$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: wPACZGL2bdCcUscDUPDr8NUx+QNuJ7IFLlPJEJ4qwC4= Subject key identifier: 6C:CB:E7:60:95:5F:AE:97:15:03:AF:11:FE:46:9A:03:0A:AF:6F:99 Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 36B386D9B5775E6B0BC8DE9F3C2B853ADA419710 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 01BE Signing time: Fri 22 Aug 2025 18:00:41 +0000 Manifest this update: Fri 22 Aug 2025 17:55:41 +0000 Manifest next update: Mon 25 Aug 2025 18:14:41 +0000 Files and hashes: 1: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: Sm2/vnQJ1RwPYKBK2ry0qlGDNUrYa31vZmoqT91hy7o=) 2: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: qsN6cCaNvPRadYvOCvh81rbUqW03/U/6OgyS9kMLbwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b3:86:d9:b5:77:5e:6b:0b:c8:de:9f:3c:2b:85:3a:da:41:97:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Aug 22 17:55:41 2025 GMT Not After : Aug 25 18:14:41 2025 GMT Subject: CN=6CCBE760955FAE971503AF11FE469A030AAF6F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:72:4d:ee:d5:42:6d:39:55:0d:ce:95:94: f1:06:5b:f6:40:b2:d3:39:3c:f5:f1:b8:da:b2:e8: 19:e9:fc:53:d7:6f:b2:4c:2c:78:8a:0a:57:78:60: cf:35:63:70:4a:8f:c7:32:58:f8:63:0b:02:f1:be: a8:65:f5:a7:08:e8:82:e4:fa:66:9b:ac:80:b7:55: d1:bc:fb:9b:e2:ca:a6:3e:48:5b:8d:ad:92:7c:d2: 0c:d7:4b:78:8b:4e:f9:e0:98:f7:02:45:17:2d:4b: 7a:f9:30:db:e6:5b:dc:4b:02:d5:2a:bb:34:47:34: 8f:a5:f4:db:58:9c:db:84:6c:26:3b:61:b1:61:da: a6:75:d3:bd:c5:71:99:4d:e1:8e:64:ce:a5:82:ec: 05:ad:78:c5:62:0b:5c:82:e0:92:33:2b:d3:3c:cb: 18:e9:03:ff:c3:99:5b:fe:70:cc:de:b2:22:a8:d6: a3:8a:88:f0:fc:b6:bf:cb:62:45:7a:95:fd:f2:94: a1:b6:d2:82:f8:c1:a0:ac:09:5d:b2:8e:48:ad:75: e3:54:81:3e:4c:e1:80:ae:05:1c:be:11:24:25:7a: 1e:5d:1f:77:d1:0a:ed:6e:0e:fd:13:ba:41:2c:94: d3:aa:f9:63:9f:67:5d:85:c4:56:14:ec:b0:c4:62: 04:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CB:E7:60:95:5F:AE:97:15:03:AF:11:FE:46:9A:03:0A:AF:6F:99 X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:cc:26:30:c4:4b:67:f0:a1:a7:ba:c5:6c:ca:13:cb:d5:2c: 77:c4:3d:f9:4c:b5:83:9d:9e:5b:6c:94:e2:78:b6:30:02:67: 54:81:ee:75:b3:87:80:29:83:f1:d4:4f:a8:90:43:7a:12:9c: 00:bc:d1:14:ee:82:b0:4b:a9:a4:40:b0:98:36:16:25:87:9a: 8a:66:27:42:13:7a:0d:ec:ad:e0:86:8e:51:08:6b:18:f9:ea: 46:d3:ba:d7:d9:f0:ce:a0:14:a5:b2:f8:b9:bb:5e:87:16:e4: 6c:e4:ac:18:51:a6:71:8d:fb:35:49:e3:56:03:3c:ec:e2:55: b6:5b:c4:68:8c:eb:85:72:2e:bf:d9:26:c8:aa:fa:3b:4c:1b: 6e:75:b0:56:64:1a:d6:87:56:80:52:21:c3:3b:58:bc:1e:43: cf:c9:3e:31:2a:38:8e:9a:ed:af:c7:95:8b:ba:a6:12:bd:0c: 33:41:b8:8f:da:cb:75:66:6a:9c:de:a2:55:74:c0:6a:f9:0e: c2:95:32:eb:8c:b3:84:64:03:de:b6:c0:ad:a5:4a:2b:94:ed: 52:62:f4:bc:78:ff:35:f0:d2:a5:0d:49:51:9e:6b:a9:4a:3d: 8f:9d:fe:2c:2c:b1:7c:ba:57:2e:df:14:03:39:4f:db:99:f6: b7:70:5a:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrOG2bV3XmsLyN6fPCuFOtpBlxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNTA4MjIxNzU1NDFaFw0yNTA4MjUxODE0NDFaMDMxMTAvBgNV BAMTKDZDQ0JFNzYwOTU1RkFFOTcxNTAzQUYxMUZFNDY5QTAzMEFBRjZGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CnJN7tVCbTlVDc6VlPEGW/ZA stM5PPXxuNqy6Bnp/FPXb7JMLHiKCld4YM81Y3BKj8cyWPhjCwLxvqhl9acI6ILk +mabrIC3VdG8+5viyqY+SFuNrZJ80gzXS3iLTvngmPcCRRctS3r5MNvmW9xLAtUq uzRHNI+l9NtYnNuEbCY7YbFh2qZ1073FcZlN4Y5kzqWC7AWteMViC1yC4JIzK9M8 yxjpA//DmVv+cMzesiKo1qOKiPD8tr/LYkV6lf3ylKG20oL4waCsCV2yjkitdeNU gT5M4YCuBRy+ESQleh5dH3fRCu1uDv0TukEslNOq+WOfZ12FxFYU7LDEYgQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMvnYJVfrpcVA68R/kaaAwqvb5kwHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDMJjDES2fwoae6xWzKE8vVLHfEPflMtYOd nltslOJ4tjACZ1SB7nWzh4Apg/HUT6iQQ3oSnAC80RTugrBLqaRAsJg2FiWHmopm J0ITeg3sreCGjlEIaxj56kbTutfZ8M6gFKWy+Lm7XocW5GzkrBhRpnGN+zVJ41YD POziVbZbxGiM64VyLr/ZJsiq+jtMG251sFZkGtaHVoBSIcM7WLweQ8/JPjEqOI6a 7a/HlYu6phK9DDNBuI/ay3VmapzeolV0wGr5DsKVMuuMs4RkA962wK2lSiuU7VJi 9Lx4/zXw0qUNSVGea6lKPY+d/iwssXy6Vy7fFAM5T9uZ9rdwWqQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:39:52 2025 by rpki-client