$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft (raw, json) Hash identifier: eBO65O3kSmChY1plLwrAT7lg5MSlQZw7JbM8DBMMZeI= Subject key identifier: 37:1A:60:FB:E9:3E:45:CB:1F:81:CC:5B:82:5A:A3:78:71:53:C6:A2 Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Certificate serial: 168406E6C47770E584DFC10BB141C219C6D65280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft Manifest number: 01E1 Signing time: Thu 05 Jun 2025 11:01:56 +0000 Manifest this update: Thu 05 Jun 2025 10:56:56 +0000 Manifest next update: Sun 08 Jun 2025 13:03:56 +0000 Files and hashes: 1: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: Ykg6X7TmWGcN3xNxQzs8nCjH8QlPm6F3Uq9zQ4bEBTI=) 2: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl (hash: sFDBbnN3McyxXEpzncFN4B1HgTmAYzFcD/xDTQRoV08=) 3: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: ieMGqtS8RhGJzVFgVXdHFZF0bIr1rTb711Dv1YSs4lQ=) 4: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: TsTDpWhEe0S4QbX7Nvx05CapjsmJk1el8Dy5qKfw9Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 13:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:84:06:e6:c4:77:70:e5:84:df:c1:0b:b1:41:c2:19:c6:d6:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Validity Not Before: Jun 5 10:56:56 2025 GMT Not After : Jun 8 13:03:56 2025 GMT Subject: CN=371A60FBE93E45CB1F81CC5B825AA3787153C6A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:57:a2:d7:97:09:da:44:bc:5f:2b:72:81: 6c:bd:ef:03:bd:ea:50:24:2c:44:55:ee:60:07:ad: fe:26:6e:e5:a5:34:34:dd:44:d0:73:ed:bf:a6:8b: e5:a6:30:5e:ba:e3:70:40:b5:64:4d:3f:ad:e1:bc: 6d:a2:d9:32:c7:2a:38:45:e1:55:26:3b:d4:a7:b2: 4f:c6:f8:79:d4:e6:b8:40:8a:93:2d:7f:8a:cc:43: 1b:02:4b:d1:d6:dd:6f:1d:64:57:c3:33:47:e6:44: 87:e7:9b:61:d7:eb:f3:d9:29:f9:4d:75:dd:94:09: 5e:ca:d3:7d:47:a0:11:d2:31:e0:75:b7:57:ef:b1: 76:cc:19:df:79:fb:e2:bd:77:33:35:a7:19:da:b3: 1d:4c:62:10:73:5a:c2:33:67:19:1c:3a:fe:fc:16: 8e:be:57:8b:e2:53:15:d8:d1:3f:00:5b:05:d5:41: fc:1d:2a:5c:31:fd:4d:0a:e7:92:9f:ae:2b:12:e2: 92:2f:63:1e:e3:02:0c:f3:5c:dc:94:4f:3c:f0:ef: c1:ea:3a:23:f2:76:f9:c9:00:1e:87:4f:62:7d:59: 66:6f:9b:91:2c:b9:e6:32:2a:75:9a:bb:08:3b:a0: 28:9d:15:5d:41:7e:2b:83:84:fd:2e:28:9b:1d:33: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1A:60:FB:E9:3E:45:CB:1F:81:CC:5B:82:5A:A3:78:71:53:C6:A2 X509v3 Authority Key Identifier: keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a1:81:2d:0f:ba:7e:da:14:50:dd:fa:a9:c2:2c:a7:73:ef: ee:5c:72:ff:c4:16:43:d8:bd:1e:0d:94:96:f1:5d:23:65:a9: ea:d7:2e:f3:38:97:7e:63:fa:3d:10:1f:5a:19:50:57:3c:4e: 23:e5:2c:bf:a7:ac:1d:28:3b:c0:60:b3:e0:b6:11:ce:2b:e9: 65:6c:75:af:0a:6e:4e:b6:bf:ad:f5:7d:4b:61:af:96:b7:6e: 5e:6d:56:b7:17:ed:4c:34:63:10:3f:95:cd:87:9a:9d:f2:89: fc:2c:2d:60:0b:cd:29:4b:09:1b:42:62:6b:c5:6a:c0:71:15: 2c:f6:4e:98:24:96:da:0f:86:b0:92:07:07:0c:87:35:af:d6: 81:7f:89:d0:f6:8d:9a:f4:ba:15:20:a3:8b:54:ae:9f:00:b8: 00:de:6d:6b:dc:a2:f2:7c:66:d6:80:51:08:0c:8d:35:81:34: c7:c2:44:79:15:da:d4:86:ae:4b:ac:93:3b:28:b8:45:8a:42: 80:3b:92:75:14:71:9e:e5:7c:e5:61:3c:0a:0e:cf:e2:d9:92: 73:51:38:c2:67:dd:3b:71:1b:92:a9:17:29:d0:0a:0b:9a:bb: ab:94:75:19:f1:e4:a7:e0:a2:fb:07:d8:09:8b:10:9c:9f:29: ff:03:88:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoQG5sR3cOWE38ELsUHCGcbWUoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy MkNCREVFOTAeFw0yNTA2MDUxMDU2NTZaFw0yNTA2MDgxMzAzNTZaMDMxMTAvBgNV BAMTKDM3MUE2MEZCRTkzRTQ1Q0IxRjgxQ0M1QjgyNUFBMzc4NzE1M0M2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdVei15cJ2kS8XytygWy97wO9 6lAkLERV7mAHrf4mbuWlNDTdRNBz7b+mi+WmMF6643BAtWRNP63hvG2i2TLHKjhF 4VUmO9Snsk/G+HnU5rhAipMtf4rMQxsCS9HW3W8dZFfDM0fmRIfnm2HX6/PZKflN dd2UCV7K031HoBHSMeB1t1fvsXbMGd95++K9dzM1pxnasx1MYhBzWsIzZxkcOv78 Fo6+V4viUxXY0T8AWwXVQfwdKlwx/U0K55KfrisS4pIvYx7jAgzzXNyUTzzw78Hq OiPydvnJAB6HT2J9WWZvm5EsueYyKnWauwg7oCidFV1BfiuDhP0uKJsdM7CFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNxpg++k+RcsfgcxbglqjeHFTxqIwHwYDVR0j BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC REVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1 NzAyMkNCREVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADChgS0Pun7aFFDd+qnCLKdz7+5ccv/EFkPY vR4NlJbxXSNlqerXLvM4l35j+j0QH1oZUFc8TiPlLL+nrB0oO8Bgs+C2Ec4r6WVs da8Kbk62v631fUthr5a3bl5tVrcX7Uw0YxA/lc2Hmp3yifwsLWALzSlLCRtCYmvF asBxFSz2TpgkltoPhrCSBwcMhzWv1oF/idD2jZr0uhUgo4tUrp8AuADebWvcovJ8 ZtaAUQgMjTWBNMfCRHkV2tSGrkuskzsouEWKQoA7knUUcZ7lfOVhPAoOz+LZknNR OMJn3TtxG5KpFynQCguau6uUdRnx5KfgovsH2AmLEJyfKf8DiCw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:21 2025 by rpki-client