0a:a2:43:c4:68:8f:0f:69:5e:e2:21:80: a5:00:47:63:d6:75:aa:ac:6b:1c:ec:27:22:8b:b2:f0:da:ac: 09:9d:ff:6a:11:94:9e:41:39:ff:49:96:4e:0a:93:75:0d:60: f3:e3:cd:53:ef:62:67:e9:2a:7b:63:53:5b:7f:84:2a:27:a1: ca:c5:98:2e:0e:71:a5:9b:0f:95:b0:e4:d2:c4:a7:39:1f:72: 14:13:ed:ff:5d:4c:fb:e2:51:cb:4d:55:34:ea:76:b9:34:0c: 0d:50:15:8d:66:63:2a:85:bf:90:44:4c:0d:41:1b:fd:c4:ab: 01:9c:22:31:65:50:84:8e:c0:4f:21:7e:43:76:c1:6c:ad:68: 85:fe:92:15:05:3e:af:cc:5a:ec:db:5f:be:c3:86:a4:3c:d3: 7f:ca:cc:2f:fa:79:1b:ad:ff:32:67:fd:f8:84:ac:44:89:01: da:d1:d5:c2:9d:39:6b:fd:e6:f4:cc:d8:d8:c6:3b:ce:45:ec: ea:b6:42:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCXACF5qIOKcRCEnsfEQ/AbslIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNTA2MjgxODU1NDJaFw0yNTA3MDEyMzE3NDJaMDMxMTAvBgNV BAMTKEVDNzAzRUY3Qjk5NjY4QUY0MjUwMDkwRUQ0RDc4MTc5RjAxOTREMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AvFN/tccW/na2Oi0swxaw10Q cc4PUTcKoz/siVEjK3k4D9HDmYlqucDGN+dv67Eqy5CN1cvxu3vkJ7SYQQ6ERd6q 0CMSCP12HD5UDJ16dH11APXo/maZskwT08ZCETF38pMTaLmalOBq/L/+ZgR9UpM0 QJYd89Kv8kG+qabjkCUsUg28MoApFyyinG6H9CG8xBB9rL4D+B6a02uMmiFu+vRb CfPo250kOk1Fi242j5oAaYwZCGyUogaKlrf/o6IUz+LtvhcUje8k/Fkf7hV/sd7k MlpKy85Yi3mpB759k/U1ApvltA7eLCHr3C6hr0ZqqzR5xKxoKvBAlOppvGYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7HA+97mWaK9CUAkO1NeBefAZTRwwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMP7B9KHwYBPiVkGbGP4hXqEldolsf5CFstm bj6qUATY74bmM9gLbVW3CgBDz8avOwxcHdxzZR3xemzOhQqiQ8Rojw9pXuIhgKUA R2PWdaqsaxzsJyKLsvDarAmd/2oRlJ5BOf9Jlk4Kk3UNYPPjzVPvYmfpKntjU1t/ hConocrFmC4OcaWbD5Ww5NLEpzkfchQT7f9dTPviUctNVTTqdrk0DA1QFY1mYyqF v5BETA1BG/3EqwGcIjFlUISOwE8hfkN2wWytaIX+khUFPq/MWuzbX77DhqQ803/K zC/6eRut/zJn/fiErESJAdrR1cKdOWv95vTM2NjGO85F7Oq2Qpc= -----END CERTIFICATE-----Generated at Mon Jun 30 07:43:54 2025 by rpki-client