$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: c7CIK9vYCjqLmuV8OIpiIkVslWQFGcx769XK7qlMuS0= Subject key identifier: 02:75:77:C3:FE:A2:43:86:53:62:A1:FF:B0:2A:6D:4F:61:BB:7B:46 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 4556153357ECD6338B7A4B27AB868B199D423255 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 0238 Signing time: Mon 02 Jun 2025 17:11:32 +0000 Manifest this update: Mon 02 Jun 2025 17:06:32 +0000 Manifest next update: Thu 05 Jun 2025 17:29:32 +0000 Files and hashes: 1: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: HF0dYwlz6vdJov/k+WgwRu0xhExNgUTwhPU6qhbpy2A=) 2: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: QWdrnAaVlOBIitG7PPTh7yvLUMWH2oNGIu32jfCgQaE=) 3: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: 5VwR7HDfdfAKISy+dHdojCP894McL9XrCePHeKrbz6E=) 4: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=) 5: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: AJRNMzHev+SgsBq3YnxzJJuI/aUeO3zagMd1GVoRzCc=) 6: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=) 7: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=) 8: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=) 9: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 17:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:56:15:33:57:ec:d6:33:8b:7a:4b:27:ab:86:8b:19:9d:42:32:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Jun 2 17:06:32 2025 GMT Not After : Jun 5 17:29:32 2025 GMT Subject: CN=027577C3FEA243865362A1FFB02A6D4F61BB7B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:73:1e:dc:ea:51:e9:e4:89:2d:a3:18:45: 45:b1:b3:5c:7f:0c:16:6d:2c:64:b1:c7:d0:85:21: 85:36:43:c0:06:62:75:31:05:eb:8b:74:5c:87:d0: 1f:48:42:1a:d6:75:b7:a0:6e:85:3c:83:1e:85:7c: f5:a1:44:1a:97:03:8b:29:9b:33:14:08:b9:16:56: 59:16:0a:15:0d:dc:8c:62:79:c1:07:b9:73:e2:fb: 6f:88:fc:2b:a2:b9:b5:e6:fd:d7:f7:36:75:89:f8: 06:f1:f9:98:ac:de:cd:73:4e:d1:c2:7d:ab:3e:1f: 92:ff:7f:03:a6:63:a3:47:bc:ba:15:9a:7d:24:7a: 4d:1b:8c:5a:ea:8b:3e:4e:2b:bb:63:47:cd:c4:d9: 77:ad:63:ab:6f:48:ff:e0:b2:25:68:86:c8:63:28: 74:5d:27:51:ac:d3:9c:35:1d:3c:a0:8f:6b:a1:72: c5:96:3f:f0:1b:e8:48:cb:2a:da:88:a9:cc:a6:41: 44:fe:6d:b7:21:f1:64:77:51:d3:26:f9:64:5f:f8: 77:06:76:22:1e:c0:a5:7a:00:c3:20:43:0b:57:86: c8:b5:52:c3:d3:84:09:11:3d:10:8b:96:58:80:1c: 34:45:5d:fd:0a:6f:d6:ba:73:4f:90:83:03:2b:39: 7d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:75:77:C3:FE:A2:43:86:53:62:A1:FF:B0:2A:6D:4F:61:BB:7B:46 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:f7:d4:0e:da:da:ba:ca:95:c5:c3:fb:f6:4e:4b:ba:7a:4c: e3:8e:33:12:75:d3:f1:9e:f2:78:14:d7:6c:26:85:e2:33:54: 3a:0f:86:9f:71:85:af:bb:37:9e:f8:7c:45:1c:cc:68:03:83: 04:46:72:12:40:c7:87:68:f9:bc:3d:48:7c:ae:d5:f1:a5:f9: 16:79:ee:d1:1d:ca:86:2a:86:99:bb:b4:e9:67:4e:36:a3:f8: 50:fa:d6:42:d2:54:8c:79:36:88:cd:37:05:c1:f4:75:8d:69: 47:73:0c:9f:19:d7:01:dc:2c:b2:71:9b:44:03:f1:7a:77:84: 85:c2:6d:20:25:3d:44:ec:6c:7b:14:8f:62:c7:a8:db:e9:06: 88:42:d8:7f:7b:7b:fd:cd:9a:56:91:2c:57:e9:e4:cc:da:e6: 54:35:d0:9b:a0:dd:b3:64:2a:57:d2:c7:c7:49:16:2c:00:5d: c3:a6:62:e3:08:a5:4f:14:35:a2:2b:16:d1:e5:42:3a:e1:d3: 3d:de:c7:90:ce:71:2b:16:aa:af:bd:e7:d0:22:79:ae:93:76: 34:61:d2:ae:6e:f1:e8:fc:0e:49:92:08:a5:0a:bd:68:65:7d: 49:cb:50:ac:5b:a0:b2:4d:6b:c8:96:8e:42:59:e4:1f:12:d5: 90:22:af:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVYVM1fs1jOLeksnq4aLGZ1CMlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTA2MDIxNzA2MzJaFw0yNTA2MDUxNzI5MzJaMDMxMTAvBgNV BAMTKDAyNzU3N0MzRkVBMjQzODY1MzYyQTFGRkIwMkE2RDRGNjFCQjdCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabHMe3OpR6eSJLaMYRUWxs1x/ DBZtLGSxx9CFIYU2Q8AGYnUxBeuLdFyH0B9IQhrWdbegboU8gx6FfPWhRBqXA4sp mzMUCLkWVlkWChUN3IxiecEHuXPi+2+I/CuiubXm/df3NnWJ+Abx+Zis3s1zTtHC fas+H5L/fwOmY6NHvLoVmn0kek0bjFrqiz5OK7tjR83E2XetY6tvSP/gsiVohshj KHRdJ1Gs05w1HTygj2uhcsWWP/Ab6EjLKtqIqcymQUT+bbch8WR3UdMm+WRf+HcG diIewKV6AMMgQwtXhsi1UsPThAkRPRCLlliAHDRFXf0Kb9a6c0+QgwMrOX1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAnV3w/6iQ4ZTYqH/sCptT2G7e0YwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALn31A7a2rrKlcXD+/ZOS7p6TOOOMxJ10/Ge 8ngU12wmheIzVDoPhp9xha+7N574fEUczGgDgwRGchJAx4do+bw9SHyu1fGl+RZ5 7tEdyoYqhpm7tOlnTjaj+FD61kLSVIx5NojNNwXB9HWNaUdzDJ8Z1wHcLLJxm0QD 8Xp3hIXCbSAlPUTsbHsUj2LHqNvpBohC2H97e/3NmlaRLFfp5Mza5lQ10Jug3bNk KlfSx8dJFiwAXcOmYuMIpU8UNaIrFtHlQjrh0z3ex5DOcSsWqq+959Aiea6TdjRh 0q5u8ej8DkmSCKUKvWhlfUnLUKxboLJNa8iWjkJZ5B8S1ZAir9A= -----END CERTIFICATE-----Generated at Tue Jun 3 23:35:51 2025 by rpki-client