$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: U+UgC4SIO1yh/L5Z4UxVi4CkTyhZTtNzA8pQdfcjaQ0= Subject key identifier: 07:D0:7E:73:60:A9:F7:3C:89:75:63:C8:79:5F:07:9B:89:77:4F:B1 Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 4391713598C2A9D24851FC3B69A5C256764AFAAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 01F0 Signing time: Thu 08 May 2025 10:52:04 +0000 Manifest this update: Thu 08 May 2025 10:47:04 +0000 Manifest next update: Sun 11 May 2025 20:22:04 +0000 Files and hashes: 1: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) 2: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) 3: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: 6JqL6/bFK3wK+gk3m2hab0y6RzoxR0ElTNjOHrHHd0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:91:71:35:98:c2:a9:d2:48:51:fc:3b:69:a5:c2:56:76:4a:fa:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: May 8 10:47:04 2025 GMT Not After : May 11 20:22:04 2025 GMT Subject: CN=07D07E7360A9F73C897563C8795F079B89774FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:eb:df:fb:fd:05:86:b4:ec:21:09:27:72: 29:db:5a:00:e2:33:54:ee:ad:a7:df:c8:b7:b4:a9: fd:24:c7:d4:2f:5b:0d:29:0b:f9:0e:71:59:ce:6c: ee:73:5b:4a:a3:2a:06:43:bf:ba:83:9b:a3:16:04: 15:6b:72:23:72:f6:a5:58:2d:b4:1e:b6:91:7b:12: 8a:62:16:0c:f0:c8:6a:a7:19:b0:8d:b7:39:30:8d: ec:ef:e0:52:07:cc:ec:4d:f8:ec:e8:25:5f:41:f3: c8:2c:38:a0:2b:c5:99:ca:4b:c3:3f:a5:29:01:14: 72:e4:18:da:f9:6f:e0:1c:7e:3c:af:b8:51:32:cf: ea:6e:44:43:d5:6c:8e:1b:a2:20:90:17:c5:8d:f2: 8a:3f:e5:40:f9:31:97:8b:91:40:b7:94:39:e4:54: 29:4a:48:99:43:03:1c:1e:fc:ea:ba:2b:9f:9c:17: 57:96:d7:bd:e9:12:c6:f5:e9:ab:34:e5:36:a8:b3: b1:27:db:d3:7c:f7:06:2a:27:a9:19:d4:ff:ee:bf: 11:17:b3:ba:b8:2c:40:98:56:9c:5e:97:87:1f:65: b6:e7:43:d6:09:49:dd:2a:31:c2:a7:d0:ba:da:26: 56:f8:fa:35:9e:41:5a:e1:b6:53:7a:d2:39:a0:6c: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D0:7E:73:60:A9:F7:3C:89:75:63:C8:79:5F:07:9B:89:77:4F:B1 X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3f:73:40:2f:22:c2:97:cd:4b:15:7f:ee:7c:cb:33:96:d7: 75:e5:95:a8:8e:c4:b5:13:3e:36:44:83:47:f3:b6:dd:d3:4d: 99:bb:fd:68:ce:35:71:31:9e:89:6d:5d:17:70:37:d2:30:6e: bc:a3:fa:ac:8c:eb:87:e1:dc:34:51:f4:4f:8d:1a:b5:31:f2: 6a:2a:10:5c:18:41:a8:6a:8a:0e:cf:76:58:9f:c2:f9:92:8d: 9e:63:a5:44:7a:1d:8e:28:81:3a:7f:fb:52:fb:60:ba:39:c0: e1:db:71:3d:77:f1:3a:0e:6b:03:92:e4:12:28:18:d2:ef:f3: 4a:c4:5a:2c:5f:dd:f6:0c:7d:b5:09:f9:a2:59:3d:19:08:43: 33:63:5c:71:97:80:2a:da:01:31:84:0c:11:92:88:e3:f5:4c: a2:9c:db:c3:75:99:0b:df:55:84:a7:34:63:42:24:fa:6d:06: 0b:7a:16:83:25:e7:ac:37:15:87:a0:01:01:91:a8:fd:d9:61: 51:dd:d5:95:a9:0c:3c:04:e5:89:91:b0:1c:76:d9:19:bd:78: 25:6b:a1:ce:66:10:fe:5f:af:27:c5:09:29:69:7a:29:b1:fd: f8:22:7c:17:9d:6b:45:43:f7:24:19:e2:fd:73:ff:33:cd:c4: 20:e2:30:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5FxNZjCqdJIUfw7aaXCVnZK+q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTA1MDgxMDQ3MDRaFw0yNTA1MTEyMDIyMDRaMDMxMTAvBgNV BAMTKDA3RDA3RTczNjBBOUY3M0M4OTc1NjNDODc5NUYwNzlCODk3NzRGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6eOvf+/0FhrTsIQkncinbWgDi M1TuraffyLe0qf0kx9QvWw0pC/kOcVnObO5zW0qjKgZDv7qDm6MWBBVrciNy9qVY LbQetpF7EopiFgzwyGqnGbCNtzkwjezv4FIHzOxN+OzoJV9B88gsOKArxZnKS8M/ pSkBFHLkGNr5b+AcfjyvuFEyz+puREPVbI4boiCQF8WN8oo/5UD5MZeLkUC3lDnk VClKSJlDAxwe/Oq6K5+cF1eW173pEsb16as05Taos7En29N89wYqJ6kZ1P/uvxEX s7q4LECYVpxel4cfZbbnQ9YJSd0qMcKn0LraJlb4+jWeQVrhtlN60jmgbMfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB9B+c2Cp9zyJdWPIeV8Hm4l3T7EwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo/c0AvIsKXzUsVf+58yzOW13XllaiOxLUT PjZEg0fztt3TTZm7/WjONXExnoltXRdwN9Iwbryj+qyM64fh3DRR9E+NGrUx8moq EFwYQahqig7PdlifwvmSjZ5jpUR6HY4ogTp/+1L7YLo5wOHbcT138ToOawOS5BIo GNLv80rEWixf3fYMfbUJ+aJZPRkIQzNjXHGXgCraATGEDBGSiOP1TKKc28N1mQvf VYSnNGNCJPptBgt6FoMl56w3FYegAQGRqP3ZYVHd1ZWpDDwE5YmRsBx22Rm9eCVr oc5mEP5fryfFCSlpeimx/fgifBeda0VD9yQZ4v1z/zPNxCDiMBc= -----END CERTIFICATE-----Generated at Sat May 10 17:03:46 2025 by rpki-client