$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json) Hash identifier: S8Al5atovgkTGn3sDaaKKhjFK29qcSSROJUJOlW+Vb8= Subject key identifier: A1:EF:19:AE:3E:AB:D2:AB:0C:65:60:66:57:B5:01:65:48:FE:29:0A Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 14BBFE0ECDEC336081FCDA9038073C17FFD22EF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft Manifest number: 0228 Signing time: Fri 22 Aug 2025 09:42:08 +0000 Manifest this update: Fri 22 Aug 2025 09:37:08 +0000 Manifest next update: Mon 25 Aug 2025 21:12:08 +0000 Files and hashes: 1: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=) 2: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=) 3: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=) 4: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=) 5: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=) 6: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: WJfJwry4EesEB9hShB5vgLcAEABd8iArMG5QjFVl5so=) 7: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=) 8: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: Vxu7OgcrZ32tVA4THVShJIrGxnq9jK2ER/olk1k8ato=) 9: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=) 10: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=) 11: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=) 12: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 318Q6731sMFPRMDMOoStaI6Bz5sS+OT9DxYXEQE+OOU=) 13: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:bb:fe:0e:cd:ec:33:60:81:fc:da:90:38:07:3c:17:ff:d2:2e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Aug 22 09:37:08 2025 GMT Not After : Aug 25 21:12:08 2025 GMT Subject: CN=A1EF19AE3EABD2AB0C65606657B5016548FE290A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:50:7b:3c:27:b5:8e:eb:c6:53:2a:80:eb: c8:9f:1a:a4:d5:fe:42:8e:fd:08:ca:86:fd:19:7d: 1e:0a:17:34:cf:d5:8d:5e:72:32:79:0c:a2:2a:23: f2:93:65:4b:1a:1c:63:21:b3:4b:ff:f7:cb:51:84: 64:af:b3:6e:0b:f8:d0:40:87:2a:bf:05:fa:b9:80: 2b:a8:9e:7f:2d:94:8b:f0:c7:97:eb:3b:7f:11:5d: 03:0f:ca:68:85:a0:a8:06:13:fe:26:94:6f:f9:eb: 6b:cb:65:d2:a0:fc:49:74:b2:87:23:d4:38:20:08: 1e:7c:e2:6d:4f:f7:32:aa:77:66:05:fd:0f:54:7e: 43:2e:20:41:53:b6:d3:b5:91:7b:77:db:2c:4d:4b: ba:33:92:c8:52:dc:be:67:9a:e9:73:a5:60:1b:ee: 30:1a:f7:20:c1:94:9b:48:13:e2:38:ba:4c:42:3d: ec:af:7e:c7:dd:f8:ac:42:f5:82:21:b3:92:1d:9e: 63:8f:77:1d:b7:06:56:91:30:4f:e0:27:24:bb:ee: b0:33:f6:64:65:62:26:3a:d0:37:74:df:a3:04:49: 28:83:27:e7:aa:58:d7:a4:4a:69:15:c8:a6:4b:7f: 3b:59:df:83:14:e9:28:62:b8:de:87:ea:9e:6e:46: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EF:19:AE:3E:AB:D2:AB:0C:65:60:66:57:B5:01:65:48:FE:29:0A X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:a9:78:63:de:d1:51:06:d3:1f:67:7a:75:10:c6:dc:a0:96: 6a:fb:36:d5:62:a7:43:00:22:49:75:65:cf:49:a8:7f:0a:67: a0:a9:94:2c:27:f8:e2:0b:ce:61:bd:9d:91:47:fb:60:45:59: 84:39:e8:b3:2a:f4:56:45:d1:2c:1b:c5:98:74:62:2c:a1:7f: ef:3c:d6:88:1e:46:54:f9:f7:50:b8:21:4b:3b:65:f9:47:36: 54:6d:ed:1f:47:3e:54:a5:20:13:87:59:b9:0f:37:51:53:e8: f3:0c:3c:29:19:e7:ff:e4:fb:d5:c2:dc:fa:38:c4:1e:44:66: b6:f1:87:b1:83:a8:e0:9d:f4:4c:32:8e:1f:3a:6b:ae:ee:5b: 0d:0b:e0:40:f2:60:d6:57:9f:0e:40:ed:cb:fd:06:06:67:e2: 3f:73:7f:1e:3a:99:04:a3:e0:0c:f8:3e:37:af:09:a8:9c:47: a6:56:b5:7f:3d:5b:e0:aa:eb:df:ae:4d:b8:c7:54:aa:8d:1f: 68:e5:f9:4f:72:fc:eb:72:fe:12:51:46:3a:1c:9e:7e:3d:b6: a1:04:e6:a8:a0:a2:4d:91:0f:af:e0:3b:ab:37:52:5b:43:9a: f5:61:14:a4:60:c9:54:a5:05:e5:64:34:f8:0c:d3:0d:4c:21: 81:44:1f:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLv+Ds3sM2CB/NqQOAc8F//SLvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNTA4MjIwOTM3MDhaFw0yNTA4MjUyMTEyMDhaMDMxMTAvBgNV BAMTKEExRUYxOUFFM0VBQkQyQUIwQzY1NjA2NjU3QjUwMTY1NDhGRTI5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9D1B7PCe1juvGUyqA68ifGqTV /kKO/QjKhv0ZfR4KFzTP1Y1ecjJ5DKIqI/KTZUsaHGMhs0v/98tRhGSvs24L+NBA hyq/Bfq5gCuonn8tlIvwx5frO38RXQMPymiFoKgGE/4mlG/562vLZdKg/El0socj 1DggCB584m1P9zKqd2YF/Q9UfkMuIEFTttO1kXt32yxNS7ozkshS3L5nmulzpWAb 7jAa9yDBlJtIE+I4ukxCPeyvfsfd+KxC9YIhs5IdnmOPdx23BlaRME/gJyS77rAz 9mRlYiY60Dd036MESSiDJ+eqWNekSmkVyKZLfztZ34MU6ShiuN6H6p5uRh+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoe8Zrj6r0qsMZWBmV7UBZUj+KQowHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANqpeGPe0VEG0x9nenUQxtyglmr7NtVip0MA Ikl1Zc9JqH8KZ6CplCwn+OILzmG9nZFH+2BFWYQ56LMq9FZF0SwbxZh0Yiyhf+88 1ogeRlT591C4IUs7ZflHNlRt7R9HPlSlIBOHWbkPN1FT6PMMPCkZ5//k+9XC3Po4 xB5EZrbxh7GDqOCd9Ewyjh86a67uWw0L4EDyYNZXnw5A7cv9BgZn4j9zfx46mQSj 4Az4PjevCaicR6ZWtX89W+Cq69+uTbjHVKqNH2jl+U9y/Oty/hJRRjocnn49tqEE 5qigok2RD6/gO6s3UltDmvVhFKRgyVSlBeVkNPgM0w1MIYFEH+c= -----END CERTIFICATE-----Generated at Sat Aug 23 10:32:08 2025 by rpki-client