$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: fPnbzMeO64fkJcQZF3zwcq7JuvBH4DeQ9E1DbILD290= Subject key identifier: 40:6F:19:D4:61:30:77:9D:6A:FF:73:4F:B2:88:CF:8E:39:6E:55:6B Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 7E5F57192BCB162A4AC2780373B6FD66FE508323 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 0207 Signing time: Tue 03 Jun 2025 16:52:07 +0000 Manifest this update: Tue 03 Jun 2025 16:47:07 +0000 Manifest next update: Fri 06 Jun 2025 18:47:07 +0000 Files and hashes: 1: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: Mg/2YLUi/aQ6RZmsPEGIwNMohSHy4oK9TK7cAe53huM=) 2: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) 3: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 4: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5f:57:19:2b:cb:16:2a:4a:c2:78:03:73:b6:fd:66:fe:50:83:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Jun 3 16:47:07 2025 GMT Not After : Jun 6 18:47:07 2025 GMT Subject: CN=406F19D46130779D6AFF734FB288CF8E396E556B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:1d:21:01:c1:6f:bf:10:80:2d:1d:01:b7: 0e:92:95:42:01:a5:a0:f8:9d:25:79:0c:73:3e:46: a9:cd:7c:4d:11:a7:00:2c:03:cf:97:ef:7b:89:3e: a8:f7:da:d3:fc:f3:ab:53:75:95:f1:5c:eb:88:d2: 52:7b:aa:54:a2:72:bb:ce:e5:c4:b3:09:4d:7c:23: 2c:2c:7c:46:57:de:df:98:cf:bb:b0:d0:95:77:1f: bf:ee:6a:e6:d8:d2:f4:89:a9:88:96:5e:cc:d3:5b: 82:41:a8:39:df:e5:bf:87:88:df:62:4e:b5:93:b0: fe:68:0a:a2:87:5c:e6:6f:42:4a:01:bf:cc:87:a4: 62:54:4a:66:e8:77:d9:64:0e:82:a3:1c:88:fa:cf: 55:f7:ba:e0:52:14:f0:25:99:2b:79:8a:45:83:a5: b0:b6:f0:25:99:35:fa:9a:a0:72:22:da:c1:d5:66: f7:75:e3:3b:20:39:1e:c2:cd:f3:c9:92:1d:bd:96: c8:0a:fb:4d:2b:a5:ae:30:02:11:98:58:3e:91:68: 7b:14:dc:48:06:f0:74:dc:a1:63:c6:4c:e2:77:22: 87:89:03:a9:34:2e:72:93:e5:8a:7e:34:69:18:b4: 15:5d:07:f2:40:17:04:dc:29:e6:1c:19:92:14:4c: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6F:19:D4:61:30:77:9D:6A:FF:73:4F:B2:88:CF:8E:39:6E:55:6B X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:56:92:e4:e3:81:48:da:82:aa:87:f6:68:fe:6b:5a:b1:64: 68:fc:f5:ef:8d:aa:4c:f3:1f:b3:f8:14:fd:4f:39:5a:4f:a9: 40:ea:2d:dd:e3:55:95:b1:84:a1:35:d0:c9:4a:0c:94:81:82: 22:6d:69:d3:57:4c:93:a3:7b:7b:99:3e:88:e6:39:2e:41:f4: c4:83:01:8d:ec:75:0c:7d:e8:17:9f:53:0d:33:bb:0d:b3:9c: b1:96:17:09:9d:aa:26:8d:3e:35:c1:0b:27:cf:2b:44:04:73: da:95:03:45:63:d3:d6:bc:b7:be:e4:3c:37:37:0f:a4:1c:0a: 17:15:98:3c:aa:cf:12:5a:17:9d:cd:ff:5d:55:25:90:69:d8: d4:d7:3c:57:1d:58:0f:bf:4e:2a:94:12:a1:32:38:1e:d1:73: 6a:0e:29:8c:67:13:e2:70:a5:dd:fc:86:a8:91:7c:fc:da:74: d2:97:7a:e8:e9:34:96:5b:02:96:77:7e:43:c7:14:92:5b:05: 55:2d:5c:8f:92:8e:b1:4d:08:50:31:f1:34:00:6e:54:1a:b7: 8a:89:8f:5a:d8:a8:49:75:71:5e:26:df:6b:7f:bd:e8:01:7b: 26:27:5e:b1:f2:8a:d6:bc:42:c9:6d:08:3e:46:e6:c3:d7:aa: 0d:58:40:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfl9XGSvLFipKwngDc7b9Zv5QgyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNTA2MDMxNjQ3MDdaFw0yNTA2MDYxODQ3MDdaMDMxMTAvBgNV BAMTKDQwNkYxOUQ0NjEzMDc3OUQ2QUZGNzM0RkIyODhDRjhFMzk2RTU1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjh0hAcFvvxCALR0Btw6SlUIB paD4nSV5DHM+RqnNfE0RpwAsA8+X73uJPqj32tP886tTdZXxXOuI0lJ7qlSicrvO 5cSzCU18IywsfEZX3t+Yz7uw0JV3H7/uaubY0vSJqYiWXszTW4JBqDnf5b+HiN9i TrWTsP5oCqKHXOZvQkoBv8yHpGJUSmbod9lkDoKjHIj6z1X3uuBSFPAlmSt5ikWD pbC28CWZNfqaoHIi2sHVZvd14zsgOR7CzfPJkh29lsgK+00rpa4wAhGYWD6RaHsU 3EgG8HTcoWPGTOJ3IoeJA6k0LnKT5Yp+NGkYtBVdB/JAFwTcKeYcGZIUTELfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQG8Z1GEwd51q/3NPsojPjjluVWswHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxWkuTjgUjagqqH9mj+a1qxZGj89e+Nqkzz H7P4FP1POVpPqUDqLd3jVZWxhKE10MlKDJSBgiJtadNXTJOje3uZPojmOS5B9MSD AY3sdQx96BefUw0zuw2znLGWFwmdqiaNPjXBCyfPK0QEc9qVA0Vj09a8t77kPDc3 D6QcChcVmDyqzxJaF53N/11VJZBp2NTXPFcdWA+/TiqUEqEyOB7Rc2oOKYxnE+Jw pd38hqiRfPzadNKXeujpNJZbApZ3fkPHFJJbBVUtXI+SjrFNCFAx8TQAblQat4qJ j1rYqEl1cV4m32t/vegBeyYnXrHyita8QsltCD5G5sPXqg1YQJM= -----END CERTIFICATE-----Generated at Thu Jun 5 19:42:21 2025 by rpki-client