$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: 8JFz9XRoIPA93ByRWNH0SwORXK6dg9G2pCjC8KHLBjw= Subject key identifier: BF:B5:E7:C5:92:00:45:29:D1:10:4C:F3:D7:63:ED:77:84:52:3B:86 Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 6F36EDF2EAEF6AC0333E5EF8A350B4AAC3404027 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 0207 Signing time: Mon 30 Jun 2025 04:42:04 +0000 Manifest this update: Mon 30 Jun 2025 04:37:04 +0000 Manifest next update: Thu 03 Jul 2025 11:37:04 +0000 Files and hashes: 1: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: kawR1B4aRZHTcDmaZhYNbDaBP3Pmva64GY8cbiI6uUw=) 2: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) 3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:36:ed:f2:ea:ef:6a:c0:33:3e:5e:f8:a3:50:b4:aa:c3:40:40:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Jun 30 04:37:04 2025 GMT Not After : Jul 3 11:37:04 2025 GMT Subject: CN=BFB5E7C592004529D1104CF3D763ED7784523B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:ec:73:89:0b:ca:25:dc:77:89:95:05:0c: 42:88:14:06:4d:c4:f1:c5:04:41:43:bd:5f:a2:fe: 3b:df:9a:60:8b:fd:dc:d3:59:2a:76:ab:19:7d:57: 18:93:60:7f:b9:b5:d1:c1:dd:ac:2e:59:ef:45:ee: e7:fc:78:ed:29:fb:8d:bb:bd:62:4a:0e:ab:45:22: ba:06:b0:62:85:92:ca:7d:1e:9a:c9:c8:b2:fc:f7: 75:32:5d:35:50:b4:9a:45:19:30:76:54:11:b4:7b: 29:46:ff:87:ae:8f:58:24:4c:24:a7:15:aa:54:1d: 78:71:bc:52:cc:92:f8:d8:84:02:9c:5a:e1:94:e1: d9:b7:e5:e3:07:c1:aa:94:74:3b:46:68:cb:7b:8b: 2e:34:7b:27:87:3d:01:3b:52:44:bc:59:bb:07:4a: c1:df:8d:bc:57:c3:22:2d:6f:0a:b9:c2:98:5b:7b: 8b:36:76:0c:c9:7d:8f:35:92:2f:ec:6d:8d:ac:83: a7:5b:62:a0:69:4a:57:40:82:67:72:35:33:bd:f2: 5a:0d:d2:49:c7:bf:a6:9a:6d:b0:af:0f:7d:36:85: 69:a3:27:c8:55:d0:31:00:77:69:0b:6f:7e:6c:06: 92:4c:66:0c:43:5c:1f:82:d2:a3:06:98:0d:59:32: 27:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B5:E7:C5:92:00:45:29:D1:10:4C:F3:D7:63:ED:77:84:52:3B:86 X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:be:ca:4b:ac:81:6f:37:dd:18:bc:6d:75:45:c9:0f:06:8e: 0e:06:a7:f8:01:c9:f2:6f:18:cf:2b:3c:83:7e:8e:32:8b:39: cd:98:4e:ee:4d:ff:22:b0:9a:fe:63:d6:8e:f2:dc:14:04:65: c5:88:16:42:e6:b6:84:40:04:e7:f1:fd:37:82:a1:f8:f6:c8: ed:01:23:dc:06:a8:20:bc:ae:89:af:78:1d:1e:15:0a:7b:ea: b4:82:4a:d6:7e:7c:9d:75:76:18:d6:74:2e:a4:db:85:8b:13: d2:c0:74:52:29:8c:4f:5a:0d:11:e3:0d:5b:13:aa:82:42:b5: e8:cc:56:e9:38:68:6d:90:ef:e5:43:3f:ca:fb:ea:32:a4:22: 67:5e:ee:61:82:2d:8e:61:71:7a:77:e2:2d:7b:6b:ef:7d:6f: 30:13:81:3d:a9:14:37:15:5b:99:b8:3a:81:a2:c4:47:31:86: 30:98:45:97:e4:db:14:f6:46:2a:a0:64:71:10:01:df:6e:54: d0:41:1e:38:f2:87:06:61:7d:12:da:da:7b:b2:da:c9:5a:4e: 0c:be:3a:c4:87:9a:d3:79:4f:b7:dd:72:a0:d7:d7:11:5b:b6: 24:b9:3e:e6:bf:8a:f9:48:7d:9b:8e:33:7a:01:0c:65:bd:18: 16:94:be:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzbt8urvasAzPl74o1C0qsNAQCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTA2MzAwNDM3MDRaFw0yNTA3MDMxMTM3MDRaMDMxMTAvBgNV BAMTKEJGQjVFN0M1OTIwMDQ1MjlEMTEwNENGM0Q3NjNFRDc3ODQ1MjNCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LexziQvKJdx3iZUFDEKIFAZN xPHFBEFDvV+i/jvfmmCL/dzTWSp2qxl9VxiTYH+5tdHB3awuWe9F7uf8eO0p+427 vWJKDqtFIroGsGKFksp9HprJyLL893UyXTVQtJpFGTB2VBG0eylG/4euj1gkTCSn FapUHXhxvFLMkvjYhAKcWuGU4dm35eMHwaqUdDtGaMt7iy40eyeHPQE7UkS8WbsH SsHfjbxXwyItbwq5wphbe4s2dgzJfY81ki/sbY2sg6dbYqBpSldAgmdyNTO98loN 0knHv6aabbCvD302hWmjJ8hV0DEAd2kLb35sBpJMZgxDXB+C0qMGmA1ZMieBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv7XnxZIARSnREEzz12Ptd4RSO4YwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG++ykusgW833Ri8bXVFyQ8Gjg4Gp/gByfJv GM8rPIN+jjKLOc2YTu5N/yKwmv5j1o7y3BQEZcWIFkLmtoRABOfx/TeCofj2yO0B I9wGqCC8romveB0eFQp76rSCStZ+fJ11dhjWdC6k24WLE9LAdFIpjE9aDRHjDVsT qoJCtejMVuk4aG2Q7+VDP8r76jKkImde7mGCLY5hcXp34i17a+99bzATgT2pFDcV W5m4OoGixEcxhjCYRZfk2xT2RiqgZHEQAd9uVNBBHjjyhwZhfRLa2nuy2slaTgy+ OsSHmtN5T7fdcqDX1xFbtiS5Pua/ivlIfZuOM3oBDGW9GBaUvuE= -----END CERTIFICATE-----Generated at Tue Jul 1 15:40:18 2025 by rpki-client