$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: VqXmsn4EJR0tO1ksIA2a/hOPXCF93qx4Su6+MRqJPj4= Subject key identifier: D2:7D:9B:B5:92:0E:E8:99:02:55:2B:AB:99:5A:E6:DF:0D:5F:80:51 Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 01CD01A1CED7681350B5359007CBB31AE086127D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 01D1 Signing time: Tue 01 Jul 2025 13:52:13 +0000 Manifest this update: Tue 01 Jul 2025 13:47:13 +0000 Manifest next update: Fri 04 Jul 2025 22:27:13 +0000 Files and hashes: 1: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) 2: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: j7/0o24Y/Dntb2SDxDz2B+Eis79rWFB0ghqmTnU55LQ=) 3: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) 4: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: NK7ClTvv4/NDBbf89x9B3VnTnm5k2ddyF3YW/vuXpLs=) 5: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: 1QFmqqnDt9FD4CT5iXH8IaTJeZQAgHohWAPwCtiQfbk=) 6: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: 0AlC8KPxpPHCvjV1/WcNhB8wJS6TvdwvafRJZAybz50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cd:01:a1:ce:d7:68:13:50:b5:35:90:07:cb:b3:1a:e0:86:12:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: Jul 1 13:47:13 2025 GMT Not After : Jul 4 22:27:13 2025 GMT Subject: CN=D27D9BB5920EE89902552BAB995AE6DF0D5F8051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:af:a7:5b:f8:2a:0e:df:25:01:e8:89:21: d1:6d:c2:1d:d0:21:f8:bf:e0:60:a8:ee:54:76:be: e6:bc:b8:2e:b7:88:6b:50:c7:88:a2:aa:6b:d4:07: 57:db:9e:5a:16:43:6f:d6:5d:c5:d0:b0:91:e6:e8: aa:74:62:17:6a:7e:56:f2:7c:4a:54:16:f7:3c:88: 44:3f:8f:b2:16:d7:9c:62:74:ae:62:11:18:0f:42: d4:ab:8a:e7:4e:5d:d5:f0:b1:7c:93:a4:db:2a:93: 4f:9b:e8:a5:0a:d1:5b:5a:b0:5a:20:9b:68:6f:b9: cb:92:ca:9e:26:74:46:f0:e8:81:b2:c9:b3:54:61: 0f:50:20:3b:2c:62:52:e3:42:30:e1:ef:9d:9f:4f: aa:c7:bd:71:93:76:b5:b8:c0:9e:18:c8:30:0c:29: 13:7b:26:02:75:75:af:5e:60:c7:7f:b7:2f:7f:3e: b9:63:47:7a:b1:71:5f:15:25:f3:90:68:b4:3e:ca: 0f:9a:41:dc:8e:27:ea:f9:4c:e1:7d:cf:a5:0c:f8: 34:af:dd:27:d7:2c:5c:da:70:86:59:32:2c:7b:42: 77:4f:41:b5:6f:20:9c:98:07:dc:dd:75:70:3f:64: ab:bc:23:66:f6:4c:f2:c8:5a:92:31:82:ad:02:5e: c0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7D:9B:B5:92:0E:E8:99:02:55:2B:AB:99:5A:E6:DF:0D:5F:80:51 X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:75:11:11:0e:15:a1:26:e4:55:05:3b:72:9a:ef:9f:e9:28: 98:63:79:85:00:e5:75:07:89:95:b2:28:21:b7:d7:87:81:ad: 4c:9d:da:85:61:22:43:b4:07:a7:fa:c3:0a:75:b9:52:e8:35: b1:57:ea:f9:1b:f9:49:9e:8b:b2:06:9f:6f:ef:6f:ed:be:91: d2:55:0e:fc:86:d8:30:20:9b:1e:ac:12:a4:bc:40:ab:a5:d8: df:c0:e4:eb:81:80:0d:ff:f4:46:64:92:60:68:41:77:b8:15: 15:9a:49:7a:df:9a:11:e8:07:9f:58:e2:86:c7:e7:19:23:b7: ad:46:5b:3b:16:4c:b0:24:c8:b9:2f:85:37:55:32:0f:49:ac: e3:73:bb:3c:99:50:5f:3f:7c:32:10:cc:59:33:bb:ef:cc:7f: 7d:41:79:2d:47:d1:60:c0:90:e4:f6:60:25:e0:b8:70:f8:f1: ee:fe:51:6c:48:60:ea:30:87:86:1b:7f:7e:56:eb:fb:e8:40: 5d:08:d2:a2:a3:9d:51:61:5c:7c:52:33:c2:39:5d:69:2d:a1: 0c:af:02:7f:30:1e:78:3a:73:2d:1c:bf:0d:2b:fd:d8:62:16: bb:d2:3a:20:b7:df:73:e9:59:48:68:22:66:c8:48:19:3c:a4: 2b:79:51:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAc0Boc7XaBNQtTWQB8uzGuCGEn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNTA3MDExMzQ3MTNaFw0yNTA3MDQyMjI3MTNaMDMxMTAvBgNV BAMTKEQyN0Q5QkI1OTIwRUU4OTkwMjU1MkJBQjk5NUFFNkRGMEQ1RjgwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Yq+nW/gqDt8lAeiJIdFtwh3Q Ifi/4GCo7lR2vua8uC63iGtQx4iiqmvUB1fbnloWQ2/WXcXQsJHm6Kp0Yhdqflby fEpUFvc8iEQ/j7IW15xidK5iERgPQtSriudOXdXwsXyTpNsqk0+b6KUK0VtasFog m2hvucuSyp4mdEbw6IGyybNUYQ9QIDssYlLjQjDh752fT6rHvXGTdrW4wJ4YyDAM KRN7JgJ1da9eYMd/ty9/PrljR3qxcV8VJfOQaLQ+yg+aQdyOJ+r5TOF9z6UM+DSv 3SfXLFzacIZZMix7QndPQbVvIJyYB9zddXA/ZKu8I2b2TPLIWpIxgq0CXsDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0n2btZIO6JkCVSurmVrm3w1fgFEwHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACN1EREOFaEm5FUFO3Ka75/pKJhjeYUA5XUH iZWyKCG314eBrUyd2oVhIkO0B6f6wwp1uVLoNbFX6vkb+Umei7IGn2/vb+2+kdJV DvyG2DAgmx6sEqS8QKul2N/A5OuBgA3/9EZkkmBoQXe4FRWaSXrfmhHoB59Y4obH 5xkjt61GWzsWTLAkyLkvhTdVMg9JrONzuzyZUF8/fDIQzFkzu+/Mf31BeS1H0WDA kOT2YCXguHD48e7+UWxIYOowh4Ybf35W6/voQF0I0qKjnVFhXHxSM8I5XWktoQyv An8wHng6cy0cvw0r/dhiFrvSOiC333PpWUhoImbISBk8pCt5UYw= -----END CERTIFICATE-----Generated at Thu Jul 3 10:18:12 2025 by rpki-client