$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: pgqh3bzUQbByKiyAkEvs5Lwr/X7BvhOZEYWTrHx4Xt0= Subject key identifier: 27:7F:DB:60:D1:50:45:CB:F1:EB:B3:2C:71:C6:17:B3:52:B9:C5:99 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 440CC4B87AB6C07C4C429BFA2BB465314AFB8FAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 01D5 Signing time: Fri 22 Aug 2025 10:20:56 +0000 Manifest this update: Fri 22 Aug 2025 10:15:56 +0000 Manifest next update: Mon 25 Aug 2025 13:32:56 +0000 Files and hashes: 1: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: PXsuVPLEzGme/TvSRalwKMlC1hWsjOPUgK0Lgy+M/Is=) 2: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: oRew6KfkFzlx3A8eV9Y1LbsmpoMxIWHDQWAOf15Tszk=) 3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: JLuyTnkAd9LdVP7Ap7TsyT3WybJ3uwYm9GdHPUO4P9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0c:c4:b8:7a:b6:c0:7c:4c:42:9b:fa:2b:b4:65:31:4a:fb:8f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Aug 22 10:15:56 2025 GMT Not After : Aug 25 13:32:56 2025 GMT Subject: CN=277FDB60D15045CBF1EBB32C71C617B352B9C599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:94:5c:b1:98:c7:64:30:91:b0:78:5c:49: 88:45:58:a7:c6:ab:c0:ea:59:97:18:9f:0a:2f:eb: 08:41:6c:d1:47:3a:27:fb:2c:17:63:0e:12:67:45: f9:c7:4d:06:f2:b9:9a:8e:17:53:08:57:fa:da:00: ac:1f:2e:bc:75:36:3b:c9:5a:24:90:d5:82:21:90: e5:4f:4d:d2:7b:48:bb:01:40:fc:51:b1:21:1a:49: 49:4d:08:83:57:f5:61:30:4e:a1:90:5d:23:cf:30: 7a:6d:8c:58:1a:a4:56:70:af:40:b7:53:db:eb:3d: b0:61:e1:cb:7d:05:70:20:ed:ab:ab:a3:9b:09:5c: 14:9f:d6:2c:bc:68:d9:6d:68:e2:f2:77:46:eb:63: b4:1e:01:ac:d1:88:e3:46:f4:b4:ec:cd:2d:4e:63: a5:82:a7:a6:d8:6c:b1:2c:ff:cd:d5:13:6b:e8:cd: 3d:93:07:6f:43:23:34:6f:bf:a7:5b:b4:0d:97:cb: 9e:96:46:e2:10:f7:8f:cd:54:23:86:3b:3f:c0:1a: 83:a2:10:0a:92:88:28:57:8c:72:46:88:09:44:fb: 58:ac:c2:d2:6c:a3:85:b8:e7:c8:f0:80:ca:e0:89: d1:ea:2f:c7:94:46:24:68:51:22:c9:7e:4a:9f:ee: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7F:DB:60:D1:50:45:CB:F1:EB:B3:2C:71:C6:17:B3:52:B9:C5:99 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0c:19:ee:05:01:01:c8:c5:79:77:65:77:98:74:40:e0:20: dd:02:ff:c9:60:40:61:9f:c2:c7:fd:df:3e:ac:30:26:f4:16: f6:68:4c:75:1e:ef:6d:19:9e:d0:8f:dc:2d:9f:b6:b2:9d:f5: 80:fb:c9:03:15:90:57:e3:98:88:6a:98:b9:95:19:7d:37:59: fb:ed:35:3a:1c:e9:ef:c6:92:da:2e:79:ea:f1:f3:7e:6e:04: 6d:65:78:ae:e6:bb:39:c5:c5:a8:80:e9:5a:82:40:14:56:5c: d2:19:e7:c0:be:ab:a4:da:89:0f:9d:19:c9:e4:1e:d1:0b:35: 41:a5:38:9d:52:a2:4c:30:ce:63:06:ca:ec:bf:cc:c9:ff:0b: 1e:03:a1:99:5e:de:90:58:49:db:9d:d7:6d:fc:81:bd:5a:72: 6f:08:3a:cc:1c:9d:15:73:09:2e:dc:96:ee:23:ed:2f:27:68: c0:45:42:96:dd:c2:57:42:58:a1:37:d1:cb:aa:a2:3c:0b:49: e7:13:3f:47:f3:b1:33:7d:4a:b7:41:33:3b:a7:35:0a:91:ae: 1f:0d:54:2a:07:52:7a:55:63:da:2c:05:b9:63:30:ef:d4:89: 3d:fd:ab:fd:ef:27:d5:e6:67:d8:8b:20:27:3a:7a:7a:b1:f5: 50:c8:71:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAzEuHq2wHxMQpv6K7RlMUr7j6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNTA4MjIxMDE1NTZaFw0yNTA4MjUxMzMyNTZaMDMxMTAvBgNV BAMTKDI3N0ZEQjYwRDE1MDQ1Q0JGMUVCQjMyQzcxQzYxN0IzNTJCOUM1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5k5RcsZjHZDCRsHhcSYhFWKfG q8DqWZcYnwov6whBbNFHOif7LBdjDhJnRfnHTQbyuZqOF1MIV/raAKwfLrx1NjvJ WiSQ1YIhkOVPTdJ7SLsBQPxRsSEaSUlNCINX9WEwTqGQXSPPMHptjFgapFZwr0C3 U9vrPbBh4ct9BXAg7auro5sJXBSf1iy8aNltaOLyd0brY7QeAazRiONG9LTszS1O Y6WCp6bYbLEs/83VE2vozT2TB29DIzRvv6dbtA2Xy56WRuIQ94/NVCOGOz/AGoOi EAqSiChXjHJGiAlE+1iswtJso4W458jwgMrgidHqL8eURiRoUSLJfkqf7q1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3/bYNFQRcvx67MsccYXs1K5xZkwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4MGe4FAQHIxXl3ZXeYdEDgIN0C/8lgQGGf wsf93z6sMCb0FvZoTHUe720ZntCP3C2ftrKd9YD7yQMVkFfjmIhqmLmVGX03Wfvt NToc6e/Gktoueerx835uBG1leK7muznFxaiA6VqCQBRWXNIZ58C+q6TaiQ+dGcnk HtELNUGlOJ1SokwwzmMGyuy/zMn/Cx4DoZle3pBYSdud1238gb1acm8IOswcnRVz CS7clu4j7S8naMBFQpbdwldCWKE30cuqojwLSecTP0fzsTN9SrdBMzunNQqRrh8N VCoHUnpVY9osBbljMO/UiT39q/3vJ9XmZ9iLICc6enqx9VDIcVo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:23 2025 by rpki-client