$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: i7YjGtrb2RXdO65GapIKOq9YAh6NZWVkI2pqr+Z8HzU= Subject key identifier: 24:EC:63:8E:C1:CA:5A:8B:5C:CF:55:A2:FC:82:30:4F:23:06:01:D6 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 10892B50D66B6750CE2CC60C0841EA5D38832196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 0244 Signing time: Sat 28 Jun 2025 12:11:34 +0000 Manifest this update: Sat 28 Jun 2025 12:06:34 +0000 Manifest next update: Tue 01 Jul 2025 12:25:34 +0000 Files and hashes: 1: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=) 2: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: QWdrnAaVlOBIitG7PPTh7yvLUMWH2oNGIu32jfCgQaE=) 3: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=) 4: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: 5VwR7HDfdfAKISy+dHdojCP894McL9XrCePHeKrbz6E=) 5: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=) 6: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: HF0dYwlz6vdJov/k+WgwRu0xhExNgUTwhPU6qhbpy2A=) 7: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=) 8: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: UNnqUuRfRia1ZTuBsRYUZi/HNCUYLpX93cvYBFXVSII=) 9: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:89:2b:50:d6:6b:67:50:ce:2c:c6:0c:08:41:ea:5d:38:83:21:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Jun 28 12:06:34 2025 GMT Not After : Jul 1 12:25:34 2025 GMT Subject: CN=24EC638EC1CA5A8B5CCF55A2FC82304F230601D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:83:ca:a3:d7:f1:7f:13:de:66:d3:85:a6: be:a0:4b:da:09:c4:fd:5d:40:7b:a6:d7:8a:a4:26: 24:5b:c9:28:99:94:e4:fb:6a:65:b4:40:5b:c3:4e: f8:80:77:09:5c:09:88:c3:ba:8f:c2:ba:2f:3d:84: 59:fb:66:15:e0:ec:0f:5c:4f:33:61:1e:58:d4:c9: 0c:82:02:22:c0:d5:ed:90:28:97:cf:e7:a0:71:81: 6f:c1:77:8b:d9:35:00:8d:34:f4:c8:b7:c1:4e:fd: 9f:fe:48:6f:77:98:24:ab:7f:33:a0:d1:40:e1:dd: 5c:28:48:d4:da:db:07:f3:f5:0b:c6:68:88:4a:86: 93:58:83:c3:95:7d:f6:a2:3f:8d:ac:79:f6:34:47: 37:29:a9:8d:53:82:7f:dd:15:3d:49:e8:fe:f7:ad: 7a:84:d2:5f:6a:83:52:fb:b3:a8:c6:74:48:a9:aa: 8a:79:5c:21:a1:a2:c8:5c:00:ff:06:5c:1a:ea:01: 56:51:bf:0b:5b:4b:da:60:5d:13:99:5a:d8:9f:e0: 54:6c:66:5c:12:04:9f:1f:56:be:88:a0:84:64:6c: 83:95:6c:29:40:19:4b:60:2d:d6:b4:73:7e:a9:0d: d8:17:44:bf:48:88:96:f1:92:a8:8a:ce:a3:34:84: 9a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EC:63:8E:C1:CA:5A:8B:5C:CF:55:A2:FC:82:30:4F:23:06:01:D6 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:74:7e:6c:46:1f:75:4a:88:61:31:41:22:ff:61:b3:d8:49: 7a:d7:b1:98:5f:1c:09:85:9e:1a:8e:20:a5:1a:97:e0:f5:4e: f8:bb:89:a3:04:66:e1:2b:c8:c5:79:d1:e1:aa:e7:61:56:2a: fc:55:2a:24:2f:e0:13:3f:9f:8f:e0:f1:96:91:a8:dd:e2:47: 58:4a:0d:4c:51:ab:bf:95:cf:7d:8b:a3:ee:5d:24:59:ce:b0: 86:2f:c3:f1:69:21:de:ca:fd:f9:23:e8:11:2d:63:d1:6e:c3: 07:6f:a4:47:22:76:b1:8a:c2:e4:7c:4d:b1:9e:78:b0:19:a5: 22:19:13:96:70:7b:ce:96:ec:2f:cb:a5:74:10:a5:59:7d:9e: 48:69:30:a1:18:3c:c6:7b:44:d9:c7:d0:35:cf:8d:7b:15:73: ba:4b:52:5c:c0:aa:6d:7a:1a:c1:18:a6:6c:18:a1:8f:dc:38: 7c:91:25:a0:68:30:cd:15:46:b3:42:1b:f8:37:f7:c8:26:e2: e6:49:40:ce:49:90:47:4c:3d:a5:8c:29:e6:07:99:d8:38:19: e8:aa:2f:18:16:3e:72:50:52:b2:d2:99:55:7b:92:0b:a8:01: 21:27:4d:c7:10:84:39:9a:40:32:93:d7:63:f5:bc:b4:5b:80: 42:5c:e1:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIkrUNZrZ1DOLMYMCEHqXTiDIZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTA2MjgxMjA2MzRaFw0yNTA3MDExMjI1MzRaMDMxMTAvBgNV BAMTKDI0RUM2MzhFQzFDQTVBOEI1Q0NGNTVBMkZDODIzMDRGMjMwNjAxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRIPKo9fxfxPeZtOFpr6gS9oJ xP1dQHum14qkJiRbySiZlOT7amW0QFvDTviAdwlcCYjDuo/Cui89hFn7ZhXg7A9c TzNhHljUyQyCAiLA1e2QKJfP56BxgW/Bd4vZNQCNNPTIt8FO/Z/+SG93mCSrfzOg 0UDh3VwoSNTa2wfz9QvGaIhKhpNYg8OVffaiP42sefY0RzcpqY1Tgn/dFT1J6P73 rXqE0l9qg1L7s6jGdEipqop5XCGhoshcAP8GXBrqAVZRvwtbS9pgXROZWtif4FRs ZlwSBJ8fVr6IoIRkbIOVbClAGUtgLda0c36pDdgXRL9IiJbxkqiKzqM0hJqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJOxjjsHKWotcz1Wi/IIwTyMGAdYwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABh0fmxGH3VKiGExQSL/YbPYSXrXsZhfHAmF nhqOIKUal+D1Tvi7iaMEZuEryMV50eGq52FWKvxVKiQv4BM/n4/g8ZaRqN3iR1hK DUxRq7+Vz32Lo+5dJFnOsIYvw/FpId7K/fkj6BEtY9FuwwdvpEcidrGKwuR8TbGe eLAZpSIZE5Zwe86W7C/LpXQQpVl9nkhpMKEYPMZ7RNnH0DXPjXsVc7pLUlzAqm16 GsEYpmwYoY/cOHyRJaBoMM0VRrNCG/g398gm4uZJQM5JkEdMPaWMKeYHmdg4Geiq LxgWPnJQUrLSmVV7kguoASEnTccQhDmaQDKT12P1vLRbgEJc4c0= -----END CERTIFICATE-----Generated at Mon Jun 30 05:32:58 2025 by rpki-client