$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: E1uayvzUm6aPKI+icM0woabWquKSzrHUKCnzITzSdMk= Subject key identifier: 23:8F:B4:1F:D3:EC:47:B1:2F:E4:D3:E9:A5:68:89:8D:E8:F7:0D:6C Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 4733AC183A83D59E7D92DE6F0B267B39832E3ABD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: CC Signing time: Tue 03 Jun 2025 19:02:15 +0000 Manifest this update: Tue 03 Jun 2025 18:57:15 +0000 Manifest next update: Sat 07 Jun 2025 02:10:15 +0000 Files and hashes: 1: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: xDimJNI1Twl7hCA1S5QHDj3z6dVO53eSr1zwPr1dzLg=) 2: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: Q31WVg0nt9Akn7sHQ0ovSP+rHovoJ3AXQpCRAfyJpn4=) 3: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Zks55AdYxfoprGZkiZN/TIj//KiubcvneSX7655/CJQ=) 4: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: EDTzr0RnERkDSs2/M4R/0RtE2R+ut3mngAzM50kbtVY=) 5: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: Trm5VSxwpLq/+cZFnNBjmLjiBqHIZJgvc7Pd29v+RRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:33:ac:18:3a:83:d5:9e:7d:92:de:6f:0b:26:7b:39:83:2e:3a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Jun 3 18:57:15 2025 GMT Not After : Jun 7 02:10:15 2025 GMT Subject: CN=238FB41FD3EC47B12FE4D3E9A568898DE8F70D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:08:08:35:7d:1c:d6:d0:df:17:f6:85:fb: d2:ed:fe:c6:b0:8d:a2:a9:31:37:bd:90:e4:3f:06: 47:c4:d1:06:43:86:89:c3:a4:69:bc:69:08:d1:0a: ea:42:3e:23:52:d5:b4:bc:91:78:0d:20:45:63:0a: 87:77:64:09:30:82:60:1a:f5:77:3f:5b:aa:d6:2f: d9:fe:eb:38:f5:74:e4:f6:ad:dc:9e:5d:f3:d0:ae: 51:56:20:81:63:38:0d:89:32:2e:1c:c1:d1:5e:cb: b9:92:60:7f:92:82:56:9e:aa:dc:3e:c4:96:11:64: 7b:05:7c:81:e3:a2:ca:d9:42:91:c2:2f:13:05:bb: 6d:5e:d5:71:9e:a8:54:32:9e:42:68:92:6b:06:98: 70:65:2f:4c:3a:a1:df:9e:98:41:fa:69:28:b6:fe: ab:51:c3:5e:56:46:c6:83:7b:70:1a:f1:ed:cc:71: ba:d8:c2:8d:ff:ff:11:99:a4:58:8d:5c:89:21:ca: 96:3c:91:2e:10:d8:9c:d4:fb:2f:88:cc:f4:5b:e6: 89:1a:28:0c:25:a6:37:06:e2:bd:1b:26:70:48:30: 29:5c:82:59:70:fc:73:8c:eb:e9:cf:6c:92:48:3d: e2:9c:bb:77:28:08:fc:b3:76:df:af:b4:5d:08:58: c8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8F:B4:1F:D3:EC:47:B1:2F:E4:D3:E9:A5:68:89:8D:E8:F7:0D:6C X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f8:c3:27:30:8a:f7:5b:33:a8:3a:54:e9:95:89:28:4f:07: ca:ee:a7:e3:6e:b3:b1:eb:8a:59:62:dc:8d:91:93:ec:77:92: 4d:8f:30:a4:f2:58:99:8a:90:52:c6:e3:6b:9c:c4:94:ad:14: 4b:b8:ad:b4:6b:ab:46:cc:18:24:90:5a:49:76:69:bf:1a:6c: 78:2b:a1:04:78:ad:c0:92:33:ae:a2:0a:e7:39:d6:76:9b:3f: 1e:73:17:4c:3b:bc:f5:38:cd:83:30:b0:45:2b:4b:d6:8d:66: 77:47:fa:d0:80:b9:bb:10:6d:15:49:55:49:a6:c1:49:37:9d: b7:99:cc:79:a8:d4:a5:41:8b:d3:f0:26:a5:69:76:dd:5a:35: b2:ca:22:91:83:56:16:a1:b0:70:d2:3d:40:96:2d:aa:7d:a7: eb:27:d1:23:df:8e:59:6d:3e:32:ae:e3:da:b6:38:6b:dc:97: 88:7c:3d:9a:b3:cb:d7:14:06:4a:42:35:71:dd:02:68:3d:8a: 72:f4:13:2c:96:55:f2:23:36:98:6b:2a:9c:8c:7d:86:49:1c: a4:c7:bc:63:67:f7:e7:fa:5e:fa:a6:47:ef:3f:9a:f6:f5:43: f4:d2:25:e8:8a:65:da:d2:e0:25:29:38:33:df:40:b4:1e:77: 4b:80:5c:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzOsGDqD1Z59kt5vCyZ7OYMuOr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNTA2MDMxODU3MTVaFw0yNTA2MDcwMjEwMTVaMDMxMTAvBgNV BAMTKDIzOEZCNDFGRDNFQzQ3QjEyRkU0RDNFOUE1Njg4OThERThGNzBENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxAgINX0c1tDfF/aF+9Lt/saw jaKpMTe9kOQ/BkfE0QZDhonDpGm8aQjRCupCPiNS1bS8kXgNIEVjCod3ZAkwgmAa 9Xc/W6rWL9n+6zj1dOT2rdyeXfPQrlFWIIFjOA2JMi4cwdFey7mSYH+Sglaeqtw+ xJYRZHsFfIHjosrZQpHCLxMFu21e1XGeqFQynkJokmsGmHBlL0w6od+emEH6aSi2 /qtRw15WRsaDe3Aa8e3McbrYwo3//xGZpFiNXIkhypY8kS4Q2JzU+y+IzPRb5oka KAwlpjcG4r0bJnBIMClcgllw/HOM6+nPbJJIPeKcu3coCPyzdt+vtF0IWMg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI4+0H9PsR7Ev5NPppWiJjej3DWwwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/4wycwivdbM6g6VOmViShPB8rup+Nus7Hr illi3I2Rk+x3kk2PMKTyWJmKkFLG42ucxJStFEu4rbRrq0bMGCSQWkl2ab8abHgr oQR4rcCSM66iCuc51nabPx5zF0w7vPU4zYMwsEUrS9aNZndH+tCAubsQbRVJVUmm wUk3nbeZzHmo1KVBi9PwJqVpdt1aNbLKIpGDVhahsHDSPUCWLap9p+sn0SPfjllt PjKu49q2OGvcl4h8PZqzy9cUBkpCNXHdAmg9inL0EyyWVfIjNphrKpyMfYZJHKTH vGNn9+f6XvqmR+8/mvb1Q/TSJeiKZdrS4CUpODPfQLQed0uAXDY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:10 2025 by rpki-client