$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: Vlmxx8Ro9OWyLk/g4c333vmpAgqbofaPAvEAhXeBdPw= Subject key identifier: 9B:D1:32:6E:C6:B2:22:E2:92:09:4E:C3:0D:66:EE:2F:E9:BC:56:0B Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 231A50738691FD23958C78BD61E21C071CDFF690 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 0252 Signing time: Sun 15 Jun 2025 22:41:49 +0000 Manifest this update: Sun 15 Jun 2025 22:36:49 +0000 Manifest next update: Thu 19 Jun 2025 06:58:49 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: biBc3b6GGx2dUj7YnQWOhcGsodIKTbyhZn9FTYFEG1E=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk=) 3: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: fRw/JVBAyI8ixZ0f+CmU2myrWafzQjA7bDhAOBR84cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 06:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1a:50:73:86:91:fd:23:95:8c:78:bd:61:e2:1c:07:1c:df:f6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Jun 15 22:36:49 2025 GMT Not After : Jun 19 06:58:49 2025 GMT Subject: CN=9BD1326EC6B222E292094EC30D66EE2FE9BC560B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:96:c5:2a:c1:14:f5:b2:6a:da:8e:4a:d7: 62:7b:98:ab:f2:b8:30:1b:ec:a0:4d:e6:78:86:b0: 73:42:eb:5b:b1:a5:59:b7:99:69:5d:5e:71:07:23: 51:05:64:58:af:b2:d3:c7:0e:2d:e5:a8:d7:df:d8: d9:33:b7:91:ca:97:87:e5:26:b4:9d:e4:fa:d1:41: a9:10:56:9c:89:fa:ba:45:e8:d9:a1:29:92:f1:c6: 48:6c:8d:3e:c3:08:a6:ec:65:f8:a0:01:0c:f2:3d: d9:e9:86:1c:4d:54:bb:44:c8:ce:de:10:95:5d:fe: b9:e5:01:d2:bc:44:3d:87:81:76:15:e7:a4:42:62: dd:c9:58:27:6d:3c:92:dd:17:71:59:4c:54:9e:ef: 15:25:cc:13:83:70:81:c0:ff:56:d5:4a:ad:00:db: 8e:1a:7e:b3:66:da:f6:91:84:94:24:d6:6b:39:62: 59:8b:e1:fe:43:58:42:44:95:3f:64:eb:ae:59:28: 7b:ad:e5:9b:60:90:6b:14:74:cb:e8:42:a9:a0:ea: a8:3b:2b:cb:39:c3:b5:20:c0:df:51:c8:4a:dc:dd: c5:a8:ce:45:12:bd:84:c9:09:9e:d3:ad:a8:a4:ec: 17:7a:17:b3:c9:2a:e9:d0:56:c1:f7:4d:2d:2d:c4: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D1:32:6E:C6:B2:22:E2:92:09:4E:C3:0D:66:EE:2F:E9:BC:56:0B X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e4:e4:f1:58:c3:f0:88:ed:a2:40:11:50:ac:74:10:a2:85: f7:63:7b:bb:5e:be:1a:b5:d5:6e:5b:99:47:4a:97:73:41:ec: ad:69:15:05:e5:18:57:30:4c:32:d5:13:9c:b1:66:07:b5:cd: e3:9c:64:64:4a:e6:22:ff:54:0d:20:ec:13:95:55:17:55:99: b9:42:06:1d:3b:8c:64:94:95:1f:56:d6:b4:90:d6:03:27:31: e5:0a:1f:16:46:38:ed:86:f9:d2:1d:4d:c0:04:8a:51:ec:69: 57:ff:da:8c:db:f6:57:e0:4f:72:ec:c6:77:bc:b5:1b:00:d8: 37:76:eb:de:38:f3:22:0a:3d:a7:56:08:6d:2d:be:73:5c:0d: 18:6b:3b:7b:f7:2a:a1:d9:dd:e3:07:51:e0:c9:2e:36:c5:d2: 14:ed:61:ab:1c:c0:01:10:5f:bb:c3:a3:71:7d:c7:77:93:9f: 9b:13:16:f6:93:76:be:b5:fa:3f:cb:e6:0c:17:84:3f:48:65: 08:b5:a1:40:7e:6e:6f:26:e4:a9:fb:10:b9:de:8d:6e:23:d7: 11:9b:31:d8:d3:31:10:8c:b8:d1:d7:f4:cd:9b:6f:5a:78:ae: 75:45:ab:5e:c6:ad:42:4e:0e:43:66:a0:ef:69:ad:1a:3b:79: f4:47:32:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxpQc4aR/SOVjHi9YeIcBxzf9pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNTA2MTUyMjM2NDlaFw0yNTA2MTkwNjU4NDlaMDMxMTAvBgNV BAMTKDlCRDEzMjZFQzZCMjIyRTI5MjA5NEVDMzBENjZFRTJGRTlCQzU2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfpbFKsEU9bJq2o5K12J7mKvy uDAb7KBN5niGsHNC61uxpVm3mWldXnEHI1EFZFivstPHDi3lqNff2Nkzt5HKl4fl JrSd5PrRQakQVpyJ+rpF6NmhKZLxxkhsjT7DCKbsZfigAQzyPdnphhxNVLtEyM7e EJVd/rnlAdK8RD2HgXYV56RCYt3JWCdtPJLdF3FZTFSe7xUlzBODcIHA/1bVSq0A 244afrNm2vaRhJQk1ms5YlmL4f5DWEJElT9k665ZKHut5ZtgkGsUdMvoQqmg6qg7 K8s5w7UgwN9RyErc3cWozkUSvYTJCZ7Traik7Bd6F7PJKunQVsH3TS0txLSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9EybsayIuKSCU7DDWbuL+m8VgswHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfk5PFYw/CI7aJAEVCsdBCihfdje7tevhq1 1W5bmUdKl3NB7K1pFQXlGFcwTDLVE5yxZge1zeOcZGRK5iL/VA0g7BOVVRdVmblC Bh07jGSUlR9W1rSQ1gMnMeUKHxZGOO2G+dIdTcAEilHsaVf/2ozb9lfgT3Lsxne8 tRsA2Dd269448yIKPadWCG0tvnNcDRhrO3v3KqHZ3eMHUeDJLjbF0hTtYascwAEQ X7vDo3F9x3eTn5sTFvaTdr61+j/L5gwXhD9IZQi1oUB+bm8m5Kn7ELnejW4j1xGb MdjTMRCMuNHX9M2bb1p4rnVFq17GrUJODkNmoO9prRo7efRHMgc= -----END CERTIFICATE-----Generated at Tue Jun 17 08:22:47 2025 by rpki-client