$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: RsGu7xnza2VnNa3IVwBrtonWOhRdCedXgzOSCmQAXHk= Subject key identifier: 8A:87:FB:BA:10:C8:BD:FE:03:D5:A8:97:4D:1E:49:B7:48:26:D0:F3 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 0F26E3BCC2A8487AC0DEDAA2F91C87AD8DDBF7FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: D1 Signing time: Sun 15 Jun 2025 03:42:00 +0000 Manifest this update: Sun 15 Jun 2025 03:37:00 +0000 Manifest next update: Wed 18 Jun 2025 09:23:00 +0000 Files and hashes: 1: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: Q31WVg0nt9Akn7sHQ0ovSP+rHovoJ3AXQpCRAfyJpn4=) 2: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Zks55AdYxfoprGZkiZN/TIj//KiubcvneSX7655/CJQ=) 3: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: 2JzgCmOaQ49l5U/g+EHiH+L1Ww1bYVHZfHOeW8bM3E4=) 4: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: xDimJNI1Twl7hCA1S5QHDj3z6dVO53eSr1zwPr1dzLg=) 5: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: EDTzr0RnERkDSs2/M4R/0RtE2R+ut3mngAzM50kbtVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:26:e3:bc:c2:a8:48:7a:c0:de:da:a2:f9:1c:87:ad:8d:db:f7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Jun 15 03:37:00 2025 GMT Not After : Jun 18 09:23:00 2025 GMT Subject: CN=8A87FBBA10C8BDFE03D5A8974D1E49B74826D0F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:fd:03:ea:0e:b4:0f:a2:d1:9c:e1:cb:aa: 18:0d:12:24:78:12:f2:47:97:6f:87:2a:af:50:27: 0a:be:44:93:ff:32:8a:30:43:3e:c2:2a:63:db:bb: a8:97:58:ed:ac:4c:2a:ed:c5:6d:51:29:67:39:5b: f7:4e:49:fd:67:ea:90:91:81:9f:f1:0c:b7:66:74: 2f:35:59:95:9f:3f:3e:aa:62:66:16:1a:ad:ce:00: 4c:2a:19:3e:34:15:58:9b:7e:75:89:78:b0:cd:c3: cf:61:68:eb:bd:77:d2:58:26:e8:80:a1:00:3d:e5: d8:08:9b:2b:15:c7:65:72:ef:fc:ae:9d:c2:4d:97: ce:65:90:f5:82:30:0e:ab:ed:9b:43:22:68:c3:b7: d9:8e:d7:70:99:f5:2c:23:ec:62:06:12:aa:d6:dd: 46:03:16:e9:e6:f9:89:92:48:57:41:ae:7c:ea:83: 8b:fe:07:e2:7d:c8:95:2e:5f:39:7d:fe:70:33:37: 7c:12:a9:ae:9f:b3:09:50:8f:37:b3:01:9c:1f:8d: 37:9e:ca:5c:49:e0:86:e3:c7:63:51:bd:ad:92:d6: 29:c7:70:4a:17:df:62:34:ba:1c:9d:d4:53:df:4c: fe:9a:76:90:a8:08:37:e5:c5:e1:4e:b7:39:70:f2: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:87:FB:BA:10:C8:BD:FE:03:D5:A8:97:4D:1E:49:B7:48:26:D0:F3 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e0:a1:53:ee:c1:4d:5a:1b:24:d8:e2:0d:be:9d:8d:03:cb: 57:dd:85:a9:3a:a7:0f:5c:70:a9:00:b1:3d:8a:40:9f:2a:6a: f0:56:56:62:d4:9d:b3:2b:ae:9d:c8:45:79:23:b4:8b:81:64: dd:8f:5b:a5:8f:87:9b:7c:dd:2e:d5:8c:88:1a:70:89:76:b5: 57:8b:4e:50:56:bc:da:5d:b9:78:dd:97:db:af:50:09:19:06: ac:b6:cf:f9:c3:b2:32:c5:0e:e7:4e:94:66:cc:36:20:f2:87: 5b:ee:74:ec:eb:ad:2d:cf:92:3a:a3:38:8d:9b:f3:65:41:40: 52:d4:4c:9e:73:ac:d1:b4:06:e8:78:9f:02:a9:cb:82:ea:19: 67:94:1b:ff:ed:a2:b4:a7:87:8f:6d:22:83:d7:24:a4:a0:c0: 41:64:46:4d:25:8f:c0:44:a8:cc:1b:5f:07:15:64:40:e7:35: 6f:97:1b:c4:b7:46:c6:ff:24:67:43:99:72:06:a9:73:fe:ef: 93:9b:77:e9:b3:86:13:6c:da:b5:0d:4d:e4:61:46:b4:c2:8f: 98:a7:13:c7:6b:a7:6a:31:de:ee:a4:1a:de:11:e4:95:6f:ba: d6:9a:90:17:88:84:09:7f:b8:70:63:ef:3d:85:a3:31:e7:2a: c5:3b:a2:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDybjvMKoSHrA3tqi+RyHrY3b9/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNTA2MTUwMzM3MDBaFw0yNTA2MTgwOTIzMDBaMDMxMTAvBgNV BAMTKDhBODdGQkJBMTBDOEJERkUwM0Q1QTg5NzREMUU0OUI3NDgyNkQwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17f0D6g60D6LRnOHLqhgNEiR4 EvJHl2+HKq9QJwq+RJP/MoowQz7CKmPbu6iXWO2sTCrtxW1RKWc5W/dOSf1n6pCR gZ/xDLdmdC81WZWfPz6qYmYWGq3OAEwqGT40FVibfnWJeLDNw89haOu9d9JYJuiA oQA95dgImysVx2Vy7/yuncJNl85lkPWCMA6r7ZtDImjDt9mO13CZ9Swj7GIGEqrW 3UYDFunm+YmSSFdBrnzqg4v+B+J9yJUuXzl9/nAzN3wSqa6fswlQjzezAZwfjTee ylxJ4Ibjx2NRva2S1inHcEoX32I0uhyd1FPfTP6adpCoCDflxeFOtzlw8rovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiof7uhDIvf4D1aiXTR5Jt0gm0PMwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEngoVPuwU1aGyTY4g2+nY0Dy1fdhak6pw9c cKkAsT2KQJ8qavBWVmLUnbMrrp3IRXkjtIuBZN2PW6WPh5t83S7VjIgacIl2tVeL TlBWvNpduXjdl9uvUAkZBqy2z/nDsjLFDudOlGbMNiDyh1vudOzrrS3PkjqjOI2b 82VBQFLUTJ5zrNG0Buh4nwKpy4LqGWeUG//torSnh49tIoPXJKSgwEFkRk0lj8BE qMwbXwcVZEDnNW+XG8S3Rsb/JGdDmXIGqXP+75Obd+mzhhNs2rUNTeRhRrTCj5in E8drp2ox3u6kGt4R5JVvutaakBeIhAl/uHBj7z2FozHnKsU7ojA= -----END CERTIFICATE-----Generated at Mon Jun 16 21:38:49 2025 by rpki-client