$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: x8SJ0xLtX0hm2VN3c0g3U3/Fy1MXOOcVnGvDajqNz0A= Subject key identifier: C8:B0:3E:39:DA:95:D6:56:81:4E:28:81:66:B8:26:78:43:FE:F6:28 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 0F2E4D67EEE768A2B9C099AE30CEFD53F7044D56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 037A Signing time: Sun 04 May 2025 19:42:09 +0000 Manifest this update: Sun 04 May 2025 19:37:09 +0000 Manifest next update: Thu 08 May 2025 05:59:09 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: j9t63On80goRN/6NNaA/Loy05M11IMnS7XK9DJH/ukM=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 05:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2e:4d:67:ee:e7:68:a2:b9:c0:99:ae:30:ce:fd:53:f7:04:4d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: May 4 19:37:09 2025 GMT Not After : May 8 05:59:09 2025 GMT Subject: CN=C8B03E39DA95D656814E288166B8267843FEF628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4e:e7:77:d2:7e:09:32:95:5f:82:c4:f0:bd: 48:b9:44:f6:92:4a:c8:10:ab:19:48:19:ce:bf:64: 65:d5:9c:3d:24:d0:07:78:b7:eb:55:96:25:1f:cf: e3:9d:11:9e:f1:e3:8b:87:52:34:8f:93:30:06:5f: f3:e0:ca:9e:41:c8:66:5c:02:d6:39:78:3d:5e:97: df:2e:c7:e0:ae:13:de:57:fa:ed:0b:a9:29:05:ac: 3b:3b:e2:e5:5f:ff:d2:4b:22:ce:c1:e0:1b:5e:65: 37:f9:87:3f:f3:19:99:c0:ea:13:c1:d4:67:3d:de: 2a:1e:0a:3d:88:ef:f7:50:05:e4:9e:a9:d9:7f:59: 54:84:39:b1:ce:f3:98:0e:c8:f4:36:c3:b3:94:9a: e1:8f:3c:ac:59:2f:1e:2d:f2:36:62:b1:47:e4:d8: a9:0e:7b:ec:c5:43:e5:cc:72:1a:cf:55:64:b0:fd: 30:3a:f6:b3:bc:d2:d7:ff:99:d1:12:25:4f:9d:29: e5:e2:33:80:0d:93:04:d2:71:a2:7c:13:21:69:53: ed:95:4e:3b:48:f3:29:2f:8a:fa:58:17:0a:a4:a6: 1b:8d:eb:95:d5:f6:09:a9:c6:a1:20:22:2a:b7:06: ce:6e:7c:8f:89:6d:7a:34:b1:52:44:e7:94:ef:30: 50:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:3E:39:DA:95:D6:56:81:4E:28:81:66:B8:26:78:43:FE:F6:28 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:88:c8:86:a9:63:ad:60:7a:ec:d1:7f:dd:17:61:e0:b2:4d: 28:48:a9:78:e6:d2:f5:f3:ba:35:8b:fc:35:5b:d7:59:53:9a: eb:3a:85:db:a7:e0:e9:c0:be:29:0f:7e:c5:7d:0b:94:8d:53: 9b:b8:92:89:c2:43:c5:d2:00:97:46:be:55:8a:f6:73:10:63: b6:b5:15:ac:1b:55:6a:5d:5a:17:a3:62:f0:b3:23:27:95:74: f9:4a:68:87:46:ea:b3:88:07:56:9d:72:8b:79:e2:6d:1d:ca: 7d:42:2c:cf:2a:6a:a0:61:28:ef:ac:df:ef:e3:8a:75:1e:68: 67:57:d3:3a:f5:30:bb:c4:0f:e0:bf:b7:85:c5:b4:44:f7:22: 29:1b:8c:32:83:7f:e9:e7:a1:d5:2c:2b:36:da:09:80:b1:f3: 04:4b:85:6b:2f:a5:4c:4b:8e:ca:1f:71:4b:3a:9a:41:6b:49: b3:bb:f6:fd:e1:5a:0b:25:7b:6b:91:60:48:e9:8d:01:d0:8a: 4b:f7:3d:f4:15:ca:92:92:33:d8:1b:af:d4:30:bd:a3:62:52: 4e:f3:ab:87:06:3e:46:be:c8:17:6b:b3:05:21:a5:da:7e:b8: 76:a7:a5:97:a6:11:5c:97:51:6f:68:87:b9:81:8b:b9:b5:37: e9:32:c1:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDy5NZ+7naKK5wJmuMM79U/cETVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNTA1MDQxOTM3MDlaFw0yNTA1MDgwNTU5MDlaMDMxMTAvBgNV BAMTKEM4QjAzRTM5REE5NUQ2NTY4MTRFMjg4MTY2QjgyNjc4NDNGRUY2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlTud30n4JMpVfgsTwvUi5RPaS SsgQqxlIGc6/ZGXVnD0k0Ad4t+tVliUfz+OdEZ7x44uHUjSPkzAGX/Pgyp5ByGZc AtY5eD1el98ux+CuE95X+u0LqSkFrDs74uVf/9JLIs7B4BteZTf5hz/zGZnA6hPB 1Gc93ioeCj2I7/dQBeSeqdl/WVSEObHO85gOyPQ2w7OUmuGPPKxZLx4t8jZisUfk 2KkOe+zFQ+XMchrPVWSw/TA69rO80tf/mdESJU+dKeXiM4ANkwTScaJ8EyFpU+2V TjtI8ykvivpYFwqkphuN65XV9gmpxqEgIiq3Bs5ufI+JbXo0sVJE55TvMFAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyLA+OdqV1laBTiiBZrgmeEP+9igwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6IyIapY61geuzRf90XYeCyTShIqXjm0vXz ujWL/DVb11lTmus6hdun4OnAvikPfsV9C5SNU5u4konCQ8XSAJdGvlWK9nMQY7a1 FawbVWpdWhejYvCzIyeVdPlKaIdG6rOIB1adcot54m0dyn1CLM8qaqBhKO+s3+/j inUeaGdX0zr1MLvED+C/t4XFtET3IikbjDKDf+nnodUsKzbaCYCx8wRLhWsvpUxL jsofcUs6mkFrSbO79v3hWgsle2uRYEjpjQHQikv3PfQVypKSM9gbr9QwvaNiUk7z q4cGPka+yBdrswUhpdp+uHanpZemEVyXUW9oh7mBi7m1N+kywRI= -----END CERTIFICATE-----Generated at Wed May 7 10:14:21 2025 by rpki-client