$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: SZDmXwPZJQcH6dGoAAIgooCBVddr0WQ3k0ihtfIRk1Q= Subject key identifier: 91:4B:6C:60:76:42:2D:1B:76:C0:81:F4:3E:65:09:B1:B6:08:7F:05 Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 14DBDDD4DCC333B5ED8D5B1AEEE29A6366408DF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 04E4 Signing time: Wed 04 Jun 2025 07:11:00 +0000 Manifest this update: Wed 04 Jun 2025 07:06:00 +0000 Manifest next update: Sat 07 Jun 2025 11:13:00 +0000 Files and hashes: 1: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: vfc72VX90AwFJJ70nFRaN0KBX9HnL6GLTrC0vYuAX/A=) 2: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=) 3: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Oi+v4vSiTSM9zUjltxmu968dUNXdnYr8A7jzZ4z/bOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:db:dd:d4:dc:c3:33:b5:ed:8d:5b:1a:ee:e2:9a:63:66:40:8d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Jun 4 07:06:00 2025 GMT Not After : Jun 7 11:13:00 2025 GMT Subject: CN=914B6C6076422D1B76C081F43E6509B1B6087F05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:bd:fe:13:d0:1e:74:d2:35:67:ad:5e:26: 21:fa:f5:2c:2a:87:a9:72:34:65:2d:20:3e:16:0b: de:43:db:77:19:c7:2f:90:73:ab:11:aa:0e:e2:69: 14:6b:48:fb:9e:c5:e5:90:7e:09:2c:5a:3c:62:01: 30:22:6a:f2:a1:6f:87:17:f8:02:b7:f7:f5:0a:f0: d1:ed:1a:7a:3c:76:ef:20:57:90:ea:49:c1:bc:aa: 8b:d7:fe:98:07:a0:cd:96:6d:c3:c6:10:8d:22:a5: f0:61:56:90:d1:39:26:e5:b5:60:4b:6c:2c:63:39: 1c:32:71:e0:85:19:f5:c1:44:df:08:07:4f:e7:65: 84:51:b0:3e:c8:75:cd:4e:e1:b5:f3:ef:e8:62:d9: 9c:1e:d1:96:4b:2c:ca:4e:dd:7c:df:36:d5:69:6f: 15:c4:d8:d1:65:61:6c:29:7c:cb:c6:f4:af:4d:53: 28:78:70:08:9b:a6:3b:db:38:d0:c1:d0:8f:13:5b: 2e:6b:a4:bc:c2:e6:76:87:9e:6a:e4:f8:2e:50:07: d7:43:f1:31:d7:9e:1d:60:08:42:79:0f:f5:ad:91: 2f:7c:ef:ff:ed:f7:a3:a8:e9:fc:4f:fc:1e:9d:3d: 86:13:ac:0b:4e:75:c7:48:9c:c8:77:45:e3:e6:98: 76:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4B:6C:60:76:42:2D:1B:76:C0:81:F4:3E:65:09:B1:B6:08:7F:05 X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0f:15:bc:4b:00:94:3c:87:8d:48:9d:5b:3b:2f:42:62:32: 12:d4:c2:15:1a:6b:c6:94:dd:71:2c:33:82:2d:d5:f9:5d:a1: 2d:b0:49:e2:bc:3b:9e:6d:5d:05:49:1c:d2:db:7f:40:94:df: b9:a4:55:18:c7:93:77:dc:ec:dd:c0:f5:88:d5:90:dd:74:81: 40:8b:d1:8f:f9:d8:30:fd:6c:d9:2d:6c:9e:42:e4:1f:31:ce: 2f:e7:9c:16:31:49:57:84:d1:ab:a9:95:9e:2b:a6:48:d3:84: b6:f6:a8:6d:ed:02:e8:5a:22:22:0b:1c:ed:69:ad:20:5e:92: f6:62:cf:7b:e8:41:ae:27:d7:de:31:fb:e8:af:bc:7b:7b:97: 60:4f:f8:68:fc:36:85:b5:38:27:78:77:31:bb:c3:59:45:44: dc:f6:69:00:80:93:68:0d:64:f5:29:3e:26:9e:3d:93:17:88: 64:e0:dc:b3:58:da:a3:96:f7:6f:bc:46:ba:fb:0a:77:90:54: 16:2b:6c:40:df:5c:8d:1e:0d:d0:a9:ad:9b:74:2a:5a:a2:82: e2:40:20:a8:0f:97:dd:6d:1d:c8:1c:38:94:cc:ff:01:52:32: 44:4f:fd:a0:ff:be:16:1f:b8:3c:2c:c6:60:e5:5f:85:36:bb: 86:49:6a:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFNvd1NzDM7XtjVsa7uKaY2ZAjfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNTA2MDQwNzA2MDBaFw0yNTA2MDcxMTEzMDBaMDMxMTAvBgNV BAMTKDkxNEI2QzYwNzY0MjJEMUI3NkMwODFGNDNFNjUwOUIxQjYwODdGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarL3+E9AedNI1Z61eJiH69Swq h6lyNGUtID4WC95D23cZxy+Qc6sRqg7iaRRrSPuexeWQfgksWjxiATAiavKhb4cX +AK39/UK8NHtGno8du8gV5DqScG8qovX/pgHoM2WbcPGEI0ipfBhVpDROSbltWBL bCxjORwyceCFGfXBRN8IB0/nZYRRsD7Idc1O4bXz7+hi2Zwe0ZZLLMpO3XzfNtVp bxXE2NFlYWwpfMvG9K9NUyh4cAibpjvbONDB0I8TWy5rpLzC5naHnmrk+C5QB9dD 8THXnh1gCEJ5D/WtkS987//t96Oo6fxP/B6dPYYTrAtOdcdInMh3RePmmHa7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkUtsYHZCLRt2wIH0PmUJsbYIfwUwHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4PFbxLAJQ8h41InVs7L0JiMhLUwhUaa8aU 3XEsM4It1fldoS2wSeK8O55tXQVJHNLbf0CU37mkVRjHk3fc7N3A9YjVkN10gUCL 0Y/52DD9bNktbJ5C5B8xzi/nnBYxSVeE0auplZ4rpkjThLb2qG3tAuhaIiILHO1p rSBekvZiz3voQa4n194x++ivvHt7l2BP+Gj8NoW1OCd4dzG7w1lFRNz2aQCAk2gN ZPUpPiaePZMXiGTg3LNY2qOW92+8Rrr7CneQVBYrbEDfXI0eDdCprZt0KlqiguJA IKgPl91tHcgcOJTM/wFSMkRP/aD/vhYfuDwsxmDlX4U2u4ZJanQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:33 2025 by rpki-client