$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft (raw, json) Hash identifier: w4Ol2FmGVqMd+MS8sp1UhN6TO6+wNNsvoAckeleOcWY= Subject key identifier: DD:C2:AA:C2:73:55:72:DF:C3:82:B0:6E:BD:F8:8A:75:37:18:C6:B2 Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Certificate serial: 62A82C4370285D46E5EC76A1768C40BA76746B13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft Manifest number: 01FC Signing time: Mon 04 Aug 2025 18:31:58 +0000 Manifest this update: Mon 04 Aug 2025 18:26:58 +0000 Manifest next update: Fri 08 Aug 2025 05:12:58 +0000 Files and hashes: 1: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl (hash: P+2S6Lphi9XCg2ukrR41A5ZS/P1BPxyuZwfaCUfQN+A=) 2: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: Ykg6X7TmWGcN3xNxQzs8nCjH8QlPm6F3Uq9zQ4bEBTI=) 3: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: 51ekgtNLYDLFINvFYDj/N8stn5dpVipAbdc9vPbRQ7I=) 4: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: TsTDpWhEe0S4QbX7Nvx05CapjsmJk1el8Dy5qKfw9Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a8:2c:43:70:28:5d:46:e5:ec:76:a1:76:8c:40:ba:76:74:6b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Validity Not Before: Aug 4 18:26:58 2025 GMT Not After : Aug 8 05:12:58 2025 GMT Subject: CN=DDC2AAC2735572DFC382B06EBDF88A753718C6B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:49:10:91:8d:e4:91:cf:42:60:f5:2f:a8: 37:d0:1f:d7:07:4a:18:e3:23:09:75:f8:e8:9c:3f: c5:8f:3f:1e:e4:e2:86:49:07:f3:56:ec:f8:78:ba: dd:4f:3b:cd:c3:4b:17:f0:6e:9a:5d:00:3e:27:8a: 2f:11:53:e7:60:3b:11:24:33:f3:9b:cb:03:6f:e6: 0e:be:c2:0e:c8:ea:ad:36:90:50:54:7d:e8:1c:99: 13:25:94:35:ac:80:e3:e3:38:b8:32:08:37:48:f8: 80:09:a2:79:24:9f:61:38:c0:91:0f:d2:8f:9e:3a: f3:5c:6c:e1:af:ff:69:0e:d3:65:c3:7c:13:aa:ef: 91:de:45:69:1c:32:9f:91:a4:3f:62:2a:f4:70:c5: 19:9f:fb:1c:8f:55:85:94:3c:fd:03:3c:07:66:6e: 87:55:73:cd:c7:63:1f:13:21:ae:56:42:5c:f4:f4: b9:fe:2a:a9:99:e7:a0:2b:04:4c:cc:2d:5b:56:7d: 02:85:75:4a:9c:e4:4e:a8:ea:20:7f:28:ba:81:82: 58:66:0f:77:63:ce:19:63:b7:49:c3:07:49:d1:5a: 50:b0:21:10:e5:ef:8d:10:e2:cf:f9:fd:cc:ab:77: e2:c7:0b:3b:25:88:af:c2:b5:dc:22:70:19:d2:12: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C2:AA:C2:73:55:72:DF:C3:82:B0:6E:BD:F8:8A:75:37:18:C6:B2 X509v3 Authority Key Identifier: keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:74:6e:65:ec:3d:63:78:1f:7b:23:fd:ec:c6:10:96:94:09: e3:0f:af:39:92:a0:19:37:dd:ef:3e:dd:e6:c4:16:bc:ab:57: ea:5c:48:48:ad:43:14:51:7a:fc:d1:20:17:d8:b2:14:fb:37: 41:1c:ab:39:b2:d4:7d:dd:93:29:37:91:ca:32:fd:71:c3:a8: 9f:82:b7:f6:16:4a:d0:c3:29:22:1a:61:95:b3:bd:e6:e7:0e: 5f:c6:9a:94:96:de:aa:cb:28:5b:9a:8a:79:88:89:70:0f:66: e5:47:d7:15:bd:a4:91:33:52:30:e9:fe:64:4d:ec:6c:62:ea: ba:66:ee:e0:2c:53:31:db:75:9c:d1:cf:ce:df:7e:0c:46:7f: 69:ad:93:c0:54:ea:d8:b8:57:d5:78:ba:9a:82:74:2c:61:37: 21:31:9d:34:24:72:c6:98:e7:57:9c:e3:a8:ca:2d:9b:37:78: 5f:da:f2:37:d9:16:5f:12:4e:a3:81:ce:97:d2:d4:a3:b6:b0: ea:85:78:61:7c:2d:96:a6:64:33:1b:ca:a3:33:d1:a1:29:f7: 55:0d:e9:6b:ab:a5:f6:9e:14:bc:0f:26:1e:f7:c8:b9:71:34: f2:bf:54:fa:e6:6b:97:cf:5b:90:21:8c:36:80:df:9f:bf:92: 53:31:0f:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqgsQ3AoXUbl7HahdoxAunZ0axMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy MkNCREVFOTAeFw0yNTA4MDQxODI2NThaFw0yNTA4MDgwNTEyNThaMDMxMTAvBgNV BAMTKEREQzJBQUMyNzM1NTcyREZDMzgyQjA2RUJERjg4QTc1MzcxOEM2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4J0kQkY3kkc9CYPUvqDfQH9cH ShjjIwl1+OicP8WPPx7k4oZJB/NW7Ph4ut1PO83DSxfwbppdAD4nii8RU+dgOxEk M/ObywNv5g6+wg7I6q02kFBUfegcmRMllDWsgOPjOLgyCDdI+IAJonkkn2E4wJEP 0o+eOvNcbOGv/2kO02XDfBOq75HeRWkcMp+RpD9iKvRwxRmf+xyPVYWUPP0DPAdm bodVc83HYx8TIa5WQlz09Ln+KqmZ56ArBEzMLVtWfQKFdUqc5E6o6iB/KLqBglhm D3djzhljt0nDB0nRWlCwIRDl740Q4s/5/cyrd+LHCzsliK/CtdwicBnSEgJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3cKqwnNVct/DgrBuvfiKdTcYxrIwHwYDVR0j BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC REVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1 NzAyMkNCREVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACV0bmXsPWN4H3sj/ezGEJaUCeMPrzmSoBk3 3e8+3ebEFryrV+pcSEitQxRRevzRIBfYshT7N0Ecqzmy1H3dkyk3kcoy/XHDqJ+C t/YWStDDKSIaYZWzvebnDl/GmpSW3qrLKFuainmIiXAPZuVH1xW9pJEzUjDp/mRN 7Gxi6rpm7uAsUzHbdZzRz87ffgxGf2mtk8BU6ti4V9V4upqCdCxhNyExnTQkcsaY 51ec46jKLZs3eF/a8jfZFl8STqOBzpfS1KO2sOqFeGF8LZamZDMbyqMz0aEp91UN 6WurpfaeFLwPJh73yLlxNPK/VPrma5fPW5AhjDaA35+/klMxDxM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:37:40 2025 by rpki-client