$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: 9+zrGJk7SbiUkFrU57ktM2hac+bh28xKMqTKb/kUTg8= Subject key identifier: D4:9B:B1:09:B1:8E:A6:7F:9E:FD:CB:B3:DB:A8:AB:FA:70:CA:24:BE Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 62022E7652B78679CB25193502702CC46A2AEA47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 01F3 Signing time: Sun 29 Jun 2025 01:02:04 +0000 Manifest this update: Sun 29 Jun 2025 00:57:04 +0000 Manifest next update: Wed 02 Jul 2025 12:49:04 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) 2: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: mYVSNCOL5DrQnCDCM6Uiy4WA2wvoraQsbJ4L8x7c+YM=) 3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:02:2e:76:52:b7:86:79:cb:25:19:35:02:70:2c:c4:6a:2a:ea:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Jun 29 00:57:04 2025 GMT Not After : Jul 2 12:49:04 2025 GMT Subject: CN=D49BB109B18EA67F9EFDCBB3DBA8ABFA70CA24BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f7:e5:c7:14:05:25:ab:b1:6e:35:5c:0f:70: 5f:30:b8:a3:86:ec:8c:08:cd:94:8d:2a:d7:da:d1: 58:33:9d:68:1b:9c:b1:bc:ac:be:a6:a9:14:15:75: 19:43:29:1e:28:4c:b1:2c:f2:b5:11:27:ad:d5:9b: 31:83:37:a3:03:1b:ae:67:26:c7:b3:a1:b3:0e:08: ee:19:a0:7a:a9:f0:98:27:e4:6b:b5:05:41:71:0d: 64:e6:aa:ef:73:7d:0e:7b:fe:49:b9:c5:c1:76:73: e6:a1:c4:e6:80:78:85:ab:5b:84:eb:e4:4e:6c:d5: 6d:f9:d3:d7:23:6a:b4:74:29:d1:92:fb:e6:fa:04: ab:95:eb:2e:40:64:d7:6a:9f:31:35:b0:df:65:0e: 4c:dd:a6:6e:45:e5:c0:eb:21:64:ec:6d:14:47:cb: 56:a8:b7:ef:c9:aa:96:23:c5:76:42:2a:26:a8:dd: 1b:13:d0:5c:c1:6d:08:f5:4f:cb:65:c4:63:92:8f: b9:9b:22:3f:34:16:fb:5c:e8:fd:20:0c:f6:59:a7: c8:90:36:f8:72:19:c4:f7:6d:3b:4b:07:11:40:50: 3f:d2:e1:82:5c:f1:81:48:28:39:9e:00:35:84:b1: ea:d6:12:7d:94:55:c5:64:ae:47:b7:e8:b0:f1:37: 42:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9B:B1:09:B1:8E:A6:7F:9E:FD:CB:B3:DB:A8:AB:FA:70:CA:24:BE X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f5:5f:c4:41:a3:51:65:06:7c:11:d9:47:58:de:33:77:84: 73:06:6b:2b:a1:0c:46:59:67:10:7d:b3:5e:65:77:b3:e8:99: f2:63:45:74:a1:73:68:64:bb:cd:e0:f2:66:9b:d6:09:f0:e4: c4:03:46:df:29:3e:3b:b7:e2:f7:b1:f8:30:fb:a4:8d:70:b7: 1e:c0:d0:4c:ac:25:11:08:3d:d7:f1:97:5b:b2:21:14:e3:81: 40:5f:51:65:09:1d:1f:e6:05:01:24:17:a7:f0:90:c9:18:66: 2d:da:6e:37:4f:8c:45:d2:63:46:5f:4c:2f:5b:12:b2:dc:28: 7e:56:4c:01:00:ca:e9:d2:b6:72:74:07:06:7b:19:51:ea:14: 13:3b:cd:ce:90:b0:a9:12:78:3a:6f:53:eb:88:9b:dd:91:5c: 06:c7:19:11:15:95:b4:d4:f7:b7:c6:a0:92:4a:7d:59:5a:cc: f0:20:12:8a:44:e6:c6:3e:ce:b8:2a:94:d6:38:23:ee:be:43: d9:bf:65:84:81:53:45:ed:62:76:4e:ee:65:5e:0d:a5:a8:a4: 51:af:51:c8:2b:7d:f3:3d:5b:db:80:5c:96:27:ac:88:bf:71: 07:3c:8f:e1:46:27:cb:30:b3:ee:25:00:9c:af:57:19:45:f0: 48:3c:64:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgIudlK3hnnLJRk1AnAsxGoq6kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTA2MjkwMDU3MDRaFw0yNTA3MDIxMjQ5MDRaMDMxMTAvBgNV BAMTKEQ0OUJCMTA5QjE4RUE2N0Y5RUZEQ0JCM0RCQThBQkZBNzBDQTI0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9+XHFAUlq7FuNVwPcF8wuKOG 7IwIzZSNKtfa0VgznWgbnLG8rL6mqRQVdRlDKR4oTLEs8rURJ63VmzGDN6MDG65n JsezobMOCO4ZoHqp8Jgn5Gu1BUFxDWTmqu9zfQ57/km5xcF2c+ahxOaAeIWrW4Tr 5E5s1W3509cjarR0KdGS++b6BKuV6y5AZNdqnzE1sN9lDkzdpm5F5cDrIWTsbRRH y1aot+/JqpYjxXZCKiao3RsT0FzBbQj1T8tlxGOSj7mbIj80Fvtc6P0gDPZZp8iQ NvhyGcT3bTtLBxFAUD/S4YJc8YFIKDmeADWEserWEn2UVcVkrke36LDxN0J3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1JuxCbGOpn+e/cuz26ir+nDKJL4wHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/1X8RBo1FlBnwR2UdY3jN3hHMGayuhDEZZ ZxB9s15ld7PomfJjRXShc2hku83g8mab1gnw5MQDRt8pPju34vex+DD7pI1wtx7A 0EysJREIPdfxl1uyIRTjgUBfUWUJHR/mBQEkF6fwkMkYZi3abjdPjEXSY0ZfTC9b ErLcKH5WTAEAyunStnJ0BwZ7GVHqFBM7zc6QsKkSeDpvU+uIm92RXAbHGREVlbTU 97fGoJJKfVlazPAgEopE5sY+zrgqlNY4I+6+Q9m/ZYSBU0XtYnZO7mVeDaWopFGv UcgrffM9W9uAXJYnrIi/cQc8j+FGJ8sws+4lAJyvVxlF8Eg8ZPY= -----END CERTIFICATE-----Generated at Mon Jun 30 00:39:07 2025 by rpki-client