$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: ehCvUH2pqSTeWCcFe+2gHtXFZbxG2F+YnQJDfSr7fkg= Subject key identifier: 86:5C:3B:27:B7:15:4F:8D:B2:70:F1:96:60:0A:19:0B:DF:2B:75:B9 Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 72D650F3C3CEB37A1078F1A28BE21BE30057F5E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 01C4 Signing time: Mon 02 Jun 2025 16:12:15 +0000 Manifest this update: Mon 02 Jun 2025 16:07:15 +0000 Manifest next update: Thu 05 Jun 2025 21:55:15 +0000 Files and hashes: 1: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: 1QFmqqnDt9FD4CT5iXH8IaTJeZQAgHohWAPwCtiQfbk=) 2: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) 3: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: jWIeEj8fX0qqStZK4DC//9sEKdVwxbP2pcQ0ebAsVP8=) 4: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: NK7ClTvv4/NDBbf89x9B3VnTnm5k2ddyF3YW/vuXpLs=) 5: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: GL+abq9sudWllS2kDRFSrQT++laAs9wGbfmPMQf2AAA=) 6: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 21:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d6:50:f3:c3:ce:b3:7a:10:78:f1:a2:8b:e2:1b:e3:00:57:f5:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: Jun 2 16:07:15 2025 GMT Not After : Jun 5 21:55:15 2025 GMT Subject: CN=865C3B27B7154F8DB270F196600A190BDF2B75B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c5:49:f3:98:4c:68:2b:47:9c:8b:7b:33:a0: 9b:f4:f3:ae:bd:d5:03:3c:17:c3:f9:bb:3f:9a:44: 44:5d:05:72:1e:02:46:47:c0:bd:20:47:fb:10:b2: 23:0f:d0:30:9b:9e:0c:53:f9:a5:a1:0f:10:8b:30: 81:56:41:ce:7c:8d:79:4e:1a:36:74:3b:e0:c5:0b: 77:24:39:ce:3b:13:3e:c5:1a:31:d5:d0:45:65:65: 36:9c:90:99:f5:0c:26:51:3a:62:28:3d:60:ba:7f: d5:de:84:35:12:60:e0:6b:78:f3:31:36:43:7a:30: e0:fe:26:87:23:7c:7d:ba:42:c8:ff:03:38:92:d2: ac:80:c8:32:8e:56:00:c5:40:53:56:ba:45:b4:1f: dc:87:d9:41:13:5f:5e:7a:e0:c3:46:f3:79:37:ee: 17:5a:85:25:2d:0f:e7:a1:f9:e7:df:0f:f9:37:65: 29:fe:8e:1c:59:49:ff:e7:4b:50:fa:93:b5:d9:74: 9a:a2:53:82:25:0f:51:2a:8f:cc:99:cc:b1:c0:23: 5c:c7:82:80:83:9c:56:1a:db:e6:0d:87:85:7f:44: fe:2a:11:48:c2:62:dc:9d:e2:6e:b0:29:7a:0b:6c: 2d:9e:88:11:4c:ba:bc:c4:37:bb:f9:82:29:23:dd: 56:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5C:3B:27:B7:15:4F:8D:B2:70:F1:96:60:0A:19:0B:DF:2B:75:B9 X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d5:2e:cc:ef:1d:15:16:10:1d:f7:5f:0d:99:da:51:b3:b1: 25:85:db:b1:8a:56:f5:19:6a:62:2a:34:16:b5:6e:c4:69:9e: 5f:83:e9:18:80:d7:f7:fd:f3:1e:f4:d2:b7:c8:bd:82:c8:77: f7:2f:1a:08:6b:7f:60:84:f5:4d:32:f0:0e:02:9a:c5:85:fb: 11:44:d9:14:4b:8f:df:ea:c9:de:76:c6:20:87:73:2e:cc:20: b5:d0:c3:1d:ec:e3:cf:f8:ca:8e:9e:55:e7:8f:46:66:5e:87: 08:d0:5f:7c:b6:90:58:aa:6c:8b:e6:13:93:e1:6e:64:ec:53: 21:9c:36:77:60:60:2e:cc:a0:ec:0b:ce:c4:e6:9a:a0:ae:09: 44:81:49:ac:ad:06:c4:76:37:c5:b8:31:23:cf:df:d1:1b:88: b0:56:51:f8:64:31:ef:b7:89:1e:fc:87:3b:71:75:d7:df:29: 77:35:17:14:82:c2:c1:92:0e:f9:67:b4:81:5c:07:cf:07:e0: 5f:cd:0c:10:75:31:31:01:51:5a:52:68:4f:bf:88:b7:46:a3: a5:38:82:23:fa:64:06:44:1f:92:ea:1f:f7:22:f0:ee:21:56: 97:4e:35:c4:8e:97:e9:c9:39:14:b2:1a:58:3d:95:ec:bf:f5: 29:10:d7:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctZQ88POs3oQePGii+Ib4wBX9eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNTA2MDIxNjA3MTVaFw0yNTA2MDUyMTU1MTVaMDMxMTAvBgNV BAMTKDg2NUMzQjI3QjcxNTRGOERCMjcwRjE5NjYwMEExOTBCREYyQjc1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5xUnzmExoK0eci3szoJv08669 1QM8F8P5uz+aRERdBXIeAkZHwL0gR/sQsiMP0DCbngxT+aWhDxCLMIFWQc58jXlO GjZ0O+DFC3ckOc47Ez7FGjHV0EVlZTackJn1DCZROmIoPWC6f9XehDUSYOBrePMx NkN6MOD+JocjfH26Qsj/AziS0qyAyDKOVgDFQFNWukW0H9yH2UETX1564MNG83k3 7hdahSUtD+eh+effD/k3ZSn+jhxZSf/nS1D6k7XZdJqiU4IlD1Eqj8yZzLHAI1zH goCDnFYa2+YNh4V/RP4qEUjCYtyd4m6wKXoLbC2eiBFMurzEN7v5gikj3VYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhlw7J7cVT42ycPGWYAoZC98rdbkwHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLVLszvHRUWEB33Xw2Z2lGzsSWF27GKVvUZ amIqNBa1bsRpnl+D6RiA1/f98x700rfIvYLId/cvGghrf2CE9U0y8A4CmsWF+xFE 2RRLj9/qyd52xiCHcy7MILXQwx3s48/4yo6eVeePRmZehwjQX3y2kFiqbIvmE5Ph bmTsUyGcNndgYC7MoOwLzsTmmqCuCUSBSaytBsR2N8W4MSPP39EbiLBWUfhkMe+3 iR78hztxddffKXc1FxSCwsGSDvlntIFcB88H4F/NDBB1MTEBUVpSaE+/iLdGo6U4 giP6ZAZEH5LqH/ci8O4hVpdONcSOl+nJORSyGlg9ley/9SkQ170= -----END CERTIFICATE-----Generated at Tue Jun 3 23:58:06 2025 by rpki-client