$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: C/UskFjGLaWRSUsDtNcfT0Ed3AHAaiFzCuLc1g77rQM= Subject key identifier: D3:C2:BB:BB:BC:A3:76:40:64:26:C0:86:A9:DB:14:15:14:00:47:8A Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 652E19C856764208AE19F46EEBE3C7AFFF0640FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 0202 Signing time: Sat 18 Oct 2025 12:02:19 +0000 Manifest this update: Sat 18 Oct 2025 11:57:19 +0000 Manifest next update: Tue 21 Oct 2025 19:14:19 +0000 Files and hashes: 1: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: sJUN/+XYslzThounXZW+MFwCm1lc8VEvrGvUm5/WqYY=) 2: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: Htm5ahdXQHhKpRzE/h5i9KHcwL0XsZbOLaHTHLcsMN8=) 3: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) 4: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) 5: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: i5vekzl3VkbfhXKIAan2UfnsarhHDW/S2hqJTrFnrFU=) 6: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: j7/0o24Y/Dntb2SDxDz2B+Eis79rWFB0ghqmTnU55LQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2e:19:c8:56:76:42:08:ae:19:f4:6e:eb:e3:c7:af:ff:06:40:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: Oct 18 11:57:19 2025 GMT Not After : Oct 21 19:14:19 2025 GMT Subject: CN=D3C2BBBBBCA376406426C086A9DB14151400478A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:07:27:d5:96:01:e9:ce:d8:88:de:80:91: fe:9b:77:97:28:fa:ab:f3:37:66:48:49:f1:cf:23: a4:bd:9e:4c:10:06:f0:4b:85:8d:c2:60:12:70:b0: d5:50:a6:5a:ea:03:c0:9b:b6:6c:7b:6e:87:eb:61: 2c:c2:c0:ff:8b:a8:ad:ec:dd:d9:4a:ab:5e:0a:75: 0b:c4:95:d3:6d:19:de:c1:45:5c:7d:05:2d:63:d2: a0:f1:78:67:c6:83:8e:3a:7c:97:92:23:bb:2f:bf: c4:de:5e:b9:e0:d5:32:ef:4c:f5:a3:23:04:68:0e: 4e:01:42:07:d4:77:ec:07:38:58:43:b9:4d:35:b4: a4:47:2f:39:cc:3d:d9:e7:a7:37:72:f2:84:0e:76: b9:be:f3:30:38:44:aa:07:26:1a:02:96:aa:c9:e5: 7d:7c:34:8a:68:8c:14:0f:23:43:6b:3c:3d:ee:1e: 05:92:23:80:37:09:4f:6a:b8:e1:87:34:da:3f:2d: 13:dc:57:b6:19:1d:8a:6d:0e:7a:52:9d:9f:0b:57: 2c:ea:79:36:ad:0f:d8:5d:8f:41:b3:cc:7f:11:02: c5:7f:16:83:28:cc:bb:f1:3e:19:bb:86:29:fb:85: bb:dd:06:1a:24:09:8e:a1:ae:de:44:a5:1b:fd:18: 29:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C2:BB:BB:BC:A3:76:40:64:26:C0:86:A9:DB:14:15:14:00:47:8A X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:3d:6d:34:45:ae:6f:b2:2a:95:00:3f:2f:81:bd:67:29:1f: 9a:0c:33:d4:48:fa:9b:d4:ca:93:37:c0:81:9c:2c:8f:ce:6c: c5:c9:07:d7:85:c5:79:26:d5:72:94:d1:95:44:df:92:d0:56: 06:c1:2b:a4:09:6d:e8:03:9d:18:a8:2b:45:9a:1e:d5:59:c0: 9c:90:44:69:c0:dd:66:ac:61:8b:59:c4:0e:62:e1:1a:34:0e: 97:cb:03:de:9a:3c:16:ad:b4:d1:fc:44:69:1a:7d:0d:33:4d: 56:bf:8c:39:96:2a:e3:86:62:5b:7a:39:03:96:12:92:68:33: a4:f1:b1:7b:d6:65:0c:97:8d:7f:c5:40:39:52:0e:9c:79:b5: 6a:85:ba:d0:42:0d:d4:ab:1f:24:4e:d3:6f:4f:c7:6a:c5:4e: c4:20:71:42:6e:55:5e:04:c3:86:1c:a7:fe:bc:9e:ac:df:4a: 6c:aa:ab:42:38:f3:c1:71:22:81:0b:db:a7:21:8d:7b:69:04: 1b:94:bb:b1:53:30:a4:51:87:cd:9e:5b:37:48:bf:a9:4a:cc: 91:5f:0c:20:96:61:cb:c6:35:22:04:ba:00:02:34:9e:09:04: 29:d7:7e:d4:3e:fa:1f:e1:c2:48:39:a5:ec:30:01:fe:8b:3b: 23:91:a8:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZS4ZyFZ2QgiuGfRu6+PHr/8GQP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNTEwMTgxMTU3MTlaFw0yNTEwMjExOTE0MTlaMDMxMTAvBgNV BAMTKEQzQzJCQkJCQkNBMzc2NDA2NDI2QzA4NkE5REIxNDE1MTQwMDQ3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmAcn1ZYB6c7YiN6Akf6bd5co +qvzN2ZISfHPI6S9nkwQBvBLhY3CYBJwsNVQplrqA8Cbtmx7bofrYSzCwP+LqK3s 3dlKq14KdQvEldNtGd7BRVx9BS1j0qDxeGfGg446fJeSI7svv8TeXrng1TLvTPWj IwRoDk4BQgfUd+wHOFhDuU01tKRHLznMPdnnpzdy8oQOdrm+8zA4RKoHJhoClqrJ 5X18NIpojBQPI0NrPD3uHgWSI4A3CU9quOGHNNo/LRPcV7YZHYptDnpSnZ8LVyzq eTatD9hdj0GzzH8RAsV/FoMozLvxPhm7hin7hbvdBhokCY6hrt5EpRv9GCmPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08K7u7yjdkBkJsCGqdsUFRQAR4owHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJY9bTRFrm+yKpUAPy+BvWcpH5oMM9RI+pvU ypM3wIGcLI/ObMXJB9eFxXkm1XKU0ZVE35LQVgbBK6QJbegDnRioK0WaHtVZwJyQ RGnA3WasYYtZxA5i4Ro0DpfLA96aPBattNH8RGkafQ0zTVa/jDmWKuOGYlt6OQOW EpJoM6TxsXvWZQyXjX/FQDlSDpx5tWqFutBCDdSrHyRO029Px2rFTsQgcUJuVV4E w4Ycp/68nqzfSmyqq0I488FxIoEL26chjXtpBBuUu7FTMKRRh82eWzdIv6lKzJFf DCCWYcvGNSIEugACNJ4JBCnXftQ++h/hwkg5pewwAf6LOyORqMc= -----END CERTIFICATE-----Generated at Mon Oct 20 11:31:51 2025 by rpki-client