$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: owvWVDuo25BlPE2YT+6wQRiStWdKw9wgru4bT0jXoGU= Subject key identifier: 6D:F3:A0:0B:C1:BF:EB:03:CA:E0:64:81:96:DF:36:3C:1F:A1:D6:65 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 32B954939F94E321F97444BA932D0BC9EE8B15B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 023E Signing time: Sun 15 Jun 2025 07:31:34 +0000 Manifest this update: Sun 15 Jun 2025 07:26:34 +0000 Manifest next update: Wed 18 Jun 2025 12:52:34 +0000 Files and hashes: 1: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=) 2: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=) 3: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: FXod/LuIMZeUHEe29Imbo0QFuZRjSc+pZwyQ4DKqlUg=) 4: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: HF0dYwlz6vdJov/k+WgwRu0xhExNgUTwhPU6qhbpy2A=) 5: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=) 6: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: QWdrnAaVlOBIitG7PPTh7yvLUMWH2oNGIu32jfCgQaE=) 7: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=) 8: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=) 9: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: 5VwR7HDfdfAKISy+dHdojCP894McL9XrCePHeKrbz6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b9:54:93:9f:94:e3:21:f9:74:44:ba:93:2d:0b:c9:ee:8b:15:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Jun 15 07:26:34 2025 GMT Not After : Jun 18 12:52:34 2025 GMT Subject: CN=6DF3A00BC1BFEB03CAE0648196DF363C1FA1D665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:8a:ad:51:dd:fe:78:25:ce:00:d2:1e:2a: 4c:3a:79:ca:79:9f:70:92:cb:48:29:97:f8:91:41: 9a:3f:cd:c6:ce:9d:8c:83:99:b3:09:d3:12:74:4a: b8:a8:56:5f:25:59:86:55:c3:27:be:c3:d7:bd:e0: 6f:a4:d4:2e:98:7d:86:54:c8:ae:36:a7:fd:79:04: c9:cc:31:07:ef:18:9e:35:2d:15:49:91:08:c7:ad: 86:3f:61:77:92:e2:cc:30:8a:50:73:dd:04:15:ea: 42:99:49:ca:e0:f8:d1:d4:fd:cf:2a:97:75:a5:dc: 79:aa:3f:30:ab:ca:06:96:bf:82:d4:10:2c:62:cd: 9e:f4:bd:1b:86:e1:1e:83:97:8f:2c:07:a2:e4:ed: d4:ef:ba:01:18:82:45:3c:ad:a2:02:27:65:12:7c: 8e:83:43:a3:16:30:a8:e4:a5:bf:38:f1:f3:24:c3: 0d:e5:9a:0f:7f:f8:ca:ec:55:cd:1e:91:88:f4:aa: 44:25:32:57:06:d7:d6:4b:a3:d5:70:4a:b5:58:64: 5f:74:f4:ed:91:6a:1d:78:89:e1:ee:33:03:72:f1: fc:5d:21:27:65:53:71:45:ea:de:6a:8d:6b:0e:c4: 18:ea:ce:98:9d:62:8e:1a:1e:ca:f1:e8:c4:2d:ad: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F3:A0:0B:C1:BF:EB:03:CA:E0:64:81:96:DF:36:3C:1F:A1:D6:65 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b9:0b:8c:ad:a5:3d:80:70:26:32:9b:44:41:d1:13:25:f0: 4f:cd:70:ea:cd:65:65:83:b8:cb:73:75:24:38:2d:32:ba:f2: cb:bd:02:48:94:cd:6f:ed:59:84:07:3f:e1:19:74:7a:6b:53: c4:3e:16:d5:6e:44:0a:43:b7:ea:58:ff:3a:09:b3:73:17:57: 53:1c:49:42:5b:95:58:69:bd:b7:22:10:23:09:78:63:b4:bf: 85:47:34:e9:1d:ea:bd:a7:75:2f:26:d4:46:40:d5:18:c1:36: c1:05:7a:05:50:4c:49:79:db:08:61:15:38:09:7f:d0:67:33: 4f:3b:61:ea:d9:08:72:5d:f9:b1:2e:28:55:9b:04:ef:6e:bf: f2:2a:56:a3:40:89:e9:4e:b8:b9:46:ba:80:7f:dc:59:a8:7f: 0d:8d:18:37:11:44:bc:ca:01:ff:90:db:01:55:43:fb:90:54: 3e:01:6b:a7:6d:21:e8:7c:ce:f4:2b:16:e2:1b:35:db:45:c6: 30:1f:a8:13:17:82:4d:c5:9e:0e:af:c8:39:f6:e1:4b:9f:4a: cd:41:02:2f:1c:24:3b:a2:e5:75:44:b5:6c:62:3f:72:07:ba: 77:ce:37:8f:e4:e5:b5:7d:fa:c1:83:d9:89:4a:40:99:11:c4: 17:84:f2:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMrlUk5+U4yH5dES6ky0Lye6LFbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTA2MTUwNzI2MzRaFw0yNTA2MTgxMjUyMzRaMDMxMTAvBgNV BAMTKDZERjNBMDBCQzFCRkVCMDNDQUUwNjQ4MTk2REYzNjNDMUZBMUQ2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxIqtUd3+eCXOANIeKkw6ecp5 n3CSy0gpl/iRQZo/zcbOnYyDmbMJ0xJ0SrioVl8lWYZVwye+w9e94G+k1C6YfYZU yK42p/15BMnMMQfvGJ41LRVJkQjHrYY/YXeS4swwilBz3QQV6kKZScrg+NHU/c8q l3Wl3HmqPzCrygaWv4LUECxizZ70vRuG4R6Dl48sB6Lk7dTvugEYgkU8raICJ2US fI6DQ6MWMKjkpb848fMkww3lmg9/+MrsVc0ekYj0qkQlMlcG19ZLo9VwSrVYZF90 9O2Rah14ieHuMwNy8fxdISdlU3FF6t5qjWsOxBjqzpidYo4aHsrx6MQtrSTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbfOgC8G/6wPK4GSBlt82PB+h1mUwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH65C4ytpT2AcCYym0RB0RMl8E/NcOrNZWWD uMtzdSQ4LTK68su9AkiUzW/tWYQHP+EZdHprU8Q+FtVuRApDt+pY/zoJs3MXV1Mc SUJblVhpvbciECMJeGO0v4VHNOkd6r2ndS8m1EZA1RjBNsEFegVQTEl52whhFTgJ f9BnM087YerZCHJd+bEuKFWbBO9uv/IqVqNAielOuLlGuoB/3Fmofw2NGDcRRLzK Af+Q2wFVQ/uQVD4Ba6dtIeh8zvQrFuIbNdtFxjAfqBMXgk3Fng6vyDn24UufSs1B Ai8cJDui5XVEtWxiP3IHunfON4/k5bV9+sGD2YlKQJkRxBeE8hc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:14:24 2025 by rpki-client