$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: bYljem5FRT3IVC/TvLEyfYNooKbiYqy/jlXoCewtQI8= Subject key identifier: 19:21:47:BE:48:61:D2:61:76:52:07:E4:24:0B:7E:28:CF:18:96:C4 Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 209912BB61150F2A0401D5C3DF20DD51FFE2CB8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 0200 Signing time: Sat 14 Jun 2025 05:42:08 +0000 Manifest this update: Sat 14 Jun 2025 05:37:08 +0000 Manifest next update: Tue 17 Jun 2025 10:01:08 +0000 Files and hashes: 1: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) 2: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: YxCAT69rW27kwAwxw9cVKFdTrSnFl6WYoezcYUVW/uw=) 3: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:99:12:bb:61:15:0f:2a:04:01:d5:c3:df:20:dd:51:ff:e2:cb:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Jun 14 05:37:08 2025 GMT Not After : Jun 17 10:01:08 2025 GMT Subject: CN=192147BE4861D261765207E4240B7E28CF1896C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:33:13:19:ce:13:e5:36:c5:01:8f:b2:4f:61: 8f:45:b7:bd:83:5c:2a:f2:b1:ec:f9:58:13:c2:06: 3c:6b:dc:65:7e:0b:c0:cc:35:af:03:0e:5e:72:18: c3:50:f3:f4:31:74:54:62:7b:cf:73:24:05:e8:5c: f9:aa:3e:0c:2d:2e:8b:b1:e4:b6:f0:63:a3:96:46: 23:79:f9:57:cd:a3:f0:64:fb:67:86:22:5b:5e:4d: 02:99:c1:da:23:f0:67:1d:84:69:59:b8:f6:21:bb: 64:fd:3c:e8:a5:f7:fb:80:33:42:f6:61:29:1f:d5: 41:8d:fc:a7:ee:c0:4e:fb:cf:7b:5b:d9:d4:b1:a8: 09:7c:dc:70:e1:0f:e2:15:c9:8a:cf:84:e2:b5:64: 3e:48:97:fc:06:9e:73:5e:96:12:02:71:1e:18:88: a5:64:8e:b2:ba:89:14:ec:0d:c7:ee:da:f8:5f:31: 43:60:c7:bb:d7:54:45:2d:e5:e2:e5:ea:19:a2:dd: 55:b7:6a:ce:ce:06:de:75:f7:8d:07:c3:b4:35:1d: 15:c0:93:c3:3b:f9:6e:5f:2e:22:11:43:56:d6:f2: f8:25:4f:f5:8c:a2:91:00:72:a9:fd:04:f5:f6:46: 0a:fc:a0:a5:92:76:c7:dc:47:18:e9:c9:dd:07:00: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:21:47:BE:48:61:D2:61:76:52:07:E4:24:0B:7E:28:CF:18:96:C4 X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b9:72:b0:b5:c3:7b:85:2d:a7:d3:20:d5:c7:6b:8f:1d:50: 3e:89:7b:6e:67:6c:2d:a7:bc:f1:eb:99:b3:f8:ed:c0:1a:8a: 6e:bb:2c:41:f3:e1:3d:63:bb:db:40:15:4c:3e:73:01:64:64: fc:53:49:05:50:81:ef:84:f2:01:a9:11:bf:88:fb:7d:af:31: 98:27:25:97:60:d5:b7:3a:59:56:fc:97:4f:a8:ef:cb:21:76: 79:a0:44:a2:b8:f9:3b:eb:a5:fe:3a:8d:7c:d9:07:ad:38:e1: 51:43:7e:8f:07:0d:cf:08:d8:91:4d:ba:c9:03:98:aa:ee:1f: 7c:7a:6c:cc:b2:7c:7a:f2:27:4a:51:da:8b:39:3c:3a:c7:d4: 01:55:bf:af:66:e1:5f:28:27:ec:d5:98:af:d7:b8:57:f8:40: 74:ea:26:cd:08:ed:1d:7a:a1:87:b7:43:73:a2:37:f8:13:ce: b8:1f:70:af:2d:26:14:9f:75:4d:e4:d3:9f:0a:e1:22:a3:59: 84:45:02:b8:05:9c:cc:f3:bc:d3:db:45:d9:d2:67:16:3d:b2: 01:27:0f:13:7e:94:89:e3:95:02:6b:c7:d2:3f:91:49:a3:ea: 97:cd:5d:45:8f:b7:98:e2:d7:d8:e3:ea:25:90:52:6d:f6:82: da:64:a2:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJkSu2EVDyoEAdXD3yDdUf/iy4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTA2MTQwNTM3MDhaFw0yNTA2MTcxMDAxMDhaMDMxMTAvBgNV BAMTKDE5MjE0N0JFNDg2MUQyNjE3NjUyMDdFNDI0MEI3RTI4Q0YxODk2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMxMZzhPlNsUBj7JPYY9Ft72D XCrysez5WBPCBjxr3GV+C8DMNa8DDl5yGMNQ8/QxdFRie89zJAXoXPmqPgwtLoux 5LbwY6OWRiN5+VfNo/Bk+2eGIlteTQKZwdoj8GcdhGlZuPYhu2T9POil9/uAM0L2 YSkf1UGN/KfuwE77z3tb2dSxqAl83HDhD+IVyYrPhOK1ZD5Il/wGnnNelhICcR4Y iKVkjrK6iRTsDcfu2vhfMUNgx7vXVEUt5eLl6hmi3VW3as7OBt51940Hw7Q1HRXA k8M7+W5fLiIRQ1bW8vglT/WMopEAcqn9BPX2Rgr8oKWSdsfcRxjpyd0HAL17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGSFHvkhh0mF2UgfkJAt+KM8YlsQwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+5crC1w3uFLafTINXHa48dUD6Je25nbC2n vPHrmbP47cAaim67LEHz4T1ju9tAFUw+cwFkZPxTSQVQge+E8gGpEb+I+32vMZgn JZdg1bc6WVb8l0+o78shdnmgRKK4+Tvrpf46jXzZB6044VFDfo8HDc8I2JFNuskD mKruH3x6bMyyfHryJ0pR2os5PDrH1AFVv69m4V8oJ+zVmK/XuFf4QHTqJs0I7R16 oYe3Q3OiN/gTzrgfcK8tJhSfdU3k058K4SKjWYRFArgFnMzzvNPbRdnSZxY9sgEn DxN+lInjlQJrx9I/kUmj6pfNXUWPt5ji19jj6iWQUm32gtpkotE= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:00 2025 by rpki-client