$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: yauGPqfoqeVQk7Yi4hknyx+Le14ZAKrt+TeMaGJEWhI= Subject key identifier: C7:BB:2F:1D:2E:BC:FB:24:B2:23:9A:14:98:13:C3:F4:23:70:BD:D4 Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 7DFFE4D473AF1602CA4689DF2C9D4FC51ABEB5A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 0213 Signing time: Mon 30 Jun 2025 17:51:45 +0000 Manifest this update: Mon 30 Jun 2025 17:46:45 +0000 Manifest next update: Thu 03 Jul 2025 23:06:45 +0000 Files and hashes: 1: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: oFJhhvNpLaD8/jPD9Hpm/DUPKE0X04roGvcpS2ZhJU4=) 2: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) 3: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 4: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ff:e4:d4:73:af:16:02:ca:46:89:df:2c:9d:4f:c5:1a:be:b5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Jun 30 17:46:45 2025 GMT Not After : Jul 3 23:06:45 2025 GMT Subject: CN=C7BB2F1D2EBCFB24B2239A149813C3F42370BDD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:b2:12:f2:d1:0f:7e:7c:ef:b0:08:8e:3d: 0f:75:52:83:91:3a:26:ce:59:56:10:87:6e:46:7f: 70:c6:67:a7:ca:48:18:1a:77:37:57:06:38:c3:8a: b4:3e:bc:5b:c7:30:d4:63:09:88:60:f9:cb:39:65: 34:4a:8b:b7:e7:da:39:09:92:b4:3c:30:83:fb:ac: 25:6e:7c:c2:5f:bb:40:8f:f5:98:35:a7:5a:e2:47: dc:ee:69:ca:63:21:7f:56:23:a8:e0:90:7d:9d:ce: 0a:a1:9c:1a:d1:10:61:ff:95:d4:d6:ae:52:58:cd: 27:2e:e9:b5:ad:63:7b:46:12:79:a2:34:1c:3b:39: 64:b6:7b:ed:63:d1:e7:32:59:30:bb:d5:6d:8d:e5: 26:f2:0f:fe:95:f1:c6:2d:c3:df:a8:3b:00:0e:4d: 69:13:ce:f5:41:28:34:cd:47:ff:c0:13:dd:8d:54: 69:87:da:07:ff:71:35:f8:c3:34:39:c5:34:d2:2a: 5e:63:7e:e7:59:ee:6f:87:be:18:aa:5c:3e:41:c5: 63:d2:89:98:42:a8:88:7a:5b:fe:79:28:c6:18:c1: f4:27:cf:c2:f3:8e:56:81:c0:4b:33:86:cc:a2:b8: 5b:76:28:e0:65:3c:fd:ee:22:0e:f6:dc:e5:c3:d3: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BB:2F:1D:2E:BC:FB:24:B2:23:9A:14:98:13:C3:F4:23:70:BD:D4 X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d7:81:45:ab:02:cf:36:f1:be:07:d3:2e:fe:c2:7d:73:22: f4:da:b9:21:33:0f:bd:bd:cf:0e:62:38:48:93:0d:f1:fa:de: 92:bf:5a:7a:04:72:b3:3a:34:1b:a3:72:f1:96:20:2e:35:fb: d0:6b:c8:50:f4:6f:2f:de:5a:b5:e4:3e:40:5c:4c:25:49:b5: 16:19:cb:bb:7e:76:e3:87:b1:30:bd:f9:5f:08:ab:47:81:b9: ae:9c:68:77:9e:f2:e1:fc:23:1d:59:b0:6a:91:20:0e:8e:4c: 3c:57:0f:6a:41:ff:b5:00:9f:30:3b:c7:82:d5:f7:ca:f1:6d: b6:c6:c4:26:e1:06:93:b4:ed:3f:7a:3c:9b:b3:47:a5:d4:9a: 95:a4:49:63:a5:58:c3:0b:24:0b:9a:43:87:99:ee:fd:b7:ee: 85:57:cb:a0:f0:e3:fe:56:87:ff:bf:a6:08:5d:f3:79:3f:6c: d8:65:58:55:39:7b:14:17:06:38:d7:1b:d5:3f:fe:3b:60:27: 92:84:56:1c:5b:24:e2:ef:28:8b:85:b4:a8:1b:be:e3:29:91: dc:19:43:e2:e9:8b:66:e5:ce:e9:e6:57:a8:9a:5f:f1:10:16: cc:67:04:e5:16:f6:13:19:c4:1c:00:17:24:15:d1:df:5c:81: 72:95:f0:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUff/k1HOvFgLKRonfLJ1PxRq+taMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNTA2MzAxNzQ2NDVaFw0yNTA3MDMyMzA2NDVaMDMxMTAvBgNV BAMTKEM3QkIyRjFEMkVCQ0ZCMjRCMjIzOUExNDk4MTNDM0Y0MjM3MEJERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQLIS8tEPfnzvsAiOPQ91UoOR OibOWVYQh25Gf3DGZ6fKSBgadzdXBjjDirQ+vFvHMNRjCYhg+cs5ZTRKi7fn2jkJ krQ8MIP7rCVufMJfu0CP9Zg1p1riR9zuacpjIX9WI6jgkH2dzgqhnBrREGH/ldTW rlJYzScu6bWtY3tGEnmiNBw7OWS2e+1j0ecyWTC71W2N5SbyD/6V8cYtw9+oOwAO TWkTzvVBKDTNR//AE92NVGmH2gf/cTX4wzQ5xTTSKl5jfudZ7m+HvhiqXD5BxWPS iZhCqIh6W/55KMYYwfQnz8LzjlaBwEszhsyiuFt2KOBlPP3uIg723OXD05RRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx7svHS68+ySyI5oUmBPD9CNwvdQwHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfXgUWrAs828b4H0y7+wn1zIvTauSEzD729 zw5iOEiTDfH63pK/WnoEcrM6NBujcvGWIC41+9BryFD0by/eWrXkPkBcTCVJtRYZ y7t+duOHsTC9+V8Iq0eBua6caHee8uH8Ix1ZsGqRIA6OTDxXD2pB/7UAnzA7x4LV 98rxbbbGxCbhBpO07T96PJuzR6XUmpWkSWOlWMMLJAuaQ4eZ7v237oVXy6Dw4/5W h/+/pghd83k/bNhlWFU5exQXBjjXG9U//jtgJ5KEVhxbJOLvKIuFtKgbvuMpkdwZ Q+Lpi2blzunmV6iaX/EQFsxnBOUW9hMZxBwAFyQV0d9cgXKV8Ko= -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:55 2025 by rpki-client