$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: jxeC7bsF1ElsyAOJasawILvYAdoVlJ9zAyng+PO2OYY= Subject key identifier: CD:BF:1D:72:E2:83:4A:03:BF:C1:8B:F9:F1:3B:D5:44:26:A3:1E:15 Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 15965A40530756A2BC0B94DF17FF6ACDFC6698C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 0166 Signing time: Fri 27 Jun 2025 18:21:41 +0000 Manifest this update: Fri 27 Jun 2025 18:16:41 +0000 Manifest next update: Tue 01 Jul 2025 05:48:41 +0000 Files and hashes: 1: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) 2: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) 3: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: IWezx8zGlcB9EXRTaHb+oy2X9sRQLBr9fstQ7fTsPLA=) 4: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) 5: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:96:5a:40:53:07:56:a2:bc:0b:94:df:17:ff:6a:cd:fc:66:98:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Jun 27 18:16:41 2025 GMT Not After : Jul 1 05:48:41 2025 GMT Subject: CN=CDBF1D72E2834A03BFC18BF9F13BD54426A31E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:bf:ea:53:81:ac:23:2f:a5:b9:06:62:09: 1a:3a:33:87:de:a1:d8:22:18:b8:8a:65:fb:d9:a3: 79:10:ed:b8:8d:7d:24:f2:8c:60:10:a7:92:a1:0f: 1d:c3:99:e1:c5:49:49:25:e1:da:37:a4:47:50:be: 6d:70:f3:23:50:94:fc:b5:6f:89:67:aa:13:c4:19: cf:47:8f:6d:dc:1f:88:0c:96:1d:c2:8f:b6:35:48: b5:32:88:63:75:5a:ed:22:75:18:13:61:82:20:5c: 9c:fd:39:61:10:5a:55:7c:68:d0:16:a0:4f:bf:2b: 7a:4e:c5:74:20:49:7f:34:83:cb:e8:17:59:bf:5f: 21:70:78:b9:e2:37:11:db:e3:57:3e:f1:e4:29:8f: de:6d:f9:56:3d:b1:6a:90:90:22:a8:62:ed:d1:b1: 80:07:3e:86:55:7d:2f:70:ee:58:be:dc:1f:76:8e: ae:2c:37:17:ee:f6:79:96:5f:9a:f9:66:ae:10:e4: f8:e7:74:ac:e6:44:3f:8b:65:18:0a:32:9e:f3:ee: 60:b5:5b:33:6e:3a:2f:4e:72:e8:66:59:cd:1a:2e: e2:26:0c:0d:91:ea:5d:cc:f6:ac:ef:c7:84:f3:cd: 69:a5:16:78:ec:10:f2:14:53:b5:63:db:5d:de:de: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BF:1D:72:E2:83:4A:03:BF:C1:8B:F9:F1:3B:D5:44:26:A3:1E:15 X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bb:cb:20:8d:f2:9f:8e:20:10:07:a4:04:e2:b9:69:7b:3c: 9d:35:cf:e6:1b:3a:92:9d:12:b0:92:73:5d:9c:df:5f:b2:6f: f4:85:e4:44:a5:66:e0:a7:07:3f:d4:36:23:37:8f:e2:2e:96: af:eb:51:b7:51:4b:ce:78:89:8b:79:3c:85:07:b7:bd:9f:2e: 3f:07:bc:16:6f:a7:2e:12:f2:47:e4:e4:1a:1d:7a:ec:bf:a9: 07:b2:16:4b:f9:41:50:d4:5e:f1:4c:39:f1:3a:bf:c8:0d:f0: 7a:81:34:69:11:cb:a8:ce:37:7e:26:6a:d1:38:80:1a:16:1d: 2d:79:de:4f:fe:c4:cd:48:bc:d5:c0:8a:a4:64:0c:ac:ee:b6: a7:a3:27:99:d7:bc:d9:9d:38:09:88:4f:bc:96:38:2c:88:f6: 11:d2:70:7e:46:3c:6f:53:50:a3:33:3e:f5:1a:ef:99:70:71: ac:8c:ee:3d:a6:7f:9f:3f:a7:b0:2f:40:33:a6:bf:da:af:9c: 8f:4e:9c:79:87:35:57:a4:56:e8:75:01:90:f8:58:c4:95:86: 89:f8:a3:01:e3:d4:1e:c3:36:64:b2:64:dc:ff:75:da:8e:9f: db:d2:67:96:bb:01:1f:bc:98:c3:d0:b7:32:63:70:56:3c:20: 9e:68:96:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZZaQFMHVqK8C5TfF/9qzfxmmMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNTA2MjcxODE2NDFaFw0yNTA3MDEwNTQ4NDFaMDMxMTAvBgNV BAMTKENEQkYxRDcyRTI4MzRBMDNCRkMxOEJGOUYxM0JENTQ0MjZBMzFFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0d7/qU4GsIy+luQZiCRo6M4fe odgiGLiKZfvZo3kQ7biNfSTyjGAQp5KhDx3DmeHFSUkl4do3pEdQvm1w8yNQlPy1 b4lnqhPEGc9Hj23cH4gMlh3Cj7Y1SLUyiGN1Wu0idRgTYYIgXJz9OWEQWlV8aNAW oE+/K3pOxXQgSX80g8voF1m/XyFweLniNxHb41c+8eQpj95t+VY9sWqQkCKoYu3R sYAHPoZVfS9w7li+3B92jq4sNxfu9nmWX5r5Zq4Q5PjndKzmRD+LZRgKMp7z7mC1 WzNuOi9OcuhmWc0aLuImDA2R6l3M9qzvx4TzzWmlFnjsEPIUU7Vj213e3kpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzb8dcuKDSgO/wYv58TvVRCajHhUwHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD67yyCN8p+OIBAHpATiuWl7PJ01z+YbOpKd ErCSc12c31+yb/SF5ESlZuCnBz/UNiM3j+Iulq/rUbdRS854iYt5PIUHt72fLj8H vBZvpy4S8kfk5Bodeuy/qQeyFkv5QVDUXvFMOfE6v8gN8HqBNGkRy6jON34matE4 gBoWHS153k/+xM1IvNXAiqRkDKzutqejJ5nXvNmdOAmIT7yWOCyI9hHScH5GPG9T UKMzPvUa75lwcayM7j2mf58/p7AvQDOmv9qvnI9OnHmHNVekVuh1AZD4WMSVhon4 owHj1B7DNmSyZNz/ddqOn9vSZ5a7AR+8mMPQtzJjcFY8IJ5olmg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:51:34 2025 by rpki-client