$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json) Hash identifier: du0XRU6fP/x6LwwXlbEitIple6Azyu8rXhClZ7k9MQc= Subject key identifier: C8:CF:8A:39:40:D5:BD:A7:29:39:6D:A0:45:D6:50:7C:B0:18:01:4B Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Certificate serial: 6A17357FB970FB0403CED4247A56B1450A22E6B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft Manifest number: 02B8 Signing time: Sun 04 May 2025 08:12:03 +0000 Manifest this update: Sun 04 May 2025 08:07:03 +0000 Manifest next update: Wed 07 May 2025 15:06:03 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: P8Omv4YMdnsvaEIej+qb+BBba9eBf1ssCLAulJkcHdw=) 2: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: nuZfO4cVs4OqcQwinHEdWN7FfXhxMtYHP4r2A3rswI0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 15:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:17:35:7f:b9:70:fb:04:03:ce:d4:24:7a:56:b1:45:0a:22:e6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614 Validity Not Before: May 4 08:07:03 2025 GMT Not After : May 7 15:06:03 2025 GMT Subject: CN=C8CF8A3940D5BDA729396DA045D6507CB018014B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:08:78:d9:68:29:ff:85:9a:9a:eb:62:40:c9: cf:98:7b:95:14:b2:24:7a:f6:aa:72:9d:32:65:24: a8:33:97:6e:c0:7d:16:9a:21:3c:57:79:98:ca:9c: ab:a0:4b:cc:41:11:d2:b1:ab:65:12:cc:bc:62:cb: 89:56:ab:4c:10:ff:04:28:cf:0b:7c:57:65:2c:60: 57:a5:e7:47:9d:0f:de:9a:b3:18:bb:81:bf:ec:1b: 28:3f:b4:2f:24:e2:4b:cf:35:71:18:c9:ff:a9:a3: 39:f9:fc:cc:dd:31:e5:7d:7a:10:55:a8:9d:e7:b0: cf:16:6e:8a:63:3d:f0:9a:47:14:98:ae:58:3d:66: 53:8d:c9:36:75:b0:82:61:a6:64:e9:8a:7e:38:b7: 9a:bc:e0:66:e7:22:81:57:30:28:b6:b2:ef:cd:15: e8:10:54:79:fb:f7:9e:a6:74:84:4a:60:81:cc:e4: dc:08:11:67:6e:17:24:9a:26:ca:33:a7:f8:64:7e: b3:ef:96:e3:5d:b7:5f:43:36:17:b4:a0:a5:bd:36: 16:8b:22:f3:27:a4:27:34:2d:78:2a:b8:b4:5f:7f: 66:52:29:b2:3d:d4:ae:2d:70:90:55:f3:92:33:d5: 8b:d9:5d:63:8c:3f:ce:33:cf:71:3b:d7:9a:05:d0: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CF:8A:39:40:D5:BD:A7:29:39:6D:A0:45:D6:50:7C:B0:18:01:4B X509v3 Authority Key Identifier: keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8e:b0:0e:ad:fe:b5:e0:25:2f:82:67:e1:cb:5d:b5:ae:d7: 51:a2:de:c4:b9:ed:62:2b:25:a4:d2:57:91:dd:7d:24:1d:22: e8:3d:2e:a5:25:f9:2a:94:72:b2:b3:67:a4:b0:f2:2e:d1:af: 35:86:a1:27:67:0a:8f:00:cb:74:f1:9c:7b:23:af:c1:d3:95: 4c:63:0c:3e:5f:ab:61:bc:e5:64:04:39:01:69:3a:15:4e:9e: 01:9a:3a:ff:aa:08:2b:81:d6:cc:5c:c3:f6:bd:e1:b1:a5:0c: af:df:d9:13:83:12:63:72:0a:85:28:e3:58:4e:f9:81:69:5d: 56:e0:21:7a:8e:74:20:03:ae:f2:56:cb:9c:8a:cb:9f:2a:4a: 23:35:81:74:45:7d:0c:bc:a2:9a:33:9e:1b:0a:d4:3a:9c:86: 1d:d5:2f:24:36:93:42:04:40:91:50:b6:bc:bd:10:66:b6:35: c6:21:94:12:be:0e:1d:41:0f:0d:35:ec:00:a2:f1:d7:f3:5b: cf:3b:04:16:94:79:8c:c0:f3:7d:d8:c6:73:55:85:97:78:e9: f6:93:fc:ab:37:2b:8b:21:3a:ba:1b:1a:f3:55:4e:4e:85:e3: 16:99:34:d5:74:07:4a:b8:f9:59:ed:18:a9:8e:53:c8:7f:b5: 3f:91:81:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahc1f7lw+wQDztQkelaxRQoi5rMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4 NkNFRDYxNDAeFw0yNTA1MDQwODA3MDNaFw0yNTA1MDcxNTA2MDNaMDMxMTAvBgNV BAMTKEM4Q0Y4QTM5NDBENUJEQTcyOTM5NkRBMDQ1RDY1MDdDQjAxODAxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCHjZaCn/hZqa62JAyc+Ye5UU siR69qpynTJlJKgzl27AfRaaITxXeZjKnKugS8xBEdKxq2USzLxiy4lWq0wQ/wQo zwt8V2UsYFel50edD96asxi7gb/sGyg/tC8k4kvPNXEYyf+pozn5/MzdMeV9ehBV qJ3nsM8WbopjPfCaRxSYrlg9ZlONyTZ1sIJhpmTpin44t5q84GbnIoFXMCi2su/N FegQVHn7956mdIRKYIHM5NwIEWduFySaJsozp/hkfrPvluNdt19DNhe0oKW9NhaL IvMnpCc0LXgquLRff2ZSKbI91K4tcJBV85Iz1YvZXWOMP84zz3E715oF0FRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyM+KOUDVvacpOW2gRdZQfLAYAUswHwYDVR0j BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF RDYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJD QUQ4NkNFRDYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyOsA6t/rXgJS+CZ+HLXbWu11Gi3sS57WIr JaTSV5HdfSQdIug9LqUl+SqUcrKzZ6Sw8i7RrzWGoSdnCo8Ay3TxnHsjr8HTlUxj DD5fq2G85WQEOQFpOhVOngGaOv+qCCuB1sxcw/a94bGlDK/f2RODEmNyCoUo41hO +YFpXVbgIXqOdCADrvJWy5yKy58qSiM1gXRFfQy8opoznhsK1Dqchh3VLyQ2k0IE QJFQtry9EGa2NcYhlBK+Dh1BDw017ACi8dfzW887BBaUeYzA833YxnNVhZd46faT /Ks3K4shOrobGvNVTk6F4xaZNNV0B0q4+VntGKmOU8h/tT+Rgb0= -----END CERTIFICATE-----Generated at Tue May 6 06:00:37 2025 by rpki-client