$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: paGbNyl/LTivSzgAYB7BDMLd4eDgNkmtPN6/69as41o= Subject key identifier: DE:81:61:B5:0C:A7:BB:48:90:0F:52:C7:11:B8:A9:5F:3D:E0:32:D1 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 1D580490BDBC3EF2D5037307D3CDFE2C536B02C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 01B3 Signing time: Sat 07 Jun 2025 00:00:54 +0000 Manifest this update: Fri 06 Jun 2025 23:55:54 +0000 Manifest next update: Tue 10 Jun 2025 04:58:54 +0000 Files and hashes: 1: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: PXsuVPLEzGme/TvSRalwKMlC1hWsjOPUgK0Lgy+M/Is=) 2: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: JLuyTnkAd9LdVP7Ap7TsyT3WybJ3uwYm9GdHPUO4P9s=) 3: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: jHNc/frwhiVVwGdxaGCbEChYvlXOh4Vtl0AfRjaZGMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:58:04:90:bd:bc:3e:f2:d5:03:73:07:d3:cd:fe:2c:53:6b:02:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Jun 6 23:55:54 2025 GMT Not After : Jun 10 04:58:54 2025 GMT Subject: CN=DE8161B50CA7BB48900F52C711B8A95F3DE032D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:8d:83:59:1f:9a:c0:b3:7b:46:78:51:78: 74:7c:14:17:67:e1:c0:2f:42:4a:6e:9b:dc:e4:a8: 6c:a5:55:6e:5f:6c:a3:94:4c:9e:96:02:35:11:c1: 90:55:dd:08:f1:55:ec:9f:18:56:5e:de:4d:82:56: 97:24:e3:e8:af:0b:5e:c6:81:f6:22:ba:63:d1:7f: ac:a1:e6:56:5c:00:1e:7f:78:36:25:fd:ef:29:e6: 0a:30:78:2d:d5:8c:5a:51:5b:0b:28:34:32:af:59: a5:03:1e:e3:82:e2:d6:f6:3c:0e:ba:23:dc:c9:73: b9:2d:f8:8c:7d:4e:8e:78:d5:e5:78:d9:6d:64:d8: eb:53:d7:99:92:59:6d:05:38:bb:e2:71:79:21:a6: 78:71:90:81:18:f2:2a:86:ce:1b:a9:b8:fe:c8:5f: 9b:39:b8:03:1c:41:22:3c:f3:dd:05:60:26:0c:d0: 97:9f:fd:64:a4:8a:60:cd:58:21:7a:02:f5:1c:78: 2b:62:17:4a:d2:44:ce:aa:65:13:1f:94:ac:e8:d3: 39:58:0f:5a:64:0f:4b:0f:f6:51:5b:4b:5b:9a:51: 29:75:d5:8a:0c:35:15:4d:83:e0:c7:9c:5d:f1:c1: dc:0d:60:11:38:88:49:b2:61:d6:fa:27:6c:53:94: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:81:61:B5:0C:A7:BB:48:90:0F:52:C7:11:B8:A9:5F:3D:E0:32:D1 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f9:e1:7a:f2:0d:05:bc:4b:97:b7:89:ae:d7:eb:72:0b:75: fc:e4:ea:c2:f7:8b:63:b7:af:31:aa:bb:e2:25:d8:f8:88:da: 9d:15:d3:87:53:98:a7:89:b1:24:ae:56:fc:4e:99:8f:07:95: f5:cc:2d:db:8c:e4:ba:d0:df:fe:ae:7b:8a:f8:74:b5:dd:3d: ab:70:94:80:d6:c3:e3:dc:6e:32:62:d1:66:d4:d8:6b:82:34: 7a:c8:fc:9e:10:09:d8:06:b2:e2:9d:06:4f:29:99:3d:0a:b6: 26:31:40:76:68:3b:0c:42:7a:c2:00:86:1f:6c:41:3e:14:72: 15:7a:c1:96:24:e5:1a:8a:48:cf:22:d5:d2:e0:fd:fe:d9:cd: fa:6e:b4:d5:38:72:5b:eb:dc:75:a2:33:ed:54:68:09:af:ed: b0:95:da:82:e9:45:a7:13:1d:c4:6b:35:7d:d7:35:b9:a3:4a: 82:da:3e:72:be:53:e7:b5:48:90:81:76:bc:93:ff:35:d7:ee: 14:fb:ed:13:06:e1:2f:33:c6:fc:5f:e7:44:eb:da:d6:ba:43: b5:9c:04:e7:16:f3:92:c2:2d:c1:cc:aa:d2:7b:ae:5b:a2:45: 44:f6:97:f5:28:e4:47:de:03:ac:e0:0f:b8:96:d4:04:cb:bc: 72:74:3d:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVgEkL28PvLVA3MH083+LFNrAsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNTA2MDYyMzU1NTRaFw0yNTA2MTAwNDU4NTRaMDMxMTAvBgNV BAMTKERFODE2MUI1MENBN0JCNDg5MDBGNTJDNzExQjhBOTVGM0RFMDMyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZBI2DWR+awLN7RnhReHR8FBdn 4cAvQkpum9zkqGylVW5fbKOUTJ6WAjURwZBV3QjxVeyfGFZe3k2CVpck4+ivC17G gfYiumPRf6yh5lZcAB5/eDYl/e8p5goweC3VjFpRWwsoNDKvWaUDHuOC4tb2PA66 I9zJc7kt+Ix9To541eV42W1k2OtT15mSWW0FOLvicXkhpnhxkIEY8iqGzhupuP7I X5s5uAMcQSI8890FYCYM0Jef/WSkimDNWCF6AvUceCtiF0rSRM6qZRMflKzo0zlY D1pkD0sP9lFbS1uaUSl11YoMNRVNg+DHnF3xwdwNYBE4iEmyYdb6J2xTlPHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3oFhtQynu0iQD1LHEbipXz3gMtEwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADj54XryDQW8S5e3ia7X63ILdfzk6sL3i2O3 rzGqu+Il2PiI2p0V04dTmKeJsSSuVvxOmY8HlfXMLduM5LrQ3/6ue4r4dLXdPatw lIDWw+PcbjJi0WbU2GuCNHrI/J4QCdgGsuKdBk8pmT0KtiYxQHZoOwxCesIAhh9s QT4UchV6wZYk5RqKSM8i1dLg/f7ZzfputNU4clvr3HWiM+1UaAmv7bCV2oLpRacT HcRrNX3XNbmjSoLaPnK+U+e1SJCBdryT/zXX7hT77RMG4S8zxvxf50Tr2ta6Q7Wc BOcW85LCLcHMqtJ7rluiRUT2l/Uo5EfeA6zgD7iW1ATLvHJ0PY8= -----END CERTIFICATE-----Generated at Sat Jun 7 17:27:01 2025 by rpki-client