$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: bQY5LVpucmliYTebZ53OAgtDMshDbQPbsNdByks9LkU= Subject key identifier: 02:C8:42:0B:D5:31:AF:FB:20:9C:70:0F:F4:BE:05:0B:20:F3:14:74 Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 765BD54E87EDFEE1EF2F50EBEDF1694F96F6277C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 0521 Signing time: Sat 18 Oct 2025 04:41:00 +0000 Manifest this update: Sat 18 Oct 2025 04:36:00 +0000 Manifest next update: Tue 21 Oct 2025 07:57:00 +0000 Files and hashes: 1: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: f1EdJawAFE33t1rxrdKPcs3d9VEItcNJb2cJ7vIPk2M=) 2: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=) 3: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: cFP/TMux0iu8gzECmUDJlGSF4qBBCb4uTo2G9DipjHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 07:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5b:d5:4e:87:ed:fe:e1:ef:2f:50:eb:ed:f1:69:4f:96:f6:27:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Oct 18 04:36:00 2025 GMT Not After : Oct 21 07:57:00 2025 GMT Subject: CN=02C8420BD531AFFB209C700FF4BE050B20F31474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:12:9d:e3:c4:a7:0a:97:b8:07:3d:80:2a: 7b:70:a6:81:72:6f:10:1a:74:84:4c:b8:82:3c:8e: e7:00:c4:e8:b2:8f:7b:8c:0d:32:68:53:7b:04:c1: fc:62:4d:79:cc:9c:75:33:cc:d5:db:c7:6b:52:57: 25:96:fc:5e:fd:f5:50:68:e8:e4:5c:bf:d7:cf:46: b8:8e:ef:07:89:83:7d:39:18:ff:a8:5f:1d:6a:9f: 1b:df:09:45:4a:f7:70:ff:2d:9c:7d:e1:9c:b5:e7: 1c:06:bb:5f:af:8b:3a:5b:84:32:a0:af:5b:da:e9: 6d:ce:2a:9d:91:08:b4:f8:bd:8f:f5:a6:dc:9c:86: 83:54:c6:2f:3a:a0:c3:11:6c:3b:77:c3:a1:73:cf: 57:b3:2a:f3:bc:4c:ba:bf:23:fb:bc:91:34:bf:c1: 99:f9:45:17:8d:0a:b8:a6:db:df:41:62:5f:98:4c: d3:7a:9b:57:9a:87:5e:92:2a:09:fa:7c:1b:4d:bb: fa:fe:83:5a:46:f9:2c:66:d6:58:3a:aa:42:8f:57: 05:d7:af:6f:d9:ba:4e:48:c9:f6:67:3e:75:71:52: b7:ef:e8:ed:19:1d:d1:f5:4c:ea:e2:b4:b9:f9:7a: 76:a1:53:d1:5a:b7:d6:9b:e1:d3:1e:f9:ef:e6:cf: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C8:42:0B:D5:31:AF:FB:20:9C:70:0F:F4:BE:05:0B:20:F3:14:74 X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:98:de:69:4b:6c:17:d2:48:2f:a1:60:92:a0:94:5d:48:bf: f1:4f:83:bc:4d:36:5b:26:e3:fc:e8:f1:47:b1:c1:79:db:2f: ae:9c:75:8b:4d:1b:e9:64:6d:35:91:c2:37:0a:ef:de:94:03: 2c:79:25:ba:e8:63:10:7f:e4:38:eb:7d:3e:ce:b8:32:1b:58: a5:97:f6:67:8b:09:ed:5d:94:75:73:28:82:10:cb:38:d7:e8: 52:8c:ff:d7:8e:23:b8:cc:ed:0f:3b:2a:0f:0c:54:2b:62:ef: 28:d7:be:41:d8:90:bd:00:fd:58:61:d9:aa:60:09:42:26:28: f9:6c:5d:95:e6:ce:1e:4a:96:c3:8f:94:b6:f7:23:dd:54:b9: ff:20:f8:09:67:94:17:e8:a7:0a:94:98:b3:96:b4:2d:5a:6e: 35:35:a2:8c:ad:08:19:e4:6a:bb:d7:80:25:ba:e8:34:0c:48: d0:40:9d:ff:ea:a9:e3:ae:d0:be:8b:2c:55:b5:4a:88:6d:43: 43:95:06:a0:ca:91:b2:db:8f:b3:3a:87:7b:0a:53:fc:31:8b: 5a:6b:5a:ac:26:e6:a5:15:9d:d9:8d:57:c3:5b:b8:fc:7e:84: ce:ac:bc:62:6b:9a:28:0e:6b:80:f2:ba:e6:ee:58:98:77:4c: 41:5c:a7:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlvVToft/uHvL1Dr7fFpT5b2J3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNTEwMTgwNDM2MDBaFw0yNTEwMjEwNzU3MDBaMDMxMTAvBgNV BAMTKDAyQzg0MjBCRDUzMUFGRkIyMDlDNzAwRkY0QkUwNTBCMjBGMzE0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThBKd48SnCpe4Bz2AKntwpoFy bxAadIRMuII8jucAxOiyj3uMDTJoU3sEwfxiTXnMnHUzzNXbx2tSVyWW/F799VBo 6ORcv9fPRriO7weJg305GP+oXx1qnxvfCUVK93D/LZx94Zy15xwGu1+vizpbhDKg r1va6W3OKp2RCLT4vY/1ptychoNUxi86oMMRbDt3w6Fzz1ezKvO8TLq/I/u8kTS/ wZn5RReNCrim299BYl+YTNN6m1eah16SKgn6fBtNu/r+g1pG+Sxm1lg6qkKPVwXX r2/Zuk5IyfZnPnVxUrfv6O0ZHdH1TOritLn5enahU9Fat9ab4dMe+e/mz6GTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAshCC9Uxr/sgnHAP9L4FCyDzFHQwHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWY3mlLbBfSSC+hYJKglF1Iv/FPg7xNNlsm 4/zo8UexwXnbL66cdYtNG+lkbTWRwjcK796UAyx5JbroYxB/5DjrfT7OuDIbWKWX 9meLCe1dlHVzKIIQyzjX6FKM/9eOI7jM7Q87Kg8MVCti7yjXvkHYkL0A/Vhh2apg CUImKPlsXZXmzh5KlsOPlLb3I91Uuf8g+AlnlBfopwqUmLOWtC1abjU1ooytCBnk arvXgCW66DQMSNBAnf/qqeOu0L6LLFW1SohtQ0OVBqDKkbLbj7M6h3sKU/wxi1pr Wqwm5qUVndmNV8NbuPx+hM6svGJrmigOa4DyuubuWJh3TEFcp3M= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:20 2025 by rpki-client