$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: xok6O9hGMjH/qjRulT1+8tQ4gx1MTHQRihOMvq5/SCI= Subject key identifier: 63:4F:53:A1:D7:52:F8:7E:0F:A0:07:BD:99:DA:06:2D:A2:94:B2:6C Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 36CCC7CD0A671BB4C4D70FF0ECF36AF3C2D6E61D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 0392 Signing time: Fri 27 Jun 2025 19:22:22 +0000 Manifest this update: Fri 27 Jun 2025 19:17:22 +0000 Manifest next update: Tue 01 Jul 2025 00:51:22 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: bRpe81DVcCrGG3tzjwEmyrETsYE7SqgeysVBA1kOu04=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:cc:c7:cd:0a:67:1b:b4:c4:d7:0f:f0:ec:f3:6a:f3:c2:d6:e6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Jun 27 19:17:22 2025 GMT Not After : Jul 1 00:51:22 2025 GMT Subject: CN=634F53A1D752F87E0FA007BD99DA062DA294B26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:3b:fa:95:6a:47:b4:0c:f9:c1:e1:6a:ec: 7a:96:12:c2:eb:40:31:b9:e7:c8:04:f7:4d:d3:44: f1:22:76:73:56:5f:8a:1d:c2:f3:fb:78:28:72:ae: 0e:e5:7a:7b:52:45:68:51:59:11:69:53:28:b5:ea: 36:a3:9b:c0:a8:44:19:c7:4f:f2:96:08:27:61:60: f1:11:fd:84:a4:a5:95:be:8a:3c:6e:97:5e:3f:0e: c2:d9:3a:ed:f3:6d:04:02:59:03:ff:8a:24:ea:c9: cd:7d:95:78:a2:0c:41:b5:e8:a0:26:f6:a2:c6:99: dc:9e:ce:a1:58:6b:c7:e5:19:5e:0f:11:c8:be:86: 25:b3:67:a0:a9:9c:fd:6b:ca:3c:ad:72:4a:dd:41: 1d:39:bd:37:fb:5c:9e:56:71:3c:9d:6d:bf:00:31: 5d:c7:34:60:73:d7:63:07:3f:c3:96:ed:7e:84:6e: 4a:4c:56:45:8e:53:09:a3:df:5c:93:3a:82:09:d6: a3:c9:da:ef:75:8e:e4:ff:5d:4c:eb:47:55:36:96: 85:df:07:4c:c5:e3:6d:53:e3:68:d3:4e:61:b6:27: e7:68:c2:24:a0:78:28:7e:68:fa:de:98:88:c5:96: 46:08:9b:4c:df:0d:9e:85:50:cd:53:9e:80:a6:eb: 63:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4F:53:A1:D7:52:F8:7E:0F:A0:07:BD:99:DA:06:2D:A2:94:B2:6C X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:71:4d:2a:99:f8:d5:ae:f3:75:7d:3a:22:d1:43:97:5d:75: 6a:88:b4:09:1c:81:0f:8c:b1:66:ed:09:28:aa:67:6b:6a:21: ba:9a:b0:17:6f:03:6f:42:92:38:2f:6d:4d:6a:74:02:39:b3: 3b:3c:8b:19:72:fd:74:e1:cf:e7:da:76:c9:07:24:46:00:c2: fa:40:6a:d4:88:7b:5c:7b:63:80:55:81:82:e2:ae:7e:8d:06: a8:85:1a:fd:b3:96:1a:52:cc:9a:4a:a4:5b:85:22:de:e3:d0: fe:7f:69:27:ac:51:e0:cd:6b:6a:40:db:6b:e5:f3:f6:b4:db: c3:8b:97:5a:7d:9b:09:d5:e3:80:85:ed:12:63:95:94:51:7a: 65:fb:01:d2:0b:76:e3:ea:e7:c8:7f:c9:f5:2e:c3:2b:82:de: b0:40:52:10:d1:14:0e:32:76:22:49:70:3b:fb:d6:ed:7f:cf: b9:60:cb:39:d8:cd:ab:cc:de:c9:88:d1:fc:6f:4a:ac:f7:9b: 65:5b:41:ac:c0:b0:c3:53:02:37:bd:90:43:fb:9c:d1:c9:ff: c4:58:a5:69:a9:bb:bb:5a:d9:33:60:42:ef:45:ac:6d:23:9b: 62:dd:02:ee:5f:71:45:c7:87:84:41:1f:4d:7f:df:e2:73:4c: 71:ee:0d:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNszHzQpnG7TE1w/w7PNq88LW5h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNTA2MjcxOTE3MjJaFw0yNTA3MDEwMDUxMjJaMDMxMTAvBgNV BAMTKDYzNEY1M0ExRDc1MkY4N0UwRkEwMDdCRDk5REEwNjJEQTI5NEIyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GTv6lWpHtAz5weFq7HqWEsLr QDG558gE903TRPEidnNWX4odwvP7eChyrg7lentSRWhRWRFpUyi16jajm8CoRBnH T/KWCCdhYPER/YSkpZW+ijxul14/DsLZOu3zbQQCWQP/iiTqyc19lXiiDEG16KAm 9qLGmdyezqFYa8flGV4PEci+hiWzZ6CpnP1ryjytckrdQR05vTf7XJ5WcTydbb8A MV3HNGBz12MHP8OW7X6EbkpMVkWOUwmj31yTOoIJ1qPJ2u91juT/XUzrR1U2loXf B0zF421T42jTTmG2J+dowiSgeCh+aPremIjFlkYIm0zfDZ6FUM1TnoCm62NRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY09ToddS+H4PoAe9mdoGLaKUsmwwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINxTSqZ+NWu83V9OiLRQ5dddWqItAkcgQ+M sWbtCSiqZ2tqIbqasBdvA29CkjgvbU1qdAI5szs8ixly/XThz+fadskHJEYAwvpA atSIe1x7Y4BVgYLirn6NBqiFGv2zlhpSzJpKpFuFIt7j0P5/aSesUeDNa2pA22vl 8/a028OLl1p9mwnV44CF7RJjlZRRemX7AdILduPq58h/yfUuwyuC3rBAUhDRFA4y diJJcDv71u1/z7lgyznYzavM3smI0fxvSqz3m2VbQazAsMNTAje9kEP7nNHJ/8RY pWmpu7ta2TNgQu9FrG0jm2LdAu5fcUXHh4RBH01/3+JzTHHuDdg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:50:06 2025 by rpki-client