$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: z2zTDlAQA5ubmPSi9FxjFYtJ2MKhbKO3BS0xFQslMTg= Subject key identifier: 5E:76:AE:C7:87:40:16:56:CF:E9:2A:C0:4F:1C:29:67:06:5A:CC:47 Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 16A89727C9BCDF8FF692E6AE94A3046441D38507 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 01FB Signing time: Wed 07 May 2025 01:31:47 +0000 Manifest this update: Wed 07 May 2025 01:26:47 +0000 Manifest next update: Sat 10 May 2025 08:55:47 +0000 Files and hashes: 1: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 2: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) 3: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) 4: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: B93a5ogTaonmgAEL6SFUkE8bQM9bnVzMhM5U2u3oXm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 08:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a8:97:27:c9:bc:df:8f:f6:92:e6:ae:94:a3:04:64:41:d3:85:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: May 7 01:26:47 2025 GMT Not After : May 10 08:55:47 2025 GMT Subject: CN=5E76AEC787401656CFE92AC04F1C2967065ACC47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:14:92:23:31:40:1c:75:69:45:7d:f1:66: cd:d3:e3:9d:49:33:5f:6f:9c:5d:85:07:bf:4f:4e: 99:02:3d:b5:cb:98:b7:28:b2:39:94:3b:e9:53:5f: ca:7a:3f:99:dc:92:a6:29:3c:9d:50:43:96:d1:2b: e6:37:59:1f:57:ca:d7:6f:d2:ee:fe:0f:04:2d:e2: fe:62:1b:dd:ae:47:55:de:37:0b:03:65:65:a6:02: 74:1f:6e:da:fb:56:6e:91:9a:c5:25:5b:0d:e3:ba: 96:87:b0:79:9a:57:c6:bf:30:bc:81:53:55:57:b3: f6:1d:45:d1:65:a6:42:fe:1a:d5:a3:9a:ff:c1:b4: 5d:90:ad:ee:ba:b1:26:db:04:97:a3:fb:c9:9a:3d: 9e:46:e9:b7:4f:27:f9:14:38:10:08:93:4b:26:78: 93:11:1d:8b:bc:79:9d:98:00:e7:d0:22:bd:29:d7: 1f:d7:77:b4:d4:98:1c:da:2d:6e:56:6a:e6:ba:4f: 9c:45:b5:d8:3c:dc:e1:6c:ab:97:2d:bb:ed:8f:c5: f3:1b:43:8d:fb:6b:1e:a1:8e:11:16:59:86:2b:47: cf:76:71:48:0b:91:c6:bf:2a:11:38:2f:94:7f:93: 96:c2:59:32:57:35:4d:67:5e:1c:17:b9:20:9d:8f: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:76:AE:C7:87:40:16:56:CF:E9:2A:C0:4F:1C:29:67:06:5A:CC:47 X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f2:f7:91:8f:aa:b9:52:4c:0a:8c:00:ed:fc:21:9c:fa:7d: e7:c8:e4:fb:bd:ef:26:1b:a9:2e:01:50:40:35:7b:23:74:07: 67:b8:ad:10:0e:15:b6:ee:d9:7f:11:cd:60:e7:46:6b:c7:65: f9:52:98:e4:e8:bd:51:01:36:69:16:a4:ae:36:8c:bb:97:9e: 38:46:28:0b:50:e5:ff:ad:cc:53:c9:87:f8:6e:7d:98:26:59: 55:08:c3:d7:a2:c6:ce:c9:e8:85:62:a5:14:e8:df:ee:da:71: a0:57:af:a2:1b:e3:a1:f4:dc:64:18:71:8b:b5:75:06:c1:37: 9a:d0:4e:fb:ee:0f:ab:ad:cb:d8:aa:37:5c:01:ec:b4:11:af: cb:37:35:ad:9f:4c:18:26:bb:b4:99:dc:33:84:22:55:8d:eb: ef:c0:4f:67:6f:70:c4:c0:bd:ff:1b:5a:20:03:01:65:3b:93: 17:cd:8c:ad:50:a3:66:60:9d:8d:99:fb:52:ea:a7:2b:f0:7d: ab:d1:f1:c6:93:53:fd:dc:03:27:e1:6f:f8:de:81:06:33:76: db:c9:64:f0:0b:22:ab:6a:2f:7a:2a:06:19:56:b2:f9:0e:e4: c1:b9:a4:0f:76:09:a4:bb:4a:2d:84:98:5f:98:84:2b:91:a3: b8:3c:15:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqiXJ8m834/2kuaulKMEZEHThQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNTA1MDcwMTI2NDdaFw0yNTA1MTAwODU1NDdaMDMxMTAvBgNV BAMTKDVFNzZBRUM3ODc0MDE2NTZDRkU5MkFDMDRGMUMyOTY3MDY1QUNDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi/RSSIzFAHHVpRX3xZs3T451J M19vnF2FB79PTpkCPbXLmLcosjmUO+lTX8p6P5nckqYpPJ1QQ5bRK+Y3WR9Xytdv 0u7+DwQt4v5iG92uR1XeNwsDZWWmAnQfbtr7Vm6RmsUlWw3jupaHsHmaV8a/MLyB U1VXs/YdRdFlpkL+GtWjmv/BtF2Qre66sSbbBJej+8maPZ5G6bdPJ/kUOBAIk0sm eJMRHYu8eZ2YAOfQIr0p1x/Xd7TUmBzaLW5Waua6T5xFtdg83OFsq5ctu+2PxfMb Q437ax6hjhEWWYYrR892cUgLkca/KhE4L5R/k5bCWTJXNU1nXhwXuSCdj227AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXnaux4dAFlbP6SrATxwpZwZazEcwHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHny95GPqrlSTAqMAO38IZz6fefI5Pu97yYb qS4BUEA1eyN0B2e4rRAOFbbu2X8RzWDnRmvHZflSmOTovVEBNmkWpK42jLuXnjhG KAtQ5f+tzFPJh/hufZgmWVUIw9eixs7J6IVipRTo3+7acaBXr6Ib46H03GQYcYu1 dQbBN5rQTvvuD6uty9iqN1wB7LQRr8s3Na2fTBgmu7SZ3DOEIlWN6+/AT2dvcMTA vf8bWiADAWU7kxfNjK1Qo2ZgnY2Z+1LqpyvwfavR8caTU/3cAyfhb/jegQYzdtvJ ZPALIqtqL3oqBhlWsvkO5MG5pA92CaS7Si2EmF+YhCuRo7g8FYI= -----END CERTIFICATE-----Generated at Thu May 8 23:37:01 2025 by rpki-client