$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: V49pGBYBesKjkLmIEsavTzGPf5Dhgo5IkjRxAyO9v6w= Subject key identifier: 21:C9:C7:35:B4:42:09:D0:9C:12:3C:ED:DB:C5:04:DB:A1:98:38:50 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 0264E673F3B0F618C1622BAD3CEB375E19F7B77C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 025D Signing time: Fri 22 Aug 2025 17:31:34 +0000 Manifest this update: Fri 22 Aug 2025 17:26:34 +0000 Manifest next update: Mon 25 Aug 2025 18:27:34 +0000 Files and hashes: 1: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=) 2: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=) 3: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=) 4: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=) 5: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=) 6: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=) 7: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=) 8: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=) 9: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: E/XGPzXlQUhm9LRbD1zz0v90G1grtPqfZoA2X4j27NI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:64:e6:73:f3:b0:f6:18:c1:62:2b:ad:3c:eb:37:5e:19:f7:b7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Aug 22 17:26:34 2025 GMT Not After : Aug 25 18:27:34 2025 GMT Subject: CN=21C9C735B44209D09C123CEDDBC504DBA1983850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:92:8c:89:25:05:d6:63:80:28:c0:d5:bc:5e: 77:af:4a:20:5a:a2:b6:7f:32:14:1a:55:06:17:3e: 80:4f:e4:78:a7:b9:cc:3f:ba:38:ba:aa:78:33:7d: 65:1d:63:54:13:66:49:57:fc:e5:9d:1d:5d:c2:0f: 81:21:28:a9:8b:26:aa:9a:d7:94:9f:1e:60:ce:e5: 2f:ac:a7:6e:c3:6d:d9:da:3f:50:ef:15:f8:27:ae: 1d:ef:87:2f:da:26:1b:58:29:23:30:03:26:76:14: 13:f2:dd:68:41:17:13:9d:09:1b:0b:b2:01:ad:3b: fd:59:fb:2c:7b:8a:72:db:a6:3e:59:4f:db:ae:61: 76:0a:a8:2b:de:8f:70:5b:20:7a:dc:d9:e5:64:cd: 5a:db:5d:3f:bc:ff:59:9d:b1:56:05:2a:69:4b:f5: 11:f4:41:ef:a9:61:e8:26:ef:63:5d:8f:de:33:60: a2:d4:7d:0c:47:ea:8a:c5:fc:32:5e:80:14:77:1a: f5:d4:5d:4d:a3:72:03:59:de:a1:e2:fc:d4:49:ea: 9c:64:d8:ee:1e:0f:ac:6d:1f:d3:3f:7f:46:95:ef: b1:04:3c:3f:bd:30:14:56:f7:3a:29:53:99:6a:67: 8f:5a:fb:b0:2f:ed:a8:93:ab:1c:8e:23:3c:ad:2f: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C9:C7:35:B4:42:09:D0:9C:12:3C:ED:DB:C5:04:DB:A1:98:38:50 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:03:b0:57:14:18:eb:83:a3:8e:3b:9d:ef:95:5e:cf:bd:d7: 75:c7:11:2f:62:c1:de:bd:33:b5:9a:72:8f:b8:c4:ee:c2:76: 1c:b0:ac:e4:fe:e2:56:2e:d6:d6:3f:70:e5:16:3f:e1:be:88: 6f:27:44:be:eb:db:00:ac:17:15:f0:04:59:c7:6a:0a:bf:29: 98:64:0c:60:c3:c5:e4:99:11:b7:08:d4:2e:c3:b4:bf:29:6f: 2f:ff:ae:ab:22:99:50:14:54:ad:4f:10:fa:a1:97:ab:bc:ff: 6c:d2:15:cc:7b:db:a0:2b:24:fb:8c:ac:2f:c1:63:79:da:12: a3:81:93:80:6a:93:64:1e:25:44:37:7e:b7:21:4f:fa:c7:2a: b8:67:48:69:ed:88:d6:25:76:c5:10:55:97:6a:53:08:d5:ab: 94:f6:bd:55:0f:79:d2:cd:1f:14:99:f6:01:7a:bd:83:c9:d0: 02:9b:aa:f0:5c:e2:8a:fd:af:6f:e5:26:28:d2:5e:26:82:d0: d7:a3:ad:12:94:d1:90:6e:ab:95:b1:52:95:b4:e8:90:f3:17: 73:89:5d:b0:c7:5c:fa:e4:46:b0:75:44:8d:ee:78:74:ae:53: 01:f5:bc:b3:15:69:e5:e4:c5:d7:2b:72:67:d2:8b:5e:84:5e: 04:13:2c:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAmTmc/Ow9hjBYiutPOs3Xhn3t3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTA4MjIxNzI2MzRaFw0yNTA4MjUxODI3MzRaMDMxMTAvBgNV BAMTKDIxQzlDNzM1QjQ0MjA5RDA5QzEyM0NFRERCQzUwNERCQTE5ODM4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDakoyJJQXWY4AowNW8XnevSiBa orZ/MhQaVQYXPoBP5Hinucw/uji6qngzfWUdY1QTZklX/OWdHV3CD4EhKKmLJqqa 15SfHmDO5S+sp27DbdnaP1DvFfgnrh3vhy/aJhtYKSMwAyZ2FBPy3WhBFxOdCRsL sgGtO/1Z+yx7inLbpj5ZT9uuYXYKqCvej3BbIHrc2eVkzVrbXT+8/1mdsVYFKmlL 9RH0Qe+pYegm72Ndj94zYKLUfQxH6orF/DJegBR3GvXUXU2jcgNZ3qHi/NRJ6pxk 2O4eD6xtH9M/f0aV77EEPD+9MBRW9zopU5lqZ49a+7Av7aiTqxyOIzytL1OXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIcnHNbRCCdCcEjzt28UE26GYOFAwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8DsFcUGOuDo447ne+VXs+913XHES9iwd69 M7Waco+4xO7CdhywrOT+4lYu1tY/cOUWP+G+iG8nRL7r2wCsFxXwBFnHagq/KZhk DGDDxeSZEbcI1C7DtL8pby//rqsimVAUVK1PEPqhl6u8/2zSFcx726ArJPuMrC/B Y3naEqOBk4Bqk2QeJUQ3frchT/rHKrhnSGntiNYldsUQVZdqUwjVq5T2vVUPedLN HxSZ9gF6vYPJ0AKbqvBc4or9r2/lJijSXiaC0NejrRKU0ZBuq5WxUpW06JDzF3OJ XbDHXPrkRrB1RI3ueHSuUwH1vLMVaeXkxdcrcmfSi16EXgQTLMI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:19 2025 by rpki-client