$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft File: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json) Hash identifier: NSaLB50tyCRLEKf8H0IBwCU58BPZ94k4KLhvZ9qoM2c= Subject key identifier: 07:50:FF:F1:47:48:29:74:D9:C6:1F:9C:83:44:35:30:51:95:75:D6 Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 Certificate issuer: /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Certificate serial: 3459576E48EB9DD81577C7B46EE969B0FA63ECB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft Manifest number: 01D3 Signing time: Sun 29 Jun 2025 08:01:15 +0000 Manifest this update: Sun 29 Jun 2025 07:56:15 +0000 Manifest next update: Wed 02 Jul 2025 16:11:15 +0000 Files and hashes: 1: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: zBeoA45+pWdqka5XtO4MP/M+DFGL6pvvaMdBwJOxKOw=) 2: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: QJX8gN5qCZ248XxYcOkj9y8Yy9OG8gAXiFIbOeNfS/4=) 3: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: LRhEPgcA58RSy/m0yWKLXEHl9rBHjxTVr8uQ2ibEruw=) 4: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: SavftCjxfzKeh9QfZVYuZ4/nKtgaHcLMvQCr8+Ies8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:59:57:6e:48:eb:9d:d8:15:77:c7:b4:6e:e9:69:b0:fa:63:ec:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Validity Not Before: Jun 29 07:56:15 2025 GMT Not After : Jul 2 16:11:15 2025 GMT Subject: CN=0750FFF147482974D9C61F9C83443530519575D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:73:db:3d:cc:9d:31:5b:72:35:22:64:a6: 76:bc:d2:54:05:6b:d9:dd:7f:db:68:3b:d6:c3:2a: 6a:a4:5f:45:d4:10:d0:78:2f:dd:fa:f0:21:fc:e3: ec:ac:80:22:ab:4c:b5:51:ec:21:9f:27:e9:1d:a6: 86:95:bd:4b:f2:7c:8e:7e:ab:22:b1:e9:f9:8d:5a: 8b:7a:f4:9b:4d:52:2c:8c:45:7e:1b:bd:00:36:3c: e2:4f:0d:9b:cd:ef:7b:a9:91:a6:27:22:86:4e:dd: 79:49:c4:0d:de:9c:ea:40:03:e9:c8:0e:6b:8b:e3: 13:20:5d:5a:ec:63:9c:7c:ff:ac:2d:3c:6a:06:4d: 9a:ac:94:ed:f6:e0:c6:90:d7:95:35:83:e9:1d:a8: 15:1e:d0:11:08:03:12:d7:5b:f2:8e:c5:d0:54:bc: 08:da:05:10:ae:1f:58:dc:16:11:75:c9:23:9b:77: 1d:e0:e5:fd:f9:53:a9:49:aa:81:b7:3a:ec:7c:94: 20:da:8b:4f:06:74:7b:e6:96:e6:0e:e6:0b:80:f8: 12:f3:56:5d:5a:2a:65:c3:4e:70:6b:eb:15:08:74: 0e:8b:8f:8d:cc:dc:44:94:9f:3f:b0:20:0a:9b:ac: e9:39:19:26:10:4f:b1:52:f5:e5:52:5c:ab:c1:44: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:50:FF:F1:47:48:29:74:D9:C6:1F:9C:83:44:35:30:51:95:75:D6 X509v3 Authority Key Identifier: keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:4e:96:e4:bc:90:cf:fc:34:1d:4d:81:2b:2d:ce:4a:05:bf: 84:4b:eb:bd:32:9c:d5:fc:0d:57:5f:ea:84:3a:6e:fb:92:4c: 29:20:9a:82:d6:e9:96:db:0c:de:e9:d2:65:68:79:5f:1e:98: 25:63:31:78:de:9a:45:98:30:48:3f:7f:7a:f6:ef:c1:b2:a1: 25:f4:0d:dc:a8:5a:b8:61:85:28:9b:6c:d5:d0:15:f7:5c:cb: 12:9d:7c:a4:eb:6f:c5:49:8f:b1:e9:af:f8:87:c1:7a:b6:75: 98:dd:f0:8b:e3:2a:33:8f:58:45:3c:21:00:a5:a9:42:be:b4: de:75:9e:fd:35:fc:4e:05:e3:fd:ef:37:43:03:b1:73:51:23: 34:f0:1f:d6:8c:88:14:88:b2:42:48:c1:d6:a7:01:7b:9a:49: b9:10:01:cd:f5:af:76:dd:dc:55:cd:78:97:db:9f:88:d3:dd: 55:11:c3:87:46:1b:5b:36:0a:b8:34:08:7e:c0:00:e2:06:09: f0:2c:fe:66:10:5f:5d:0b:a4:81:d6:71:59:69:fb:05:a3:22: af:9c:59:e3:7a:8d:84:44:8a:10:4b:af:b3:e2:06:49:f9:15: a6:ff:45:28:44:ce:c7:a4:e9:ba:83:62:5a:ce:51:78:74:f7: b3:72:60:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFlXbkjrndgVd8e0bulpsPpj7LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD MjgyRDgwNDAeFw0yNTA2MjkwNzU2MTVaFw0yNTA3MDIxNjExMTVaMDMxMTAvBgNV BAMTKDA3NTBGRkYxNDc0ODI5NzREOUM2MUY5QzgzNDQzNTMwNTE5NTc1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26XPbPcydMVtyNSJkpna80lQF a9ndf9toO9bDKmqkX0XUENB4L9368CH84+ysgCKrTLVR7CGfJ+kdpoaVvUvyfI5+ qyKx6fmNWot69JtNUiyMRX4bvQA2POJPDZvN73upkaYnIoZO3XlJxA3enOpAA+nI DmuL4xMgXVrsY5x8/6wtPGoGTZqslO324MaQ15U1g+kdqBUe0BEIAxLXW/KOxdBU vAjaBRCuH1jcFhF1ySObdx3g5f35U6lJqoG3Oux8lCDai08GdHvmluYO5guA+BLz Vl1aKmXDTnBr6xUIdA6Lj43M3ESUnz+wIAqbrOk5GSYQT7FS9eVSXKvBRDWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB1D/8UdIKXTZxh+cg0Q1MFGVddYwHwYDVR0j BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1 OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy RDgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdF REFDMjgyRDgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVOluS8kM/8NB1NgSstzkoFv4RL670ynNX8 DVdf6oQ6bvuSTCkgmoLW6ZbbDN7p0mVoeV8emCVjMXjemkWYMEg/f3r278GyoSX0 DdyoWrhhhSibbNXQFfdcyxKdfKTrb8VJj7Hpr/iHwXq2dZjd8IvjKjOPWEU8IQCl qUK+tN51nv01/E4F4/3vN0MDsXNRIzTwH9aMiBSIskJIwdanAXuaSbkQAc31r3bd 3FXNeJfbn4jT3VURw4dGG1s2Crg0CH7AAOIGCfAs/mYQX10LpIHWcVlp+wWjIq+c WeN6jYREihBLr7PiBkn5Fab/RShEzsek6bqDYlrOUXh097NyYMU= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:55 2025 by rpki-client