$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: MnTOOMr4zGS/CMA2W2BL8sblqApbLb99rqevYIlSVmU= Subject key identifier: 99:C4:E5:71:18:C0:A7:05:EB:E0:49:9E:88:0F:A4:5B:34:4B:A7:33 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 52225BDA80678B87A83DC8230A37CBC13734E5D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: C1 Signing time: Fri 09 May 2025 16:02:00 +0000 Manifest this update: Fri 09 May 2025 15:57:00 +0000 Manifest next update: Mon 12 May 2025 19:23:00 +0000 Files and hashes: 1: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: E0KW3mAXB5HdHZ9BYDBgQsOrGs7XNvMe2vZTIpPi4Bk=) 2: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: Q31WVg0nt9Akn7sHQ0ovSP+rHovoJ3AXQpCRAfyJpn4=) 3: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Zks55AdYxfoprGZkiZN/TIj//KiubcvneSX7655/CJQ=) 4: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: EDTzr0RnERkDSs2/M4R/0RtE2R+ut3mngAzM50kbtVY=) 5: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: xDimJNI1Twl7hCA1S5QHDj3z6dVO53eSr1zwPr1dzLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 19:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:22:5b:da:80:67:8b:87:a8:3d:c8:23:0a:37:cb:c1:37:34:e5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: May 9 15:57:00 2025 GMT Not After : May 12 19:23:00 2025 GMT Subject: CN=99C4E57118C0A705EBE0499E880FA45B344BA733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:a1:06:30:0d:42:7d:63:33:2d:17:53:2d: 48:7c:43:42:80:61:44:c4:ed:a6:e4:7f:ee:b3:16: bd:c9:4a:78:c0:3a:45:5d:7f:b0:6b:e8:bb:d0:ea: c6:ca:e3:0c:65:e8:ce:47:a2:51:d2:16:81:ab:bc: 9a:28:8e:2b:7c:f5:3a:b1:07:5e:8e:fd:ff:b4:9e: 07:2b:69:4a:10:c2:e0:ac:be:c5:d0:15:c1:ae:5b: 4d:12:11:36:7b:4f:5f:f1:a4:34:95:bb:17:8c:cd: ae:62:3e:2d:23:4e:e4:a2:11:49:9f:51:8c:4e:37: d2:45:4c:5d:d4:df:61:31:82:b1:d8:a4:f7:97:06: 96:52:cd:aa:91:8d:6e:d2:0b:d1:6e:29:c7:17:94: 7c:51:bf:d6:ec:e4:6e:c7:c5:e7:a6:fe:ba:6b:56: d1:62:01:93:03:ae:c9:b2:a8:92:a1:7e:e4:20:c9: cb:0b:71:8e:18:9e:ca:db:9c:cc:6e:e2:40:d7:d8: 83:1d:8f:4c:f2:a9:bb:30:06:34:79:89:f0:af:4e: d0:f5:67:21:1f:81:cc:23:70:44:55:79:b8:31:3c: 23:13:b6:28:05:66:1e:1c:7d:90:63:9c:75:5f:57: 44:7f:5a:2c:d5:1c:ef:f8:b1:07:c6:f4:d9:b8:99: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C4:E5:71:18:C0:A7:05:EB:E0:49:9E:88:0F:A4:5B:34:4B:A7:33 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6b:ee:7f:a5:2b:ba:80:6f:99:c0:0b:5b:1f:c1:82:4c:d9: 05:8f:c2:25:e9:14:25:33:4d:83:4d:50:a1:1c:4b:e1:44:ba: 4a:d1:6c:36:21:2f:4a:dc:67:0c:3a:ad:3d:b1:9d:13:db:9c: d4:f8:7c:23:e7:79:f0:89:4c:f6:90:c7:67:9b:01:f6:da:46: 0d:1b:03:56:33:9c:66:73:6c:b0:7f:b6:32:ff:a3:7a:32:cc: d1:f7:69:da:bb:eb:55:d0:56:07:41:74:df:54:f2:d5:70:c2: 78:b2:a4:6f:6c:a7:cc:17:f7:2a:1d:1a:75:bb:69:75:fd:0d: 47:3d:e9:b9:05:16:82:ee:92:c5:d6:32:2e:b4:e9:68:0d:1f: cc:4e:67:7b:39:97:41:cb:3f:3f:d8:1e:44:b0:68:1f:46:10: 3d:b6:b8:89:ef:80:8b:ff:f9:a5:2b:81:30:43:9a:46:72:77: 7e:b7:5c:a7:a4:d3:e5:f7:2d:5c:4a:5a:90:ac:ac:1d:af:51: 54:b6:6e:77:33:65:ad:95:20:cc:39:83:63:16:f3:1b:43:b9: 68:d2:95:e2:e0:a5:58:18:e1:5f:c4:c1:5a:98:15:9c:c0:72: 54:fa:a8:8f:3e:54:00:6c:b2:8d:21:15:e9:27:5d:45:a7:a0: ed:34:0a:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUiJb2oBni4eoPcgjCjfLwTc05dcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNTA1MDkxNTU3MDBaFw0yNTA1MTIxOTIzMDBaMDMxMTAvBgNV BAMTKDk5QzRFNTcxMThDMEE3MDVFQkUwNDk5RTg4MEZBNDVCMzQ0QkE3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItaEGMA1CfWMzLRdTLUh8Q0KA YUTE7abkf+6zFr3JSnjAOkVdf7Br6LvQ6sbK4wxl6M5HolHSFoGrvJoojit89Tqx B16O/f+0ngcraUoQwuCsvsXQFcGuW00SETZ7T1/xpDSVuxeMza5iPi0jTuSiEUmf UYxON9JFTF3U32ExgrHYpPeXBpZSzaqRjW7SC9FuKccXlHxRv9bs5G7Hxeem/rpr VtFiAZMDrsmyqJKhfuQgycsLcY4YnsrbnMxu4kDX2IMdj0zyqbswBjR5ifCvTtD1 ZyEfgcwjcERVebgxPCMTtigFZh4cfZBjnHVfV0R/WizVHO/4sQfG9Nm4mbcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmcTlcRjApwXr4EmeiA+kWzRLpzMwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZr7n+lK7qAb5nAC1sfwYJM2QWPwiXpFCUz TYNNUKEcS+FEukrRbDYhL0rcZww6rT2xnRPbnNT4fCPnefCJTPaQx2ebAfbaRg0b A1YznGZzbLB/tjL/o3oyzNH3adq761XQVgdBdN9U8tVwwniypG9sp8wX9yodGnW7 aXX9DUc96bkFFoLuksXWMi606WgNH8xOZ3s5l0HLPz/YHkSwaB9GED22uInvgIv/ +aUrgTBDmkZyd363XKek0+X3LVxKWpCsrB2vUVS2bnczZa2VIMw5g2MW8xtDuWjS leLgpVgY4V/EwVqYFZzAclT6qI8+VABsso0hFeknXUWnoO00Cgk= -----END CERTIFICATE-----Generated at Sat May 10 17:56:42 2025 by rpki-client