$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: uSYazpJ2MlteCy3Bgg0w4MF7kfPUfDTI9ht1jVBbjcQ= Subject key identifier: C0:A5:4E:BB:A4:6C:DF:BB:5E:EC:0D:00:40:7B:E7:83:07:45:C9:77 Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 32C7F8C25A7510A1BA3CEE82DCC00938E6F19FB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 0261 Signing time: Sun 20 Jul 2025 05:41:51 +0000 Manifest this update: Sun 20 Jul 2025 05:36:51 +0000 Manifest next update: Wed 23 Jul 2025 09:11:51 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: biBc3b6GGx2dUj7YnQWOhcGsodIKTbyhZn9FTYFEG1E=) 2: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: brma44uCIXmBFOv4otT+db0R+5ksOexkZgMpXtoFxuQ=) 3: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c7:f8:c2:5a:75:10:a1:ba:3c:ee:82:dc:c0:09:38:e6:f1:9f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Jul 20 05:36:51 2025 GMT Not After : Jul 23 09:11:51 2025 GMT Subject: CN=C0A54EBBA46CDFBB5EEC0D00407BE7830745C977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:53:fe:38:d1:11:90:23:09:9d:ea:78:5e: a3:7f:73:6c:7b:46:8e:d1:3c:92:50:85:44:2a:24: 27:b2:4c:d8:3d:bd:e0:ef:95:e8:05:ac:9d:d3:86: 70:64:6d:ff:62:cf:1c:e8:91:69:52:52:ce:04:e9: 04:bc:a2:b8:f1:58:4a:e4:b0:1d:d2:41:d4:28:bd: f6:70:ab:13:d9:e7:3d:ae:cb:5e:f7:58:f8:b1:9e: fc:56:64:2f:40:a5:bf:42:54:cb:94:4a:21:ba:36: 65:c4:36:54:63:f2:3c:a0:08:e3:a4:17:9b:50:f8: 8a:4a:78:83:8a:99:41:22:16:df:e9:5c:92:fb:0e: 9f:6f:80:7f:13:63:24:c5:4a:9b:47:c6:76:07:64: e8:a5:26:79:65:1e:4a:b3:fd:4e:3b:15:fe:09:bf: 39:09:90:68:22:45:f0:99:99:fa:48:4d:c3:70:fa: b9:83:12:78:a2:b1:60:3a:c5:68:de:30:fd:fd:39: 53:33:39:fb:62:68:1e:9b:02:41:15:b2:c7:69:2d: ea:2a:64:f6:4c:fe:33:9e:2e:b2:9c:0c:ff:c3:29: da:14:aa:2f:07:0a:db:69:cd:42:3f:01:05:0c:06: ae:00:31:32:ea:29:78:76:c2:78:8f:8a:e7:72:ca: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A5:4E:BB:A4:6C:DF:BB:5E:EC:0D:00:40:7B:E7:83:07:45:C9:77 X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:df:ed:75:cf:e5:32:f6:bf:14:a5:62:46:c7:e6:c1:67:b0: 84:6e:d0:1b:f1:4b:15:32:54:8c:9f:ae:2c:47:01:42:1b:88: 96:3e:99:5a:26:40:43:6c:57:76:4f:7e:12:8e:25:c2:1a:bf: fc:00:9e:a8:b6:00:f5:4d:47:1e:18:b4:24:6b:cd:13:cf:ef: d1:35:4c:15:12:e0:c8:cb:3d:fd:bc:75:aa:79:cd:9a:35:e9: 56:12:33:a5:10:f9:bf:b2:6c:7b:ed:e2:90:74:5a:42:36:57: 13:6d:a4:02:fc:6f:ef:52:5f:75:04:02:fd:52:5b:0f:0b:59: 63:39:7c:b8:20:d3:f3:c2:47:50:ea:46:a9:b2:94:b0:24:27: 48:ad:f8:ca:12:46:89:9f:f4:df:0d:23:6c:b2:79:d1:5b:5d: 99:1b:d8:57:db:ab:72:7e:5c:64:62:25:02:f4:38:ae:5c:71: 1f:a0:27:ae:a7:0d:52:6a:d5:a5:3e:6f:27:99:b2:40:50:19: 33:bc:43:2a:2a:62:06:c7:bb:4b:b6:38:43:71:f5:24:63:36: b7:aa:aa:0c:eb:0a:60:8d:20:d4:a8:8a:a8:72:bc:5f:26:74: 03:27:35:03:cb:fb:f9:9f:1b:c1:16:43:0b:18:c5:6a:29:41: 69:40:76:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsf4wlp1EKG6PO6C3MAJOObxn7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTA3MjAwNTM2NTFaFw0yNTA3MjMwOTExNTFaMDMxMTAvBgNV BAMTKEMwQTU0RUJCQTQ2Q0RGQkI1RUVDMEQwMDQwN0JFNzgzMDc0NUM5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnFP+ONERkCMJnep4XqN/c2x7 Ro7RPJJQhUQqJCeyTNg9veDvlegFrJ3ThnBkbf9izxzokWlSUs4E6QS8orjxWErk sB3SQdQovfZwqxPZ5z2uy173WPixnvxWZC9Apb9CVMuUSiG6NmXENlRj8jygCOOk F5tQ+IpKeIOKmUEiFt/pXJL7Dp9vgH8TYyTFSptHxnYHZOilJnllHkqz/U47Ff4J vzkJkGgiRfCZmfpITcNw+rmDEniisWA6xWjeMP39OVMzOftiaB6bAkEVssdpLeoq ZPZM/jOeLrKcDP/DKdoUqi8HCttpzUI/AQUMBq4AMTLqKXh2wniPiudyylCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwKVOu6Rs37te7A0AQHvngwdFyXcwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3f7XXP5TL2vxSlYkbH5sFnsIRu0BvxSxUy VIyfrixHAUIbiJY+mVomQENsV3ZPfhKOJcIav/wAnqi2APVNRx4YtCRrzRPP79E1 TBUS4MjLPf28dap5zZo16VYSM6UQ+b+ybHvt4pB0WkI2VxNtpAL8b+9SX3UEAv1S Ww8LWWM5fLgg0/PCR1DqRqmylLAkJ0it+MoSRomf9N8NI2yyedFbXZkb2Ffbq3J+ XGRiJQL0OK5ccR+gJ66nDVJq1aU+byeZskBQGTO8QyoqYgbHu0u2OENx9SRjNreq qgzrCmCNINSoiqhyvF8mdAMnNQPL+/mfG8EWQwsYxWopQWlAdhc= -----END CERTIFICATE-----Generated at Mon Jul 21 23:58:22 2025 by rpki-client