$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft File: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft (raw, json) Hash identifier: ICH0G58ye1eLi4+ThddLjLwsiEVmWUR+SQYj1K4Cwxw= Subject key identifier: C5:0E:D2:72:E5:66:E7:C1:7D:83:5F:E3:CE:60:C2:C8:D8:B0:49:FC Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Certificate serial: 432F88C0F813687183B7AAA914273B4A43CD8752 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft Manifest number: 01A4 Signing time: Thu 17 Apr 2025 23:52:02 +0000 Manifest this update: Thu 17 Apr 2025 23:47:02 +0000 Manifest next update: Mon 21 Apr 2025 10:53:02 +0000 Files and hashes: 1: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: Y9UwdeMAqthoV4BdpHdzHHfHrHSy2NpCx4uk4sbXYrk=) 2: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: CZ4K7GFD9Go5aD48WSkhSXI8wxpmYnTQCrXJMjgAzo4=) 3: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl (hash: LTB9hg10Q9viZ6vhI/r2NRZeTCh3SKTBbUDtOAAz6HU=) 4: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: wNXvnBOlqkuZ+mDM8d8H+wRf148WwJ/aSIjk47cajS4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 10:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2f:88:c0:f8:13:68:71:83:b7:aa:a9:14:27:3b:4a:43:cd:87:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Validity Not Before: Apr 17 23:47:02 2025 GMT Not After : Apr 21 10:53:02 2025 GMT Subject: CN=C50ED272E566E7C17D835FE3CE60C2C8D8B049FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:47:f7:1e:a0:f6:0d:cc:57:f6:54:66:c5: 2d:20:d2:f0:0f:86:e1:c0:a6:7f:1d:ca:0c:82:62: 91:78:96:1a:1a:97:2c:91:9f:22:de:7a:46:0f:78: ce:64:a1:00:88:04:e7:16:10:d1:47:f2:b3:e8:37: 16:4c:54:0b:8c:d7:72:c0:ad:42:1a:2b:83:52:41: 34:f6:16:74:52:67:28:be:83:b2:9b:3b:dc:33:3e: 95:1e:27:9b:94:4a:e6:d4:26:d3:66:ca:5a:d5:2f: c0:73:99:5e:2a:cf:88:4a:45:80:10:d2:11:bc:ef: 91:43:16:0b:6b:8c:f6:ad:ca:b5:dd:0d:67:6e:a0: 2b:df:b6:d3:a0:ed:d9:8e:12:20:09:e0:06:74:4a: 4b:e1:24:1e:c1:1e:80:80:23:18:cc:43:20:6a:2f: f5:51:a0:39:c7:02:4a:a4:12:49:14:dc:9c:bd:af: ae:1e:df:f5:61:bf:0d:34:c8:03:8a:e0:57:5e:e7: 77:75:37:dd:ff:f0:8d:0d:37:62:cf:3a:22:c8:7f: 56:03:09:be:58:ec:3a:45:4d:84:f8:4c:8d:4e:63: ff:56:30:e8:45:ec:e9:2e:65:f2:50:db:f2:9c:6f: b3:9e:19:bd:cf:8c:72:81:50:fc:aa:11:dd:54:0c: ef:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0E:D2:72:E5:66:E7:C1:7D:83:5F:E3:CE:60:C2:C8:D8:B0:49:FC X509v3 Authority Key Identifier: keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:7d:a1:3e:fc:73:f2:e7:cc:1a:c0:25:9c:f9:9f:33:7d:0c: b1:d5:ef:7b:68:be:0f:31:13:82:4c:ed:e6:b9:54:5c:b3:b4: 9c:e6:4b:79:d1:83:8b:83:b3:3e:8d:f5:d6:03:c2:82:c3:82: 2a:1d:ba:0e:c7:ba:df:7b:8c:19:74:64:04:cc:ee:14:13:10: cf:3c:cc:ce:79:42:d8:73:98:f0:2c:05:9b:66:d2:25:00:ef: 7e:2c:d5:e5:66:e6:4a:92:d3:d3:89:ea:36:71:ae:7c:43:f8: fd:ee:19:df:db:2c:17:c1:0d:ad:6b:02:6f:22:ef:2a:f0:35: 02:9a:d4:37:b5:5e:3a:a1:3d:9b:f2:84:17:49:2b:22:77:76: 28:20:ff:85:82:ec:41:d3:d2:e5:60:b8:ab:6a:53:b9:c2:51: 3b:d2:68:61:42:3f:ad:c2:d8:96:a8:22:74:3f:18:a9:0c:f9: 05:2d:18:77:16:f1:9d:2a:19:4a:bc:de:9e:40:bc:31:f0:21: 2f:71:08:94:0d:2b:5a:0b:70:45:d7:53:31:b9:e2:e6:0f:d0: d4:9e:e8:74:1a:23:d8:27:b7:0c:82:06:40:42:d3:4f:26:9a: 0a:2a:17:4f:42:03:0e:4b:2f:68:08:82:32:ed:c9:e8:5f:6e: ee:d7:70:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQy+IwPgTaHGDt6qpFCc7SkPNh1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4 NUMzNUU0RjAeFw0yNTA0MTcyMzQ3MDJaFw0yNTA0MjExMDUzMDJaMDMxMTAvBgNV BAMTKEM1MEVEMjcyRTU2NkU3QzE3RDgzNUZFM0NFNjBDMkM4RDhCMDQ5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPw0f3HqD2DcxX9lRmxS0g0vAP huHApn8dygyCYpF4lhoalyyRnyLeekYPeM5koQCIBOcWENFH8rPoNxZMVAuM13LA rUIaK4NSQTT2FnRSZyi+g7KbO9wzPpUeJ5uUSubUJtNmylrVL8BzmV4qz4hKRYAQ 0hG875FDFgtrjPatyrXdDWduoCvfttOg7dmOEiAJ4AZ0SkvhJB7BHoCAIxjMQyBq L/VRoDnHAkqkEkkU3Jy9r64e3/Vhvw00yAOK4Fde53d1N93/8I0NN2LPOiLIf1YD Cb5Y7DpFTYT4TI1OY/9WMOhF7OkuZfJQ2/Kcb7OeGb3PjHKBUPyqEd1UDO/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQ7ScuVm58F9g1/jzmDCyNiwSfwwHwYDVR0j BBgwFoAUPXifr19+vmk4xMcj3NLu14XDXk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDk3MDAzMi0wOGVhLTQ4OTAtYmRiYS02MzA5YTQ5NzkxN2QvMC8zRDc4OUZBRjVG N0VCRTY5MzhDNEM3MjNEQ0QyRUVENzg1QzM1RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4NUMz NUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5NzAwMzItMDhlYS00ODkwLWJk YmEtNjMwOWE0OTc5MTdkLzAvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVF RDc4NUMzNUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK99oT78c/LnzBrAJZz5nzN9DLHV73tovg8x E4JM7ea5VFyztJzmS3nRg4uDsz6N9dYDwoLDgiodug7Hut97jBl0ZATM7hQTEM88 zM55QthzmPAsBZtm0iUA734s1eVm5kqS09OJ6jZxrnxD+P3uGd/bLBfBDa1rAm8i 7yrwNQKa1De1XjqhPZvyhBdJKyJ3digg/4WC7EHT0uVguKtqU7nCUTvSaGFCP63C 2JaoInQ/GKkM+QUtGHcW8Z0qGUq83p5AvDHwIS9xCJQNK1oLcEXXUzG54uYP0NSe 6HQaI9gntwyCBkBC008mmgoqF09CAw5LL2gIgjLtyehfbu7XcEU= -----END CERTIFICATE-----Generated at Sat Apr 19 18:37:44 2025 by rpki-client