$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: 7MVu7yWhjUU9KgdraTqXn2VnZ1/cyTSUQUsH0+GwJYc= Subject key identifier: 86:59:82:DB:C2:57:45:93:E7:C4:C1:55:B3:C8:1E:C6:99:C1:87:F8 Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 31C67E8CD149BC30EDC3341619F67363FEBD5EF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 019B Signing time: Thu 05 Jun 2025 12:30:40 +0000 Manifest this update: Thu 05 Jun 2025 12:25:40 +0000 Manifest next update: Sun 08 Jun 2025 15:33:40 +0000 Files and hashes: 1: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: 7ZD79a1GgoGHJFszEigN5gY+DtdT93KHiPZ3vPxQt1s=) 2: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: qsN6cCaNvPRadYvOCvh81rbUqW03/U/6OgyS9kMLbwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 15:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c6:7e:8c:d1:49:bc:30:ed:c3:34:16:19:f6:73:63:fe:bd:5e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Jun 5 12:25:40 2025 GMT Not After : Jun 8 15:33:40 2025 GMT Subject: CN=865982DBC2574593E7C4C155B3C81EC699C187F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fb:b2:96:1b:9d:83:e2:2b:1a:d4:5a:18:52: a6:47:6f:42:d0:07:26:75:d4:3b:0e:b7:60:b7:f1: c2:98:e2:7d:16:04:b5:ea:f1:b3:b9:c8:51:96:bb: 80:97:37:66:7c:63:18:a5:f3:44:cc:8a:00:70:55: 57:52:31:95:4d:e8:12:4a:63:22:8a:6f:86:81:e2: 52:f4:d0:24:ea:22:9b:4f:5c:ad:3e:42:5e:10:57: 54:c5:56:50:cd:59:6c:35:6d:e9:d3:93:a8:01:54: 6b:30:98:95:0b:3a:e6:89:d4:5a:dd:3f:88:01:0e: 2f:48:d7:8d:07:9f:67:cb:dd:e7:c5:76:f2:b5:28: 6e:ad:81:a0:64:a2:5a:40:d6:26:45:d0:69:98:35: 69:09:73:74:4e:a5:76:25:ba:8b:c0:89:8d:0d:99: 84:4f:56:ef:2e:30:2e:48:4c:e0:13:f5:b5:c9:9c: dc:50:9a:b3:e0:f0:8a:4f:da:9f:20:47:e0:12:5d: d3:11:33:5e:73:95:6e:51:cd:b5:49:74:c2:f7:d2: b6:62:e4:d6:39:19:fc:98:4c:d4:8c:5e:b2:2c:50: f3:ab:18:ea:aa:99:19:d9:a2:65:eb:95:a1:47:bb: 23:c4:bc:d9:80:bb:64:6c:f4:a8:f2:9b:23:06:86: d9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:59:82:DB:C2:57:45:93:E7:C4:C1:55:B3:C8:1E:C6:99:C1:87:F8 X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3b:dd:93:db:5e:9d:ca:d7:73:45:bc:45:c0:b2:52:b7:e5: 8a:e8:d9:a7:fa:b1:79:31:77:42:69:2b:01:84:41:ae:7b:0f: 04:e9:fb:aa:6a:38:33:8e:e3:63:92:07:4b:27:67:e1:3c:02: 1c:58:01:8d:cc:27:30:0b:e3:eb:c0:c5:47:0c:44:a7:86:d2: 11:98:f5:6f:37:d7:c5:39:2a:fe:42:22:ee:5b:b7:27:84:87: 56:f1:95:4d:55:26:c4:1c:0f:5b:12:a9:e2:12:cf:d3:4d:16: b1:fd:93:2a:80:e7:03:c2:52:12:77:6a:35:d2:06:4e:9b:77: 9c:4c:0c:7d:0c:4c:61:93:3e:be:d5:a0:b3:58:6f:53:e0:c7: bc:df:e2:56:31:70:bf:38:da:a8:66:e3:5d:ca:de:65:04:f4: b0:24:bd:0a:e9:3c:4c:65:95:cd:aa:4e:57:5e:95:55:db:3a: 67:1d:60:b3:4e:d5:f3:42:55:a1:3b:47:dc:c0:5e:f4:b7:61: ff:b4:79:ee:1d:37:26:81:ee:28:e2:21:d7:46:77:78:1f:6b: 47:50:a8:65:11:57:f0:09:4e:59:6a:d9:78:5d:1a:c1:29:4c: 0c:97:af:02:04:cf:eb:c5:b7:b0:68:89:f0:4c:d3:bf:c8:44: ee:37:74:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMcZ+jNFJvDDtwzQWGfZzY/69XvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNTA2MDUxMjI1NDBaFw0yNTA2MDgxNTMzNDBaMDMxMTAvBgNV BAMTKDg2NTk4MkRCQzI1NzQ1OTNFN0M0QzE1NUIzQzgxRUM2OTlDMTg3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+7KWG52D4isa1FoYUqZHb0LQ ByZ11DsOt2C38cKY4n0WBLXq8bO5yFGWu4CXN2Z8Yxil80TMigBwVVdSMZVN6BJK YyKKb4aB4lL00CTqIptPXK0+Ql4QV1TFVlDNWWw1benTk6gBVGswmJULOuaJ1Frd P4gBDi9I140Hn2fL3efFdvK1KG6tgaBkolpA1iZF0GmYNWkJc3ROpXYluovAiY0N mYRPVu8uMC5ITOAT9bXJnNxQmrPg8IpP2p8gR+ASXdMRM15zlW5RzbVJdML30rZi 5NY5GfyYTNSMXrIsUPOrGOqqmRnZomXrlaFHuyPEvNmAu2Rs9KjymyMGhtkTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhlmC28JXRZPnxMFVs8gexpnBh/gwHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY73ZPbXp3K13NFvEXAslK35Yro2af6sXkx d0JpKwGEQa57DwTp+6pqODOO42OSB0snZ+E8AhxYAY3MJzAL4+vAxUcMRKeG0hGY 9W8318U5Kv5CIu5btyeEh1bxlU1VJsQcD1sSqeISz9NNFrH9kyqA5wPCUhJ3ajXS Bk6bd5xMDH0MTGGTPr7VoLNYb1Pgx7zf4lYxcL842qhm413K3mUE9LAkvQrpPExl lc2qTldelVXbOmcdYLNO1fNCVaE7R9zAXvS3Yf+0ee4dNyaB7ijiIddGd3gfa0dQ qGURV/AJTllq2XhdGsEpTAyXrwIEz+vFt7BoifBM07/IRO43dBQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:01 2025 by rpki-client