$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: /0TRaA6MM9TKKlINy6KD610eaZveGDuKrNQFmv9rSmE= Subject key identifier: 0E:BA:E6:FA:68:2F:85:4F:AA:5F:E0:F4:1A:6C:F2:6B:C4:D2:F0:48 Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 29AA6DEB6228731CFA6A782BB02F84CCEE83B8FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 0242 Signing time: Sat 10 May 2025 12:31:49 +0000 Manifest this update: Sat 10 May 2025 12:26:49 +0000 Manifest next update: Tue 13 May 2025 17:38:49 +0000 Files and hashes: 1: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: 7luiIvCXYdqzG5Ao8htLE8bwXHhKBJT+TvsaUT0Q8Wg=) 2: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: biBc3b6GGx2dUj7YnQWOhcGsodIKTbyhZn9FTYFEG1E=) 3: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:aa:6d:eb:62:28:73:1c:fa:6a:78:2b:b0:2f:84:cc:ee:83:b8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: May 10 12:26:49 2025 GMT Not After : May 13 17:38:49 2025 GMT Subject: CN=0EBAE6FA682F854FAA5FE0F41A6CF26BC4D2F048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:9c:f6:b8:01:04:be:c9:4a:7d:78:39:4e: 06:27:de:4f:78:15:b0:eb:7f:26:ba:bd:21:f6:0f: 83:60:95:26:ae:ef:75:0c:37:3d:b3:f3:3f:30:0c: ed:a0:a1:2d:ef:4c:49:d6:f5:ce:5e:c2:95:b5:6c: 1c:c2:ae:c9:e0:20:1e:a8:54:3a:aa:fb:8b:a8:07: ca:6a:d8:d0:7d:31:52:e0:3b:6b:e6:fa:b7:4a:cf: d2:bc:75:3a:09:7b:94:53:6e:1b:1f:d7:0b:d2:43: 91:54:1a:55:27:86:bd:8f:2b:e2:5a:47:59:92:76: f4:15:6a:8a:f8:b0:3b:08:7a:6e:4f:75:63:52:11: 48:ae:e2:77:56:fd:98:7e:bf:fc:df:4a:63:66:9c: de:cf:a1:1a:04:cd:bb:c8:4a:7f:2d:5f:4f:b0:34: a5:66:94:73:a7:25:93:f8:1e:90:a6:0a:8a:56:ba: c6:0b:fc:36:8d:bb:53:6c:fd:74:4c:10:ee:a4:9b: b0:86:42:b5:70:95:96:97:db:c8:ea:48:62:94:a8: 6f:4c:12:57:24:c2:a2:4d:8b:d1:e6:b9:ec:98:91: 72:4a:e3:bd:99:d9:cb:e7:fd:31:3f:e2:2d:f7:a4: f5:fe:b2:0e:31:0e:d8:a4:b0:a3:20:18:2c:99:7b: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BA:E6:FA:68:2F:85:4F:AA:5F:E0:F4:1A:6C:F2:6B:C4:D2:F0:48 X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:df:2c:e0:a5:a6:e9:7c:77:b2:3e:ca:cd:e2:4e:e1:64:21: 39:a3:27:4b:da:37:f8:b7:aa:e7:11:c2:f4:1b:f2:a2:1f:02: c5:2f:72:bc:1e:df:0d:cd:29:f5:32:c0:b7:f3:67:b2:18:bd: be:09:80:28:09:22:ce:d1:70:55:d3:28:6c:4e:f8:01:dd:22: eb:15:ef:8f:00:ad:e6:4b:29:d1:68:41:8d:d3:b2:31:88:4c: a6:fd:d8:21:7c:ad:5d:99:3b:70:c7:0f:d4:77:51:1d:50:60: f8:c4:a7:52:c0:bb:bd:a0:e4:59:8e:78:8f:82:de:e4:e5:2b: d2:62:73:fd:4e:86:5f:16:6d:11:fd:ec:46:27:37:ad:3d:a5: a6:56:9b:77:2d:e2:1d:da:fa:54:89:f5:68:3d:a0:2e:a7:15: 5e:57:37:19:8c:6a:54:10:e8:a1:cf:e2:5f:91:59:4e:b0:5c: 0d:5a:e2:fa:9b:29:b8:6d:74:b6:06:ae:27:0c:49:16:c1:91: ce:eb:b0:88:ca:92:84:1a:e4:c5:96:69:f8:f4:39:40:10:74: a3:02:9e:d1:fa:b5:ae:cf:8b:01:06:41:90:92:7a:3b:81:3c: 13:04:8b:93:9d:94:09:77:84:03:a2:f7:05:41:29:19:36:09: 2a:87:da:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKapt62Iocxz6angrsC+EzO6DuPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTA1MTAxMjI2NDlaFw0yNTA1MTMxNzM4NDlaMDMxMTAvBgNV BAMTKDBFQkFFNkZBNjgyRjg1NEZBQTVGRTBGNDFBNkNGMjZCQzREMkYwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zJz2uAEEvslKfXg5TgYn3k94 FbDrfya6vSH2D4NglSau73UMNz2z8z8wDO2goS3vTEnW9c5ewpW1bBzCrsngIB6o VDqq+4uoB8pq2NB9MVLgO2vm+rdKz9K8dToJe5RTbhsf1wvSQ5FUGlUnhr2PK+Ja R1mSdvQVaor4sDsIem5PdWNSEUiu4ndW/Zh+v/zfSmNmnN7PoRoEzbvISn8tX0+w NKVmlHOnJZP4HpCmCopWusYL/DaNu1Ns/XRMEO6km7CGQrVwlZaX28jqSGKUqG9M ElckwqJNi9HmueyYkXJK472Z2cvn/TE/4i33pPX+sg4xDtiksKMgGCyZe3H3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDrrm+mgvhU+qX+D0Gmzya8TS8EgwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADffLOClpul8d7I+ys3iTuFkITmjJ0vaN/i3 qucRwvQb8qIfAsUvcrwe3w3NKfUywLfzZ7IYvb4JgCgJIs7RcFXTKGxO+AHdIusV 748AreZLKdFoQY3TsjGITKb92CF8rV2ZO3DHD9R3UR1QYPjEp1LAu72g5FmOeI+C 3uTlK9Jic/1Ohl8WbRH97EYnN609paZWm3ct4h3a+lSJ9Wg9oC6nFV5XNxmMalQQ 6KHP4l+RWU6wXA1a4vqbKbhtdLYGricMSRbBkc7rsIjKkoQa5MWWafj0OUAQdKMC ntH6ta7PiwEGQZCSejuBPBMEi5OdlAl3hAOi9wVBKRk2CSqH2p8= -----END CERTIFICATE-----Generated at Sat May 10 17:14:31 2025 by rpki-client