$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: UMBVgrDmRxmUed3QkBt4Bs5iAOnHclYEGElCUaJq7VA= Subject key identifier: 58:D1:46:0C:57:EE:92:FD:7A:12:2D:59:F9:DD:01:83:E3:DC:D6:6B Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 6026D0A5068704DCC41A68A2A923E0CB8BC6E19A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 018D Signing time: Mon 05 May 2025 02:20:39 +0000 Manifest this update: Mon 05 May 2025 02:15:39 +0000 Manifest next update: Thu 08 May 2025 10:12:39 +0000 Files and hashes: 1: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: QSdZ02jEFrB09qeECBuiiktoCwHoMVIknt0/L0VOofE=) 2: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: qsN6cCaNvPRadYvOCvh81rbUqW03/U/6OgyS9kMLbwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 10:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:26:d0:a5:06:87:04:dc:c4:1a:68:a2:a9:23:e0:cb:8b:c6:e1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: May 5 02:15:39 2025 GMT Not After : May 8 10:12:39 2025 GMT Subject: CN=58D1460C57EE92FD7A122D59F9DD0183E3DCD66B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:0f:e5:a5:93:69:92:08:6b:d3:b9:84:68: 2e:0c:bf:90:23:4c:8b:53:c7:ed:27:ec:c4:bf:f7: 89:87:50:22:1c:64:85:9f:af:c0:2b:81:dc:00:cf: e9:1a:27:11:5e:6c:ad:6f:88:a6:ad:6f:95:50:e3: 6f:1e:be:ac:65:8d:93:3e:7a:04:42:32:1f:c7:e8: 9d:13:9f:14:cd:7d:77:ab:7b:5e:fa:bd:99:1d:15: af:03:ef:1c:14:e4:97:2d:84:1a:49:0c:ed:66:98: 7e:71:b0:b8:4c:73:75:b9:47:88:8e:e0:8b:b9:a8: cf:d6:f7:7b:6e:0b:51:af:10:97:0e:36:ba:3a:03: 53:1f:54:2e:ac:e5:25:90:4b:d4:37:26:4a:b6:b6: 5c:4b:4c:6d:4f:07:14:60:46:b1:56:69:25:9b:27: 72:e4:19:a6:1e:be:82:6d:23:ba:c4:a9:fc:03:be: 93:46:bb:43:c8:c0:da:9c:09:c6:e3:df:6f:8d:95: f2:1c:9d:15:e1:40:1d:15:e2:1e:1e:ee:dd:9a:91: 5a:6d:b2:d7:75:32:f6:2d:17:e1:36:d2:8b:eb:bd: b1:47:69:ca:d2:83:4a:f7:fb:4b:a7:7d:1a:a0:07: c7:ff:4a:93:79:4d:27:7b:38:e1:28:8a:59:48:df: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D1:46:0C:57:EE:92:FD:7A:12:2D:59:F9:DD:01:83:E3:DC:D6:6B X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:df:c7:c1:e0:0e:6e:76:9b:b0:5c:73:87:f8:e4:7c:25:5f: 9d:85:f2:05:8e:bb:17:60:d5:b1:63:18:fe:2b:c1:22:6c:1c: 72:86:93:70:fa:e1:3d:84:93:b1:10:a5:4e:52:6b:63:17:09: c0:0f:c1:50:87:10:8b:71:05:99:8a:05:20:7f:12:b3:df:85: c1:be:c6:dd:d0:7c:19:da:e5:a2:f8:9b:ea:7a:a5:ac:f4:14: 0a:c6:d7:5a:1e:c6:a2:24:b8:c4:a7:8f:7e:ab:6a:c1:a8:ad: 94:42:13:a4:51:f9:83:9f:a4:05:c9:3a:c8:c4:8d:7e:9a:e3: cc:7c:1f:95:6b:23:59:71:32:82:27:4c:cd:8a:5d:38:e5:4e: 7c:62:a1:6c:35:93:fb:aa:c8:8c:88:59:57:a2:a8:ea:d5:6d: 94:6b:a4:12:0b:cb:4f:77:ee:bf:93:ed:44:76:77:f6:c5:4f: 6d:c7:e2:99:28:04:e4:f5:60:db:32:06:58:36:d2:f2:d0:6c: 50:9c:39:3f:6c:9b:9a:11:e9:40:77:0c:5c:c3:4a:c9:7c:d0: d7:ee:e1:b7:0d:eb:52:7f:c3:11:65:cf:32:2a:22:b0:e1:b7: 3e:61:a6:9e:82:e8:24:92:7d:6b:83:c6:1e:89:a4:70:6a:a2: 76:fc:e9:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCbQpQaHBNzEGmiiqSPgy4vG4ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNTA1MDUwMjE1MzlaFw0yNTA1MDgxMDEyMzlaMDMxMTAvBgNV BAMTKDU4RDE0NjBDNTdFRTkyRkQ3QTEyMkQ1OUY5REQwMTgzRTNEQ0Q2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVA/lpZNpkghr07mEaC4Mv5Aj TItTx+0n7MS/94mHUCIcZIWfr8ArgdwAz+kaJxFebK1viKatb5VQ428evqxljZM+ egRCMh/H6J0TnxTNfXere176vZkdFa8D7xwU5JcthBpJDO1mmH5xsLhMc3W5R4iO 4Iu5qM/W93tuC1GvEJcONro6A1MfVC6s5SWQS9Q3Jkq2tlxLTG1PBxRgRrFWaSWb J3LkGaYevoJtI7rEqfwDvpNGu0PIwNqcCcbj32+NlfIcnRXhQB0V4h4e7t2akVpt std1MvYtF+E20ovrvbFHacrSg0r3+0unfRqgB8f/SpN5TSd7OOEoillI34wtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWNFGDFfukv16Ei1Z+d0Bg+Pc1mswHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvfx8HgDm52m7Bcc4f45HwlX52F8gWOuxdg 1bFjGP4rwSJsHHKGk3D64T2Ek7EQpU5Sa2MXCcAPwVCHEItxBZmKBSB/ErPfhcG+ xt3QfBna5aL4m+p6paz0FArG11oexqIkuMSnj36rasGorZRCE6RR+YOfpAXJOsjE jX6a48x8H5VrI1lxMoInTM2KXTjlTnxioWw1k/uqyIyIWVeiqOrVbZRrpBILy093 7r+T7UR2d/bFT23H4pkoBOT1YNsyBlg20vLQbFCcOT9sm5oR6UB3DFzDSsl80Nfu 4bcN61J/wxFlzzIqIrDhtz5hpp6C6CSSfWuDxh6JpHBqonb86X8= -----END CERTIFICATE-----Generated at Mon May 5 19:14:08 2025 by rpki-client