$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: 7h6AHQUllHH6B/K6pys55+0bYamvwH9pWESHsXMi4fI= Subject key identifier: 54:5F:B7:A9:A7:37:09:D9:91:A5:76:4D:87:51:2E:D1:0B:3D:E7:42 Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 7AD471B03282FBA8AB4B089C7B5DF1A4B4BE84CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 04EF Signing time: Sun 29 Jun 2025 05:40:59 +0000 Manifest this update: Sun 29 Jun 2025 05:35:59 +0000 Manifest next update: Wed 02 Jul 2025 16:56:59 +0000 Files and hashes: 1: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: xtD61SGfOmf4dPOYtfmywfO3TCTpAu58tZx32d6dd48=) 2: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Oi+v4vSiTSM9zUjltxmu968dUNXdnYr8A7jzZ4z/bOI=) 3: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d4:71:b0:32:82:fb:a8:ab:4b:08:9c:7b:5d:f1:a4:b4:be:84:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Jun 29 05:35:59 2025 GMT Not After : Jul 2 16:56:59 2025 GMT Subject: CN=545FB7A9A73709D991A5764D87512ED10B3DE742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:69:85:4e:fd:19:5a:31:0b:04:a2:a3:0a: a8:bf:b6:27:ad:5f:bf:86:e8:78:0d:ad:5d:9e:22: ce:23:4a:94:29:ba:f9:05:ac:9d:71:4e:2d:e6:3f: d7:ca:17:07:f4:50:44:e3:da:ff:06:c6:fd:29:cd: 5a:48:8f:89:c1:b5:f7:91:b7:fc:39:28:ed:0a:e4: 86:01:35:d0:e8:07:bc:21:19:fe:ac:c2:75:bc:9e: c7:a9:24:c2:3c:22:db:ce:80:17:5a:04:86:11:31: a2:5c:8c:16:fa:0e:41:96:84:de:a2:89:71:99:5d: d0:6e:2e:d9:18:2b:62:08:99:68:4a:7d:ed:22:60: e2:da:63:a9:48:08:e9:05:7a:c9:d2:5b:90:a1:22: c6:64:c3:0b:39:d3:e7:1a:22:e6:59:dc:95:1f:de: 0b:c2:bf:5a:40:eb:b1:59:dc:31:7c:ce:a8:4f:dc: bd:4b:32:26:0c:fe:0d:da:ec:04:91:30:05:55:81: df:9c:c2:af:b5:2a:93:43:7d:3d:4e:aa:61:03:5b: 07:83:e4:93:1d:15:af:cd:f0:8e:4b:d1:a4:b1:51: 9a:e4:1e:5e:ef:e9:a4:d3:d9:d0:25:3b:27:dd:1c: 7e:d3:40:4b:d2:e0:66:16:cb:25:0c:a5:e5:a0:47: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5F:B7:A9:A7:37:09:D9:91:A5:76:4D:87:51:2E:D1:0B:3D:E7:42 X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d0:6a:5f:97:1d:c2:7b:4a:a7:cf:75:4b:d3:73:15:d4:d8: ec:5f:08:08:e4:52:4d:77:c2:0a:63:eb:d5:d0:1c:3a:d6:f1: bf:ad:6a:28:af:82:59:9b:83:b0:22:c4:5e:23:95:ad:e2:2d: d2:a1:a1:7c:c8:b9:05:60:f8:20:be:bf:77:9a:8d:40:00:3b: c2:0f:20:92:b2:05:27:70:b4:3e:e2:bd:ba:6d:8e:44:c2:91: 1d:26:58:63:2d:fe:81:52:92:7a:fe:3d:69:b1:be:14:13:62: c3:92:e1:f8:5b:33:09:40:20:36:ca:d6:fe:ee:ba:98:91:72: 62:e4:cd:25:67:c5:1a:e6:d3:c0:8a:cb:0e:e6:25:e6:cc:82: 3b:cd:3d:40:31:7b:2d:a3:0d:40:f8:d4:c0:f6:3b:2b:dc:34: dc:16:55:98:18:42:e4:80:3f:76:da:14:a9:28:31:f4:ef:93: 38:98:40:c1:d9:30:cd:90:1f:93:db:7c:7a:c5:7e:a0:25:d2: a3:a7:d1:92:11:69:37:6a:c3:9e:58:a9:ec:e2:0c:18:9a:b0: ea:31:1c:73:21:ce:f3:c3:ac:cf:c8:88:96:9c:88:07:67:3c: 20:20:96:51:51:e5:b8:0a:d6:85:af:ec:c3:56:67:41:92:92: 20:6b:24:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetRxsDKC+6irSwice13xpLS+hMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNTA2MjkwNTM1NTlaFw0yNTA3MDIxNjU2NTlaMDMxMTAvBgNV BAMTKDU0NUZCN0E5QTczNzA5RDk5MUE1NzY0RDg3NTEyRUQxMEIzREU3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96GmFTv0ZWjELBKKjCqi/tiet X7+G6HgNrV2eIs4jSpQpuvkFrJ1xTi3mP9fKFwf0UETj2v8Gxv0pzVpIj4nBtfeR t/w5KO0K5IYBNdDoB7whGf6swnW8nsepJMI8ItvOgBdaBIYRMaJcjBb6DkGWhN6i iXGZXdBuLtkYK2IImWhKfe0iYOLaY6lICOkFesnSW5ChIsZkwws50+caIuZZ3JUf 3gvCv1pA67FZ3DF8zqhP3L1LMiYM/g3a7ASRMAVVgd+cwq+1KpNDfT1OqmEDWweD 5JMdFa/N8I5L0aSxUZrkHl7v6aTT2dAlOyfdHH7TQEvS4GYWyyUMpeWgR46rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVF+3qac3CdmRpXZNh1Eu0Qs950IwHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLQal+XHcJ7SqfPdUvTcxXU2OxfCAjkUk13 wgpj69XQHDrW8b+taiivglmbg7AixF4jla3iLdKhoXzIuQVg+CC+v3eajUAAO8IP IJKyBSdwtD7ivbptjkTCkR0mWGMt/oFSknr+PWmxvhQTYsOS4fhbMwlAIDbK1v7u upiRcmLkzSVnxRrm08CKyw7mJebMgjvNPUAxey2jDUD41MD2OyvcNNwWVZgYQuSA P3baFKkoMfTvkziYQMHZMM2QH5PbfHrFfqAl0qOn0ZIRaTdqw55YqeziDBiasOox HHMhzvPDrM/IiJaciAdnPCAgllFR5bgK1oWv7MNWZ0GSkiBrJHQ= -----END CERTIFICATE-----Generated at Mon Jun 30 00:47:44 2025 by rpki-client