$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: nKhWKMB7p//7z/R9FiFL7AZ+MivqEpcwrn4cKXvI3yY= Subject key identifier: FE:2B:58:4E:AF:30:22:78:81:B0:58:52:5A:14:47:B4:65:46:D7:0A Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 4148EED05710540CB3F93E999766D75410FC73E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 0229 Signing time: Tue 29 Apr 2025 12:31:32 +0000 Manifest this update: Tue 29 Apr 2025 12:26:32 +0000 Manifest next update: Fri 02 May 2025 23:38:32 +0000 Files and hashes: 1: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: 5VwR7HDfdfAKISy+dHdojCP894McL9XrCePHeKrbz6E=) 2: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: b4ZzBR/PiFN/TFgrZaFMskc74kHEf2eBaB2gwESuk64=) 3: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: HF0dYwlz6vdJov/k+WgwRu0xhExNgUTwhPU6qhbpy2A=) 4: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: QWdrnAaVlOBIitG7PPTh7yvLUMWH2oNGIu32jfCgQaE=) 5: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=) 6: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=) 7: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=) 8: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=) 9: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:48:ee:d0:57:10:54:0c:b3:f9:3e:99:97:66:d7:54:10:fc:73:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Apr 29 12:26:32 2025 GMT Not After : May 2 23:38:32 2025 GMT Subject: CN=FE2B584EAF30227881B058525A1447B46546D70A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:08:1f:72:35:80:3f:1c:d3:b9:e4:91:88: 5f:0b:59:a4:f9:a7:b5:12:bb:1a:54:17:fa:bd:e0: 22:dc:e5:4f:39:9f:b8:c3:25:35:25:33:06:9d:2e: a6:a0:fb:23:d5:d9:99:c1:c4:de:7c:14:21:3f:1f: 6c:c2:dd:71:dd:f7:91:d4:71:38:28:82:38:40:80: 93:55:e4:d4:90:3b:2d:fe:7d:02:02:57:82:72:0d: 11:ff:1f:3c:8e:f3:c1:45:3c:fd:c5:97:94:be:de: 66:94:78:a1:23:9e:12:ae:0d:97:9f:5b:83:f0:ad: ff:98:16:6b:02:b8:8d:55:29:75:80:0f:8c:32:6c: 5f:f6:ad:b5:b9:be:e7:30:b2:af:d5:c3:bb:fa:f0: a9:75:57:a4:72:bd:07:4d:18:bf:06:a1:23:75:24: 20:e7:cb:c3:71:10:2e:0e:53:c9:6e:2c:ce:1e:64: c6:37:98:8d:75:98:2e:8e:c4:35:29:fa:40:da:dc: fc:8f:09:9d:92:66:99:1b:db:2d:01:ed:a2:ae:3d: 78:36:e0:bf:7a:7a:2c:6c:69:55:16:60:e8:8e:ad: 86:47:f2:45:e7:f3:59:1e:84:7f:d9:1e:3b:13:1f: e0:ef:db:be:b2:5e:06:92:ef:4f:e8:09:3e:53:eb: 65:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2B:58:4E:AF:30:22:78:81:B0:58:52:5A:14:47:B4:65:46:D7:0A X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:6c:d3:b2:83:b5:0e:14:b0:db:94:29:1b:89:c0:61:89:0a: 70:18:55:33:18:e2:b0:e4:b9:24:89:8d:a2:5f:61:1b:e3:88: d3:6f:b9:37:3f:e3:e5:ba:fc:e8:60:b4:c7:a9:e6:e8:c3:af: e0:f4:59:d1:53:e9:87:9b:5f:6a:c6:89:6a:8e:6b:36:01:95: 50:e8:60:ff:b3:ab:4d:f7:d0:34:d4:30:cc:39:1b:f9:f7:57: b4:da:56:0d:22:55:93:02:20:15:dc:c0:1e:4c:45:39:a7:cd: b4:ce:38:5d:a9:1d:c4:15:b6:c6:4f:96:0f:79:7b:a0:be:20: 91:41:bc:bc:85:de:b8:b3:8f:85:4e:fe:2b:f2:f0:ea:b1:0b: f9:a1:dc:66:c2:bd:08:2f:86:da:51:5c:72:12:1a:09:5f:52: 3a:a9:1f:ae:82:35:4b:52:3e:53:58:d1:39:c6:87:eb:fe:0f: 76:96:77:67:4d:20:c3:6c:9e:2c:4c:eb:a0:49:32:a8:d4:20: a8:96:48:3c:c6:14:45:88:6e:7f:28:cb:a9:0f:c1:a0:22:bd: 0e:79:c9:64:8d:04:da:0c:cd:37:17:e0:a0:28:20:a7:be:64: 69:1b:fb:fe:dd:da:5a:de:59:66:d0:ed:ff:20:6f:83:2f:86: 5a:12:2e:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUju0FcQVAyz+T6Zl2bXVBD8c+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTA0MjkxMjI2MzJaFw0yNTA1MDIyMzM4MzJaMDMxMTAvBgNV BAMTKEZFMkI1ODRFQUYzMDIyNzg4MUIwNTg1MjVBMTQ0N0I0NjU0NkQ3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmwgfcjWAPxzTueSRiF8LWaT5 p7USuxpUF/q94CLc5U85n7jDJTUlMwadLqag+yPV2ZnBxN58FCE/H2zC3XHd95HU cTgogjhAgJNV5NSQOy3+fQICV4JyDRH/HzyO88FFPP3Fl5S+3maUeKEjnhKuDZef W4Pwrf+YFmsCuI1VKXWAD4wybF/2rbW5vucwsq/Vw7v68Kl1V6RyvQdNGL8GoSN1 JCDny8NxEC4OU8luLM4eZMY3mI11mC6OxDUp+kDa3PyPCZ2SZpkb2y0B7aKuPXg2 4L96eixsaVUWYOiOrYZH8kXn81kehH/ZHjsTH+Dv276yXgaS70/oCT5T62VFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/itYTq8wIniBsFhSWhRHtGVG1wowHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALps07KDtQ4UsNuUKRuJwGGJCnAYVTMY4rDk uSSJjaJfYRvjiNNvuTc/4+W6/OhgtMep5ujDr+D0WdFT6YebX2rGiWqOazYBlVDo YP+zq0330DTUMMw5G/n3V7TaVg0iVZMCIBXcwB5MRTmnzbTOOF2pHcQVtsZPlg95 e6C+IJFBvLyF3rizj4VO/ivy8OqxC/mh3GbCvQgvhtpRXHISGglfUjqpH66CNUtS PlNY0TnGh+v+D3aWd2dNIMNsnixM66BJMqjUIKiWSDzGFEWIbn8oy6kPwaAivQ55 yWSNBNoMzTcX4KAoIKe+ZGkb+/7d2lreWWbQ7f8gb4MvhloSLuM= -----END CERTIFICATE-----Generated at Wed Apr 30 03:47:36 2025 by rpki-client