$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: D4kGl1u74GrNg1yYQ/anzFG5GYutrtmAHc9oUFbbVXY= Subject key identifier: 5C:F2:DD:D3:7B:D9:55:1E:D4:E6:28:79:D9:FF:A8:D1:F5:96:20:C9 Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 3A359E462E113A51F1347511AB2C2A075679EECE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 01E9 Signing time: Fri 22 Aug 2025 13:42:17 +0000 Manifest this update: Fri 22 Aug 2025 13:37:17 +0000 Manifest next update: Mon 25 Aug 2025 20:05:17 +0000 Files and hashes: 1: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) 2: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: +qc7eg0pc48H+wf15wN37qMDrnXSLjA5d2VOGWTm5u8=) 3: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) 4: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: Htm5ahdXQHhKpRzE/h5i9KHcwL0XsZbOLaHTHLcsMN8=) 5: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: j7/0o24Y/Dntb2SDxDz2B+Eis79rWFB0ghqmTnU55LQ=) 6: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: sJUN/+XYslzThounXZW+MFwCm1lc8VEvrGvUm5/WqYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:35:9e:46:2e:11:3a:51:f1:34:75:11:ab:2c:2a:07:56:79:ee:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: Aug 22 13:37:17 2025 GMT Not After : Aug 25 20:05:17 2025 GMT Subject: CN=5CF2DDD37BD9551ED4E62879D9FFA8D1F59620C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:45:97:80:d7:ae:bc:91:fc:b5:fe:7f:87:80: 1d:cf:b9:5c:e2:53:a0:5e:89:74:7d:61:11:c1:5c: 28:1a:b9:96:b7:b6:0a:43:f0:c6:95:d7:71:41:a3: 1b:ac:22:c7:47:ca:80:2b:f8:f0:a3:0f:57:c3:6e: bd:54:35:a0:98:be:6e:94:06:6c:70:a5:69:2f:c4: c6:d1:44:fa:31:ca:20:77:04:27:79:57:d0:17:e0: 0d:65:e4:bd:65:40:2a:ce:c9:f8:fb:14:d2:28:89: 8c:8c:88:13:cf:6a:e6:1a:0c:5c:1e:2b:d9:2b:d1: f8:90:ae:f8:2f:4e:ab:08:7b:5e:56:f5:f5:84:63: e8:3e:7e:6a:7d:88:07:70:61:f1:35:8a:b3:26:4b: 69:84:77:2e:29:44:e9:b8:8e:92:e1:ec:b1:17:47: e3:32:e8:80:10:60:7d:3e:be:70:1c:97:b0:6d:48: 0a:ab:a8:ac:16:2b:7d:20:7d:3f:51:b2:1d:74:db: 8f:0d:4b:09:dd:81:c9:d2:c0:1b:f2:f3:52:1d:11: b7:9e:b0:dc:8c:93:d6:29:47:89:b7:3f:b6:d6:25: 13:31:da:be:7d:1f:01:6e:5a:0d:3a:63:a4:43:d4: 9a:73:9e:1e:9a:be:e2:72:13:3d:5f:87:61:a1:a9: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F2:DD:D3:7B:D9:55:1E:D4:E6:28:79:D9:FF:A8:D1:F5:96:20:C9 X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:63:3f:60:e4:2b:7b:4f:90:24:eb:cb:1d:0d:af:02:eb:3e: a2:cf:92:b8:b4:60:1f:d2:af:5b:76:3d:81:d6:e5:94:53:f1: a0:36:58:c7:bc:24:4b:ff:32:80:54:c0:2b:0f:cd:3b:7f:3b: bc:8c:4a:98:e1:71:01:6d:e5:95:7a:fa:7c:7c:fb:c4:4d:89: 73:51:3b:1e:66:97:29:3d:1b:fc:6f:20:9f:7c:c7:88:e2:c9: 11:31:b1:9d:b6:a3:98:87:f9:13:4e:f2:4e:85:82:33:df:48: eb:fc:00:2c:01:8c:05:39:9f:98:ec:be:f9:a4:6a:a8:7f:5a: cd:eb:27:ab:04:54:03:fa:ab:c6:73:01:27:d8:90:ca:c2:c2: 8a:e4:15:5c:cb:0a:ec:15:33:50:92:6b:ce:53:4f:6a:08:9f: dc:9b:28:2e:8b:cc:1a:71:7f:73:a0:c9:3a:03:fc:5b:c3:57: 8d:e9:2d:5f:61:f6:5c:37:18:97:fc:d1:7f:02:d4:be:50:d1: 85:a6:bf:3a:8b:1c:20:c3:6a:08:ea:27:58:7c:a3:2f:0e:44: 80:fe:07:b5:16:a9:0d:c8:93:b2:46:fc:8b:76:c8:5a:30:08: 5f:f1:4c:27:ba:57:3f:6f:80:2a:ae:8d:8e:81:26:11:f5:7f: 9f:1a:4a:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOjWeRi4ROlHxNHURqywqB1Z57s4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNTA4MjIxMzM3MTdaFw0yNTA4MjUyMDA1MTdaMDMxMTAvBgNV BAMTKDVDRjJEREQzN0JEOTU1MUVENEU2Mjg3OUQ5RkZBOEQxRjU5NjIwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjRZeA1668kfy1/n+HgB3PuVzi U6BeiXR9YRHBXCgauZa3tgpD8MaV13FBoxusIsdHyoAr+PCjD1fDbr1UNaCYvm6U BmxwpWkvxMbRRPoxyiB3BCd5V9AX4A1l5L1lQCrOyfj7FNIoiYyMiBPPauYaDFwe K9kr0fiQrvgvTqsIe15W9fWEY+g+fmp9iAdwYfE1irMmS2mEdy4pROm4jpLh7LEX R+My6IAQYH0+vnAcl7BtSAqrqKwWK30gfT9Rsh10248NSwndgcnSwBvy81IdEbee sNyMk9YpR4m3P7bWJRMx2r59HwFuWg06Y6RD1Jpznh6avuJyEz1fh2GhqRIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXPLd03vZVR7U5ih52f+o0fWWIMkwHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBjP2DkK3tPkCTryx0NrwLrPqLPkri0YB/S r1t2PYHW5ZRT8aA2WMe8JEv/MoBUwCsPzTt/O7yMSpjhcQFt5ZV6+nx8+8RNiXNR Ox5mlyk9G/xvIJ98x4jiyRExsZ22o5iH+RNO8k6FgjPfSOv8ACwBjAU5n5jsvvmk aqh/Ws3rJ6sEVAP6q8ZzASfYkMrCworkFVzLCuwVM1CSa85TT2oIn9ybKC6LzBpx f3OgyToD/FvDV43pLV9h9lw3GJf80X8C1L5Q0YWmvzqLHCDDagjqJ1h8oy8ORID+ B7UWqQ3Ik7JG/It2yFowCF/xTCe6Vz9vgCqujY6BJhH1f58aSi8= -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:21 2025 by rpki-client