$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json) Hash identifier: 7gFsOgScHW0MWt429yVWKcQPjJiJczF82mymQiOuBl0= Subject key identifier: CB:77:F7:9B:85:F3:F1:8B:F1:E7:AE:A5:33:47:20:1F:AE:A9:D0:10 Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 60C16A64A38474A2BB53BF8FB7225A44E1A93DFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft Manifest number: 0198 Signing time: Tue 05 Aug 2025 04:51:39 +0000 Manifest this update: Tue 05 Aug 2025 04:46:39 +0000 Manifest next update: Fri 08 Aug 2025 12:35:39 +0000 Files and hashes: 1: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: g3O85uHYQ5H3CYzPQLQFqdssgPM5rhi5A/BzEIRFoas=) 2: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: OpJbnZsozA8vK737JyX7nSnp3Ca2ktYCY/HVC8qjU1s=) 3: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 9QXIOR5p9E/ECayeIb5+Pzn8r00Xjm0tMLmC+/Pg7aE=) 4: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: vGG0asOC2Xl7EswH7KA3jLAIJRd+GCTUKsA4WpfXyjU=) 5: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: wnZO7kQR9JZHcXEpTkJ6URQ49yRUAKEaIg5OVxBtq9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c1:6a:64:a3:84:74:a2:bb:53:bf:8f:b7:22:5a:44:e1:a9:3d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Aug 5 04:46:39 2025 GMT Not After : Aug 8 12:35:39 2025 GMT Subject: CN=CB77F79B85F3F18BF1E7AEA53347201FAEA9D010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:c7:57:89:8f:48:15:70:b8:50:ef:c7:6c: 0f:27:c3:44:6b:43:bb:e9:e9:c3:c9:8a:02:b0:8e: 79:d5:c8:19:0a:73:b2:55:6d:64:b3:ae:d9:62:c8: 62:e5:98:cc:d6:60:91:47:f0:35:ac:fb:1e:44:d1: 1d:8f:1e:69:8b:54:f1:8c:d8:eb:b9:3a:00:ab:35: db:aa:f6:70:81:60:34:17:db:7e:7a:7d:e5:94:d9: 83:a5:54:ae:63:f6:54:50:3f:c1:68:7f:21:39:91: ef:71:52:68:2e:c3:e0:f5:ad:bc:66:ce:5c:d7:61: fa:91:20:23:a6:dd:d3:7f:c8:ba:66:2d:06:5b:86: fa:b7:c2:b6:4f:0c:c5:96:b9:df:38:87:9f:49:f0: f1:1e:b7:99:4a:3e:17:ae:4c:9c:bf:81:c4:9b:30: ba:48:89:d0:83:18:42:4d:a6:59:35:8f:7c:ab:06: 18:e8:15:25:ca:55:bd:a9:15:8e:d8:54:d4:78:b9: 65:6e:1b:35:46:6c:03:13:3f:1e:9d:10:34:ab:b6: 48:30:2e:ff:9e:c1:06:a4:84:3b:7c:3e:45:09:50: 8e:35:56:b0:c1:cc:91:a3:2b:42:78:70:3e:70:07: bc:08:4b:c6:0a:33:73:5a:eb:03:59:65:05:9c:a1: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:77:F7:9B:85:F3:F1:8B:F1:E7:AE:A5:33:47:20:1F:AE:A9:D0:10 X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b6:5b:e5:04:20:ce:d7:7a:22:27:30:3c:c5:22:73:94:6d: 15:ec:78:eb:1a:da:7f:d4:fe:bb:13:98:5e:88:c7:d8:61:6f: 4a:1d:7a:bb:c1:ac:eb:42:ea:58:d1:6e:71:58:9b:79:34:21: a2:60:02:99:b9:74:79:e2:c1:ae:02:50:ee:c5:8c:09:7a:a0: 26:6f:9c:b4:66:70:d3:32:9b:50:c5:42:c2:fa:a5:c5:b9:8c: 11:bb:1a:58:11:b9:e7:f2:78:67:6d:3b:6e:97:f1:85:18:f2: 97:26:e5:f8:ca:3e:a0:19:d3:10:cf:a3:be:42:f8:2e:ef:d3: 75:99:ec:b4:77:eb:d5:b2:c4:c5:cc:78:83:4d:e8:04:e5:49: 59:13:af:44:e4:ca:f7:f2:50:ff:b8:f7:49:38:1c:a3:d1:a4: 08:91:39:df:ec:28:03:d0:31:54:38:c6:ff:a9:4b:87:2c:a0: ce:91:c2:71:74:7a:1e:66:e7:c0:4c:8e:1d:cc:0f:92:26:82: c6:92:88:7c:c1:02:bf:a9:32:04:63:62:00:31:90:7e:28:ee: cf:0e:00:62:da:9e:8a:a0:4f:87:da:b8:b4:80:6e:51:11:68: 96:80:99:d9:82:70:9b:ec:10:72:9e:51:6e:28:64:c7:1d:5a: 04:60:bc:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMFqZKOEdKK7U7+PtyJaROGpPfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNTA4MDUwNDQ2MzlaFw0yNTA4MDgxMjM1MzlaMDMxMTAvBgNV BAMTKENCNzdGNzlCODVGM0YxOEJGMUU3QUVBNTMzNDcyMDFGQUVBOUQwMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDcdXiY9IFXC4UO/HbA8nw0Rr Q7vp6cPJigKwjnnVyBkKc7JVbWSzrtliyGLlmMzWYJFH8DWs+x5E0R2PHmmLVPGM 2Ou5OgCrNduq9nCBYDQX2356feWU2YOlVK5j9lRQP8FofyE5ke9xUmguw+D1rbxm zlzXYfqRICOm3dN/yLpmLQZbhvq3wrZPDMWWud84h59J8PEet5lKPheuTJy/gcSb MLpIidCDGEJNplk1j3yrBhjoFSXKVb2pFY7YVNR4uWVuGzVGbAMTPx6dEDSrtkgw Lv+ewQakhDt8PkUJUI41VrDBzJGjK0J4cD5wB7wIS8YKM3Na6wNZZQWcoTjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy3f3m4Xz8Yvx566lM0cgH66p0BAwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIx MDM1RUVBQUI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEi2W+UEIM7XeiInMDzFInOUbRXseOsa2n/U /rsTmF6Ix9hhb0odervBrOtC6ljRbnFYm3k0IaJgApm5dHniwa4CUO7FjAl6oCZv nLRmcNMym1DFQsL6pcW5jBG7GlgRuefyeGdtO26X8YUY8pcm5fjKPqAZ0xDPo75C +C7v03WZ7LR369WyxMXMeINN6ATlSVkTr0TkyvfyUP+490k4HKPRpAiROd/sKAPQ MVQ4xv+pS4csoM6RwnF0eh5m58BMjh3MD5ImgsaSiHzBAr+pMgRjYgAxkH4o7s8O AGLanoqgT4fauLSAblERaJaAmdmCcJvsEHKeUW4oZMcdWgRgvD8= -----END CERTIFICATE-----Generated at Thu Aug 7 00:34:45 2025 by rpki-client