$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: Kvwdvgt2ErES2h7t1W4pzfnHrk6ZklC8VtNJOyXx28Q= Subject key identifier: CC:CC:84:AF:FB:73:66:91:02:20:CE:71:E5:77:FF:39:0B:4A:86:F5 Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 10B6A6FD8F25A77AB672C12608937020E0D8B2DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 052C Signing time: Mon 03 Nov 2025 06:01:01 +0000 Manifest this update: Mon 03 Nov 2025 05:56:01 +0000 Manifest next update: Thu 06 Nov 2025 09:54:01 +0000 Files and hashes: 1: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: dZSB/gSxOY7UKqB6f6AoUZuRdwpTE/RXX5o4gj8yNrA=) 2: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: B9YgdbWic7qXvAvHz1n/3UtrpjolL03glGipzRrFEzY=) 3: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: yEGsip4yrsjX/xF8wpQFkxv47Dg+vEjh+dm+VSB+O0I=) 4: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: f1EdJawAFE33t1rxrdKPcs3d9VEItcNJb2cJ7vIPk2M=) 5: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: cmv59nNsRTRKeMV0c4HuiujTHOVfbugS8maMc0aBwq0=) 6: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=) 7: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: 3PZFIN0jiG1liVNOYS5bc8JkLCWSH93e9B5ZRAydDG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b6:a6:fd:8f:25:a7:7a:b6:72:c1:26:08:93:70:20:e0:d8:b2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Nov 3 05:56:01 2025 GMT Not After : Nov 6 09:54:01 2025 GMT Subject: CN=CCCC84AFFB7366910220CE71E577FF390B4A86F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:e5:d8:81:43:fe:ec:5b:ef:5a:36:99:f4: 7f:b5:2d:48:bc:d4:a7:eb:4d:24:ef:a9:fc:ba:f4: 1d:e0:8f:77:c6:53:03:30:4f:74:f1:53:14:43:de: 07:97:7d:60:6b:9f:39:19:3b:b7:bb:41:17:c1:e6: 0e:cf:49:0a:df:af:df:9f:bb:e0:3e:f8:47:1b:2b: af:36:5f:f0:96:61:f3:f7:d8:b5:f6:90:48:5a:58: d9:08:8a:04:7d:e8:e9:f2:72:3a:49:af:91:0b:21: 73:67:db:ba:a8:32:20:3a:cf:42:d6:d6:a3:76:9f: 28:a8:f8:3e:3f:63:78:63:95:a9:56:01:28:69:50: 41:6b:9d:4b:29:8d:44:b4:45:ae:af:52:f4:25:29: 49:d2:bb:5b:dc:fd:be:31:d2:61:c0:e2:d9:29:ca: 08:a5:f6:10:1d:c6:ef:d4:00:c9:2b:af:74:6a:58: 6d:4e:bc:a0:bd:1d:14:17:a2:3b:90:6b:aa:d0:45: bc:26:f6:bb:cb:ae:8e:e1:8d:74:a2:8d:8d:d5:bb: 4c:b7:2b:0d:f8:1e:a1:90:6b:0f:a6:31:11:0a:b7: f6:86:c7:3f:fd:cf:40:f1:7f:16:a4:b3:02:a1:4e: 80:6e:6f:db:8b:2d:44:9e:46:61:d5:26:e0:43:d9: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CC:84:AF:FB:73:66:91:02:20:CE:71:E5:77:FF:39:0B:4A:86:F5 X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:00:b1:75:8b:ce:30:ab:d6:50:fb:18:73:23:55:26:b0:96: 59:2d:dd:32:35:48:7e:17:db:22:7c:cb:17:2f:b1:b4:ac:35: 10:f1:38:2e:ab:05:98:16:a7:7e:2e:cc:e0:14:e5:66:a6:29: 8d:a6:f1:c1:86:cc:72:24:a0:bc:67:38:09:aa:d7:b5:b8:b9: 8f:ea:be:ce:a8:08:a9:4b:9e:8f:5a:5e:95:85:88:e8:1b:8b: e9:e3:c7:84:12:93:37:fb:03:8a:6f:d1:54:d5:cd:9f:e4:55: f4:b0:2d:c8:c5:0b:6f:e4:e1:77:fb:8f:25:a5:d1:b3:cb:e8: 57:2a:a0:86:d9:8b:3e:78:1d:3b:90:f6:4e:c7:f4:b5:fc:0c: 26:f9:99:09:04:ba:6a:8f:41:13:80:00:9f:ad:8b:d2:9e:06: ab:6c:02:14:89:ee:da:49:65:aa:76:91:e5:9a:df:f2:dd:27: c6:f6:47:ff:c3:93:b0:4f:5f:02:1c:f3:d0:03:2e:15:83:3a: a0:8c:49:d5:1c:b7:ae:e1:0c:09:8d:91:e3:91:6a:1e:2b:f6: 6d:00:17:1f:bc:bc:33:07:97:f5:5b:49:02:b1:9c:e7:e6:06: 7e:70:8c:2c:86:df:97:5d:db:4f:35:67:8e:50:cb:63:b6:d9: 1a:91:b0:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELam/Y8lp3q2csEmCJNwIODYstwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNTExMDMwNTU2MDFaFw0yNTExMDYwOTU0MDFaMDMxMTAvBgNV BAMTKENDQ0M4NEFGRkI3MzY2OTEwMjIwQ0U3MUU1NzdGRjM5MEI0QTg2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tOXYgUP+7FvvWjaZ9H+1LUi8 1KfrTSTvqfy69B3gj3fGUwMwT3TxUxRD3geXfWBrnzkZO7e7QRfB5g7PSQrfr9+f u+A++EcbK682X/CWYfP32LX2kEhaWNkIigR96OnycjpJr5ELIXNn27qoMiA6z0LW 1qN2nyio+D4/Y3hjlalWAShpUEFrnUspjUS0Ra6vUvQlKUnSu1vc/b4x0mHA4tkp ygil9hAdxu/UAMkrr3RqWG1OvKC9HRQXojuQa6rQRbwm9rvLro7hjXSijY3Vu0y3 Kw34HqGQaw+mMREKt/aGxz/9z0DxfxakswKhToBub9uLLUSeRmHVJuBD2Sd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMyEr/tzZpECIM5x5Xf/OQtKhvUwHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMAsXWLzjCr1lD7GHMjVSawllkt3TI1SH4X 2yJ8yxcvsbSsNRDxOC6rBZgWp34uzOAU5WamKY2m8cGGzHIkoLxnOAmq17W4uY/q vs6oCKlLno9aXpWFiOgbi+njx4QSkzf7A4pv0VTVzZ/kVfSwLcjFC2/k4Xf7jyWl 0bPL6FcqoIbZiz54HTuQ9k7H9LX8DCb5mQkEumqPQROAAJ+ti9KeBqtsAhSJ7tpJ Zap2keWa3/LdJ8b2R//Dk7BPXwIc89ADLhWDOqCMSdUct67hDAmNkeORah4r9m0A Fx+8vDMHl/VbSQKxnOfmBn5wjCyG35dd2081Z45Qy2O22RqRsMw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:15:15 2025 by rpki-client