$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft File: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json) Hash identifier: JKCchuE8Rx1nXgv3Q73U1WqhvJ1cUv6j8xyu4Z6AM6o= Subject key identifier: 47:A0:D9:67:1D:2D:22:7C:95:B3:E5:6A:31:A1:C9:B5:5F:C2:E7:33 Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 5F4534CE71E3EFC9AF89117B5D23E3FA79C7D9BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft Manifest number: 0225 Signing time: Fri 22 Aug 2025 04:52:23 +0000 Manifest this update: Fri 22 Aug 2025 04:47:23 +0000 Manifest next update: Mon 25 Aug 2025 11:48:23 +0000 Files and hashes: 1: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: YHuUg4uxFrthFFepE05C4PM9gH2UZAw5dOg3ZxdbMHs=) 2: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: VDmzAE5nsSn3VcTtdUYB+JjYbBbEx+qEZDLzkKkFw30=) 3: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: fmU/gB/7itVGB2sFtyfrKlK+5/0j2F7s2JNU9ipGEtI=) 4: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: OXb58XdJvFeTkl1pb8qqXtG1NjsRZSztJ+uUatv4+8w=) 5: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: lQ+fQzdjr0S1DLs1lSSCMj5N6c3fuO+jsggHmQtAADw=) 6: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: iGn1V/gq7zu3cpw0mI8Bqv3oMJsgKj/I69u4ba5O7zE=) 7: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: 74adhrSbVzuFjVRQo3T/YKEFIp0ssVu9vw6ZXWstTjg=) 8: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: gmz8c7r4im7+nMzV67it14yI3dDd12ZI6IqlXk7BlJQ=) 9: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: aZ1nkOt0ZwL5bWsxMWDTHMMRjscg2q9LS9hs3Z383Ew=) 10: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: E7Xvq+98P7calV+Tra/HI6VBncPkJLZ2WfRUwzVpBzQ=) 11: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64=) 12: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: gQMVqNF5pbofU8fWwfLf24IOx5Rve68FRF/gYFgAFMM=) 13: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: FzI5GbnAo75yoelWpGp51ySqxG4wQ2wlQL4r6iiASgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:45:34:ce:71:e3:ef:c9:af:89:11:7b:5d:23:e3:fa:79:c7:d9:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Aug 22 04:47:23 2025 GMT Not After : Aug 25 11:48:23 2025 GMT Subject: CN=47A0D9671D2D227C95B3E56A31A1C9B55FC2E733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:50:c3:57:d0:94:50:1b:90:dc:c8:33:fe:9c: e7:ac:f2:2c:ef:63:4b:1c:87:64:a3:0a:c9:fc:04: 7b:5d:9b:8d:6f:39:4a:17:7d:36:84:84:ca:02:73: 90:65:7c:50:9c:fd:bc:5d:a9:16:c3:b3:f5:2f:09: 68:fb:2e:f9:76:19:93:40:d9:48:3e:55:f5:24:b6: 92:e0:17:5d:91:9e:80:18:69:fd:37:48:11:f1:87: bf:75:51:4f:01:1f:29:53:2c:9a:dc:f4:4b:ff:b6: a9:ac:6f:cd:ff:74:6d:1e:82:86:20:19:34:f6:6d: