$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft File: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft (raw, json) Hash identifier: q77U7yxnKDgGHc/na4Dt0Q3R/UwYYguNYDZItGPBlf0= Subject key identifier: EE:59:32:65:55:15:69:63:36:E6:C0:F6:D4:87:C5:25:E4:E5:8D:6E Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Certificate serial: 7E0A6CB01D7E61B18959EE376853D0D048531BA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft Manifest number: 01BB Signing time: Sat 07 Jun 2025 18:40:54 +0000 Manifest this update: Sat 07 Jun 2025 18:35:54 +0000 Manifest next update: Tue 10 Jun 2025 20:50:54 +0000 Files and hashes: 1: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: Y9UwdeMAqthoV4BdpHdzHHfHrHSy2NpCx4uk4sbXYrk=) 2: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: CZ4K7GFD9Go5aD48WSkhSXI8wxpmYnTQCrXJMjgAzo4=) 3: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: wNXvnBOlqkuZ+mDM8d8H+wRf148WwJ/aSIjk47cajS4=) 4: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl (hash: VzFMUKxiczFracNGtDHFpydemUg6NIR43D4Djs6b6gY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 20:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0a:6c:b0:1d:7e:61:b1:89:59:ee:37:68:53:d0:d0:48:53:1b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Validity Not Before: Jun 7 18:35:54 2025 GMT Not After : Jun 10 20:50:54 2025 GMT Subject: CN=EE5932655515696336E6C0F6D487C525E4E58D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:46:34:3b:43:8e:7e:b7:5c:3f:81:29:04: 93:01:c3:bd:e4:40:1a:4f:4f:cd:f7:fd:0b:a6:33: b8:47:e0:b8:b2:03:21:ca:ad:fc:13:1a:60:29:58: 65:80:c8:32:44:f0:60:e6:87:a6:82:27:e0:8f:7d: 08:ae:e6:82:40:8f:d6:11:4e:f0:f9:1b:85:a8:04: cc:2f:68:87:44:f0:95:c7:81:53:52:56:3f:e6:52: 46:19:c0:4e:c9:3b:f6:11:4a:d9:b3:2a:ed:07:41: 65:94:4f:61:5a:1f:35:24:47:77:78:39:17:66:3b: 79:c6:a0:ce:4b:c1:1f:99:8a:a6:af:d2:6c:de:47: bb:9e:72:b2:bc:00:aa:ed:40:4e:89:e6:09:c5:2e: 86:66:7a:60:38:d8:39:81:90:51:11:5d:3d:b6:60: 75:c7:ac:d0:c0:c0:47:4c:6f:0b:2f:ad:6a:17:32: 3e:2f:be:b1:1d:38:75:33:64:59:f4:2f:39:e3:ec: 12:60:9a:a5:e5:85:85:c5:06:52:12:1c:d5:a1:59: 27:06:07:ad:91:10:49:7a:4d:bb:ae:ce:28:46:f3: 90:5c:35:1a:3e:61:d0:6a:47:53:6e:53:9c:9c:9c: d4:d5:82:96:61:5a:8a:ef:6c:1c:8e:51:2b:9c:4a: 9a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:59:32:65:55:15:69:63:36:E6:C0:F6:D4:87:C5:25:E4:E5:8D:6E X509v3 Authority Key Identifier: keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3c:bb:9e:a0:f2:0f:d0:98:ba:a3:26:01:d5:4f:0d:07:18: be:fb:b3:78:54:ca:bb:44:2b:fa:d0:99:1d:ec:e7:ba:8f:d0: c8:32:dc:94:97:29:1b:7d:af:05:a6:05:d0:a7:e4:f5:b5:1c: d9:17:fe:3d:a4:fa:94:76:82:aa:ee:4d:cc:3b:d5:9c:94:d5: 90:6e:3c:b7:36:1e:41:36:45:d9:26:43:6e:0c:bc:be:61:bf: 1e:45:fc:b0:97:fa:e2:99:db:a2:ae:0e:ec:67:54:fe:2d:8a: e0:0c:d9:d5:73:f0:cd:62:d7:93:db:b6:f1:a2:63:5a:92:3d: 45:10:86:67:e2:eb:e4:ad:a2:9d:89:c5:ca:67:45:e7:90:7a: b9:fc:8c:df:39:5b:d7:fc:6e:ae:f5:d9:04:3b:b1:e3:d4:c7: 90:7c:44:3f:7f:78:67:57:7a:ae:e5:88:6f:e1:41:ba:24:27: be:66:36:38:5b:45:b1:e3:a1:de:35:8a:0b:af:a9:8d:a2:3f: be:d9:a9:1f:54:bf:74:02:32:58:49:13:86:80:70:5f:51:fa: df:aa:af:52:69:ef:e5:06:42:0b:7c:0f:cf:b3:ae:2e:de:18: b5:60:70:f0:fb:40:36:97:e3:38:bf:b4:9a:9e:26:54:c9:60: 74:8a:ef:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfgpssB1+YbGJWe43aFPQ0EhTG6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4 NUMzNUU0RjAeFw0yNTA2MDcxODM1NTRaFw0yNTA2MTAyMDUwNTRaMDMxMTAvBgNV BAMTKEVFNTkzMjY1NTUxNTY5NjMzNkU2QzBGNkQ0ODdDNTI1RTRFNThENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDkY0O0OOfrdcP4EpBJMBw73k QBpPT833/QumM7hH4LiyAyHKrfwTGmApWGWAyDJE8GDmh6aCJ+CPfQiu5oJAj9YR TvD5G4WoBMwvaIdE8JXHgVNSVj/mUkYZwE7JO/YRStmzKu0HQWWUT2FaHzUkR3d4 ORdmO3nGoM5LwR+Ziqav0mzeR7uecrK8AKrtQE6J5gnFLoZmemA42DmBkFERXT22 YHXHrNDAwEdMbwsvrWoXMj4vvrEdOHUzZFn0Lznj7BJgmqXlhYXFBlISHNWhWScG B62REEl6TbuuzihG85BcNRo+YdBqR1NuU5ycnNTVgpZhWorvbByOUSucSppFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7lkyZVUVaWM25sD21IfFJeTljW4wHwYDVR0j BBgwFoAUPXifr19+vmk4xMcj3NLu14XDXk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDk3MDAzMi0wOGVhLTQ4OTAtYmRiYS02MzA5YTQ5NzkxN2QvMC8zRDc4OUZBRjVG N0VCRTY5MzhDNEM3MjNEQ0QyRUVENzg1QzM1RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4NUMz NUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5NzAwMzItMDhlYS00ODkwLWJk YmEtNjMwOWE0OTc5MTdkLzAvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVF RDc4NUMzNUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHs8u56g8g/QmLqjJgHVTw0HGL77s3hUyrtE K/rQmR3s57qP0Mgy3JSXKRt9rwWmBdCn5PW1HNkX/j2k+pR2gqruTcw71ZyU1ZBu PLc2HkE2RdkmQ24MvL5hvx5F/LCX+uKZ26KuDuxnVP4tiuAM2dVz8M1i15PbtvGi Y1qSPUUQhmfi6+Stop2JxcpnReeQern8jN85W9f8bq712QQ7sePUx5B8RD9/eGdX eq7liG/hQbokJ75mNjhbRbHjod41iguvqY2iP77ZqR9Uv3QCMlhJE4aAcF9R+t+q r1Jp7+UGQgt8D8+zri7eGLVgcPD7QDaX4zi/tJqeJlTJYHSK78A= -----END CERTIFICATE-----Generated at Sun Jun 8 04:10:18 2025 by rpki-client