$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: agLg+X59bApMEwGc/fYo7e3l/B6E8gbNanPOQQMSNRI= Subject key identifier: 23:EA:5B:D4:E9:A8:BF:00:20:7E:47:05:2C:8F:EC:1A:F4:5E:7C:55 Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 493C69460FF5DCA8DA5DB479CF932C7503E0B29A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 01DF Signing time: Mon 03 Nov 2025 07:30:41 +0000 Manifest this update: Mon 03 Nov 2025 07:25:41 +0000 Manifest next update: Thu 06 Nov 2025 12:52:41 +0000 Files and hashes: 1: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: lWkG33XE4zdvIeOuXsrlt0FE1mrysgJVc00obk1LMNA=) 2: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: cVFaX5vsSnlCiBXiYi7VFBsU8ifDtbmqTWAW0Jfdf/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3c:69:46:0f:f5:dc:a8:da:5d:b4:79:cf:93:2c:75:03:e0:b2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Nov 3 07:25:41 2025 GMT Not After : Nov 6 12:52:41 2025 GMT Subject: CN=23EA5BD4E9A8BF00207E47052C8FEC1AF45E7C55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:b3:c6:2b:c8:bc:82:84:c6:51:e1:bd:24: 69:59:53:00:77:f9:50:88:6d:e5:64:a9:e2:36:08: 2a:5c:68:f9:c0:9d:24:2e:1e:e7:11:fa:6b:fa:43: ca:9f:8e:58:30:f4:d6:0d:e0:b0:bf:aa:37:f7:b4: 7a:21:52:6b:6d:5e:64:b0:29:56:3b:56:07:02:56: 46:e5:ed:4a:b9:98:e1:18:f2:c1:d8:41:4e:ac:63: 3a:ac:62:44:f5:a9:25:84:34:e9:97:d8:81:13:4f: a4:52:e0:27:ef:34:de:76:bb:f6:3c:eb:12:7c:4f: b4:ab:16:82:1a:de:fc:ca:a2:ea:90:27:51:c1:c7: 07:3f:1b:2e:1f:cd:61:06:cf:e8:47:93:e9:20:31: ba:95:e3:33:8b:41:90:78:fd:4d:c3:80:eb:38:2d: 80:9e:45:d4:7a:7a:cc:2e:89:ae:81:28:8e:2b:14: 2c:f3:da:3b:2d:44:81:33:95:67:a6:5b:17:0c:c6: 49:2f:32:c6:74:e8:4a:26:3d:72:73:cf:2b:c7:67: 27:5d:e1:9f:70:11:25:0e:26:fb:85:93:83:1f:c0: c0:65:1c:1f:38:9d:88:0e:5c:b1:2d:28:d2:6b:63: 67:bb:49:03:4a:c1:62:05:ea:57:81:dd:d9:15:15: fd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EA:5B:D4:E9:A8:BF:00:20:7E:47:05:2C:8F:EC:1A:F4:5E:7C:55 X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:59:8d:02:47:aa:7c:ac:54:bb:64:99:15:6b:ab:ed:be:5d: f2:3a:36:4d:ac:56:4d:ed:0f:ca:51:70:e9:7e:6e:86:0a:79: e8:5b:50:e9:a1:d6:ec:14:db:35:1a:14:7a:40:10:fc:71:dd: 5b:96:01:cf:6a:2a:54:4c:44:79:fe:72:b9:08:dc:df:6f:ad: 2e:69:31:ca:d4:6c:ac:8a:e1:d5:e8:41:bd:d5:fb:98:eb:0b: 0b:a6:c4:2f:88:75:50:0a:fd:77:0a:1b:9b:7a:a7:7b:e1:48: cf:77:f0:e3:98:2f:29:1a:ca:be:49:cb:03:b1:82:16:16:52: 34:3c:cd:0c:ce:8f:3e:7c:53:bf:bb:4f:47:04:91:c2:90:b3: 1d:78:75:0d:7f:da:06:73:61:93:1b:e7:52:e8:6a:42:11:37: c6:67:33:44:64:b9:4b:fe:0c:1d:ac:95:19:55:3e:a7:f9:fa: ee:88:f8:c4:9f:fa:3f:96:5b:ec:30:c8:e6:ea:9d:59:e5:ae: 2e:4a:18:59:9f:ba:d4:83:a1:21:84:2b:c3:cc:ce:2c:1b:f3: df:95:99:2d:01:12:d3:64:5b:a6:4a:9c:0f:c1:11:7c:02:56: de:65:d6:f5:d4:3c:4f:16:79:93:bb:da:0a:8a:a0:bd:b1:32: ca:f9:33:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTxpRg/13KjaXbR5z5MsdQPgspowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNTExMDMwNzI1NDFaFw0yNTExMDYxMjUyNDFaMDMxMTAvBgNV BAMTKDIzRUE1QkQ0RTlBOEJGMDAyMDdFNDcwNTJDOEZFQzFBRjQ1RTdDNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88LPGK8i8goTGUeG9JGlZUwB3 +VCIbeVkqeI2CCpcaPnAnSQuHucR+mv6Q8qfjlgw9NYN4LC/qjf3tHohUmttXmSw KVY7VgcCVkbl7Uq5mOEY8sHYQU6sYzqsYkT1qSWENOmX2IETT6RS4CfvNN52u/Y8 6xJ8T7SrFoIa3vzKouqQJ1HBxwc/Gy4fzWEGz+hHk+kgMbqV4zOLQZB4/U3DgOs4 LYCeRdR6eswuia6BKI4rFCzz2jstRIEzlWemWxcMxkkvMsZ06EomPXJzzyvHZydd 4Z9wESUOJvuFk4MfwMBlHB84nYgOXLEtKNJrY2e7SQNKwWIF6leB3dkVFf03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI+pb1OmovwAgfkcFLI/sGvRefFUwHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRZjQJHqnysVLtkmRVrq+2+XfI6Nk2sVk3t D8pRcOl+boYKeehbUOmh1uwU2zUaFHpAEPxx3VuWAc9qKlRMRHn+crkI3N9vrS5p McrUbKyK4dXoQb3V+5jrCwumxC+IdVAK/XcKG5t6p3vhSM938OOYLykayr5JywOx ghYWUjQ8zQzOjz58U7+7T0cEkcKQsx14dQ1/2gZzYZMb51LoakIRN8ZnM0RkuUv+ DB2slRlVPqf5+u6I+MSf+j+WW+wwyObqnVnlri5KGFmfutSDoSGEK8PMziwb89+V mS0BEtNkW6ZKnA/BEXwCVt5l1vXUPE8WeZO72gqKoL2xMsr5M4Q= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:40 2025 by rpki-client