$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft File: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft (raw, json) Hash identifier: JD+yPmrh5CxsEo6cx843y4FwD7XnCAHAtjLcdnksXnk= Subject key identifier: 78:C9:B3:76:D7:C5:DF:E4:43:5D:1E:13:70:3E:16:F7:7D:C6:3D:01 Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Certificate serial: 1B8E9673561DD135E765B87757FCF80AE2A3ED49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft Manifest number: 01E3 Signing time: Wed 03 Sep 2025 07:10:53 +0000 Manifest this update: Wed 03 Sep 2025 07:05:53 +0000 Manifest next update: Sat 06 Sep 2025 12:03:53 +0000 Files and hashes: 1: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: GJQ3NUFsB2nVnSk1uRZagjtzrc7ng31cjwY1HHOp2FQ=) 2: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: HvzvMBj5qU+NExWSjTWqrdpmvH/WBtBrlcSKkhbhERc=) 3: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl (hash: ukmt/iy53VqLHw5K9rQv6zzm2QGJmmR5hB8u9LnkO3I=) 4: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: NAFqFIaSAImXyE9eWh33YjJ4/n4BJqvDNhOBlZ2+l28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 12:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8e:96:73:56:1d:d1:35:e7:65:b8:77:57:fc:f8:0a:e2:a3:ed:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Validity Not Before: Sep 3 07:05:53 2025 GMT Not After : Sep 6 12:03:53 2025 GMT Subject: CN=78C9B376D7C5DFE4435D1E13703E16F77DC63D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:a7:3a:c4:83:e7:3c:09:b3:b1:83:f0:81: a7:44:a7:33:2a:c4:6c:68:87:fb:e7:42:7a:df:b2: 91:48:ac:6e:eb:90:51:2d:2c:0a:d8:a1:a8:0b:79: bf:92:74:21:4c:e0:13:93:0f:55:0f:98:d6:86:56: 94:e8:a3:56:c9:df:76:fe:fb:21:71:69:f9:c9:25: fc:cc:32:8f:89:8a:01:0e:7a:96:20:48:70:13:f4: 11:1c:80:a3:54:f5:dd:40:59:66:cb:6c:61:6c:55: 41:d1:06:67:3a:5f:0d:c2:87:9c:cc:4b:2a:d0:34: 80:0e:6a:96:4e:ca:24:d4:46:fc:e6:7d:69:22:72: 29:d4:4b:f1:de:13:ea:a6:a8:5c:71:a7:78:92:bc: 2d:c5:ce:30:6f:8c:eb:b6:92:3c:e0:4e:02:4d:ae: ac:e0:4a:32:53:58:38:69:b4:4a:aa:ec:a1:5f:8d: a9:a3:73:a4:ce:49:07:e7:e4:f9:ab:28:f9:b7:56: bf:7b:8c:8d:66:d3:71:1d:55:a1:54:73:7a:af:9a: ba:1e:fd:4b:08:77:43:7a:43:9f:47:c4:82:71:c0: 61:d5:4b:5f:8b:79:1d:c6:01:17:29:1e:c2:c8:e0: a8:c7:7c:52:73:d8:5b:33:86:5d:29:e8:0d:9f:7f: cb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C9:B3:76:D7:C5:DF:E4:43:5D:1E:13:70:3E:16:F7:7D:C6:3D:01 X509v3 Authority Key Identifier: keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:52:17:b1:cc:5b:b4:d3:f0:f0:8b:a9:cb:29:50:df:45:4a: 77:9b:a4:78:9a:f2:53:23:b0:07:02:1f:0d:65:31:01:0b:8b: 95:7e:4f:f8:06:a3:b3:16:b8:b8:0a:c4:b0:96:ce:ca:4d:4f: 99:40:f6:f2:22:5b:9d:3d:9d:d3:34:03:ff:a4:05:50:ca:42: e6:63:a5:7d:7d:75:80:7c:be:32:eb:e0:f4:14:7a:8e:bc:81: 97:79:b5:34:4d:7a:87:68:cf:9a:0d:ab:b8:89:31:6b:f5:92: af:2f:29:db:f7:b2:6c:29:93:ee:11:6d:c3:68:b4:e1:bc:fc: 39:d3:b7:a2:9c:0c:da:ff:34:c3:5b:83:05:f5:b7:87:66:25: 43:1e:2b:5c:0b:c7:38:80:51:2e:74:c2:79:f7:1c:38:45:5a: a0:23:85:a4:6e:ba:56:8d:7a:dd:ef:25:5d:a0:29:4f:03:e1: de:09:02:6f:75:e7:dd:3f:6b:c3:59:7e:fd:6f:9b:3e:e5:33: 3e:5b:0b:07:6f:ae:f3:7d:d1:b2:21:fa:bf:1e:e6:72:e3:c8: 49:32:e9:77:e8:70:5f:e5:e7:49:30:4a:b2:df:12:3a:7a:a4: f1:21:2e:5e:c5:c9:23:d6:96:50:29:b1:54:25:e4:33:96:af: 06:38:32:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG46Wc1Yd0TXnZbh3V/z4CuKj7UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4 NUMzNUU0RjAeFw0yNTA5MDMwNzA1NTNaFw0yNTA5MDYxMjAzNTNaMDMxMTAvBgNV BAMTKDc4QzlCMzc2RDdDNURGRTQ0MzVEMUUxMzcwM0UxNkY3N0RDNjNEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChiqc6xIPnPAmzsYPwgadEpzMq xGxoh/vnQnrfspFIrG7rkFEtLArYoagLeb+SdCFM4BOTD1UPmNaGVpToo1bJ33b+ +yFxafnJJfzMMo+JigEOepYgSHAT9BEcgKNU9d1AWWbLbGFsVUHRBmc6Xw3Ch5zM SyrQNIAOapZOyiTURvzmfWkicinUS/HeE+qmqFxxp3iSvC3FzjBvjOu2kjzgTgJN rqzgSjJTWDhptEqq7KFfjamjc6TOSQfn5PmrKPm3Vr97jI1m03EdVaFUc3qvmroe /UsId0N6Q59HxIJxwGHVS1+LeR3GARcpHsLI4KjHfFJz2Fszhl0p6A2ff8ttAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMmzdtfF3+RDXR4TcD4W933GPQEwHwYDVR0j BBgwFoAUPXifr19+vmk4xMcj3NLu14XDXk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDk3MDAzMi0wOGVhLTQ4OTAtYmRiYS02MzA5YTQ5NzkxN2QvMC8zRDc4OUZBRjVG N0VCRTY5MzhDNEM3MjNEQ0QyRUVENzg1QzM1RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4NUMz NUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5NzAwMzItMDhlYS00ODkwLWJk YmEtNjMwOWE0OTc5MTdkLzAvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVF RDc4NUMzNUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBSF7HMW7TT8PCLqcspUN9FSnebpHia8lMj sAcCHw1lMQELi5V+T/gGo7MWuLgKxLCWzspNT5lA9vIiW509ndM0A/+kBVDKQuZj pX19dYB8vjLr4PQUeo68gZd5tTRNeodoz5oNq7iJMWv1kq8vKdv3smwpk+4RbcNo tOG8/DnTt6KcDNr/NMNbgwX1t4dmJUMeK1wLxziAUS50wnn3HDhFWqAjhaRuulaN et3vJV2gKU8D4d4JAm91590/a8NZfv1vmz7lMz5bCwdvrvN90bIh+r8e5nLjyEky 6XfocF/l50kwSrLfEjp6pPEhLl7FySPWllApsVQl5DOWrwY4MjE= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:52 2025 by rpki-client