$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: AVstPLO5FpQ8qbbMIL2tsHDopH0h2utlKskL9gjFiBI= Subject key identifier: C7:1B:90:B0:25:D6:B1:8D:2C:B6:C3:C6:18:A8:E6:B8:4B:C0:AA:08 Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 6406DA42AEB5AD066E350312B9AA95E9CBEE233B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 021F Signing time: Fri 22 Aug 2025 20:12:12 +0000 Manifest this update: Fri 22 Aug 2025 20:07:12 +0000 Manifest next update: Mon 25 Aug 2025 23:09:12 +0000 Files and hashes: 1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) 2: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: ni37UYCjyiZbXJBMWcpfBxIav0M9yWfOxpqpgZa1ElY=) 3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:06:da:42:ae:b5:ad:06:6e:35:03:12:b9:aa:95:e9:cb:ee:23:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Aug 22 20:07:12 2025 GMT Not After : Aug 25 23:09:12 2025 GMT Subject: CN=C71B90B025D6B18D2CB6C3C618A8E6B84BC0AA08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:af:88:d9:1c:66:3b:38:ea:72:bf:2f:d8: fa:a7:d5:84:35:2f:8c:f8:84:74:7d:ae:e0:58:71: c6:91:f9:36:74:ef:24:4d:2d:a6:dc:e2:c0:21:81: a9:0f:f3:fa:64:76:3b:23:12:71:5d:e4:41:39:5f: c0:d3:b9:d3:17:c8:38:cd:ab:60:86:be:6e:94:23: aa:79:23:4b:9e:f7:f9:a1:96:7f:82:f3:ab:d1:3d: c4:d7:39:7d:be:f4:d7:65:76:f4:4a:2e:6c:e5:7c: 95:17:9a:ac:4b:c2:be:af:9d:43:39:e2:69:c1:3e: 06:f0:bf:df:58:18:ae:74:8e:fe:ba:87:4b:e9:0f: 68:1b:e9:38:6c:be:b1:5a:ab:7f:1d:2e:f4:ed:45: 25:6a:69:49:6d:16:00:4f:b0:47:33:2c:8d:6a:84: db:d6:3d:0c:eb:05:d7:88:4f:f1:7e:c3:98:52:de: cf:84:21:e7:1b:af:93:c2:e2:93:36:3f:7e:fa:ac: 73:ae:9d:a4:c2:e2:69:14:c2:68:f2:f2:3e:ce:74: 34:c8:8d:ac:c1:bc:40:d6:d3:cd:27:93:f8:08:dd: 83:35:04:dd:fc:87:ca:b7:d4:97:e3:2f:e6:ac:bf: 86:df:96:ed:b1:6a:90:c7:07:44:5c:11:3c:e7:18: 65:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1B:90:B0:25:D6:B1:8D:2C:B6:C3:C6:18:A8:E6:B8:4B:C0:AA:08 X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:da:99:93:78:1e:3a:64:a2:d1:f4:27:b5:6e:ca:9b:cd:ad: 34:3b:4f:f1:ec:e7:b4:4f:a2:07:1f:9e:f6:02:d4:de:ff:0a: ba:bd:b4:63:55:c2:56:0a:5b:4f:dd:b1:8f:3d:02:a6:14:34: 27:cf:35:fb:aa:17:5e:da:4b:2d:4e:c1:7e:05:12:c3:1c:35: f8:d6:c7:c6:54:74:b0:7d:38:7a:ba:f3:8d:5e:a5:1c:06:72: 7a:46:39:f2:74:7b:64:2c:d1:7f:64:7f:aa:9e:1b:e9:41:0b: dd:20:74:8d:f0:e2:fa:17:9c:d7:5d:8e:7d:92:12:9e:36:40: 39:cf:57:ee:da:3c:a1:29:d2:a9:7f:2e:6e:2d:ef:ab:33:a2: 0d:e9:2d:84:a1:15:e8:08:f3:7a:f8:d7:70:98:6a:77:e2:ea: 4d:d9:28:18:81:3c:e9:81:6e:24:75:03:40:76:d9:78:ef:23: 26:51:b7:0b:74:0a:46:66:1b:33:6d:7c:16:cd:bd:44:e9:0e: b5:00:da:fa:ed:a4:0d:ca:88:ec:a9:81:2b:f4:d4:3f:22:6d: fa:26:38:dd:2c:db:74:07:fe:70:8d:46:9e:a6:2a:5a:e2:55: b0:c7:ce:bb:d8:7b:74:35:b1:c8:94:f3:e0:86:8b:09:04:de: a4:ed:ea:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAbaQq61rQZuNQMSuaqV6cvuIzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTA4MjIyMDA3MTJaFw0yNTA4MjUyMzA5MTJaMDMxMTAvBgNV BAMTKEM3MUI5MEIwMjVENkIxOEQyQ0I2QzNDNjE4QThFNkI4NEJDMEFBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMK+I2RxmOzjqcr8v2Pqn1YQ1 L4z4hHR9ruBYccaR+TZ07yRNLabc4sAhgakP8/pkdjsjEnFd5EE5X8DTudMXyDjN q2CGvm6UI6p5I0ue9/mhln+C86vRPcTXOX2+9NdldvRKLmzlfJUXmqxLwr6vnUM5 4mnBPgbwv99YGK50jv66h0vpD2gb6ThsvrFaq38dLvTtRSVqaUltFgBPsEczLI1q hNvWPQzrBdeIT/F+w5hS3s+EIecbr5PC4pM2P376rHOunaTC4mkUwmjy8j7OdDTI jazBvEDW080nk/gI3YM1BN38h8q31JfjL+asv4bflu2xapDHB0RcETznGGXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxxuQsCXWsY0stsPGGKjmuEvAqggwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfamZN4HjpkotH0J7VuypvNrTQ7T/Hs57RP ogcfnvYC1N7/Crq9tGNVwlYKW0/dsY89AqYUNCfPNfuqF17aSy1OwX4FEsMcNfjW x8ZUdLB9OHq6841epRwGcnpGOfJ0e2Qs0X9kf6qeG+lBC90gdI3w4voXnNddjn2S Ep42QDnPV+7aPKEp0ql/Lm4t76szog3pLYShFegI83r413CYanfi6k3ZKBiBPOmB biR1A0B22XjvIyZRtwt0CkZmGzNtfBbNvUTpDrUA2vrtpA3KiOypgSv01D8ibfom ON0s23QH/nCNRp6mKlriVbDHzrvYe3Q1sciU8+CGiwkE3qTt6kE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:07 2025 by rpki-client