$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: 8FRiud5NFkEz3/f7Cd4nZn3ga7AzPDuPAelnUnGctWs= Subject key identifier: DC:2F:6D:14:8E:01:A2:10:43:9C:F7:AC:A4:83:9C:28:61:21:8B:9B Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 11D146FEDCD44E85684DD9FC1861D75DDAA4C199 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 0217 Signing time: Tue 05 Aug 2025 11:02:09 +0000 Manifest this update: Tue 05 Aug 2025 10:57:09 +0000 Manifest next update: Fri 08 Aug 2025 11:15:09 +0000 Files and hashes: 1: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: FElaY9UD7Ln9Ga4lprdwFEhrweOtR3FAA8k6x+OZ6aI=) 2: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) 3: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 11:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d1:46:fe:dc:d4:4e:85:68:4d:d9:fc:18:61:d7:5d:da:a4:c1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Aug 5 10:57:09 2025 GMT Not After : Aug 8 11:15:09 2025 GMT Subject: CN=DC2F6D148E01A210439CF7ACA4839C2861218B9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:34:aa:ed:c1:31:33:b9:cb:01:c1:9d:c7:ac: be:19:72:c0:cb:d1:f1:67:09:a3:2f:c7:cf:b2:f8: 9e:ce:b7:7a:0a:fd:31:fc:7a:ee:cf:59:03:d0:57: df:57:ca:fe:9a:c0:86:8e:4f:52:ef:a7:64:13:33: c1:33:a5:89:78:49:40:89:e7:fa:ea:1c:ea:72:08: cf:9a:bc:1d:85:68:25:8e:72:57:82:14:9a:ec:b9: 5d:ea:b1:9f:39:0b:a6:1c:ca:16:23:4b:72:4c:c6: 29:dd:ce:53:01:e0:dc:7c:4f:24:15:93:f0:3f:ea: ec:db:a5:56:25:11:10:30:2d:ab:5c:88:f1:80:69: 8c:26:af:3d:ba:6a:f6:ab:98:f6:e2:54:48:2c:96: 42:f8:ed:43:22:20:95:bb:11:76:94:59:8e:20:27: da:c0:c8:da:a3:dc:00:c2:f2:1c:75:65:30:18:8c: 82:30:29:e0:90:25:e4:33:47:f8:50:65:9f:64:19: fb:cb:a2:56:d3:d8:8a:f7:96:73:d4:b8:24:16:65: e7:41:8e:39:3e:fc:c6:bd:d5:f5:e6:42:4f:1f:ea: 93:94:4d:6b:6f:a8:b1:59:95:c3:5f:7b:e2:7e:86: 1d:0f:c3:39:bf:f3:43:bd:82:91:82:4a:0a:1c:84: 09:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2F:6D:14:8E:01:A2:10:43:9C:F7:AC:A4:83:9C:28:61:21:8B:9B X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:cb:ad:47:27:e4:f3:e0:79:57:9b:c4:2c:46:e9:5b:d9:8c: c7:f0:ec:51:98:9f:d5:db:40:c1:35:ca:5c:77:be:a2:ec:17: ea:fa:65:15:3f:48:14:91:93:67:cf:56:4b:3b:1b:63:4f:28: 19:a9:85:d9:8b:af:37:a8:8d:c2:7e:4b:fa:d2:93:cc:5d:b2: 8a:1d:d6:14:e0:d5:bc:36:28:55:85:31:9d:e3:a4:f1:d9:2b: fc:22:f1:7b:c9:4c:7f:5c:a2:c0:ef:29:33:8c:9d:e1:2c:7f: fc:32:fd:68:fe:9b:9b:13:51:3b:70:06:0f:5a:7e:5a:b5:47: 24:a8:b9:dc:cf:bd:d4:3b:a9:7c:61:84:cc:6e:1d:d8:2f:6f: d1:7e:01:54:97:51:7b:e5:0b:ae:59:2d:99:0d:08:39:cb:1c: 16:2e:3f:c1:ed:35:7f:9b:60:43:b5:1a:40:bb:18:87:c0:12: c5:6f:f6:ac:98:ba:05:c4:69:eb:6b:c0:cf:82:27:3f:b4:f5: a0:be:86:38:4c:08:26:b9:ec:7e:ea:3c:f4:35:6f:03:ff:71: 24:81:8d:dc:17:64:34:97:75:6b:57:62:40:49:ae:9b:d5:f9: 23:8c:08:be:cb:2e:49:22:50:b3:70:4b:a5:42:7c:b5:93:94: 8b:b8:67:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdFG/tzUToVoTdn8GGHXXdqkwZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTA4MDUxMDU3MDlaFw0yNTA4MDgxMTE1MDlaMDMxMTAvBgNV BAMTKERDMkY2RDE0OEUwMUEyMTA0MzlDRjdBQ0E0ODM5QzI4NjEyMThCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNKrtwTEzucsBwZ3HrL4ZcsDL 0fFnCaMvx8+y+J7Ot3oK/TH8eu7PWQPQV99Xyv6awIaOT1Lvp2QTM8EzpYl4SUCJ 5/rqHOpyCM+avB2FaCWOcleCFJrsuV3qsZ85C6YcyhYjS3JMxindzlMB4Nx8TyQV k/A/6uzbpVYlERAwLatciPGAaYwmrz26avarmPbiVEgslkL47UMiIJW7EXaUWY4g J9rAyNqj3ADC8hx1ZTAYjIIwKeCQJeQzR/hQZZ9kGfvLolbT2Ir3lnPUuCQWZedB jjk+/Ma91fXmQk8f6pOUTWtvqLFZlcNfe+J+hh0Pwzm/80O9gpGCSgochAnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3C9tFI4BohBDnPespIOcKGEhi5swHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPLrUcn5PPgeVebxCxG6VvZjMfw7FGYn9Xb QME1ylx3vqLsF+r6ZRU/SBSRk2fPVks7G2NPKBmphdmLrzeojcJ+S/rSk8xdsood 1hTg1bw2KFWFMZ3jpPHZK/wi8XvJTH9cosDvKTOMneEsf/wy/Wj+m5sTUTtwBg9a flq1RySoudzPvdQ7qXxhhMxuHdgvb9F+AVSXUXvlC65ZLZkNCDnLHBYuP8HtNX+b YEO1GkC7GIfAEsVv9qyYugXEaetrwM+CJz+09aC+hjhMCCa57H7qPPQ1bwP/cSSB jdwXZDSXdWtXYkBJrpvV+SOMCL7LLkkiULNwS6VCfLWTlIu4Z6c= -----END CERTIFICATE-----Generated at Thu Aug 7 11:07:07 2025 by rpki-client