$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: um8uInGSLPQ+nm/eph/Zh7kS0NBiQI5KSbH+S9ve2Mc= Subject key identifier: 6C:39:D2:94:54:25:9A:F6:D9:ED:B0:0C:F4:B0:36:E5:B0:E3:99:66 Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 746AF4058574D5722254EBCDEE1075627937A8DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 020D Signing time: Tue 17 Jun 2025 03:51:45 +0000 Manifest this update: Tue 17 Jun 2025 03:46:45 +0000 Manifest next update: Fri 20 Jun 2025 06:59:45 +0000 Files and hashes: 1: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 2: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) 3: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: 5H0FheU9RIEleEypbydyE448RwdSr/VnIhj/ySJAPeM=) 4: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6a:f4:05:85:74:d5:72:22:54:eb:cd:ee:10:75:62:79:37:a8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Jun 17 03:46:45 2025 GMT Not After : Jun 20 06:59:45 2025 GMT Subject: CN=6C39D29454259AF6D9EDB00CF4B036E5B0E39966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9b:48:fc:bf:a9:f4:f8:52:40:2e:fb:21:cd: 18:02:54:4f:fa:b0:0c:c5:9c:29:cd:57:f9:b6:4b: dc:74:85:a7:dd:e3:4f:ce:aa:83:28:2d:1c:f5:60: 52:17:41:aa:c3:e0:1e:03:a0:31:f5:39:b8:e8:f8: 0d:f2:31:8c:71:87:e9:7a:47:51:92:81:6c:f0:f5: 08:80:aa:04:8f:8a:f0:57:65:3e:6d:50:6d:d6:fe: 5d:f8:c9:d5:61:92:5d:91:35:59:c7:e1:d2:a3:9b: 34:04:05:6d:d1:3e:d3:89:93:e6:98:ac:af:68:70: b2:5f:20:a7:f7:48:bb:fa:c8:57:69:98:8b:b1:17: 31:49:4b:27:05:a1:c1:05:b8:b9:1a:e3:18:cb:a0: 0d:4a:f2:d7:ec:9e:ac:ff:70:c8:e5:c1:82:a8:f2: 05:a4:f7:7b:aa:ad:d9:51:87:88:3d:2e:10:21:e8: 3a:92:c1:ee:0b:e2:8c:65:ae:32:72:44:84:66:b6: f1:8f:dc:e9:7d:9a:88:f8:6d:91:48:95:80:86:2d: f3:aa:5a:ba:8f:84:19:f3:c4:e5:44:4d:de:09:12: e3:4b:cb:9d:2a:41:93:4c:a5:58:17:70:06:6f:b5: 82:3d:61:16:8e:5d:cc:be:f1:d9:40:e9:12:64:a5: 4b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:39:D2:94:54:25:9A:F6:D9:ED:B0:0C:F4:B0:36:E5:B0:E3:99:66 X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:16:06:d9:07:f2:28:7e:91:fc:9b:9c:49:0c:8c:f7:ed:3e: 88:fb:c9:9f:e9:26:07:ea:45:ad:3f:c9:1e:68:77:a0:09:a4: fd:98:82:48:e3:94:58:7a:cd:5b:20:77:cd:bb:ba:b9:af:2a: bd:86:d7:72:f7:3e:6b:03:e5:cc:60:66:04:13:ae:db:54:07: 61:37:c4:8b:46:c3:5f:79:24:49:9d:bb:d1:26:9f:a1:2c:dd: 8f:62:ab:87:22:06:bb:94:4e:c9:28:00:71:4a:27:1e:5d:2d: f4:ac:a6:9f:a0:16:fd:3d:69:b0:07:7b:29:28:22:6e:b9:e3: 11:4a:c7:a5:53:49:77:4e:0a:0a:a5:ec:2d:aa:48:81:69:87: e3:d5:2b:27:ce:b4:fb:5b:4c:5c:49:73:09:66:e0:a2:e5:97: b8:77:03:da:0d:dd:55:99:aa:df:4e:ff:6a:9a:72:75:f3:9c: 2d:25:3d:a9:12:59:f0:fd:e4:f1:5c:8d:9b:0e:64:f2:f0:2c: 65:56:f3:36:fb:d4:b4:fa:e1:51:c5:2c:99:a9:aa:88:9e:90: 07:a2:52:ea:78:b7:24:23:1b:69:57:57:ef:84:df:b1:b7:37: a4:2e:5e:2c:78:91:08:9a:83:20:8c:4f:8b:0b:b2:72:98:46: c0:0a:2f:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGr0BYV01XIiVOvN7hB1Ynk3qN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNTA2MTcwMzQ2NDVaFw0yNTA2MjAwNjU5NDVaMDMxMTAvBgNV BAMTKDZDMzlEMjk0NTQyNTlBRjZEOUVEQjAwQ0Y0QjAzNkU1QjBFMzk5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUm0j8v6n0+FJALvshzRgCVE/6 sAzFnCnNV/m2S9x0hafd40/OqoMoLRz1YFIXQarD4B4DoDH1Objo+A3yMYxxh+l6 R1GSgWzw9QiAqgSPivBXZT5tUG3W/l34ydVhkl2RNVnH4dKjmzQEBW3RPtOJk+aY rK9ocLJfIKf3SLv6yFdpmIuxFzFJSycFocEFuLka4xjLoA1K8tfsnqz/cMjlwYKo 8gWk93uqrdlRh4g9LhAh6DqSwe4L4oxlrjJyRIRmtvGP3Ol9moj4bZFIlYCGLfOq WrqPhBnzxOVETd4JEuNLy50qQZNMpVgXcAZvtYI9YRaOXcy+8dlA6RJkpUu1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbDnSlFQlmvbZ7bAM9LA25bDjmWYwHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsWBtkH8ih+kfybnEkMjPftPoj7yZ/pJgfq Ra0/yR5od6AJpP2YgkjjlFh6zVsgd827urmvKr2G13L3PmsD5cxgZgQTrttUB2E3 xItGw195JEmdu9Emn6Es3Y9iq4ciBruUTskoAHFKJx5dLfSspp+gFv09abAHeyko Im654xFKx6VTSXdOCgql7C2qSIFph+PVKyfOtPtbTFxJcwlm4KLll7h3A9oN3VWZ qt9O/2qacnXznC0lPakSWfD95PFcjZsOZPLwLGVW8zb71LT64VHFLJmpqoiekAei Uup4tyQjG2lXV++E37G3N6QuXix4kQiagyCMT4sLsnKYRsAKLwQ= -----END CERTIFICATE-----Generated at Tue Jun 17 08:32:36 2025 by rpki-client