$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: xTb6pfGSZ5kCwrZvqI36hu/Ksz2CvwoN6vfGhM1uvjo= Subject key identifier: DB:08:38:89:28:C0:41:7D:32:25:F4:56:FB:27:12:03:92:43:8C:5E Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 3EEE5CBC96AE326DF85699FED754D1721B79D3C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 020B Signing time: Thu 21 Aug 2025 08:12:08 +0000 Manifest this update: Thu 21 Aug 2025 08:07:08 +0000 Manifest next update: Sun 24 Aug 2025 19:10:08 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) 2: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: HSSZGYveRWQtLMpA9HtOV4cv1PSpZrZpOgxSjnrhGwE=) 3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ee:5c:bc:96:ae:32:6d:f8:56:99:fe:d7:54:d1:72:1b:79:d3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Aug 21 08:07:08 2025 GMT Not After : Aug 24 19:10:08 2025 GMT Subject: CN=DB08388928C0417D3225F456FB27120392438C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:34:60:03:ad:8a:12:3e:7a:d1:f6:ca:9f: e3:b0:c6:19:ad:27:27:b8:46:09:93:27:f1:db:1e: 70:29:0b:a8:fb:a2:79:81:19:ec:80:c7:aa:34:19: 17:86:d2:45:8a:ea:64:a6:53:b8:d7:0c:72:df:a8: c4:86:ea:3a:8a:24:31:96:d3:8d:86:2b:fd:4c:75: 90:b5:75:14:fe:cf:4d:23:45:a9:04:2d:89:e7:ac: 8f:37:00:52:51:c1:57:72:1e:b9:f5:a7:70:c8:08: 8e:0a:96:c3:f0:1a:19:5c:68:bb:c6:e2:76:11:ec: fb:9d:c5:87:87:2b:32:e0:40:fa:d6:9d:8c:d1:55: c5:06:f2:8c:2d:06:48:4e:b1:01:b8:c5:bd:fd:3a: c4:46:9e:a6:f9:00:82:78:92:cd:99:32:50:2c:d4: f4:64:01:37:fc:2f:d8:56:67:e7:15:1b:a8:b9:39: 41:69:94:5d:92:66:27:20:fa:cb:b3:fe:a3:2b:77: 31:f2:10:cf:3d:3a:9b:1e:a0:95:17:5a:2c:29:b9: 92:62:63:b1:4b:f6:73:08:95:7a:7a:66:2e:11:25: 5f:c4:a4:bd:19:a3:30:13:41:61:84:a4:7d:14:94: 17:f5:44:b9:eb:f9:99:88:3e:a9:81:29:c3:d8:33: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:08:38:89:28:C0:41:7D:32:25:F4:56:FB:27:12:03:92:43:8C:5E X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:31:0e:43:88:40:b3:89:39:e5:48:21:9a:3e:59:e8:13:69: 96:9f:f5:31:0b:16:e2:f4:94:08:d2:e9:31:36:51:c4:39:33: fc:f5:c8:0d:69:3f:6d:e2:6e:ff:47:11:b5:0a:22:66:5a:b4: 19:3a:cf:12:2d:fd:b9:5d:80:88:b1:3d:9c:16:98:5c:dd:0a: 87:c5:0f:fe:be:da:0c:b2:26:82:90:1c:e4:e6:66:05:7b:27: e3:88:4d:4f:ff:03:21:2e:50:b0:cc:d4:46:05:71:40:72:3b: 56:84:ee:15:f9:76:2d:66:00:17:f8:91:d1:30:80:33:12:a6: a6:4b:10:48:73:a2:27:6e:6f:b8:1d:cb:1e:ee:39:65:02:c6: 87:59:0c:af:47:49:37:26:57:4e:78:ca:91:6f:a7:b7:cf:6f: 9a:21:7e:ec:bf:95:fd:a2:e2:9b:87:3f:d0:56:f3:a5:f7:3d: b2:5c:3a:6f:1c:f4:47:b0:ad:4b:41:e5:27:67:84:9f:59:69: dc:58:c2:53:cf:5c:d0:70:dd:dd:1c:81:cd:18:cf:37:84:63: e3:b2:ca:5a:f6:5d:85:d2:09:b3:c9:5e:5e:49:9c:48:a3:48: 31:9d:91:23:f1:bf:8c:25:13:4c:92:7c:ae:84:1e:ba:f3:8c: 07:e7:75:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPu5cvJauMm34Vpn+11TRcht508MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTA4MjEwODA3MDhaFw0yNTA4MjQxOTEwMDhaMDMxMTAvBgNV BAMTKERCMDgzODg5MjhDMDQxN0QzMjI1RjQ1NkZCMjcxMjAzOTI0MzhDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHjRgA62KEj560fbKn+Owxhmt Jye4RgmTJ/HbHnApC6j7onmBGeyAx6o0GReG0kWK6mSmU7jXDHLfqMSG6jqKJDGW 042GK/1MdZC1dRT+z00jRakELYnnrI83AFJRwVdyHrn1p3DICI4KlsPwGhlcaLvG 4nYR7PudxYeHKzLgQPrWnYzRVcUG8owtBkhOsQG4xb39OsRGnqb5AIJ4ks2ZMlAs 1PRkATf8L9hWZ+cVG6i5OUFplF2SZicg+suz/qMrdzHyEM89OpseoJUXWiwpuZJi Y7FL9nMIlXp6Zi4RJV/EpL0ZozATQWGEpH0UlBf1RLnr+ZmIPqmBKcPYM4PxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2wg4iSjAQX0yJfRW+ycSA5JDjF4wHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwxDkOIQLOJOeVIIZo+WegTaZaf9TELFuL0 lAjS6TE2UcQ5M/z1yA1pP23ibv9HEbUKImZatBk6zxIt/bldgIixPZwWmFzdCofF D/6+2gyyJoKQHOTmZgV7J+OITU//AyEuULDM1EYFcUByO1aE7hX5di1mABf4kdEw gDMSpqZLEEhzoidub7gdyx7uOWUCxodZDK9HSTcmV054ypFvp7fPb5ohfuy/lf2i 4puHP9BW86X3PbJcOm8c9EewrUtB5SdnhJ9ZadxYwlPPXNBw3d0cgc0YzzeEY+Oy ylr2XYXSCbPJXl5JnEijSDGdkSPxv4wlE0ySfK6EHrrzjAfndYg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:40 2025 by rpki-client