$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: RR2cMtTPPM6ZRIBIQAQi5VBV2+zX36b1blgNiBcY2O4= Subject key identifier: B7:53:C1:0F:CB:58:01:79:1D:4B:F2:86:44:AA:C8:D5:D8:55:C5:DE Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 64A31AFF7A4891B6162F683DB5050BDE9190463B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 01FB Signing time: Mon 02 Jun 2025 15:32:04 +0000 Manifest this update: Mon 02 Jun 2025 15:27:04 +0000 Manifest next update: Thu 05 Jun 2025 17:40:04 +0000 Files and hashes: 1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) 2: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: /Z3bT4nb+lYLKnM4v39kj4HPEqGbRPJ5QSrr6lyRytE=) 3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 17:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a3:1a:ff:7a:48:91:b6:16:2f:68:3d:b5:05:0b:de:91:90:46:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Jun 2 15:27:04 2025 GMT Not After : Jun 5 17:40:04 2025 GMT Subject: CN=B753C10FCB5801791D4BF28644AAC8D5D855C5DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ff:2a:40:e2:76:af:a3:69:54:ee:e3:79:cf: 10:b3:8e:28:3d:83:f6:c4:67:25:e6:df:01:40:29: 7b:da:2e:05:9d:49:39:85:0d:49:c1:72:61:b2:fc: a7:98:65:88:b8:73:af:cc:13:51:f3:49:d2:d0:e7: eb:ea:e1:e9:d1:af:67:2f:de:85:a6:87:36:39:e6: 2f:40:7e:04:9f:97:f1:b0:b0:6f:30:45:e6:ba:84: e6:a5:3d:64:4e:3c:6b:6d:ba:dc:40:9c:ca:48:d0: a9:2c:82:d7:a4:24:e7:c9:a9:77:8a:ff:07:23:ab: 16:74:45:54:26:ce:94:99:e8:4c:c9:cd:0e:4e:4d: 03:a4:26:ab:23:2c:3d:4e:fa:23:33:9c:17:2e:ae: 33:aa:8d:a3:38:5f:a1:c8:55:da:a1:89:cf:c5:29: 07:09:4c:b6:d7:c7:51:03:f6:50:20:91:c6:aa:c0: e1:30:a5:76:86:d8:77:7f:91:e5:73:12:7d:28:e8: 5b:0d:b3:6d:49:39:fd:0b:78:1f:73:be:98:45:4f: ac:cb:9f:f8:4e:02:7d:8d:4e:a8:5e:c5:a5:72:cd: 57:6e:6c:8d:c6:12:81:02:25:46:e9:96:f3:7a:3f: 69:08:38:41:bf:70:3f:3b:97:b6:1e:73:76:db:26: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:53:C1:0F:CB:58:01:79:1D:4B:F2:86:44:AA:C8:D5:D8:55:C5:DE X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ec:4f:29:5a:b6:ae:f8:3a:a7:46:da:6a:70:85:c3:a8:56: d0:89:f9:e5:80:ab:5a:fe:fb:f2:77:b9:e6:bd:d5:1d:9d:eb: 6b:b8:af:9e:13:66:2a:70:79:12:7d:06:d3:41:c6:bc:57:d9: b1:56:eb:8e:b6:01:2a:f3:88:0d:7f:97:2e:ad:4a:49:15:5f: 44:c9:e5:33:65:4b:40:01:79:d3:b0:c9:d7:d0:ae:d1:ac:f5: 12:a0:74:9b:58:38:7b:67:77:53:2e:eb:8f:b1:6f:e5:76:32: bf:a9:1b:00:3d:9f:0c:fa:96:8a:1a:50:e9:67:f7:3b:81:9a: 6e:10:9a:d7:f0:01:12:b0:fa:9e:70:d1:5f:0e:64:2b:0e:9b: 87:06:bd:54:35:db:a6:da:02:af:fa:4a:52:16:cf:8c:6c:64: b7:69:2d:e3:da:62:be:cb:c5:f7:9c:52:58:e5:02:43:43:07: 0a:52:21:98:68:f9:5e:5a:04:55:a3:f7:bf:30:58:af:f0:a1: fc:3e:e0:37:78:cf:c0:7f:90:3c:bf:da:96:3d:cd:36:29:0c: 12:3c:1c:35:f7:68:32:94:e0:c3:f6:59:c7:c2:0e:76:86:c9: d3:3e:43:d1:7c:51:a4:8c:87:89:a9:d0:44:e3:a8:83:78:ca: ac:fa:5f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKMa/3pIkbYWL2g9tQUL3pGQRjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTA2MDIxNTI3MDRaFw0yNTA2MDUxNzQwMDRaMDMxMTAvBgNV BAMTKEI3NTNDMTBGQ0I1ODAxNzkxRDRCRjI4NjQ0QUFDOEQ1RDg1NUM1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2/ypA4navo2lU7uN5zxCzjig9 g/bEZyXm3wFAKXvaLgWdSTmFDUnBcmGy/KeYZYi4c6/ME1HzSdLQ5+vq4enRr2cv 3oWmhzY55i9AfgSfl/GwsG8wRea6hOalPWROPGttutxAnMpI0KksgtekJOfJqXeK /wcjqxZ0RVQmzpSZ6EzJzQ5OTQOkJqsjLD1O+iMznBcurjOqjaM4X6HIVdqhic/F KQcJTLbXx1ED9lAgkcaqwOEwpXaG2Hd/keVzEn0o6FsNs21JOf0LeB9zvphFT6zL n/hOAn2NTqhexaVyzVdubI3GEoECJUbplvN6P2kIOEG/cD87l7Yec3bbJr9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt1PBD8tYAXkdS/KGRKrI1dhVxd4wHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPsTylatq74OqdG2mpwhcOoVtCJ+eWAq1r+ +/J3uea91R2d62u4r54TZipweRJ9BtNBxrxX2bFW6462ASrziA1/ly6tSkkVX0TJ 5TNlS0ABedOwydfQrtGs9RKgdJtYOHtnd1Mu64+xb+V2Mr+pGwA9nwz6looaUOln 9zuBmm4QmtfwARKw+p5w0V8OZCsOm4cGvVQ126baAq/6SlIWz4xsZLdpLePaYr7L xfecUljlAkNDBwpSIZho+V5aBFWj978wWK/wofw+4Dd4z8B/kDy/2pY9zTYpDBI8 HDX3aDKU4MP2WcfCDnaGydM+Q9F8UaSMh4mp0ETjqIN4yqz6X7k= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:15 2025 by rpki-client