$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: eRb7F91hOOweorh2tqZYHy5lAQ197sliEacUf13dYww= Subject key identifier: 1F:49:00:41:D1:90:88:79:EB:A3:65:E2:47:54:78:1D:AF:54:BD:4D Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 326AF26681426098249A95A994CB58C3005E9767 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 022A Signing time: Thu 21 Aug 2025 09:51:49 +0000 Manifest this update: Thu 21 Aug 2025 09:46:49 +0000 Manifest next update: Sun 24 Aug 2025 18:34:49 +0000 Files and hashes: 1: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) 2: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 3: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: bxUuAGRGOLZCrAItDMKg1rCD4P7CoCmrujUF1v85Cdg=) 4: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6a:f2:66:81:42:60:98:24:9a:95:a9:94:cb:58:c3:00:5e:97:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Aug 21 09:46:49 2025 GMT Not After : Aug 24 18:34:49 2025 GMT Subject: CN=1F490041D1908879EBA365E24754781DAF54BD4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:29:a6:91:5b:af:7a:57:f5:a9:ed:29:a9:9a: a0:e8:67:0b:5a:bc:a3:c2:cb:fd:d6:e9:b1:4a:31: c9:0b:d9:22:ec:25:18:cd:1a:35:ee:a2:11:4a:3e: 19:7b:f0:25:5b:f6:76:14:98:7e:82:94:42:35:b8: 9e:c2:e1:ec:38:42:d5:60:e6:7d:93:52:3f:ad:2f: ef:5a:e5:73:3d:5f:13:ce:58:62:a5:85:64:5b:3d: dc:05:c5:89:94:b3:76:4d:35:df:40:5c:cd:dc:f9: 4c:7a:27:e4:ff:c6:59:89:b2:04:b5:69:b0:d0:ef: 35:20:ca:d8:e4:db:27:5e:d8:f1:f4:93:cd:3b:f0: 7b:1c:30:c7:01:f6:d3:7c:1d:41:37:ee:65:4b:94: 8a:ff:42:43:f9:9a:80:a6:f9:d5:4e:4f:1c:02:36: 69:67:69:36:9c:f7:03:d6:03:4c:c4:4a:98:d9:82: 7a:46:9a:10:88:97:ee:2c:e0:62:84:b7:72:16:51: 6a:78:f0:a7:6c:27:ad:6d:c6:1d:e9:25:01:b8:11: 74:a5:0f:c7:67:79:50:8e:ad:c0:a5:1c:8e:5d:42: bb:ce:c6:37:b3:7e:9a:87:0d:4a:71:7b:6d:52:2c: dd:9f:51:1d:33:45:8c:63:df:1a:cf:a0:79:ae:1f: 84:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:49:00:41:D1:90:88:79:EB:A3:65:E2:47:54:78:1D:AF:54:BD:4D X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b9:c5:e3:6b:03:9d:6d:44:83:cc:bd:4a:24:29:eb:c3:fd: 61:ed:7e:4d:2a:02:a4:c5:ae:03:68:0f:bd:cf:bf:5a:09:35: 85:a0:7c:cf:63:91:17:72:1e:f5:af:f2:f4:65:d9:e6:8b:2c: c0:c9:35:99:9e:b7:2f:bc:3c:b5:1f:0f:df:fb:cd:94:c0:68: 5e:c5:b0:73:02:f6:94:59:99:6a:41:69:2d:b1:6c:93:d5:d0: 49:8a:f7:79:ca:2b:2e:7a:04:d3:54:18:64:35:e4:86:5d:0d: 24:21:1f:67:dc:09:b9:43:9c:b9:30:40:b3:00:2a:15:e8:e8: b1:c4:bd:38:6e:ad:5b:de:3e:2b:a5:42:75:db:d4:2c:7e:52: 74:1c:3d:62:85:7e:05:de:60:44:4c:81:1d:3e:5f:03:65:29: 34:f1:a7:77:d5:43:82:29:b7:01:91:98:1b:62:99:f6:2b:a8: fb:49:3b:3b:ee:dd:f1:fd:fc:56:10:26:7b:cf:c4:ef:2d:3b: 36:cc:63:6c:b5:25:14:f1:7b:3d:3b:4a:d5:aa:91:1e:c9:80: 8d:08:3d:28:f0:7a:09:7c:60:0c:ae:94:68:83:8f:b2:a0:61: 13:c0:b8:8e:32:8a:6e:ee:c7:92:e6:cc:81:f6:46:d4:3c:8e: e7:7a:1b:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmryZoFCYJgkmpWplMtYwwBel2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNTA4MjEwOTQ2NDlaFw0yNTA4MjQxODM0NDlaMDMxMTAvBgNV BAMTKDFGNDkwMDQxRDE5MDg4NzlFQkEzNjVFMjQ3NTQ3ODFEQUY1NEJENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKaaRW696V/Wp7SmpmqDoZwta vKPCy/3W6bFKMckL2SLsJRjNGjXuohFKPhl78CVb9nYUmH6ClEI1uJ7C4ew4QtVg 5n2TUj+tL+9a5XM9XxPOWGKlhWRbPdwFxYmUs3ZNNd9AXM3c+Ux6J+T/xlmJsgS1 abDQ7zUgytjk2yde2PH0k8078HscMMcB9tN8HUE37mVLlIr/QkP5moCm+dVOTxwC NmlnaTac9wPWA0zESpjZgnpGmhCIl+4s4GKEt3IWUWp48KdsJ61txh3pJQG4EXSl D8dneVCOrcClHI5dQrvOxjezfpqHDUpxe21SLN2fUR0zRYxj3xrPoHmuH4T5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH0kAQdGQiHnro2XiR1R4Ha9UvU0wHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+5xeNrA51tRIPMvUokKevD/WHtfk0qAqTF rgNoD73Pv1oJNYWgfM9jkRdyHvWv8vRl2eaLLMDJNZmety+8PLUfD9/7zZTAaF7F sHMC9pRZmWpBaS2xbJPV0EmK93nKKy56BNNUGGQ15IZdDSQhH2fcCblDnLkwQLMA KhXo6LHEvThurVvePiulQnXb1Cx+UnQcPWKFfgXeYERMgR0+XwNlKTTxp3fVQ4Ip twGRmBtimfYrqPtJOzvu3fH9/FYQJnvPxO8tOzbMY2y1JRTxez07StWqkR7JgI0I PSjwegl8YAyulGiDj7KgYRPAuI4yim7ux5LmzIH2RtQ8jud6G+g= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:53 2025 by rpki-client