$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: Xr2t+FbE0N5tPDKH4s/U9zPe76M2I8RPeFs4KrrxYTY= Subject key identifier: D3:B0:AD:EE:1B:5F:86:6E:B3:65:45:33:BB:40:D0:F5:6D:3D:46:DF Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 3BC119FEA90874D78D157D2B938DEE0151B61656 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 01BB Signing time: Tue 13 May 2025 01:32:15 +0000 Manifest this update: Tue 13 May 2025 01:27:15 +0000 Manifest next update: Fri 16 May 2025 07:21:15 +0000 Files and hashes: 1: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: NK7ClTvv4/NDBbf89x9B3VnTnm5k2ddyF3YW/vuXpLs=) 2: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: 1QFmqqnDt9FD4CT5iXH8IaTJeZQAgHohWAPwCtiQfbk=) 3: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) 4: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: fInmW9T6wu0Dfa8TX+8iqks5+YHm5dQgMnQBpovMDqA=) 5: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) 6: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: jWIeEj8fX0qqStZK4DC//9sEKdVwxbP2pcQ0ebAsVP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c1:19:fe:a9:08:74:d7:8d:15:7d:2b:93:8d:ee:01:51:b6:16:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: May 13 01:27:15 2025 GMT Not After : May 16 07:21:15 2025 GMT Subject: CN=D3B0ADEE1B5F866EB3654533BB40D0F56D3D46DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:4f:e6:50:9f:dc:fd:b6:05:48:1e:ef:48: 71:4b:30:8a:ac:54:45:94:02:c9:11:b9:6a:09:95: a1:63:a6:0b:fc:d6:36:b2:40:e0:4f:26:65:13:5a: 92:65:36:5d:c2:a8:8d:26:07:5f:db:1c:49:c0:4f: 30:8b:13:9b:e7:68:19:18:df:83:2d:3d:13:7c:62: 55:83:ca:89:67:70:da:fb:be:32:36:53:2a:59:d9: 47:2a:35:7a:e2:b6:71:e2:8f:71:e8:3a:bf:8f:01: 18:c5:b8:3b:5f:47:2f:0c:95:91:87:10:78:d8:64: f3:63:fc:34:b0:b1:da:ee:70:fc:b3:4c:dd:f2:9e: b4:0a:10:08:9d:2e:85:66:5d:17:7e:60:63:18:57: 42:f9:60:e6:85:c6:56:8c:56:bf:11:9c:b9:a8:a9: cd:38:36:37:0e:57:2c:4f:f5:18:f6:f6:b3:8f:48: 32:58:38:9d:1d:19:86:99:9c:ab:c2:0c:f5:b3:c8: d4:13:3d:ea:f5:9f:8a:df:ec:a6:00:12:76:87:20: 58:07:a7:99:2e:49:f4:69:22:30:a8:67:72:67:64: 78:98:d9:a6:59:e8:21:4e:31:14:90:cc:a3:70:0b: b3:84:0d:94:cb:ae:23:66:88:f4:29:98:c4:e2:ef: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B0:AD:EE:1B:5F:86:6E:B3:65:45:33:BB:40:D0:F5:6D:3D:46:DF X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:72:6b:b0:04:4b:55:f4:c1:e2:d0:9f:1f:30:d4:8b:49:df: 26:28:95:31:d8:bc:f4:b6:44:a6:0d:b3:ce:57:40:96:b6:80: 51:10:78:9d:9f:96:5d:ef:42:d8:a7:87:f1:93:93:90:8b:f4: b4:3f:8b:f7:50:3b:92:fd:bf:d8:99:6f:16:0e:1a:8a:0a:2c: f6:7e:57:2d:e2:0f:07:57:7e:cd:fe:33:23:d7:ee:ba:43:4a: 7b:e9:25:27:99:b4:aa:c8:56:c5:cb:d5:62:63:5b:85:f5:e7: e5:0a:b8:66:fc:c4:b2:ab:f5:e2:bc:ed:d0:f9:05:e6:d9:c9: 4a:6c:90:84:06:11:fe:59:5c:a6:86:05:7e:22:27:87:0c:21: 93:fb:b0:7b:32:d6:83:44:30:db:bc:e3:3a:70:c1:f8:cd:3a: 37:b4:24:7c:e2:cf:1f:aa:0a:56:1a:9d:ab:2a:59:df:7c:94: 5e:37:99:bd:8d:b4:29:e4:1b:d4:ea:27:8c:f3:5f:93:e0:74: 8d:3d:1a:69:f0:8d:a8:ea:14:37:53:53:0a:fc:15:c1:a7:01: 0e:1c:3c:a0:1d:26:84:b2:97:0d:a8:f4:37:c8:3a:25:fd:cf: 39:a2:5c:e3:7e:e9:06:a6:13:ee:e7:41:0f:97:7a:cd:c7:4a: f3:78:78:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8EZ/qkIdNeNFX0rk43uAVG2FlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNTA1MTMwMTI3MTVaFw0yNTA1MTYwNzIxMTVaMDMxMTAvBgNV BAMTKEQzQjBBREVFMUI1Rjg2NkVCMzY1NDUzM0JCNDBEMEY1NkQzRDQ2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYw0/mUJ/c/bYFSB7vSHFLMIqs VEWUAskRuWoJlaFjpgv81jayQOBPJmUTWpJlNl3CqI0mB1/bHEnATzCLE5vnaBkY 34MtPRN8YlWDyolncNr7vjI2UypZ2UcqNXritnHij3HoOr+PARjFuDtfRy8MlZGH EHjYZPNj/DSwsdrucPyzTN3ynrQKEAidLoVmXRd+YGMYV0L5YOaFxlaMVr8RnLmo qc04NjcOVyxP9Rj29rOPSDJYOJ0dGYaZnKvCDPWzyNQTPer1n4rf7KYAEnaHIFgH p5kuSfRpIjCoZ3JnZHiY2aZZ6CFOMRSQzKNwC7OEDZTLriNmiPQpmMTi76ttAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU07Ct7htfhm6zZUUzu0DQ9W09Rt8wHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdya7AES1X0weLQnx8w1ItJ3yYolTHYvPS2 RKYNs85XQJa2gFEQeJ2fll3vQtinh/GTk5CL9LQ/i/dQO5L9v9iZbxYOGooKLPZ+ Vy3iDwdXfs3+MyPX7rpDSnvpJSeZtKrIVsXL1WJjW4X15+UKuGb8xLKr9eK87dD5 BebZyUpskIQGEf5ZXKaGBX4iJ4cMIZP7sHsy1oNEMNu84zpwwfjNOje0JHzizx+q ClYanasqWd98lF43mb2NtCnkG9TqJ4zzX5PgdI09GmnwjajqFDdTUwr8FcGnAQ4c PKAdJoSylw2o9DfIOiX9zzmiXON+6QamE+7nQQ+Xes3HSvN4eJA= -----END CERTIFICATE-----Generated at Tue May 13 05:56:01 2025 by rpki-client