af:e4:aa:1c:a6:0f:fa:7e:f0:47:22:78:c6:d8:95: d1:76:5b:f4:83:70:53:c2:93:03:9d:56:64:bc:e7: a0:74:df:cc:d7:81:fc:c4:29:fa:55:ab:cb:c7:8f: 5f:ec:c1:c7:32:6f:5e:5a:4d:9f:c4:0f:94:9a:47: ee:74:71:07:24:51:9c:ef:f6:8f:7a:55:59:bf:f6: f9:e0:ac:02:c6:3a:df:1f:bb:63:8b:b7:aa:3a:ad: 9a:17:39:c5:fe:d9:b6:ce:2f:2e:fc:a8:47:33:bc: 57:30:8c:68:45:56:e8:9f:37:03:bf:90:8e:1b:a1: ee:93:87:70:85:dd:9e:74:da:13:05:a6:c8:98:58: ce:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A0:D9:67:1D:2D:22:7C:95:B3:E5:6A:31:A1:C9:B5:5F:C2:E7:33 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:78:da:a4:c7:41:ac:31:de:c8:75:cc:80:da:db:94:e3:c7: d5:4b:0e:22:9f:dc:55:de:46:f6:d0:4a:ac:52:3c:5b:8b:11: 24:f9:7a:95:3b:4d:26:0d:5e:82:c9:db:f7:f9:fb:39:6c:90: 3a:05:f7:95:da:cf:48:2a:47:cd:01:85:0d:bc:59:19:58:45: 3b:3d:e3:4e:5e:f0:86:97:77:f4:d5:f8:4f:83:9f:7c:b8:1f: ea:84:76:bf:94:b4:7c:76:dd:f0:8c:47:ef:54:a7:b7:9a:6d: f2:33:9e:ba:95:97:27:06:c3:9a:13:f1:d0:f1:80:60:88:0e: cb:e9:5a:50:d4:13:97:b5:24:f5:19:ba:7e:43:f1:45:cf:e2: 46:cc:43:0c:41:af:90:51:a8:18:07:45:2f:f6:31:dd:77:13: b9:61:f8:59:ce:c3:6a:55:50:04:fa:63:b3:9e:a4:a6:cd:5e: ac:89:23:6e:89:e7:69:15:0a:a9:74:64:6b:d6:29:3d:09:e5: d3:49:aa:ff:f6:19:68:be:69:34:89:af:e0:74:7c:50:43:27: 54:eb:84:1f:2b:25:56:a9:a8:ef:ef:f1:01:9d:b2:b5:ae:04: fd:88:48:97:21:59:5c:b1:83:df:87:55:10:29:8f:a8:b4:3e: 2a:e4:ae:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0U0znHj78mviRF7XSPj+nnH2b4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNTA4MjIwNDQ3MjNaFw0yNTA4MjUxMTQ4MjNaMDMxMTAvBgNV BAMTKDQ3QTBEOTY3MUQyRDIyN0M5NUIzRTU2QTMxQTFDOUI1NUZDMkU3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlUMNX0JRQG5DcyDP+nOes8izv Y0sch2SjCsn8BHtdm41vOUoXfTaEhMoCc5BlfFCc/bxdqRbDs/UvCWj7Lvl2GZNA 2Ug+VfUktpLgF12RnoAYaf03SBHxh791UU8BHylTLJrc9Ev/tqmsb83/dG0egoYg GTT2ba/kqhymD/p+8EcieMbYldF2W/SDcFPCkwOdVmS856B038zXgfzEKfpVq8vH j1/swccyb15aTZ/ED5SaR+50cQckUZzv9o96VVm/9vngrALGOt8fu2OLt6o6rZoX OcX+2bbOLy78qEczvFcwjGhFVuifNwO/kI4boe6Th3CF3Z502hMFpsiYWM7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR6DZZx0tInyVs+VqMaHJtV/C5zMwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTRE MzU3QUM2NkE4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA942qTHQawx3sh1zIDa25Tjx9VLDiKf3FXe RvbQSqxSPFuLEST5epU7TSYNXoLJ2/f5+zlskDoF95Xaz0gqR80BhQ28WRlYRTs9 405e8IaXd/TV+E+Dn3y4H+qEdr+UtHx23fCMR+9Up7eabfIznrqVlycGw5oT8dDx gGCIDsvpWlDUE5e1JPUZun5D8UXP4kbMQwxBr5BRqBgHRS/2Md13E7lh+FnOw2pV UAT6Y7OepKbNXqyJI26J52kVCql0ZGvWKT0J5dNJqv/2GWi+aTSJr+B0fFBDJ1Tr hB8rJVapqO/v8QGdsrWuBP2ISJchWVyxg9+HVRApj6i0Pirkrow= -----END CERTIFICATE-----Generated at Sat Aug 23 17:41:03 2025 by rpki-client