$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: owV2/03GLchppIWmylU/TjwNjxBodWEI3fuesM38arc= Subject key identifier: 49:67:73:AE:4C:C5:C9:DB:A0:AF:EC:F1:AE:D1:D8:C7:7A:F2:A3:46 Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 14607ECC45C5C7EFA58196C97B15B0C61C8519A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 0210 Signing time: Sun 20 Jul 2025 17:52:06 +0000 Manifest this update: Sun 20 Jul 2025 17:47:06 +0000 Manifest next update: Wed 23 Jul 2025 21:34:06 +0000 Files and hashes: 1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) 2: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: TqKtqQX0V+2IgB5j1UlZxzsxob//nfwkybdXEjQKBeY=) 3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:60:7e:cc:45:c5:c7:ef:a5:81:96:c9:7b:15:b0:c6:1c:85:19:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Jul 20 17:47:06 2025 GMT Not After : Jul 23 21:34:06 2025 GMT Subject: CN=496773AE4CC5C9DBA0AFECF1AED1D8C77AF2A346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:41:cc:7f:f6:7f:a0:a3:e9:77:a5:02:a5: 83:ff:6d:e4:f3:d6:92:f0:a1:1d:9e:dd:cf:19:eb: 0f:5f:0e:a2:bf:64:6a:e7:11:c5:6c:87:d8:4e:bf: 50:82:9b:a4:b1:8b:1c:f3:0c:d5:05:e7:ca:b7:37: 49:d0:9f:61:75:b2:2e:bc:51:16:68:74:7e:6b:d8: f5:ae:86:58:9d:fb:67:e0:de:ca:c2:8c:b0:cf:4d: 26:f8:0b:30:c5:90:f7:32:61:80:01:05:c2:c7:70: 47:ca:9b:85:65:b7:f4:0c:d2:dd:31:0a:58:be:0d: 19:91:df:4d:a9:ee:1b:3e:67:c8:0e:3b:79:89:8c: b8:a8:d5:b6:19:d9:84:e8:7b:18:26:ff:46:42:d8: a7:2b:9e:64:2c:62:fe:62:0f:98:d2:18:74:e7:ce: b1:8c:ec:2f:bb:62:57:e1:45:22:1f:41:a8:d4:1d: b2:81:9e:07:d2:51:9a:0f:7a:9a:c6:18:62:9a:83: 17:83:e3:ba:18:b7:34:8b:c0:30:46:8e:43:99:3f: 99:d9:cc:f8:29:7a:8b:59:18:88:b2:12:9f:94:52: bb:5d:74:18:e2:7c:0c:a4:ed:23:8f:b6:1f:03:a2: b1:6e:73:db:46:86:81:ac:d2:98:39:ea:06:a5:e5: 50:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:67:73:AE:4C:C5:C9:DB:A0:AF:EC:F1:AE:D1:D8:C7:7A:F2:A3:46 X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ac:79:21:50:18:26:89:28:1e:ec:e7:b4:39:d0:1c:5d:34: c7:a0:08:64:8d:92:37:e0:2f:7d:1d:ad:0f:7d:ba:cb:31:aa: c8:b7:1f:9d:5f:53:6e:a7:7a:89:de:86:96:27:24:b9:07:6b: 77:0f:e6:a2:1c:8b:66:6b:d5:7e:db:4a:e3:00:cb:e5:d3:ef: 6f:bc:b0:dd:ed:6b:d8:62:c0:58:5c:50:49:3f:c1:5c:94:2e: 0b:1c:3f:fc:21:92:f7:31:5a:ec:fc:f7:77:f6:14:88:68:8e: 82:06:c1:c7:8a:d6:3a:fb:79:02:a3:f6:29:47:47:98:de:44: 49:f7:6b:24:8a:7e:f1:df:37:13:fc:2a:e6:53:61:e1:02:dc: da:81:4d:71:f5:67:51:09:0f:6b:6a:8b:c1:f5:1a:ba:09:44: 39:73:dd:e8:f3:4b:56:2d:63:a1:f4:77:cb:ba:ee:66:88:39: 0f:2e:a2:1f:a6:7e:f4:44:3b:50:53:e0:e7:6a:93:03:95:59: 63:04:b8:df:37:a4:06:2a:1c:b4:3f:1d:b2:03:6d:45:6b:ae: 20:ec:21:ec:c8:8d:a4:d1:b4:24:ee:98:1c:27:d9:06:fa:ab: 8d:28:5c:46:a3:fc:f3:77:96:5c:15:94:79:1e:ce:98:53:3c: 33:d6:09:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGB+zEXFx++lgZbJexWwxhyFGaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTA3MjAxNzQ3MDZaFw0yNTA3MjMyMTM0MDZaMDMxMTAvBgNV BAMTKDQ5Njc3M0FFNENDNUM5REJBMEFGRUNGMUFFRDFEOEM3N0FGMkEzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC090HMf/Z/oKPpd6UCpYP/beTz 1pLwoR2e3c8Z6w9fDqK/ZGrnEcVsh9hOv1CCm6SxixzzDNUF58q3N0nQn2F1si68 URZodH5r2PWuhlid+2fg3srCjLDPTSb4CzDFkPcyYYABBcLHcEfKm4Vlt/QM0t0x Cli+DRmR302p7hs+Z8gOO3mJjLio1bYZ2YToexgm/0ZC2KcrnmQsYv5iD5jSGHTn zrGM7C+7YlfhRSIfQajUHbKBngfSUZoPeprGGGKagxeD47oYtzSLwDBGjkOZP5nZ zPgpeotZGIiyEp+UUrtddBjifAyk7SOPth8DorFuc9tGhoGs0pg56gal5VD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWdzrkzFydugr+zxrtHYx3ryo0YwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSseSFQGCaJKB7s57Q50BxdNMegCGSNkjfg L30drQ99ussxqsi3H51fU26neonehpYnJLkHa3cP5qIci2Zr1X7bSuMAy+XT72+8 sN3ta9hiwFhcUEk/wVyULgscP/whkvcxWuz893f2FIhojoIGwceK1jr7eQKj9ilH R5jeREn3aySKfvHfNxP8KuZTYeEC3NqBTXH1Z1EJD2tqi8H1GroJRDlz3ejzS1Yt Y6H0d8u67maIOQ8uoh+mfvREO1BT4OdqkwOVWWMEuN83pAYqHLQ/HbIDbUVrriDs IezIjaTRtCTumBwn2Qb6q40oXEaj/PN3llwVlHkezphTPDPWCRg= -----END CERTIFICATE-----Generated at Mon Jul 21 08:58:22 2025 by rpki-client