$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: 8hcnfxuLSuXrbDaCwrjGhLSycuX+HBhlllAsmnzkW5g= Subject key identifier: 0A:2B:3A:FF:C6:78:DF:F2:92:3D:63:58:48:B8:35:70:91:7A:F8:F4 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 65B1921C71409AFE461C4CFE6717D71B29009217 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: E1 Signing time: Mon 21 Jul 2025 06:51:59 +0000 Manifest this update: Mon 21 Jul 2025 06:46:59 +0000 Manifest next update: Thu 24 Jul 2025 09:30:59 +0000 Files and hashes: 1: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: Q31WVg0nt9Akn7sHQ0ovSP+rHovoJ3AXQpCRAfyJpn4=) 2: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: MFE4fQ4K/i4e5QBxCrWM+US+xBDx9AI0fQ8Ly4EfXSE=) 3: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Zks55AdYxfoprGZkiZN/TIj//KiubcvneSX7655/CJQ=) 4: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: xDimJNI1Twl7hCA1S5QHDj3z6dVO53eSr1zwPr1dzLg=) 5: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: EDTzr0RnERkDSs2/M4R/0RtE2R+ut3mngAzM50kbtVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b1:92:1c:71:40:9a:fe:46:1c:4c:fe:67:17:d7:1b:29:00:92:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Jul 21 06:46:59 2025 GMT Not After : Jul 24 09:30:59 2025 GMT Subject: CN=0A2B3AFFC678DFF2923D635848B83570917AF8F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:32:7c:6e:62:e4:1f:43:19:7f:d7:53:cd: 11:da:7f:e0:3a:27:6a:ff:bb:33:a0:8c:f7:42:3e: 24:33:e4:41:9b:11:1c:a3:1b:84:51:5b:dc:d8:93: b4:1f:2d:b5:9a:88:06:4c:19:93:95:49:8e:92:7b: de:ba:3b:a3:15:f2:9c:ec:6b:35:e9:6f:23:74:36: 37:c1:20:99:60:85:3a:40:e4:23:b0:c0:6a:60:81: bc:8a:d5:3c:55:32:db:c2:71:e3:77:99:6c:17:b7: ee:ca:a4:6d:89:00:f2:ad:42:b2:87:e1:5a:7d:e4: c8:f3:80:4c:41:55:c4:7d:76:83:33:42:28:d7:db: db:ce:6b:a4:70:64:6a:c0:2f:ac:5d:c0:a6:7d:33: 2c:e7:63:d4:12:e1:60:33:39:cf:f0:64:e5:3e:49: 3d:ca:55:c3:f3:77:42:df:b3:70:af:23:5d:fc:b1: b8:db:52:af:ea:18:75:c4:57:ba:fe:f2:ad:16:96: 0c:56:61:f5:77:a6:62:f6:77:d6:32:ce:dd:f2:59: fb:14:2e:72:86:5b:12:7f:e4:5d:3c:25:a3:1f:9d: 13:80:ab:ec:aa:fc:45:80:d3:24:3c:09:48:49:b7: 85:a4:bd:05:c8:41:f9:91:f5:35:9d:af:09:ed:44: ea:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2B:3A:FF:C6:78:DF:F2:92:3D:63:58:48:B8:35:70:91:7A:F8:F4 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:88:85:d1:25:de:c0:6c:e1:32:81:78:21:b3:2c:6e:e7:13: 80:65:6d:64:47:84:0f:54:e1:a9:44:c8:c8:9a:4b:28:ef:5d: 91:35:04:ad:b1:94:36:dd:fa:31:7e:4c:d6:b9:96:d6:d9:89: 27:8d:50:7a:bb:5b:54:06:51:3d:72:dc:7d:f3:61:50:a5:f4: b3:3b:ea:89:99:83:89:d0:7d:9b:c7:f3:78:82:20:87:0a:b9: 32:8f:ab:d2:c9:3d:a8:b5:8a:40:b9:e9:e5:af:02:92:83:74: 57:86:bc:12:8d:94:ce:ee:c7:69:36:e9:18:3e:95:9e:d7:ea: 78:6b:20:c8:73:8e:02:24:7a:fa:b0:43:62:d0:e1:0e:4d:d5: 5e:97:03:ea:03:5b:3e:c6:a7:52:e5:3c:79:02:24:29:37:4e: 9e:1f:d1:c0:00:e0:a2:df:db:0e:80:9c:81:14:f3:a7:d7:72: 4e:ee:4d:68:0a:f6:36:c1:43:8f:58:55:bc:74:ae:86:e5:5f: ad:54:10:9a:01:05:3b:53:fc:a5:12:64:3e:bb:ab:a8:7b:d4: 20:2b:bc:45:79:82:b8:2f:d2:10:0a:8a:65:95:9a:64:5b:ea: 69:42:0d:70:14:b6:9f:06:7f:61:fb:c4:66:e4:06:39:4d:a9: 13:e0:8c:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbGSHHFAmv5GHEz+ZxfXGykAkhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNTA3MjEwNjQ2NTlaFw0yNTA3MjQwOTMwNTlaMDMxMTAvBgNV BAMTKDBBMkIzQUZGQzY3OERGRjI5MjNENjM1ODQ4QjgzNTcwOTE3QUY4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vTJ8bmLkH0MZf9dTzRHaf+A6 J2r/uzOgjPdCPiQz5EGbERyjG4RRW9zYk7QfLbWaiAZMGZOVSY6Se966O6MV8pzs azXpbyN0NjfBIJlghTpA5COwwGpggbyK1TxVMtvCceN3mWwXt+7KpG2JAPKtQrKH 4Vp95MjzgExBVcR9doMzQijX29vOa6RwZGrAL6xdwKZ9MyznY9QS4WAzOc/wZOU+ ST3KVcPzd0Lfs3CvI138sbjbUq/qGHXEV7r+8q0WlgxWYfV3pmL2d9Yyzt3yWfsU LnKGWxJ/5F08JaMfnROAq+yq/EWA0yQ8CUhJt4WkvQXIQfmR9TWdrwntROpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCis6/8Z43/KSPWNYSLg1cJF6+PQwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiIhdEl3sBs4TKBeCGzLG7nE4BlbWRHhA9U 4alEyMiaSyjvXZE1BK2xlDbd+jF+TNa5ltbZiSeNUHq7W1QGUT1y3H3zYVCl9LM7 6omZg4nQfZvH83iCIIcKuTKPq9LJPai1ikC56eWvApKDdFeGvBKNlM7ux2k26Rg+ lZ7X6nhrIMhzjgIkevqwQ2LQ4Q5N1V6XA+oDWz7Gp1LlPHkCJCk3Tp4f0cAA4KLf 2w6AnIEU86fXck7uTWgK9jbBQ49YVbx0roblX61UEJoBBTtT/KUSZD67q6h71CAr vEV5grgv0hAKimWVmmRb6mlCDXAUtp8Gf2H7xGbkBjlNqRPgjLg= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:31 2025 by rpki-client