$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json) Hash identifier: CuGKFpqzyYU1bB+xgqRrVFxAgcCVIr+RndBGKJ53QAU= Subject key identifier: 14:6C:DB:9F:38:18:02:2F:C9:73:89:71:D9:FA:55:3D:96:13:5B:86 Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 7791C15982F4BE7AE48B0E5DD99A7C28E5A7C0CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft Manifest number: 017D Signing time: Wed 04 Jun 2025 01:41:37 +0000 Manifest this update: Wed 04 Jun 2025 01:36:37 +0000 Manifest next update: Sat 07 Jun 2025 11:24:37 +0000 Files and hashes: 1: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: 9lylJ81yoye2Ch8yjj7nWmSIM3uXhnW3zePA7kc6DS4=) 2: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: g3O85uHYQ5H3CYzPQLQFqdssgPM5rhi5A/BzEIRFoas=) 3: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: vGG0asOC2Xl7EswH7KA3jLAIJRd+GCTUKsA4WpfXyjU=) 4: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 9QXIOR5p9E/ECayeIb5+Pzn8r00Xjm0tMLmC+/Pg7aE=) 5: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: wnZO7kQR9JZHcXEpTkJ6URQ49yRUAKEaIg5OVxBtq9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:91:c1:59:82:f4:be:7a:e4:8b:0e:5d:d9:9a:7c:28:e5:a7:c0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Jun 4 01:36:37 2025 GMT Not After : Jun 7 11:24:37 2025 GMT Subject: CN=146CDB9F3818022FC9738971D9FA553D96135B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:31:44:c3:ab:7c:8d:dd:1b:98:03:ed:19: cf:97:0a:7a:75:bc:b4:0e:26:82:39:69:fa:dc:d1: 3f:6d:89:3e:4a:4c:b5:da:0f:2f:fd:ec:29:04:ae: ce:a3:00:fa:96:82:3d:bf:b5:c3:80:f8:a8:e7:e3: 05:c3:9c:48:e5:7b:61:10:7b:2c:c6:c1:f1:f6:e8: 0f:f9:43:6f:9a:72:40:f9:35:c7:80:e2:2d:70:08: 2f:f9:6d:74:70:72:b9:bb:17:10:e7:0c:a5:af:16: 91:9a:22:b0:38:35:4a:32:36:c5:5f:ab:07:5e:cb: 2f:d9:7b:92:eb:23:a1:f5:e5:8f:8a:57:34:7c:b1: dd:0a:88:b9:0c:1e:79:52:5b:74:97:97:e7:35:cd: 98:be:9a:23:fc:b6:92:3b:34:bd:72:c7:8d:8e:25: f2:16:3d:e4:a9:f1:91:29:cc:a1:e2:80:c9:42:4e: c7:bd:25:a5:a4:02:d7:4c:3d:0e:11:14:db:b2:ad: 8a:25:1f:8e:6b:10:30:6c:16:b9:0d:42:8f:a1:a1: eb:bf:36:35:2d:d7:cf:67:81:73:0e:13:1a:24:c8: 63:04:37:72:84:29:15:96:70:3a:3e:4a:39:3b:4f: 2d:ff:db:04:3c:b6:c1:d6:65:b5:4c:b9:33:31:4d: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6C:DB:9F:38:18:02:2F:C9:73:89:71:D9:FA:55:3D:96:13:5B:86 X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:22:d4:64:b9:71:c6:4d:e6:c7:08:e6:02:41:03:65:1b:f5: 87:66:a2:eb:d6:73:22:9d:57:3c:fa:d8:ef:e3:59:14:41:cf: 30:98:07:2f:55:2d:70:0b:49:a3:3c:c0:8a:b7:30:76:70:7b: 8e:a1:01:da:87:38:eb:c5:fc:cd:f7:d6:8b:47:90:78:f4:4d: 7f:de:0e:64:4a:b6:68:14:6d:db:b6:d9:73:dc:d5:59:ed:05: 9d:b1:aa:2c:05:53:16:21:8e:72:cc:6e:53:aa:85:76:cf:6e: b0:25:7b:d9:36:47:5e:90:e4:06:05:12:61:91:21:07:e3:eb: 20:2a:f2:45:ba:d2:07:d3:55:4a:97:05:1c:e0:88:97:1c:ac: 8c:96:1a:15:dc:0c:22:ac:41:65:17:16:07:a9:cf:21:97:b8: 0a:3f:d8:5b:33:59:3f:92:8f:17:a9:3b:83:e7:bc:3d:83:a8: 9a:84:34:0e:3a:23:7a:96:f0:57:14:dc:00:79:f5:53:55:3d: 49:01:d3:e9:0b:73:85:83:0e:e0:e5:5a:9a:d1:13:57:86:90: 46:fc:09:9f:af:cb:ee:70:c0:52:9d:f5:63:88:3d:0a:f5:bc: 89:ca:54:70:83:87:47:a3:52:e9:48:67:4c:e0:5e:5a:7c:2b: e9:c9:bd:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5HBWYL0vnrkiw5d2Zp8KOWnwMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNTA2MDQwMTM2MzdaFw0yNTA2MDcxMTI0MzdaMDMxMTAvBgNV BAMTKDE0NkNEQjlGMzgxODAyMkZDOTczODk3MUQ5RkE1NTNEOTYxMzVCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DDFEw6t8jd0bmAPtGc+XCnp1 vLQOJoI5afrc0T9tiT5KTLXaDy/97CkErs6jAPqWgj2/tcOA+Kjn4wXDnEjle2EQ eyzGwfH26A/5Q2+ackD5NceA4i1wCC/5bXRwcrm7FxDnDKWvFpGaIrA4NUoyNsVf qwdeyy/Ze5LrI6H15Y+KVzR8sd0KiLkMHnlSW3SXl+c1zZi+miP8tpI7NL1yx42O JfIWPeSp8ZEpzKHigMlCTse9JaWkAtdMPQ4RFNuyrYolH45rEDBsFrkNQo+hoeu/ NjUt189ngXMOExokyGMEN3KEKRWWcDo+Sjk7Ty3/2wQ8tsHWZbVMuTMxTe8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFGzbnzgYAi/Jc4lx2fpVPZYTW4YwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIx MDM1RUVBQUI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4i1GS5ccZN5scI5gJBA2Ub9YdmouvWcyKd Vzz62O/jWRRBzzCYBy9VLXALSaM8wIq3MHZwe46hAdqHOOvF/M331otHkHj0TX/e DmRKtmgUbdu22XPc1VntBZ2xqiwFUxYhjnLMblOqhXbPbrAle9k2R16Q5AYFEmGR IQfj6yAq8kW60gfTVUqXBRzgiJccrIyWGhXcDCKsQWUXFgepzyGXuAo/2FszWT+S jxepO4PnvD2DqJqENA46I3qW8FcU3AB59VNVPUkB0+kLc4WDDuDlWprRE1eGkEb8 CZ+vy+5wwFKd9WOIPQr1vInKVHCDh0ejUulIZ0zgXlp8K+nJvdQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:35 2025 by rpki-client