$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json) Hash identifier: jK/jx1ysdUPlMAVi3c+pJ5WJTmmD6gFYJKzosdf7afE= Subject key identifier: C0:92:38:B3:3C:99:3E:1B:39:37:78:58:AC:88:42:A5:E9:DB:B8:88 Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 6BE74CD953495A292CB00DD2C20E1DDE4F886184 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft Manifest number: 0188 Signing time: Sun 29 Jun 2025 11:31:38 +0000 Manifest this update: Sun 29 Jun 2025 11:26:38 +0000 Manifest next update: Wed 02 Jul 2025 12:59:38 +0000 Files and hashes: 1: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: g3O85uHYQ5H3CYzPQLQFqdssgPM5rhi5A/BzEIRFoas=) 2: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: vGG0asOC2Xl7EswH7KA3jLAIJRd+GCTUKsA4WpfXyjU=) 3: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: z1+aqG54okg4tLUSTj9eELHoC0wQ4FYHXEvwPFyC3bA=) 4: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 9QXIOR5p9E/ECayeIb5+Pzn8r00Xjm0tMLmC+/Pg7aE=) 5: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: wnZO7kQR9JZHcXEpTkJ6URQ49yRUAKEaIg5OVxBtq9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 12:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e7:4c:d9:53:49:5a:29:2c:b0:0d:d2:c2:0e:1d:de:4f:88:61:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Jun 29 11:26:38 2025 GMT Not After : Jul 2 12:59:38 2025 GMT Subject: CN=C09238B33C993E1B39377858AC8842A5E9DBB888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c2:0e:d4:50:80:2f:b0:99:fb:8b:c6:bc:ff: b9:a2:70:21:b6:3a:2a:65:97:86:93:83:1a:a9:34: e8:ef:b1:75:c8:3e:34:5d:6c:6e:b1:97:91:8d:61: 8a:b1:ef:b8:f7:66:86:38:88:6c:ca:8e:5e:4c:74: 2c:be:8b:6a:3d:73:cb:5f:61:95:87:dd:f3:e7:5b: 87:fb:84:ca:85:e8:c9:c5:64:02:73:a5:c1:45:4b: 21:c1:0f:36:8b:90:1f:17:dc:d9:cf:7f:f7:4e:d4: 50:b4:ba:3c:b8:6a:63:06:27:b7:5b:7a:c3:00:d4: b9:53:5c:f7:9b:e8:a3:ca:70:c8:ef:23:70:c0:db: 2a:22:21:7b:19:42:c0:5d:5c:3e:d5:22:91:bb:9b: 14:e8:85:a1:e9:c1:b0:2b:c1:b6:3c:da:5f:ec:b6: 94:c9:45:6d:49:e6:69:55:3a:22:31:17:be:22:04: 4d:ea:30:ea:70:e5:35:ba:03:d3:ea:ef:52:b0:38: e6:b3:63:ca:40:0c:20:be:59:de:e6:76:7b:ee:e3: b8:5f:a5:1e:98:df:bd:6d:23:61:35:c4:de:50:33: 92:cf:22:f7:9e:99:2c:6d:f0:31:d0:d9:be:cb:ea: 53:b9:59:6e:2b:e9:b4:41:a0:6e:0a:6f:74:3a:bc: 7e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:92:38:B3:3C:99:3E:1B:39:37:78:58:AC:88:42:A5:E9:DB:B8:88 X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f3:bd:97:10:68:e3:58:3c:eb:4a:c7:82:aa:75:ff:4e:ea: ff:c8:79:a6:54:1e:a4:40:83:9a:d6:92:04:2a:9a:9b:ed:41: c8:68:5b:6d:a2:0b:fb:dc:b5:88:09:c1:6e:c8:e4:8d:d2:7f: d7:e9:13:cb:51:68:ab:cf:c3:7a:9d:64:b9:bc:a2:1c:69:d7: e6:d0:5a:0f:2f:11:a6:8c:16:e7:a1:77:18:94:84:49:5d:3f: 18:35:e1:d6:b1:ce:7f:11:e8:22:43:ea:cc:49:48:ba:c6:7a: e7:3a:c9:f5:35:50:39:8a:9d:4f:84:3e:b3:ba:10:cb:f3:21: c0:3b:20:4e:cf:db:67:d0:96:86:cd:97:d9:9b:dd:55:17:31: d4:95:2c:8c:bd:47:e4:41:33:51:56:3c:15:2a:30:02:10:1b: af:ae:9f:73:18:68:da:bf:30:f0:8d:ec:17:1b:53:64:dc:1a: 59:1d:ec:37:1d:d9:1b:7d:60:f7:8e:24:d0:9d:aa:58:4d:94: a1:a9:4f:1d:f7:c2:1e:8a:d6:06:ae:1c:32:26:a1:28:63:8b: b1:d1:4e:e2:62:08:63:8e:89:e1:d8:0a:a8:3c:a6:25:da:d9: 7f:2e:fd:df:66:db:20:7f:be:e6:24:4c:92:1d:6c:ed:e8:75: 32:04:9d:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+dM2VNJWikssA3Swg4d3k+IYYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNTA2MjkxMTI2MzhaFw0yNTA3MDIxMjU5MzhaMDMxMTAvBgNV BAMTKEMwOTIzOEIzM0M5OTNFMUIzOTM3Nzg1OEFDODg0MkE1RTlEQkI4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhwg7UUIAvsJn7i8a8/7micCG2 Oipll4aTgxqpNOjvsXXIPjRdbG6xl5GNYYqx77j3ZoY4iGzKjl5MdCy+i2o9c8tf YZWH3fPnW4f7hMqF6MnFZAJzpcFFSyHBDzaLkB8X3NnPf/dO1FC0ujy4amMGJ7db esMA1LlTXPeb6KPKcMjvI3DA2yoiIXsZQsBdXD7VIpG7mxTohaHpwbArwbY82l/s tpTJRW1J5mlVOiIxF74iBE3qMOpw5TW6A9Pq71KwOOazY8pADCC+Wd7mdnvu47hf pR6Y371tI2E1xN5QM5LPIveemSxt8DHQ2b7L6lO5WW4r6bRBoG4Kb3Q6vH6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwJI4szyZPhs5N3hYrIhCpenbuIgwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIx MDM1RUVBQUI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvzvZcQaONYPOtKx4Kqdf9O6v/IeaZUHqRA g5rWkgQqmpvtQchoW22iC/vctYgJwW7I5I3Sf9fpE8tRaKvPw3qdZLm8ohxp1+bQ Wg8vEaaMFuehdxiUhEldPxg14daxzn8R6CJD6sxJSLrGeuc6yfU1UDmKnU+EPrO6 EMvzIcA7IE7P22fQlobNl9mb3VUXMdSVLIy9R+RBM1FWPBUqMAIQG6+un3MYaNq/ MPCN7BcbU2TcGlkd7Dcd2Rt9YPeOJNCdqlhNlKGpTx33wh6K1gauHDImoShji7HR TuJiCGOOieHYCqg8piXa2X8u/d9m2yB/vuYkTJIdbO3odTIEnWU= -----END CERTIFICATE-----Generated at Mon Jun 30 05:16:11 2025 by rpki-client