$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: 8Obbd6mzs/Go4gCT1GicjIQc9iYWwAaFUHlLmWYFscM= Subject key identifier: 7D:A7:D9:B3:E1:53:0A:11:A7:DC:DD:B8:18:23:AF:7D:0E:1D:9E:8E Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: B1531154C97236EABE6756E5CBB5622ADF7C71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 0258 Signing time: Sun 29 Jun 2025 07:11:51 +0000 Manifest this update: Sun 29 Jun 2025 07:06:51 +0000 Manifest next update: Wed 02 Jul 2025 17:17:51 +0000 Files and hashes: 1: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: /5cfuG2zAQpDuMx49gvgbrnIew9Mfkp5iUncE1NBrNg=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk=) 3: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: biBc3b6GGx2dUj7YnQWOhcGsodIKTbyhZn9FTYFEG1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 17:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b1:53:11:54:c9:72:36:ea:be:67:56:e5:cb:b5:62:2a:df:7c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Jun 29 07:06:51 2025 GMT Not After : Jul 2 17:17:51 2025 GMT Subject: CN=7DA7D9B3E1530A11A7DCDDB81823AF7D0E1D9E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:72:57:ae:79:02:78:97:a0:22:a6:5f:d6:6f: bf:6f:80:42:2b:a1:9e:8d:43:bc:4b:a8:2c:c4:44: f7:cc:e5:30:5a:67:b1:91:8a:32:83:70:6f:90:14: 92:ad:bb:75:54:ae:3e:08:dc:3e:57:1a:4a:bc:da: ec:f4:3d:9c:e1:ad:01:ee:10:1a:ee:0d:ba:6a:bc: 28:99:39:64:75:25:e8:b8:e7:e0:44:fb:5b:75:fb: 44:4c:ee:46:b5:dd:39:c7:5f:74:70:e5:c2:a7:b1: be:51:cd:b7:b7:c2:17:9a:6d:d0:43:cd:04:fa:11: 10:c3:4c:bd:68:00:c1:14:df:56:1d:1e:3e:44:6f: 70:c8:59:e2:8d:16:af:65:c5:a3:60:02:c5:c6:9c: cf:5e:84:b3:ca:8a:94:70:db:1d:1c:49:7e:b3:85: ad:0c:e1:e7:23:07:f3:75:7c:df:4b:75:33:05:79: 02:3b:cd:39:fe:f7:0c:89:20:e0:ec:d7:8c:87:73: a7:8a:c9:b2:0d:24:db:9d:78:83:c0:89:52:08:60: b1:7a:55:fb:7a:d4:34:46:ff:ce:7a:7d:66:35:56: 8e:fd:d8:a5:fd:35:51:8a:16:2f:94:c3:77:8f:1a: b5:cc:ef:23:62:2a:17:45:67:29:1b:05:8c:c2:16: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A7:D9:B3:E1:53:0A:11:A7:DC:DD:B8:18:23:AF:7D:0E:1D:9E:8E X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5f:3b:96:dc:e2:6f:27:f3:a8:b3:86:d7:31:eb:e0:9b:84: c5:7f:8d:dd:26:24:b1:e0:0d:2c:b3:fd:06:70:7c:b4:e9:79: 0a:4d:94:c1:c0:6d:0e:21:7f:8e:89:24:8f:65:60:e3:8c:4f: a7:53:9f:2c:eb:2e:c4:00:80:fc:ae:d2:8e:83:2d:ac:d0:b6: 6f:fc:14:22:73:20:16:92:b5:fd:c9:9a:f4:16:cd:ca:c8:d9: a1:dc:f5:51:c5:62:55:c5:46:43:a2:80:05:4f:87:eb:39:17: 34:1c:a0:08:f6:77:cd:9f:56:fd:9c:64:94:d5:04:12:27:eb: 88:0b:46:e1:2d:13:65:86:1f:ef:7c:87:49:11:bb:cf:71:cb: 79:a1:69:a4:4c:24:0e:81:c6:3d:02:fd:73:8f:06:09:a6:4d: 2b:69:a0:f8:8e:19:a2:5e:a7:53:0c:8f:76:80:db:d9:7a:37: 84:33:0c:44:34:43:ab:84:97:a9:a1:7a:4c:9c:7e:87:a9:45: 8c:2a:0e:04:0c:d3:fd:82:08:ee:6b:e6:61:92:d1:d9:cd:c3: 36:51:6a:44:48:d4:34:39:8c:d6:31:9c:e5:57:fb:9d:c0:43: de:62:9d:29:ab:61:81:11:05:28:2b:dc:f8:f2:34:6f:ba:0b: da:05:30:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUALFTEVTJcjbqvmdW5cu1YirffHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTA2MjkwNzA2NTFaFw0yNTA3MDIxNzE3NTFaMDMxMTAvBgNV BAMTKDdEQTdEOUIzRTE1MzBBMTFBN0RDRERCODE4MjNBRjdEMEUxRDlFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1cleueQJ4l6Aipl/Wb79vgEIr oZ6NQ7xLqCzERPfM5TBaZ7GRijKDcG+QFJKtu3VUrj4I3D5XGkq82uz0PZzhrQHu EBruDbpqvCiZOWR1Jei45+BE+1t1+0RM7ka13TnHX3Rw5cKnsb5Rzbe3wheabdBD zQT6ERDDTL1oAMEU31YdHj5Eb3DIWeKNFq9lxaNgAsXGnM9ehLPKipRw2x0cSX6z ha0M4ecjB/N1fN9LdTMFeQI7zTn+9wyJIODs14yHc6eKybINJNudeIPAiVIIYLF6 Vft61DRG/856fWY1Vo792KX9NVGKFi+Uw3ePGrXM7yNiKhdFZykbBYzCFhPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfafZs+FTChGn3N24GCOvfQ4dno4wHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdfO5bc4m8n86izhtcx6+CbhMV/jd0mJLHg DSyz/QZwfLTpeQpNlMHAbQ4hf46JJI9lYOOMT6dTnyzrLsQAgPyu0o6DLazQtm/8 FCJzIBaStf3JmvQWzcrI2aHc9VHFYlXFRkOigAVPh+s5FzQcoAj2d82fVv2cZJTV BBIn64gLRuEtE2WGH+98h0kRu89xy3mhaaRMJA6Bxj0C/XOPBgmmTStpoPiOGaJe p1MMj3aA29l6N4QzDEQ0Q6uEl6mhekycfoepRYwqDgQM0/2CCO5r5mGS0dnNwzZR akRI1DQ5jNYxnOVX+53AQ95inSmrYYERBSgr3PjyNG+6C9oFMDg= -----END CERTIFICATE-----Generated at Mon Jun 30 07:40:25 2025 by rpki-client