$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: ezQqruOSADFXm0AIu6KrGRzVTzPM729UtqQQMieQrrk= Subject key identifier: 50:E4:42:8C:4A:A4:ED:58:53:DD:54:2F:F9:BC:D3:47:59:28:FF:AA Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 15647FBF302AD07DA635CB41AF0F91FF7982B22E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 017F Signing time: Fri 22 Aug 2025 10:01:47 +0000 Manifest this update: Fri 22 Aug 2025 09:56:47 +0000 Manifest next update: Mon 25 Aug 2025 13:55:47 +0000 Files and hashes: 1: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) 2: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) 3: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: 5aoLDZNPGkgwEsHhOCXYH4gsoccFZ03JCQVa7eoU4Qc=) 4: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) 5: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:64:7f:bf:30:2a:d0:7d:a6:35:cb:41:af:0f:91:ff:79:82:b2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Aug 22 09:56:47 2025 GMT Not After : Aug 25 13:55:47 2025 GMT Subject: CN=50E4428C4AA4ED5853DD542FF9BCD3475928FFAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b2:27:4c:cf:63:6a:da:17:d4:89:0a:85:27: 24:23:a2:d5:cc:4d:ea:24:28:7c:b6:38:1c:26:65: a6:2c:b4:a6:37:90:cb:9e:3a:a6:f8:7b:aa:be:29: 5f:5c:48:2e:1b:6e:7d:cf:f4:14:1f:2c:2a:e4:8e: 0d:b9:c1:a7:17:61:2a:e9:73:3d:3d:d2:da:a6:03: ec:ad:76:43:97:69:3e:0a:f2:7d:1a:83:81:25:96: 03:61:d1:0e:03:1c:c6:89:52:14:13:b5:75:31:88: 78:86:4a:82:40:c0:78:3b:b5:4e:70:14:cd:8e:3e: 07:05:66:88:50:7f:0b:e0:5b:14:e3:24:45:37:13: f4:7b:06:36:d1:cf:3a:b5:a9:46:f0:35:e5:68:06: e2:61:f6:30:b3:e1:c4:23:5c:de:ec:9b:66:99:61: b4:3d:bc:d0:ed:53:48:12:b3:6c:b8:34:21:7f:63: 6a:3f:27:9d:ce:f8:fe:69:89:89:ae:91:af:1d:09: 9e:7e:16:e9:70:8d:65:c4:0e:9e:f9:46:f4:0c:ba: 77:17:6d:25:ca:df:29:9c:6a:34:cb:28:b1:c8:90: e1:f7:1f:b1:a6:cb:25:56:6f:73:69:62:aa:5c:d0: 69:2b:ef:ae:b8:37:aa:d7:42:ff:e3:9c:b3:f0:f3: 8e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E4:42:8C:4A:A4:ED:58:53:DD:54:2F:F9:BC:D3:47:59:28:FF:AA X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7b:23:78:95:79:52:c6:e7:2a:3a:4c:06:a7:5e:df:55:07: 8d:3c:39:02:6d:5c:5f:ae:8e:57:dc:cb:f2:a0:d5:6c:53:ea: ad:a7:b1:e0:af:b8:f5:9e:a5:6b:b8:67:3b:ee:3b:e5:f8:e4: 1e:57:15:ba:1e:5b:e0:95:51:3d:82:d3:ea:55:67:ca:f4:14: dc:83:fc:f9:e7:07:a6:fd:5e:81:04:85:e7:24:c5:88:3f:0e: 07:ea:01:32:1d:8c:58:d4:c1:64:9e:48:a7:2c:ef:14:0f:87: bd:6c:ac:db:69:9a:8a:03:4e:84:f1:86:ef:42:d0:e0:55:95: a7:bb:ab:ad:ed:00:28:68:ad:69:31:87:3a:40:87:dc:1e:cb: ca:9c:14:23:bd:ad:47:80:a7:c6:70:ee:a9:f4:54:19:42:b8: 6f:90:01:18:cc:f7:96:c5:7f:42:7b:93:a1:4c:76:c4:37:ed: b8:92:09:58:b0:b8:1f:45:52:51:0d:4e:bc:f1:fa:fb:67:eb: ed:31:92:40:03:10:7d:64:a6:6b:90:73:7b:2e:72:e6:4f:a8: 12:49:2c:c3:c9:d1:9d:32:51:f8:aa:5e:65:ca:04:4c:3c:e5: ad:72:30:b5:15:95:b4:fa:e6:29:9f:e9:ce:2f:2b:37:bc:51: bb:ee:97:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWR/vzAq0H2mNctBrw+R/3mCsi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNTA4MjIwOTU2NDdaFw0yNTA4MjUxMzU1NDdaMDMxMTAvBgNV BAMTKDUwRTQ0MjhDNEFBNEVENTg1M0RENTQyRkY5QkNEMzQ3NTkyOEZGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksidMz2Nq2hfUiQqFJyQjotXM TeokKHy2OBwmZaYstKY3kMueOqb4e6q+KV9cSC4bbn3P9BQfLCrkjg25wacXYSrp cz090tqmA+ytdkOXaT4K8n0ag4EllgNh0Q4DHMaJUhQTtXUxiHiGSoJAwHg7tU5w FM2OPgcFZohQfwvgWxTjJEU3E/R7BjbRzzq1qUbwNeVoBuJh9jCz4cQjXN7sm2aZ YbQ9vNDtU0gSs2y4NCF/Y2o/J53O+P5piYmuka8dCZ5+FulwjWXEDp75RvQMuncX bSXK3ymcajTLKLHIkOH3H7GmyyVWb3NpYqpc0Gkr7664N6rXQv/jnLPw844NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUORCjEqk7VhT3VQv+bzTR1ko/6owHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ7I3iVeVLG5yo6TAanXt9VB408OQJtXF+u jlfcy/Kg1WxT6q2nseCvuPWepWu4ZzvuO+X45B5XFboeW+CVUT2C0+pVZ8r0FNyD /PnnB6b9XoEEheckxYg/DgfqATIdjFjUwWSeSKcs7xQPh71srNtpmooDToTxhu9C 0OBVlae7q63tAChorWkxhzpAh9wey8qcFCO9rUeAp8Zw7qn0VBlCuG+QARjM95bF f0J7k6FMdsQ37biSCViwuB9FUlENTrzx+vtn6+0xkkADEH1kpmuQc3sucuZPqBJJ LMPJ0Z0yUfiqXmXKBEw85a1yMLUVlbT65imf6c4vKze8Ubvul7I= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:39 2025 by rpki-client