$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: e+IrH+b+4xwhzY3qRlySmFs6v3Gbz+QOz7Vjuzlt2sM= Subject key identifier: 7E:48:85:FD:94:D7:55:F1:90:A1:47:7E:CA:33:04:3B:92:F5:D2:E6 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 76A5E0D5B6F5D3DD17B7924B9A32CDFEA469930E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 021E Signing time: Fri 04 Apr 2025 18:01:32 +0000 Manifest this update: Fri 04 Apr 2025 17:56:32 +0000 Manifest next update: Mon 07 Apr 2025 20:29:32 +0000 Files and hashes: 1: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=) 2: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: 5VwR7HDfdfAKISy+dHdojCP894McL9XrCePHeKrbz6E=) 3: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: HF0dYwlz6vdJov/k+WgwRu0xhExNgUTwhPU6qhbpy2A=) 4: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: QWdrnAaVlOBIitG7PPTh7yvLUMWH2oNGIu32jfCgQaE=) 5: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=) 6: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=) 7: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: QBrOfM5KLw/lmudxRHHyp3AfLgsc55UzAUCkB03chns=) 8: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=) 9: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a5:e0:d5:b6:f5:d3:dd:17:b7:92:4b:9a:32:cd:fe:a4:69:93:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Apr 4 17:56:32 2025 GMT Not After : Apr 7 20:29:32 2025 GMT Subject: CN=7E4885FD94D755F190A1477ECA33043B92F5D2E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:30:51:63:e1:d8:8d:65:8d:fa:3a:f6:7a:af: a1:bd:2b:cd:d4:1c:94:fe:73:33:ab:dd:3e:bc:7f: d1:85:53:6e:ac:3c:0c:b9:d7:4d:82:ea:fa:2d:de: 56:ea:b4:d7:8a:14:02:14:7e:f0:c2:b9:a0:9c:8d: 5f:b8:62:4d:1f:f8:44:03:ad:49:39:f2:91:88:61: 10:f7:0c:26:39:5a:a7:1b:e9:db:c5:df:e5:29:52: 88:a0:77:00:b0:62:a0:ad:1c:c6:1e:91:78:af:22: fa:d5:3e:c1:1a:7a:55:96:d3:0e:68:a7:ce:70:ec: c7:97:02:2d:0b:05:6a:d7:50:63:b4:f9:c4:b6:aa: 1f:c6:9a:e5:55:18:8a:c0:31:5b:65:bf:1b:92:36: 7b:96:9d:62:62:3e:d3:f1:52:50:f5:2f:19:50:fb: c8:f5:fe:b3:3e:ee:15:f5:72:3c:ca:91:47:0c:53: ec:82:19:2d:80:94:94:06:bd:75:c6:3d:6a:f2:f3: 1e:37:cb:de:d4:af:c8:75:90:a2:73:99:24:61:78: 08:a8:8b:e6:04:41:19:fc:8b:48:e8:fb:b6:65:dc: ba:f7:aa:df:df:bd:73:11:1c:e0:a8:5a:3c:ce:00: dd:43:b9:07:fe:1a:e9:bf:d5:fc:b9:33:31:f9:02: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:48:85:FD:94:D7:55:F1:90:A1:47:7E:CA:33:04:3B:92:F5:D2:E6 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fb:b2:9e:7c:3f:ad:8e:d3:59:cb:3a:bc:64:8d:19:95:06: f3:c8:45:18:96:ab:18:2e:ea:a6:cb:65:7f:1d:b4:9f:aa:e8: cf:74:79:80:cb:92:2c:73:ac:9e:b3:17:e5:8a:51:2a:0e:43: 75:66:eb:8a:2d:41:ba:f2:80:ba:29:9b:32:f1:40:1a:51:29: 27:5d:94:3c:12:e1:77:47:87:e0:8a:38:25:46:a3:5a:b5:34: cf:13:70:b0:9a:e2:cb:1b:88:2d:83:64:0c:75:02:43:72:13: a7:89:5c:27:6e:0d:11:66:e2:49:e8:e3:40:27:b9:f0:e5:15: 37:44:81:b6:c0:bc:74:c8:ba:2c:03:29:3d:82:5d:16:68:65: 0b:50:8d:66:bd:06:1d:98:63:27:35:09:50:3b:14:e2:96:a0: f6:10:f7:ba:ff:7d:fd:ba:96:6e:c1:7a:49:8e:fb:ad:89:f9: ab:e8:21:ec:0f:3e:e4:6c:c2:4c:3c:9f:14:f2:5e:b9:fa:ba: 00:bc:fd:ec:18:9e:52:68:1c:4d:10:c0:32:a6:a3:13:12:6f: 0a:0d:d4:3b:95:ef:e1:26:e3:40:20:27:19:b7:0a:b6:b8:71: 5e:28:59:fb:58:34:49:39:80:ed:b3:5d:8b:09:c7:12:e6:67: ad:9a:5a:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqXg1bb1090Xt5JLmjLN/qRpkw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTA0MDQxNzU2MzJaFw0yNTA0MDcyMDI5MzJaMDMxMTAvBgNV BAMTKDdFNDg4NUZEOTRENzU1RjE5MEExNDc3RUNBMzMwNDNCOTJGNUQyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpMFFj4diNZY36OvZ6r6G9K83U HJT+czOr3T68f9GFU26sPAy5102C6vot3lbqtNeKFAIUfvDCuaCcjV+4Yk0f+EQD rUk58pGIYRD3DCY5Wqcb6dvF3+UpUoigdwCwYqCtHMYekXivIvrVPsEaelWW0w5o p85w7MeXAi0LBWrXUGO0+cS2qh/GmuVVGIrAMVtlvxuSNnuWnWJiPtPxUlD1LxlQ +8j1/rM+7hX1cjzKkUcMU+yCGS2AlJQGvXXGPWry8x43y97Ur8h1kKJzmSRheAio i+YEQRn8i0jo+7Zl3Lr3qt/fvXMRHOCoWjzOAN1DuQf+Gum/1fy5MzH5AnG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfkiF/ZTXVfGQoUd+yjMEO5L10uYwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD7sp58P62O01nLOrxkjRmVBvPIRRiWqxgu 6qbLZX8dtJ+q6M90eYDLkixzrJ6zF+WKUSoOQ3Vm64otQbrygLopmzLxQBpRKSdd lDwS4XdHh+CKOCVGo1q1NM8TcLCa4ssbiC2DZAx1AkNyE6eJXCduDRFm4kno40An ufDlFTdEgbbAvHTIuiwDKT2CXRZoZQtQjWa9Bh2YYyc1CVA7FOKWoPYQ97r/ff26 lm7BekmO+62J+avoIewPPuRswkw8nxTyXrn6ugC8/ewYnlJoHE0QwDKmoxMSbwoN 1DuV7+Em40AgJxm3Cra4cV4oWftYNEk5gO2zXYsJxxLmZ62aWos= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:52 2025 by rpki-client