$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: HyF1lnyZYBtjLdXfLZlcoJh35tDiUMi29CyIsH4S+FU= Subject key identifier: 31:A3:68:BA:50:CF:03:10:79:43:49:1C:A6:68:8E:22:34:61:F9:98 Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 76203BD79A9BFC69DE322AF02E82357FA1CFD168 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 020E Signing time: Thu 21 Aug 2025 05:42:15 +0000 Manifest this update: Thu 21 Aug 2025 05:37:15 +0000 Manifest next update: Sun 24 Aug 2025 16:17:15 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) 2: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) 3: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) 4: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: DIiCASNi64Ua6z0GvomtFoQePP7dYRv6RJ+inZU+xZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:20:3b:d7:9a:9b:fc:69:de:32:2a:f0:2e:82:35:7f:a1:cf:d1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Aug 21 05:37:15 2025 GMT Not After : Aug 24 16:17:15 2025 GMT Subject: CN=31A368BA50CF03107943491CA6688E223461F998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:0d:cc:4a:a3:7a:b5:c2:b4:d1:81:27:ee: f9:d5:40:c8:dc:e1:70:8c:f5:55:fb:fe:3e:d0:de: f0:40:a9:a7:c6:c9:47:f1:07:a4:e4:c4:36:d9:8f: c0:d8:3a:48:f9:d6:36:6c:30:15:b3:29:64:ff:d0: c8:0e:8f:f4:f0:b7:92:51:04:ba:68:fe:79:d6:f3: bb:a4:5c:74:e9:d8:cb:88:03:37:a5:1a:68:1c:51: a6:6f:a0:06:33:da:bd:45:4a:b2:55:72:f0:0d:a7: 85:35:48:58:3f:3a:33:cd:69:ef:88:51:0e:31:e4: 36:44:c0:e4:16:37:13:78:45:10:03:b3:4a:9e:90: 65:e4:bf:92:d7:9f:e4:ec:5f:e5:ea:f3:ee:68:c3: 9d:4c:aa:57:10:a6:6c:bb:91:79:6a:e2:60:ca:f9: cc:ec:fb:f4:59:2a:b2:33:33:80:d7:7a:7b:d4:2e: 8c:ad:f4:f4:a7:d6:34:47:93:f8:92:66:2e:59:97: da:0b:b0:9b:67:a1:e7:02:d1:7a:7a:83:7b:be:98: 01:67:d3:10:c3:7d:32:0e:cc:a7:aa:36:bd:16:f1: 67:67:85:6c:47:d5:cd:5b:da:19:1e:eb:e0:bf:3f: 3a:5d:58:40:89:3c:45:4a:18:b8:98:e5:47:4c:27: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A3:68:BA:50:CF:03:10:79:43:49:1C:A6:68:8E:22:34:61:F9:98 X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4b:e7:5e:3c:d8:59:28:07:26:98:c7:d6:fa:0d:7c:b2:db: 41:32:cc:ad:6f:94:48:4f:4d:4f:4a:e8:e2:b2:01:d1:b7:23: 8c:36:2c:36:cf:a7:61:16:2c:3c:b7:24:d4:85:dc:4b:26:a2: 4b:25:17:97:b0:66:f1:18:c9:37:dd:ff:5c:6a:8e:a2:35:8d: b7:de:c3:f3:ce:d9:8e:db:32:4c:e8:f0:a1:f6:fd:3e:c4:8c: 9e:3b:01:fe:bb:6f:82:33:f2:96:c6:a5:d9:ad:db:41:0c:12: f8:85:dd:ef:18:a6:6e:63:87:33:71:fe:c4:5c:df:38:de:30: 74:90:f5:3f:2f:ba:0b:d4:04:a4:c9:c9:f7:c5:94:18:a0:8e: 81:c5:44:48:1f:18:3e:99:a8:8b:88:d4:07:1a:83:26:93:32: 13:73:1a:98:ad:d4:5b:b9:4b:02:9f:6f:45:56:18:c2:0c:8b: 8c:7f:22:08:33:b6:4d:d4:8e:dc:55:c7:6b:9a:fb:f9:d6:77: 58:df:fe:a8:15:76:52:10:89:3e:ae:cd:f5:d1:33:0f:83:34: 0c:7a:f3:5d:4f:b8:46:02:c6:af:1a:eb:10:fa:4a:7e:1f:93: 9b:63:e1:96:f7:2b:6e:ff:aa:3f:d5:aa:62:e5:bc:2b:0d:06: 66:f2:55:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiA715qb/GneMirwLoI1f6HP0WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTA4MjEwNTM3MTVaFw0yNTA4MjQxNjE3MTVaMDMxMTAvBgNV BAMTKDMxQTM2OEJBNTBDRjAzMTA3OTQzNDkxQ0E2Njg4RTIyMzQ2MUY5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOQ3MSqN6tcK00YEn7vnVQMjc 4XCM9VX7/j7Q3vBAqafGyUfxB6TkxDbZj8DYOkj51jZsMBWzKWT/0MgOj/Twt5JR BLpo/nnW87ukXHTp2MuIAzelGmgcUaZvoAYz2r1FSrJVcvANp4U1SFg/OjPNae+I UQ4x5DZEwOQWNxN4RRADs0qekGXkv5LXn+TsX+Xq8+5ow51MqlcQpmy7kXlq4mDK +czs+/RZKrIzM4DXenvULoyt9PSn1jRHk/iSZi5Zl9oLsJtnoecC0Xp6g3u+mAFn 0xDDfTIOzKeqNr0W8WdnhWxH1c1b2hke6+C/PzpdWECJPEVKGLiY5UdMJygRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMaNoulDPAxB5Q0kcpmiOIjRh+ZgwHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZL51482FkoByaYx9b6DXyy20EyzK1vlEhP TU9K6OKyAdG3I4w2LDbPp2EWLDy3JNSF3EsmokslF5ewZvEYyTfd/1xqjqI1jbfe w/PO2Y7bMkzo8KH2/T7EjJ47Af67b4Iz8pbGpdmt20EMEviF3e8Ypm5jhzNx/sRc 3zjeMHSQ9T8vugvUBKTJyffFlBigjoHFREgfGD6ZqIuI1AcagyaTMhNzGpit1Fu5 SwKfb0VWGMIMi4x/Iggztk3UjtxVx2ua+/nWd1jf/qgVdlIQiT6uzfXRMw+DNAx6 811PuEYCxq8a6xD6Sn4fk5tj4Zb3K27/qj/VqmLlvCsNBmbyVVk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:00:10 2025 by rpki-client