$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: wxaS7yRZJ916YCA7WAVBzFD6cfncbb3iPUpQBe5iWbk= Subject key identifier: 63:41:2C:21:02:5C:D1:4E:7E:48:AD:34:F5:47:FD:0D:E4:0C:78:0E Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 402A134B120D98DC1CF82C02E464DE0399059E63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 01AF Signing time: Sat 19 Jul 2025 19:00:39 +0000 Manifest this update: Sat 19 Jul 2025 18:55:39 +0000 Manifest next update: Wed 23 Jul 2025 01:17:39 +0000 Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: qsN6cCaNvPRadYvOCvh81rbUqW03/U/6OgyS9kMLbwY=) 2: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: hsds5bttlbcUIXknC+7kBuDyZMWjB2QIsUN8WNx0APE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2a:13:4b:12:0d:98:dc:1c:f8:2c:02:e4:64:de:03:99:05:9e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Jul 19 18:55:39 2025 GMT Not After : Jul 23 01:17:39 2025 GMT Subject: CN=63412C21025CD14E7E48AD34F547FD0DE40C780E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:63:61:9f:3d:b1:ae:3e:3e:89:2d:15:a7: e6:80:0d:6c:53:bf:81:5d:67:bc:41:d3:15:39:90: fb:58:f5:c2:09:e8:ba:ce:c6:51:84:4b:58:7e:7a: 81:4b:1f:60:36:1b:b4:a7:ab:43:56:ee:aa:69:31: e4:6e:72:ce:c3:cc:4e:67:5c:3d:c5:9d:ad:f9:f5: a3:35:1b:6a:0f:e5:66:c7:ec:e6:57:6f:32:92:eb: a5:19:9b:ad:4a:d8:54:1b:fe:0a:4b:9d:0b:f3:94: df:1e:e9:17:d7:d9:fd:67:87:16:3b:6c:73:90:01: c6:40:13:2d:8d:0c:cf:51:f5:eb:b2:8b:d6:69:6d: 75:af:44:bc:55:aa:3d:25:93:07:11:81:05:d8:e8: 4a:b7:8c:81:cd:35:07:ac:74:7b:65:54:07:00:37: a5:5e:4c:e5:de:5a:57:f1:d1:f8:9e:e2:c4:ed:c6: e2:08:a2:bf:06:57:ab:32:7a:40:8e:6c:8c:f8:2d: cf:80:51:62:b2:ea:59:06:2a:ee:9b:28:39:3f:2f: 2f:8c:2b:ed:76:9e:84:02:1c:f6:98:b2:28:f9:99: f8:88:b6:6d:21:36:ab:77:b3:3e:9f:fd:63:77:a1: 1c:9f:c1:96:32:25:1f:61:c9:12:cb:88:d0:06:1e: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:41:2C:21:02:5C:D1:4E:7E:48:AD:34:F5:47:FD:0D:E4:0C:78:0E X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7e:ac:c3:45:02:86:6d:94:2b:f7:58:9a:27:c0:54:bf:59: 79:7a:72:9e:91:2d:3a:58:fd:2a:93:db:d4:7e:3b:6c:23:f9: b0:87:50:a0:72:4e:5d:d7:f2:f6:83:a1:47:22:ce:72:da:dd: e3:0a:eb:fa:19:15:ad:fc:16:77:77:48:98:6d:a7:d1:3d:6f: 4e:5f:f3:67:22:a6:f8:4e:72:53:6a:84:64:75:5e:9d:59:24: c0:38:e3:fc:ab:f6:94:80:dd:76:3d:e8:ae:39:99:18:ca:31: 57:9a:8d:70:ce:99:a0:d1:31:a5:90:eb:b8:42:f5:84:01:cc: 6b:a3:df:71:30:36:0f:64:60:83:f6:a9:a5:3a:9f:8e:8e:45: 74:bc:2d:0b:10:8d:0a:40:84:3d:f9:ba:af:62:ae:b8:b4:37: 58:86:3d:59:78:c0:b8:ab:75:68:d0:aa:70:8f:d2:01:0f:66: e8:ad:5b:53:6e:c0:d8:9f:c7:73:72:ab:67:a6:f9:71:a9:6d: f0:8f:c5:7d:0d:9e:b9:f0:0c:e8:21:71:3f:1b:c8:ec:08:cd: 16:92:3a:c4:fd:99:43:ba:b7:3a:36:f3:02:e4:15:6f:80:46: 76:d2:9f:01:35:57:79:be:73:58:25:36:0c:47:14:11:68:2e: 97:98:e1:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCoTSxINmNwc+CwC5GTeA5kFnmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNTA3MTkxODU1MzlaFw0yNTA3MjMwMTE3MzlaMDMxMTAvBgNV BAMTKDYzNDEyQzIxMDI1Q0QxNEU3RTQ4QUQzNEY1NDdGRDBERTQwQzc4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbmNhnz2xrj4+iS0Vp+aADWxT v4FdZ7xB0xU5kPtY9cIJ6LrOxlGES1h+eoFLH2A2G7Snq0NW7qppMeRucs7DzE5n XD3Fna359aM1G2oP5WbH7OZXbzKS66UZm61K2FQb/gpLnQvzlN8e6RfX2f1nhxY7 bHOQAcZAEy2NDM9R9euyi9ZpbXWvRLxVqj0lkwcRgQXY6Eq3jIHNNQesdHtlVAcA N6VeTOXeWlfx0fie4sTtxuIIor8GV6syekCObIz4Lc+AUWKy6lkGKu6bKDk/Ly+M K+12noQCHPaYsij5mfiItm0hNqt3sz6f/WN3oRyfwZYyJR9hyRLLiNAGHty5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY0EsIQJc0U5+SK009Uf9DeQMeA4wHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEF+rMNFAoZtlCv3WJonwFS/WXl6cp6RLTpY /SqT29R+O2wj+bCHUKByTl3X8vaDoUciznLa3eMK6/oZFa38Fnd3SJhtp9E9b05f 82cipvhOclNqhGR1Xp1ZJMA44/yr9pSA3XY96K45mRjKMVeajXDOmaDRMaWQ67hC 9YQBzGuj33EwNg9kYIP2qaU6n46ORXS8LQsQjQpAhD35uq9irri0N1iGPVl4wLir dWjQqnCP0gEPZuitW1NuwNifx3Nyq2em+XGpbfCPxX0NnrnwDOghcT8byOwIzRaS OsT9mUO6tzo28wLkFW+ARnbSnwE1V3m+c1glNgxHFBFoLpeY4VA= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:54 2025 by rpki-client