$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft File: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json) Hash identifier: Gbdt8v1StFIaqCVQwknhzNIt1tXomB3Knk1s2IJ5kJk= Subject key identifier: FB:3B:C6:A8:6A:3D:9D:FC:81:AC:5E:8F:4E:AB:08:04:4E:3C:FE:D0 Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Certificate serial: 2C99648FFF5DC41452840D149107D06B7757BBCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft Manifest number: 04DD Signing time: Wed 04 Jun 2025 12:32:05 +0000 Manifest this update: Wed 04 Jun 2025 12:27:05 +0000 Manifest next update: Sat 07 Jun 2025 23:27:05 +0000 Files and hashes: 1: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: +5ArSDkm8nFNY2pJsCcc5rpBFK1QZi3XeCjPa44v8Qg=) 2: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: lX37Ym1HtH8/+BNNZ7vVVvmLTRPAVgTV6qXoJU01xNo=) 3: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: /yhg5qr+BfUwCEkWIHjx5Xurv6fbCx8q1w5UII3HZ8w=) 4: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: 7gyXsXhXbz+5Y778CqurXCGCsFoCA1QhjfVs/TUp3oQ=) 5: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: ITaDWguMdEcZzmxT3W/rSjaiCome1ZHOLZ2wvLeNXFw=) 6: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: wlegEJoNWqrWT2tySFrwLRqLsXDXFl0OFT0Nuvvp7LI=) 7: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: ShEOWvu/KCYTTrKo5vrKeCwlexfHyDbC4uTV8yZtzEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:99:64:8f:ff:5d:c4:14:52:84:0d:14:91:07:d0:6b:77:57:bb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Validity Not Before: Jun 4 12:27:05 2025 GMT Not After : Jun 7 23:27:05 2025 GMT Subject: CN=FB3BC6A86A3D9DFC81AC5E8F4EAB08044E3CFED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:06:da:88:ca:3d:f1:81:9f:b0:71:3b:b5:10: c7:86:b2:d9:54:01:ff:8c:d3:69:12:bc:b4:05:c1: c6:c5:c3:44:f7:11:8b:49:e5:dd:76:9d:02:0b:96: 52:1b:ab:af:2b:9b:a3:c3:e3:2a:15:1a:c0:8c:36: 52:89:8c:7a:d6:7e:da:51:99:a5:db:49:87:00:11: e7:1d:1f:2d:96:16:ab:e0:f9:e1:86:e1:51:e0:7d: a0:85:6e:da:95:aa:b5:85:7b:1f:0d:8c:17:69:f2: 71:3f:ae:3e:50:6f:55:97:c4:f7:a2:12:9e:90:3d: a0:b2:1c:35:bb:ff:ec:60:11:c6:58:e5:bd:b5:d6: 2e:2e:80:b7:77:9d:09:83:2a:f9:f9:a7:73:b7:31: 76:f4:45:d7:77:a4:47:11:5b:87:d5:f7:26:be:15: 85:dc:af:a6:86:f2:af:ad:ec:9b:63:2a:a2:42:64: 79:8a:52:a2:b4:53:d0:cc:74:99:80:21:16:d1:24: e9:53:b7:a0:18:65:d5:dc:54:10:c6:7c:5a:a9:7d: 21:78:32:15:4f:5c:83:c4:fb:2e:b0:82:a1:7c:18: 93:88:b5:6d:b1:b6:a0:bf:05:b1:b6:5d:d0:53:0b: 45:11:58:fb:b3:0c:c5:d8:bb:e4:b0:57:f2:a6:2a: 6c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3B:C6:A8:6A:3D:9D:FC:81:AC:5E:8F:4E:AB:08:04:4E:3C:FE:D0 X509v3 Authority Key Identifier: keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:70:62:b6:77:04:43:97:62:9a:aa:ca:54:87:f3:8b:64:5b: 74:ff:76:20:5c:99:ae:2c:bf:ac:2e:1c:7e:20:45:ac:42:a1: d4:a6:b0:2f:a3:80:4c:fc:16:b2:7f:34:f9:6a:74:64:62:2d: 87:0d:d6:6e:85:89:c9:ef:e5:ba:46:0a:5c:48:8b:8d:72:b5: 8c:74:43:a3:2a:77:20:aa:a8:49:ed:fc:c8:bb:91:70:c3:84: 1c:93:01:2d:97:ff:a7:84:d3:cb:df:67:04:93:74:98:07:76: db:54:3d:66:02:9b:21:c3:7d:91:c4:cf:19:8c:b2:84:5d:d8: 05:41:01:2e:90:64:a2:9d:12:30:c3:aa:26:8e:12:25:ea:e4: 69:a7:b7:3a:b1:e9:f3:5e:48:22:f8:d4:33:1e:bc:4a:88:34: 33:76:92:c4:64:cf:c9:d7:b5:0f:a5:0c:4f:bc:de:e5:ce:f2: 17:cc:97:86:59:80:e9:e9:f7:2e:c3:61:74:fc:25:1b:ef:23: ed:c6:d3:05:09:e1:f9:36:22:9d:79:37:1b:4a:74:52:2f:53: 57:05:96:29:e7:02:61:08:c1:f0:93:ad:0f:ee:15:76:53:ee: fb:46:ba:08:d9:47:54:34:ec:e4:c4:1a:e0:73:05:86:e3:34: a8:28:49:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJlkj/9dxBRShA0UkQfQa3dXu80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw MTI1MkE1QzAeFw0yNTA2MDQxMjI3MDVaFw0yNTA2MDcyMzI3MDVaMDMxMTAvBgNV BAMTKEZCM0JDNkE4NkEzRDlERkM4MUFDNUU4RjRFQUIwODA0NEUzQ0ZFRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOBtqIyj3xgZ+wcTu1EMeGstlU Af+M02kSvLQFwcbFw0T3EYtJ5d12nQILllIbq68rm6PD4yoVGsCMNlKJjHrWftpR maXbSYcAEecdHy2WFqvg+eGG4VHgfaCFbtqVqrWFex8NjBdp8nE/rj5Qb1WXxPei Ep6QPaCyHDW7/+xgEcZY5b211i4ugLd3nQmDKvn5p3O3MXb0Rdd3pEcRW4fV9ya+ FYXcr6aG8q+t7JtjKqJCZHmKUqK0U9DMdJmAIRbRJOlTt6AYZdXcVBDGfFqpfSF4 MhVPXIPE+y6wgqF8GJOItW2xtqC/BbG2XdBTC0URWPuzDMXYu+SwV/KmKmxnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+zvGqGo9nfyBrF6PTqsIBE48/tAwHwYDVR0j BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1 MkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3 OTQwMTI1MkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpwYrZ3BEOXYpqqylSH84tkW3T/diBcma4s v6wuHH4gRaxCodSmsC+jgEz8FrJ/NPlqdGRiLYcN1m6Ficnv5bpGClxIi41ytYx0 Q6MqdyCqqEnt/Mi7kXDDhByTAS2X/6eE08vfZwSTdJgHdttUPWYCmyHDfZHEzxmM soRd2AVBAS6QZKKdEjDDqiaOEiXq5Gmntzqx6fNeSCL41DMevEqINDN2ksRkz8nX tQ+lDE+83uXO8hfMl4ZZgOnp9y7DYXT8JRvvI+3G0wUJ4fk2Ip15NxtKdFIvU1cF linnAmEIwfCTrQ/uFXZT7vtGugjZR1Q07OTEGuBzBYbjNKgoSc4= -----END CERTIFICATE-----Generated at Thu Jun 5 20:03:52 2025 by rpki-client