$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: rA1egN+C75Uti5HVS9qCpWjv1+DXfLWlaIqw5ytMLO4= Subject key identifier: F5:E4:EB:86:A1:A1:DD:CD:17:F9:8C:A4:4C:64:11:0D:AC:EF:CB:2E Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 7BFFEB53E3EA840D1D2EC838F0729E345A6A331D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 01A0 Signing time: Mon 16 Jun 2025 10:00:39 +0000 Manifest this update: Mon 16 Jun 2025 09:55:39 +0000 Manifest next update: Thu 19 Jun 2025 12:14:39 +0000 Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: qsN6cCaNvPRadYvOCvh81rbUqW03/U/6OgyS9kMLbwY=) 2: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: D9FRCsBlq4oFVprCullmzVF94sgVFCBIskRALJMPNJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 12:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ff:eb:53:e3:ea:84:0d:1d:2e:c8:38:f0:72:9e:34:5a:6a:33:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Jun 16 09:55:39 2025 GMT Not After : Jun 19 12:14:39 2025 GMT Subject: CN=F5E4EB86A1A1DDCD17F98CA44C64110DACEFCB2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e5:55:42:33:bf:86:95:19:c2:fc:63:dc:56: b2:fe:c4:0c:dc:86:29:32:8c:08:24:08:c3:b2:0a: a6:03:d4:6d:1a:be:c1:45:51:3d:30:96:e2:b1:1e: 1e:9f:cd:cc:a4:5a:92:2b:b2:37:dc:b7:cb:a0:02: d9:db:bb:df:26:27:3b:4e:93:53:3f:c3:fa:01:85: 9b:48:18:c8:03:08:f5:41:8d:27:4b:9e:e9:15:cc: d8:d6:87:63:ba:2e:14:90:a1:d9:bd:38:28:7b:d0: 60:d9:49:41:98:47:ef:24:d4:3a:ec:25:f5:c5:d8: 62:76:64:e1:16:6f:a4:8d:09:cf:2a:65:80:7d:6a: f5:f4:66:08:97:01:13:48:e3:97:e1:b5:ad:85:55: 97:bb:99:41:13:62:4a:f3:e5:9b:53:c9:2c:a1:b4: 3f:cf:40:6e:61:65:0d:c1:29:02:05:22:e3:cf:48: 3a:16:75:ed:62:5e:4b:e9:ce:6c:b7:fe:fe:7e:5e: 43:15:ee:89:64:39:43:69:d9:55:10:6b:34:71:9c: 4c:19:6d:ce:b2:b5:67:c1:ab:7c:ef:60:fd:ba:44: 24:67:31:56:68:8b:4f:0d:48:12:aa:30:a5:c2:5c: 10:c2:1e:a7:43:0b:e0:59:e7:24:8c:26:8d:95:8d: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E4:EB:86:A1:A1:DD:CD:17:F9:8C:A4:4C:64:11:0D:AC:EF:CB:2E X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f0:d9:9e:fb:a2:c9:9e:41:f3:02:4e:d5:0b:f6:72:19:3c: 1a:c8:3b:7f:6a:de:41:b3:f6:f2:28:02:ab:60:88:ff:7d:0d: 55:9f:67:4a:07:84:11:98:a0:88:59:3e:88:64:96:41:e9:8b: 0c:6a:cb:44:60:19:3b:d3:9b:26:f8:35:ec:4d:66:bd:bb:fd: 28:ae:cd:22:8c:3f:89:a6:07:4b:c1:ee:6c:3a:e2:7d:7f:47: 0d:91:66:fe:4c:97:bf:52:02:91:f9:e3:6b:eb:f0:42:d5:59: d7:8a:42:e5:aa:a9:80:5d:fb:b9:b6:c5:da:16:95:35:02:e9: be:00:77:d4:c0:52:0a:69:9c:e7:7c:1a:11:09:5f:3e:5f:bf: dd:e0:24:9a:b6:56:99:08:92:55:ba:05:87:e5:d2:0d:51:62: 51:ca:99:b2:e7:83:bb:64:f4:09:8e:d5:1e:ec:17:2c:11:f3: 35:11:74:cf:4b:f5:17:f0:1d:25:57:04:d8:5b:61:d1:ef:1d: 19:ee:a7:27:45:10:be:40:e5:7e:94:9f:7c:17:3c:e9:55:da: b7:87:03:2a:b1:43:7e:ac:5a:43:46:94:3e:a5:ed:cb:90:ce: c2:fd:55:0e:c3:04:2d:55:5c:d3:ed:0f:f6:2f:07:50:e7:5a: 96:91:a1:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe//rU+PqhA0dLsg48HKeNFpqMx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNTA2MTYwOTU1MzlaFw0yNTA2MTkxMjE0MzlaMDMxMTAvBgNV BAMTKEY1RTRFQjg2QTFBMUREQ0QxN0Y5OENBNDRDNjQxMTBEQUNFRkNCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe5VVCM7+GlRnC/GPcVrL+xAzc hikyjAgkCMOyCqYD1G0avsFFUT0wluKxHh6fzcykWpIrsjfct8ugAtnbu98mJztO k1M/w/oBhZtIGMgDCPVBjSdLnukVzNjWh2O6LhSQodm9OCh70GDZSUGYR+8k1Drs JfXF2GJ2ZOEWb6SNCc8qZYB9avX0ZgiXARNI45fhta2FVZe7mUETYkrz5ZtTySyh tD/PQG5hZQ3BKQIFIuPPSDoWde1iXkvpzmy3/v5+XkMV7olkOUNp2VUQazRxnEwZ bc6ytWfBq3zvYP26RCRnMVZoi08NSBKqMKXCXBDCHqdDC+BZ5ySMJo2Vjc39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9eTrhqGh3c0X+YykTGQRDazvyy4wHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnw2Z77osmeQfMCTtUL9nIZPBrIO39q3kGz 9vIoAqtgiP99DVWfZ0oHhBGYoIhZPohklkHpiwxqy0RgGTvTmyb4NexNZr27/Siu zSKMP4mmB0vB7mw64n1/Rw2RZv5Ml79SApH542vr8ELVWdeKQuWqqYBd+7m2xdoW lTUC6b4Ad9TAUgppnOd8GhEJXz5fv93gJJq2VpkIklW6BYfl0g1RYlHKmbLng7tk 9AmO1R7sFywR8zURdM9L9RfwHSVXBNhbYdHvHRnupydFEL5A5X6Un3wXPOlV2reH AyqxQ36sWkNGlD6l7cuQzsL9VQ7DBC1VXNPtD/YvB1DnWpaRoac= -----END CERTIFICATE-----Generated at Wed Jun 18 00:05:21 2025 by rpki-client