$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: RQZjwB9CxAaaZ6dD5byajLu/wzhzuMuu6DWEbypzL0U= Subject key identifier: 11:81:AB:0A:02:9E:26:A9:AA:86:8D:E2:BE:33:30:6B:AF:EC:09:C5 Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 0385822C83CE6C4575BEDBFC2D7CEDC6B199F908 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 01D8 Signing time: Sat 18 Oct 2025 13:20:42 +0000 Manifest this update: Sat 18 Oct 2025 13:15:42 +0000 Manifest next update: Tue 21 Oct 2025 19:58:42 +0000 Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: cVFaX5vsSnlCiBXiYi7VFBsU8ifDtbmqTWAW0Jfdf/M=) 2: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: ebtOr/Jf98gdFKw35rPpSrDquIZXCydflAmdMdMOVuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:85:82:2c:83:ce:6c:45:75:be:db:fc:2d:7c:ed:c6:b1:99:f9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Oct 18 13:15:42 2025 GMT Not After : Oct 21 19:58:42 2025 GMT Subject: CN=1181AB0A029E26A9AA868DE2BE33306BAFEC09C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:b6:b8:95:70:85:08:d8:34:c9:0a:f3:87: aa:93:c4:ae:2e:7e:37:4c:5c:6e:7f:70:12:0e:40: 8f:fa:6b:77:bd:5e:9b:f1:21:45:67:de:3d:8e:b5: 29:b4:e7:2c:6d:c6:ff:41:39:ca:a7:01:e0:28:54: 40:ea:6d:30:38:5c:b8:fb:ee:86:89:6c:04:fb:8c: 3e:3c:4b:ef:85:5e:d8:54:13:97:c3:73:8a:2b:2a: b3:e0:bd:1b:4a:28:dd:b7:d7:45:c8:08:25:4c:bf: 9a:00:56:eb:d1:97:8c:28:89:a6:d8:6e:c7:da:07: ef:9f:d4:3e:1e:91:01:7d:d8:03:22:ae:6a:58:ee: 71:65:bb:8a:09:3a:0f:ea:4a:b3:ab:0f:d7:0d:26: 93:ae:fa:be:f5:c9:50:c5:65:69:2e:f5:18:17:2b: 8a:b6:0a:da:6f:43:ec:34:09:ed:a4:e3:a0:7e:53: 93:49:b6:0c:a9:05:aa:82:9b:0c:47:f6:fa:e0:4f: 3b:33:1b:e0:3a:5b:88:94:64:3c:73:92:b7:60:1f: 20:b7:d1:c8:ee:c3:b7:f7:95:ee:ec:bc:85:20:15: 68:f6:b4:76:2f:f7:3b:a9:e6:5f:16:87:28:aa:49: 4a:36:7e:92:a1:d2:2b:de:6f:9c:fe:0d:7a:0b:ba: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:81:AB:0A:02:9E:26:A9:AA:86:8D:E2:BE:33:30:6B:AF:EC:09:C5 X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:92:12:55:86:67:ee:a9:dc:36:fe:ba:53:48:33:ec:08:aa: 2c:10:72:e1:2a:75:8b:aa:33:f2:47:fb:8f:60:fb:d9:ac:e8: 59:d4:58:3b:7f:f0:12:10:27:89:fb:7e:e9:52:dc:a4:74:48: 42:5e:ac:aa:8d:7c:06:2e:e8:cb:0a:01:2f:b7:5d:99:68:0c: 90:9f:45:46:86:92:57:bf:82:e3:dd:58:60:19:6c:04:3e:b8: c1:87:d6:fe:2a:18:a3:34:6a:51:81:99:d4:00:e8:e6:c5:44: f3:90:60:c4:7e:1b:5d:95:d7:6f:6f:a0:63:4b:86:ef:93:f6: c9:8a:f9:4a:d4:51:21:fd:4a:ef:aa:1d:82:ed:ad:36:cd:f7: 1f:00:d3:1e:43:34:af:e4:45:5c:a4:75:6f:c4:23:8d:36:4d: bc:af:d6:e3:78:94:87:a2:c0:e4:ef:e5:cf:b3:1e:eb:d2:31: 56:0f:cb:a5:8c:f5:5a:8f:77:e8:f0:82:06:92:14:87:c3:ac: 88:aa:b9:1b:a6:19:a6:39:49:32:7d:3e:78:24:e3:6c:dd:68: 9d:70:d1:c4:70:d1:59:8f:18:df:dc:e4:8c:64:d0:4c:f3:86: fc:4e:64:30:aa:d9:8d:8a:40:4f:f8:b7:5b:21:d0:06:b6:26: 3d:61:a6:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4WCLIPObEV1vtv8LXztxrGZ+QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNTEwMTgxMzE1NDJaFw0yNTEwMjExOTU4NDJaMDMxMTAvBgNV BAMTKDExODFBQjBBMDI5RTI2QTlBQTg2OERFMkJFMzMzMDZCQUZFQzA5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+7a4lXCFCNg0yQrzh6qTxK4u fjdMXG5/cBIOQI/6a3e9XpvxIUVn3j2OtSm05yxtxv9BOcqnAeAoVEDqbTA4XLj7 7oaJbAT7jD48S++FXthUE5fDc4orKrPgvRtKKN2310XICCVMv5oAVuvRl4woiabY bsfaB++f1D4ekQF92AMirmpY7nFlu4oJOg/qSrOrD9cNJpOu+r71yVDFZWku9RgX K4q2CtpvQ+w0Ce2k46B+U5NJtgypBaqCmwxH9vrgTzszG+A6W4iUZDxzkrdgHyC3 0cjuw7f3le7svIUgFWj2tHYv9zup5l8WhyiqSUo2fpKh0iveb5z+DXoLuoytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEYGrCgKeJqmqho3ivjMwa6/sCcUwHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiSElWGZ+6p3Db+ulNIM+wIqiwQcuEqdYuq M/JH+49g+9ms6FnUWDt/8BIQJ4n7fulS3KR0SEJerKqNfAYu6MsKAS+3XZloDJCf RUaGkle/guPdWGAZbAQ+uMGH1v4qGKM0alGBmdQA6ObFRPOQYMR+G12V129voGNL hu+T9smK+UrUUSH9Su+qHYLtrTbN9x8A0x5DNK/kRVykdW/EI402Tbyv1uN4lIei wOTv5c+zHuvSMVYPy6WM9VqPd+jwggaSFIfDrIiquRumGaY5STJ9Pngk42zdaJ1w 0cRw0VmPGN/c5Ixk0EzzhvxOZDCq2Y2KQE/4t1sh0Aa2Jj1hpk4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:00 2025 by rpki-client