$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: 3W/jP5CY2HJKeM5BXPbNMWtV5JeAkamfDWDL37WCzX8= Subject key identifier: 82:CB:96:65:40:00:3B:5D:1D:8C:0B:30:90:4A:13:1C:68:64:83:18 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 71CDDDC2CB75156F3410028FB1952851C98ABC3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 022D Signing time: Thu 08 May 2025 23:11:31 +0000 Manifest this update: Thu 08 May 2025 23:06:31 +0000 Manifest next update: Mon 12 May 2025 03:56:31 +0000 Files and hashes: 1: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=) 2: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=) 3: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=) 4: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: HF0dYwlz6vdJov/k+WgwRu0xhExNgUTwhPU6qhbpy2A=) 5: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=) 6: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: YpG6oCfs20vqVJ9Fen9Xj42fQldrQx7WkU+8ZK6nTbo=) 7: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: 5VwR7HDfdfAKISy+dHdojCP894McL9XrCePHeKrbz6E=) 8: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: QWdrnAaVlOBIitG7PPTh7yvLUMWH2oNGIu32jfCgQaE=) 9: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cd:dd:c2:cb:75:15:6f:34:10:02:8f:b1:95:28:51:c9:8a:bc:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: May 8 23:06:31 2025 GMT Not After : May 12 03:56:31 2025 GMT Subject: CN=82CB966540003B5D1D8C0B30904A131C68648318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:45:a4:97:a8:5a:1f:ce:06:f9:cc:10:97: d8:29:21:2f:3f:0a:cd:82:bc:cd:24:f8:39:27:2b: ee:5c:8b:e1:29:80:82:df:e0:8a:09:06:0d:14:22: 7f:da:f2:65:9a:51:56:3b:cd:d7:f2:77:54:d5:9d: 74:89:72:eb:19:4d:44:82:ea:8b:9f:cb:e5:76:66: fd:84:43:84:51:ac:ca:66:95:2c:6d:94:49:5b:e1: 0e:e0:0c:b6:7f:51:65:75:56:23:28:d9:5f:9a:06: eb:ff:23:28:e9:11:d9:1b:9d:76:86:2f:10:0e:d7: e0:74:96:04:05:50:f5:66:fe:cd:2c:41:e1:d6:76: aa:3a:3e:34:b9:65:74:ff:f6:4d:7f:d1:a7:5b:d1: 1d:1a:b3:00:66:70:41:2a:2b:1a:59:7f:8c:4b:17: 7a:e0:63:b2:9c:8c:1a:aa:3b:60:5e:37:41:0f:2a: 41:48:b4:dc:3f:b3:f1:72:3b:18:4a:b3:f4:2a:4d: 58:07:3f:b4:2f:54:7b:49:9a:f3:50:dc:e3:1e:7d: fb:08:82:a1:b5:d5:44:6b:6c:37:59:0f:e7:07:a5: 29:a3:27:30:95:f2:de:ab:c4:51:a6:d6:b7:8a:f0: 35:d4:12:d7:2a:40:07:bb:5d:6d:ab:b9:dc:ca:5c: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CB:96:65:40:00:3B:5D:1D:8C:0B:30:90:4A:13:1C:68:64:83:18 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e8:88:0d:df:50:a6:f8:ed:43:f7:47:b6:53:b8:8f:a6:47: 23:33:ee:74:a6:14:12:96:54:5c:65:f9:c8:1f:e4:f5:3a:86: ce:12:be:09:fb:82:93:4e:d7:3a:dc:45:02:3f:52:0f:33:8e: d9:97:52:91:d2:04:b8:09:ca:4d:6a:a1:03:f0:da:43:22:15: 39:04:4a:fd:0e:97:a2:b6:8a:d3:00:71:9b:f0:d6:65:52:97: ba:0c:b7:0e:31:ee:a6:9c:27:c9:ff:64:18:a6:aa:32:dc:53: 27:f7:ea:aa:58:08:b0:54:b8:1f:ba:50:42:f5:82:4c:f9:32: 6d:4e:c3:fa:a9:36:f7:dd:80:42:58:9e:85:7b:80:5c:7b:57: bf:8c:b6:54:40:46:bb:8c:59:c1:16:d3:8c:a5:15:7f:9c:d8: 7c:4d:6f:d2:ee:42:9d:b5:56:62:6c:6e:66:72:96:d2:c0:ae: f6:b5:35:f0:eb:d8:77:99:d2:13:f5:c3:72:3e:b5:fb:3d:e6: da:48:c4:6c:ee:64:0b:1c:2e:09:d0:8b:9b:62:04:c3:7c:3c: ed:36:c0:ff:ee:96:f5:85:26:e3:e3:57:f0:cf:a7:7a:a2:c1: 48:3a:ea:77:bf:da:3b:d7:a8:c5:4b:9c:45:2d:6d:84:57:98: 3b:da:6d:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcc3dwst1FW80EAKPsZUoUcmKvDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTA1MDgyMzA2MzFaFw0yNTA1MTIwMzU2MzFaMDMxMTAvBgNV BAMTKDgyQ0I5NjY1NDAwMDNCNUQxRDhDMEIzMDkwNEExMzFDNjg2NDgzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoU0Wkl6haH84G+cwQl9gpIS8/ Cs2CvM0k+DknK+5ci+EpgILf4IoJBg0UIn/a8mWaUVY7zdfyd1TVnXSJcusZTUSC 6oufy+V2Zv2EQ4RRrMpmlSxtlElb4Q7gDLZ/UWV1ViMo2V+aBuv/IyjpEdkbnXaG LxAO1+B0lgQFUPVm/s0sQeHWdqo6PjS5ZXT/9k1/0adb0R0aswBmcEEqKxpZf4xL F3rgY7KcjBqqO2BeN0EPKkFItNw/s/FyOxhKs/QqTVgHP7QvVHtJmvNQ3OMeffsI gqG11URrbDdZD+cHpSmjJzCV8t6rxFGm1reK8DXUEtcqQAe7XW2rudzKXIkXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgsuWZUAAO10djAswkEoTHGhkgxgwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7oiA3fUKb47UP3R7ZTuI+mRyMz7nSmFBKW VFxl+cgf5PU6hs4Svgn7gpNO1zrcRQI/Ug8zjtmXUpHSBLgJyk1qoQPw2kMiFTkE Sv0Ol6K2itMAcZvw1mVSl7oMtw4x7qacJ8n/ZBimqjLcUyf36qpYCLBUuB+6UEL1 gkz5Mm1Ow/qpNvfdgEJYnoV7gFx7V7+MtlRARruMWcEW04ylFX+c2HxNb9LuQp21 VmJsbmZyltLArva1NfDr2HeZ0hP1w3I+tfs95tpIxGzuZAscLgnQi5tiBMN8PO02 wP/ulvWFJuPjV/DPp3qiwUg66ne/2jvXqMVLnEUtbYRXmDvabfw= -----END CERTIFICATE-----Generated at Sat May 10 14:46:01 2025 by rpki-client