$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: 3uBuyPWARzG7xg0e13URDRba9Mb4Q0SrBPeT0HHdu5k= Subject key identifier: BC:59:71:48:63:F8:4D:60:D1:C4:0B:F5:55:7A:C3:6E:4A:7F:5B:92 Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 6C603C8ED18F73999F3C1E6F8DD3CA692D650B32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 0232 Signing time: Sat 05 Apr 2025 07:41:49 +0000 Manifest this update: Sat 05 Apr 2025 07:36:49 +0000 Manifest next update: Tue 08 Apr 2025 09:21:49 +0000 Files and hashes: 1: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: aF0GbqhRx4JrvsxnxHpGLairnAKmV7WFKHGxC7UsZzU=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk=) 3: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: biBc3b6GGx2dUj7YnQWOhcGsodIKTbyhZn9FTYFEG1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:60:3c:8e:d1:8f:73:99:9f:3c:1e:6f:8d:d3:ca:69:2d:65:0b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Apr 5 07:36:49 2025 GMT Not After : Apr 8 09:21:49 2025 GMT Subject: CN=BC59714863F84D60D1C40BF5557AC36E4A7F5B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:40:58:20:4a:60:89:15:b9:e5:d4:60:2a: c0:6e:bd:20:bf:33:50:51:ea:f8:fe:22:ed:3c:fa: 67:de:a5:2d:59:35:9f:55:09:eb:81:5f:c7:1b:73: 0d:cc:a7:00:e2:ed:f5:97:d8:0d:69:a5:02:6f:1a: db:71:96:69:d8:7b:6d:d2:0a:0b:75:ae:10:ba:6c: 92:43:65:b1:ec:9c:e5:20:4c:50:51:78:86:5d:96: 3c:a5:6c:ad:b9:53:fe:17:4b:98:a7:bd:d3:e3:be: ea:fe:38:95:df:6a:a7:27:8f:5a:83:4c:95:c2:c3: cf:87:d5:04:02:41:dc:da:bb:bd:c7:dd:89:fa:78: dc:6e:bc:2a:89:c6:bf:1a:d8:1a:49:91:21:43:08: 27:e4:7f:fd:a5:d2:53:33:c0:fe:bb:1e:b9:5d:fb: bc:40:a8:69:47:db:b2:c8:c2:d1:07:0a:fe:da:3d: 15:b7:da:f0:54:24:96:0b:3c:43:06:c7:c2:a3:50: c9:cb:98:47:a7:2c:c9:08:21:11:c7:ea:7c:3d:54: 0b:3d:14:43:88:d0:e4:44:f3:77:91:0f:75:f4:f8: 0f:e6:1c:36:ff:70:aa:ef:12:06:f1:be:2b:09:3d: e0:e9:3a:67:79:7b:d1:ab:41:cb:aa:07:73:bf:50: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:59:71:48:63:F8:4D:60:D1:C4:0B:F5:55:7A:C3:6E:4A:7F:5B:92 X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:45:70:88:cd:99:85:26:71:d6:8f:e2:ae:17:18:17:6e:00: e1:13:da:76:07:61:90:f9:46:1a:7e:64:59:0a:00:04:f8:68: cc:ef:6c:e9:8e:48:f7:e7:24:c8:bd:73:75:9a:4b:95:fe:aa: 7f:48:ed:31:c5:a9:1e:ab:83:d8:ee:91:1b:64:de:33:b6:87: 66:b5:62:2b:f7:e9:78:36:b0:87:05:07:c2:fd:63:41:8b:ef: f8:42:57:91:1f:6b:05:e9:8a:fb:86:4f:91:5b:3d:ce:f8:8a: 1c:aa:84:4b:cb:64:e4:59:17:18:01:77:f9:a4:1c:98:84:87: 19:a7:03:f8:0c:5e:44:0b:20:72:60:1d:63:7b:c0:9c:4d:d5: bb:e9:98:76:be:30:e6:44:29:5c:39:27:bc:b3:84:95:ac:2a: 3a:0b:67:6d:9d:a3:57:8a:7a:3e:b7:3d:c4:7a:61:aa:03:e7: 9c:65:c6:2b:9e:ab:d7:5a:12:60:1f:ca:d6:22:53:02:00:86: 84:21:86:ad:0d:a1:12:a7:db:f2:db:3b:14:6e:dd:db:05:b3: 6b:08:e2:d6:74:5f:0b:89:36:27:91:99:5c:07:e6:b1:b3:11: df:c6:c3:2b:1b:f9:88:9c:d0:47:fd:ae:37:14:ad:85:bc:4a: 66:c0:81:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGA8jtGPc5mfPB5vjdPKaS1lCzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTA0MDUwNzM2NDlaFw0yNTA0MDgwOTIxNDlaMDMxMTAvBgNV BAMTKEJDNTk3MTQ4NjNGODRENjBEMUM0MEJGNTU1N0FDMzZFNEE3RjVCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHUBYIEpgiRW55dRgKsBuvSC/ M1BR6vj+Iu08+mfepS1ZNZ9VCeuBX8cbcw3MpwDi7fWX2A1ppQJvGttxlmnYe23S Cgt1rhC6bJJDZbHsnOUgTFBReIZdljylbK25U/4XS5invdPjvur+OJXfaqcnj1qD TJXCw8+H1QQCQdzau73H3Yn6eNxuvCqJxr8a2BpJkSFDCCfkf/2l0lMzwP67Hrld +7xAqGlH27LIwtEHCv7aPRW32vBUJJYLPEMGx8KjUMnLmEenLMkIIRHH6nw9VAs9 FEOI0ORE83eRD3X0+A/mHDb/cKrvEgbxvisJPeDpOmd5e9GrQcuqB3O/UOD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvFlxSGP4TWDRxAv1VXrDbkp/W5IwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdFcIjNmYUmcdaP4q4XGBduAOET2nYHYZD5 Rhp+ZFkKAAT4aMzvbOmOSPfnJMi9c3WaS5X+qn9I7THFqR6rg9jukRtk3jO2h2a1 Yiv36Xg2sIcFB8L9Y0GL7/hCV5EfawXpivuGT5FbPc74ihyqhEvLZORZFxgBd/mk HJiEhxmnA/gMXkQLIHJgHWN7wJxN1bvpmHa+MOZEKVw5J7yzhJWsKjoLZ22do1eK ej63PcR6YaoD55xlxiueq9daEmAfytYiUwIAhoQhhq0NoRKn2/LbOxRu3dsFs2sI 4tZ0XwuJNieRmVwH5rGzEd/Gwysb+Yic0Ef9rjcUrYW8SmbAgdM= -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:18 2025 by rpki-client