$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json) Hash identifier: Q5/96fbgEXGlS9UaN+9FjYtr0O7EicEBQD8yPhzOgCI= Subject key identifier: 9F:72:A3:72:60:59:13:AC:4A:29:06:59:4C:DA:AD:D5:5F:E7:4C:BC Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 401C060736502F8708C000E87CD7E8C7F482BD05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft Manifest number: 01B8 Signing time: Sat 18 Oct 2025 05:11:40 +0000 Manifest this update: Sat 18 Oct 2025 05:06:40 +0000 Manifest next update: Tue 21 Oct 2025 13:43:40 +0000 Files and hashes: 1: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: g3O85uHYQ5H3CYzPQLQFqdssgPM5rhi5A/BzEIRFoas=) 2: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: vGG0asOC2Xl7EswH7KA3jLAIJRd+GCTUKsA4WpfXyjU=) 3: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: r2H4Bm6TCJMoq+T4fIyCBCWo8vK4Ortf3QldTV12TuE=) 4: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 9QXIOR5p9E/ECayeIb5+Pzn8r00Xjm0tMLmC+/Pg7aE=) 5: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: wnZO7kQR9JZHcXEpTkJ6URQ49yRUAKEaIg5OVxBtq9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1c:06:07:36:50:2f:87:08:c0:00:e8:7c:d7:e8:c7:f4:82:bd:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Oct 18 05:06:40 2025 GMT Not After : Oct 21 13:43:40 2025 GMT Subject: CN=9F72A372605913AC4A2906594CDAADD55FE74CBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:14:7f:5c:21:96:be:52:8b:84:67:bb:97: 44:78:2a:09:73:0d:a6:33:10:3f:44:09:c7:b6:92: c0:5b:a7:b1:aa:c2:df:da:98:5b:47:23:0a:56:58: ab:03:dd:82:a8:42:af:bd:83:1b:98:27:40:0e:02: 85:22:62:c2:41:89:b6:1a:05:96:63:da:5a:d7:83: e0:2b:98:51:bf:15:16:8a:55:08:b9:60:0b:be:f3: 8d:28:0f:ac:30:4b:a3:93:f2:4e:1b:54:64:16:60: 0a:1b:ac:9d:2e:5f:c6:59:84:9b:86:23:b2:e3:e3: c7:f5:9e:cc:9c:2b:cc:24:a1:1b:6d:5e:5d:3f:b7: ac:f3:92:0b:85:86:1b:7a:b5:50:0f:67:73:e1:26: e9:00:06:1a:fc:d8:30:37:b2:a9:aa:39:b8:14:6c: 6c:be:07:4a:20:d2:52:5b:2c:4e:f4:7e:19:9b:53: 3d:73:d6:93:5d:4a:bb:96:be:e6:6b:e6:6f:5d:54: 11:95:ff:d9:e4:8c:8c:a2:f3:ff:f9:d7:dc:34:5b: 86:47:32:03:23:db:ea:28:0f:a5:cc:ec:d5:1b:e4: 65:aa:c2:fb:fb:dc:01:c2:4e:26:e8:2c:5b:01:be: df:a1:89:cc:7d:32:2c:5e:19:3d:eb:14:a6:19:2a: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:72:A3:72:60:59:13:AC:4A:29:06:59:4C:DA:AD:D5:5F:E7:4C:BC X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e7:88:7b:e3:19:f5:50:60:66:ad:4d:7c:f1:d8:69:e7:60: 8b:79:fa:dd:64:33:46:db:d3:7c:22:9c:1b:ed:30:41:31:54: 03:78:65:bf:6e:86:5e:ae:ee:9b:7d:b4:dd:95:37:fa:30:66: 48:02:fe:14:24:08:62:2a:c9:a0:8f:da:2d:ff:ee:d2:c8:0c: d1:11:43:ae:ce:d2:a1:82:6d:3a:12:99:65:dc:d5:03:d1:41: b8:f0:73:fd:24:17:5d:86:79:90:12:75:0e:d5:4f:40:e5:0d: ac:ed:27:0e:1f:03:a5:bc:86:75:41:30:dc:56:c0:86:51:fb: dc:5d:a0:5d:af:f5:4b:3d:43:be:46:a4:3c:3b:b4:11:f2:a6: 28:96:4b:69:31:07:d9:45:db:7b:d2:9a:0d:55:82:4b:40:16: dc:33:96:a1:06:e1:6e:04:65:3a:5b:50:21:4b:48:33:77:e0: f0:6f:50:16:0d:64:3e:26:f5:c8:e9:07:9a:ad:2d:97:be:0b: 43:c9:bf:df:1d:4c:50:49:d4:da:eb:d0:b3:e5:92:44:8c:27: b2:9a:7c:9a:ef:21:76:a9:b0:ce:ec:2d:58:07:44:bf:d4:db: fb:49:3d:d6:89:49:87:ad:8c:7c:fb:48:c0:73:9b:de:09:d3: 80:55:ea:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBwGBzZQL4cIwADofNfox/SCvQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNTEwMTgwNTA2NDBaFw0yNTEwMjExMzQzNDBaMDMxMTAvBgNV BAMTKDlGNzJBMzcyNjA1OTEzQUM0QTI5MDY1OTRDREFBREQ1NUZFNzRDQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ORR/XCGWvlKLhGe7l0R4Kglz DaYzED9ECce2ksBbp7Gqwt/amFtHIwpWWKsD3YKoQq+9gxuYJ0AOAoUiYsJBibYa BZZj2lrXg+ArmFG/FRaKVQi5YAu+840oD6wwS6OT8k4bVGQWYAobrJ0uX8ZZhJuG I7Lj48f1nsycK8wkoRttXl0/t6zzkguFhht6tVAPZ3PhJukABhr82DA3sqmqObgU bGy+B0og0lJbLE70fhmbUz1z1pNdSruWvuZr5m9dVBGV/9nkjIyi8//519w0W4ZH MgMj2+ooD6XM7NUb5GWqwvv73AHCTiboLFsBvt+hicx9MixeGT3rFKYZKk73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn3KjcmBZE6xKKQZZTNqt1V/nTLwwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIx MDM1RUVBQUI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnniHvjGfVQYGatTXzx2GnnYIt5+t1kM0bb 03winBvtMEExVAN4Zb9uhl6u7pt9tN2VN/owZkgC/hQkCGIqyaCP2i3/7tLIDNER Q67O0qGCbToSmWXc1QPRQbjwc/0kF12GeZASdQ7VT0DlDaztJw4fA6W8hnVBMNxW wIZR+9xdoF2v9Us9Q75GpDw7tBHypiiWS2kxB9lF23vSmg1VgktAFtwzlqEG4W4E ZTpbUCFLSDN34PBvUBYNZD4m9cjpB5qtLZe+C0PJv98dTFBJ1Nrr0LPlkkSMJ7Ka fJrvIXapsM7sLVgHRL/U2/tJPdaJSYetjHz7SMBzm94J04BV6lg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:36 2025 by rpki-client