$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft File: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json) Hash identifier: TLbrZOsOpYfr/TGHyCSJsE54rvfW9dBfCLupm6Z6wQE= Subject key identifier: B1:84:6E:42:2A:FF:9D:2E:EC:C5:E2:38:31:F6:85:47:D9:5E:73:96 Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Certificate serial: 127043D502ABC09A54B538302DFC0058EA1D9DBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft Manifest number: 04C3 Signing time: Sun 06 Apr 2025 04:42:03 +0000 Manifest this update: Sun 06 Apr 2025 04:37:03 +0000 Manifest next update: Wed 09 Apr 2025 16:41:03 +0000 Files and hashes: 1: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: /yhg5qr+BfUwCEkWIHjx5Xurv6fbCx8q1w5UII3HZ8w=) 2: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: eHRe7UN4yHEuP/bcxvXuiWUL1Jq+AhWRZYK0EAkak0g=) 3: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: KUcP7h07thnbz4HgYEXRhyo/VKL71mkoKsjlqNyH3oE=) 4: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: xiXqHT30gah4SfdCSJA1bqssFdqa9R1vtVtP0INDihk=) 5: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: 7gyXsXhXbz+5Y778CqurXCGCsFoCA1QhjfVs/TUp3oQ=) 6: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: +5ArSDkm8nFNY2pJsCcc5rpBFK1QZi3XeCjPa44v8Qg=) 7: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: jyysri/AqQCuIuIenHdQP1uAFV5d4NrgJAm0RUZT6wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:70:43:d5:02:ab:c0:9a:54:b5:38:30:2d:fc:00:58:ea:1d:9d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Validity Not Before: Apr 6 04:37:03 2025 GMT Not After : Apr 9 16:41:03 2025 GMT Subject: CN=B1846E422AFF9D2EECC5E23831F68547D95E7396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:fe:6d:5c:60:76:87:dd:9d:0d:53:83:5c: 86:8b:56:5d:db:75:d0:45:77:d7:9d:0b:ff:fa:a2: 74:c6:fb:01:ef:50:db:fb:c3:14:e9:f5:3e:8e:b5: 21:47:8f:2c:02:ac:48:3f:b3:ee:25:22:ed:d4:0b: 4a:12:99:86:c6:97:44:91:3d:28:aa:2b:18:da:14: 41:d0:bf:46:b6:b6:17:48:2f:f7:d2:66:3e:38:75: 92:e4:d6:53:5c:81:84:32:3f:3a:10:fd:1c:20:fe: 73:77:6d:f7:fe:e8:5a:fa:f5:74:c5:dd:31:53:df: 57:07:7b:03:0c:3e:cd:d1:cd:86:29:55:6c:43:d8: c7:46:af:10:73:95:77:f7:99:aa:de:85:09:95:a4: bc:6d:d2:2a:dd:4b:ad:97:b3:f8:d3:3d:5a:0c:fe: 31:f3:f0:c2:ad:04:76:22:16:bc:b4:df:f4:0a:b9: 88:12:a7:a3:f8:ea:08:35:02:24:5e:22:36:b0:ad: 6e:b0:c6:b6:1d:73:54:f5:85:15:62:bb:86:2e:91: 86:1f:6f:07:0b:ea:fa:b5:30:3d:94:17:01:46:93: 2b:bf:af:9c:64:e0:80:f7:2a:a5:2d:3b:a8:79:54: 65:4b:67:a6:d5:1f:49:14:a7:47:da:14:a9:fe:94: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:84:6E:42:2A:FF:9D:2E:EC:C5:E2:38:31:F6:85:47:D9:5E:73:96 X509v3 Authority Key Identifier: keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c8:1c:f8:95:89:62:e5:fc:b5:46:f6:28:09:3a:86:62:07: 77:c0:6e:e4:47:53:0a:9b:5c:66:6a:e3:4c:2f:0f:b9:08:88: 5e:a1:ee:0c:7c:9b:a0:8f:50:da:e8:7a:66:d5:b7:0c:a8:c0: 59:fd:8b:5a:13:8d:d1:f5:33:4c:02:c3:05:2f:cc:6c:60:11: c1:5d:5e:2b:93:a9:83:b7:ea:c2:9d:c4:26:7d:33:88:82:69: a8:61:88:d9:14:07:c2:c9:e5:70:77:16:80:5f:45:bf:4f:55: 7f:73:18:0e:9c:b6:85:49:03:04:e5:73:a2:05:af:8e:39:5e: a9:26:02:22:95:5a:86:7d:5c:e4:8f:60:e4:2c:ac:40:a3:a0: 3a:85:e5:91:cb:ff:09:4d:cb:ba:46:e0:4c:12:a1:3d:73:dd: f5:4d:f2:94:41:90:35:24:53:6f:a8:f7:5c:f1:92:cc:7a:21: 04:b8:87:f3:0b:fe:67:7f:4c:06:09:99:a9:24:c8:30:2a:5c: 3e:e4:3f:b5:13:d2:10:51:3b:25:c1:f7:62:ca:38:73:87:8e: 0b:f0:60:5c:47:5b:cb:08:49:fe:5c:7c:09:3e:26:0c:b0:ab: a1:b9:46:3b:2d:e2:db:8c:99:73:bb:47:46:74:c8:fa:69:03: 09:e4:7f:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEnBD1QKrwJpUtTgwLfwAWOodnbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw MTI1MkE1QzAeFw0yNTA0MDYwNDM3MDNaFw0yNTA0MDkxNjQxMDNaMDMxMTAvBgNV BAMTKEIxODQ2RTQyMkFGRjlEMkVFQ0M1RTIzODMxRjY4NTQ3RDk1RTczOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNq/5tXGB2h92dDVODXIaLVl3b ddBFd9edC//6onTG+wHvUNv7wxTp9T6OtSFHjywCrEg/s+4lIu3UC0oSmYbGl0SR PSiqKxjaFEHQv0a2thdIL/fSZj44dZLk1lNcgYQyPzoQ/Rwg/nN3bff+6Fr69XTF 3TFT31cHewMMPs3RzYYpVWxD2MdGrxBzlXf3marehQmVpLxt0irdS62Xs/jTPVoM /jHz8MKtBHYiFry03/QKuYgSp6P46gg1AiReIjawrW6wxrYdc1T1hRViu4YukYYf bwcL6vq1MD2UFwFGkyu/r5xk4ID3KqUtO6h5VGVLZ6bVH0kUp0faFKn+lBLjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsYRuQir/nS7sxeI4MfaFR9lec5YwHwYDVR0j BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1 MkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3 OTQwMTI1MkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjIHPiViWLl/LVG9igJOoZiB3fAbuRHUwqb XGZq40wvD7kIiF6h7gx8m6CPUNroembVtwyowFn9i1oTjdH1M0wCwwUvzGxgEcFd XiuTqYO36sKdxCZ9M4iCaahhiNkUB8LJ5XB3FoBfRb9PVX9zGA6ctoVJAwTlc6IF r445XqkmAiKVWoZ9XOSPYOQsrECjoDqF5ZHL/wlNy7pG4EwSoT1z3fVN8pRBkDUk U2+o91zxksx6IQS4h/ML/md/TAYJmakkyDAqXD7kP7UT0hBROyXB92LKOHOHjgvw YFxHW8sISf5cfAk+Jgywq6G5Rjst4tuMmXO7R0Z0yPppAwnkf/E= -----END CERTIFICATE-----Generated at Sun Apr 6 15:28:03 2025 by rpki-client