$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: TQ4JFku39hsnbQCbV+JssjHFKDki5oW5JNRmezjYr9o= Subject key identifier: 39:68:A7:FE:5B:2A:3E:22:36:A6:35:C0:7D:D4:DD:56:38:5A:49:E2 Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 6BF296713C408865B479E625230C031376B37355 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 03F2 Signing time: Mon 20 Oct 2025 01:50:41 +0000 Manifest this update: Mon 20 Oct 2025 01:45:41 +0000 Manifest next update: Thu 23 Oct 2025 09:46:41 +0000 Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=) 2: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 5SkHB/Kz3ud3kzZYvQ/j1QLOIE2ORuolpv99BxFmP4E=) 3: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: ojx9HJPBkond4BjlTOvr/TMesPS+NcydfUd2xgaRPYc=) 4: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f2:96:71:3c:40:88:65:b4:79:e6:25:23:0c:03:13:76:b3:73:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Oct 20 01:45:41 2025 GMT Not After : Oct 23 09:46:41 2025 GMT Subject: CN=3968A7FE5B2A3E2236A635C07DD4DD56385A49E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:78:f4:76:87:f5:1a:6b:c0:79:ff:75:9b: ac:47:4d:f1:9c:33:98:2d:a1:f5:cd:a2:bc:32:f9: 33:f5:26:79:77:08:48:61:af:60:ff:e2:ba:15:b9: 33:00:f1:a4:e4:f4:f1:00:38:c3:f7:b4:76:ca:28: 65:44:f1:0d:61:2e:c4:2e:3e:ad:35:b6:4c:03:6e: 27:28:94:fa:cf:ae:6c:24:0a:2d:5e:f5:b3:e2:b3: 40:c8:b5:2e:74:37:d0:3c:48:fd:d7:1c:24:47:75: 96:73:9a:b5:ea:c9:63:ce:40:b4:f5:39:25:1a:86: d7:24:9d:72:39:4e:c2:d8:d5:3f:f0:14:59:b4:ba: 1e:9d:fc:50:60:cd:df:2b:90:68:74:f3:70:fe:47: 6f:af:f7:82:8b:05:e3:2c:e9:ca:bf:98:c7:f4:c2: 71:83:f9:71:b2:96:be:67:87:56:5b:57:47:36:56: c1:06:31:64:42:f0:6b:8a:c1:b5:d3:fc:5c:1f:7b: 8c:1e:08:83:5d:42:67:9a:95:84:88:ef:03:0c:90: e0:b4:91:00:b0:3e:e4:d9:0d:61:1c:96:43:0f:b6: 3f:91:0b:fe:af:7a:d4:e7:f0:a8:97:2a:da:0a:0e: 04:17:9f:ba:18:83:81:d3:c2:92:44:b7:bb:aa:7b: fc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:68:A7:FE:5B:2A:3E:22:36:A6:35:C0:7D:D4:DD:56:38:5A:49:E2 X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5b:f5:19:6e:21:39:8c:ff:52:d0:74:3a:61:3a:c7:43:39: 1f:b4:e8:59:3e:be:7a:46:de:8d:a8:81:5e:17:79:08:de:1b: a1:e8:94:8d:10:1f:35:57:d9:cf:35:5f:33:ab:4f:9f:a2:08: 50:db:8a:7f:31:bd:89:13:a3:c8:73:52:a1:d0:b4:d7:4e:c8: ba:5c:8f:e7:2a:f3:4d:b2:75:e7:b3:49:52:ee:90:7d:4f:6a: f0:98:13:b4:cf:dd:79:9f:9c:38:27:0a:17:7c:85:a1:8a:95: fa:d3:d7:57:df:4e:8b:b1:fc:73:22:08:b4:ad:59:82:69:1f: 42:34:e4:cd:19:39:a2:a8:00:45:cc:78:3c:06:50:19:40:20: 17:38:bf:09:4d:3d:e6:b9:b1:bb:45:55:67:c6:3d:72:d1:be: ea:3d:94:6a:80:30:a0:98:16:c5:74:de:fa:94:19:09:f8:5f: b1:63:b7:92:39:cc:9b:a7:6d:19:27:e0:16:dc:28:56:c0:46: ab:a5:f4:29:d7:78:50:9c:e4:a7:e9:68:ae:75:26:6f:a8:b5: 6e:bb:75:82:42:bf:c0:ce:bf:c7:ad:55:ad:79:47:b8:1c:57: 97:9f:1f:dd:22:e1:c9:8f:91:0b:12:a9:63:8f:a9:ce:82:c0: 1d:2f:34:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/KWcTxAiGW0eeYlIwwDE3azc1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNTEwMjAwMTQ1NDFaFw0yNTEwMjMwOTQ2NDFaMDMxMTAvBgNV BAMTKDM5NjhBN0ZFNUIyQTNFMjIzNkE2MzVDMDdERDRERDU2Mzg1QTQ5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMnj0dof1GmvAef91m6xHTfGc M5gtofXNorwy+TP1Jnl3CEhhr2D/4roVuTMA8aTk9PEAOMP3tHbKKGVE8Q1hLsQu Pq01tkwDbicolPrPrmwkCi1e9bPis0DItS50N9A8SP3XHCRHdZZzmrXqyWPOQLT1 OSUahtcknXI5TsLY1T/wFFm0uh6d/FBgzd8rkGh083D+R2+v94KLBeMs6cq/mMf0 wnGD+XGylr5nh1ZbV0c2VsEGMWRC8GuKwbXT/Fwfe4weCINdQmealYSI7wMMkOC0 kQCwPuTZDWEclkMPtj+RC/6vetTn8KiXKtoKDgQXn7oYg4HTwpJEt7uqe/z3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOWin/lsqPiI2pjXAfdTdVjhaSeIwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNb9RluITmM/1LQdDphOsdDOR+06Fk+vnpG 3o2ogV4XeQjeG6HolI0QHzVX2c81XzOrT5+iCFDbin8xvYkTo8hzUqHQtNdOyLpc j+cq802ydeezSVLukH1PavCYE7TP3XmfnDgnChd8haGKlfrT11ffToux/HMiCLSt WYJpH0I05M0ZOaKoAEXMeDwGUBlAIBc4vwlNPea5sbtFVWfGPXLRvuo9lGqAMKCY FsV03vqUGQn4X7Fjt5I5zJunbRkn4BbcKFbARqul9CnXeFCc5KfpaK51Jm+otW67 dYJCv8DOv8etVa15R7gcV5efH90i4cmPkQsSqWOPqc6CwB0vNDM= -----END CERTIFICATE-----Generated at Mon Oct 20 21:30:58 2025 by rpki-client