$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: hjuG/cb0WnWhRyR78cQq5EiiVC07eQ5ZXBK5mFFV3tA= Subject key identifier: C2:7B:C7:17:29:10:15:B1:49:02:A8:31:57:A2:BC:66:43:B5:4A:7D Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 16A4AD53537411094918C3AF724ABDD56621E906 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 0500 Signing time: Wed 06 Aug 2025 11:21:00 +0000 Manifest this update: Wed 06 Aug 2025 11:16:00 +0000 Manifest next update: Sat 09 Aug 2025 22:26:00 +0000 Files and hashes: 1: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Oi+v4vSiTSM9zUjltxmu968dUNXdnYr8A7jzZ4z/bOI=) 2: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: HE2gVG3kARfrqp6ZjPI/R9UooKh3E35tjV3Jfxrhyuk=) 3: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a4:ad:53:53:74:11:09:49:18:c3:af:72:4a:bd:d5:66:21:e9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Aug 6 11:16:00 2025 GMT Not After : Aug 9 22:26:00 2025 GMT Subject: CN=C27BC717291015B14902A83157A2BC6643B54A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:02:f0:37:9b:06:99:31:ba:5e:dd:e8:02:d5: cf:66:aa:bb:7f:1e:56:0b:ed:7d:4f:29:a9:fa:6d: 59:b0:5e:67:52:90:0a:22:08:de:6a:b1:bd:2b:fb: f9:a2:47:1d:12:0d:4a:3c:2b:27:b2:82:38:bf:7a: ed:f3:87:3c:ae:98:63:77:2b:f2:ee:ac:71:6a:a5: 91:c1:ed:64:15:2c:a2:f3:88:a8:82:e5:31:a9:de: c9:e9:d4:1d:b4:9a:ad:6c:ef:0b:51:5d:f2:f7:75: b3:75:e5:00:e2:af:ee:9e:04:8f:d3:6c:92:ff:d6: b7:73:13:b8:87:1a:49:5f:78:ed:d8:26:ec:bf:8c: 25:ea:6a:4a:a7:2e:ee:15:da:99:1d:98:a3:c3:1e: cc:60:1b:a2:85:56:51:d4:c2:35:fd:f9:80:b6:ee: 41:1c:96:06:41:0c:b4:20:d9:73:c0:e0:8c:90:da: 57:a4:32:d0:6d:8f:94:d8:e8:87:e3:1e:67:21:d1: 02:41:e4:e2:eb:15:17:42:88:c9:36:1a:18:75:ef: d3:6a:9c:f4:7a:58:98:ff:0a:f1:e1:e3:b6:cd:20: 6f:4c:ae:3a:35:8b:a8:64:fa:63:9f:fb:c6:4f:da: 69:03:1d:ac:b0:b3:0e:36:09:c9:02:95:f9:47:b5: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7B:C7:17:29:10:15:B1:49:02:A8:31:57:A2:BC:66:43:B5:4A:7D X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:44:b7:68:3b:91:a1:71:ee:e3:e5:3e:a8:15:d0:9b:c9:97: 4d:38:1e:cd:68:e0:bd:46:61:aa:71:a2:da:2f:86:2d:54:1c: 17:05:a9:40:fc:ff:79:fd:31:a4:98:70:e7:a8:6a:6b:e8:4a: 65:08:6a:bd:51:f0:a0:0d:48:38:2f:b8:57:8a:72:70:7f:d4: 07:9c:d1:03:c3:e3:dd:e1:47:3e:8d:6a:6d:10:a9:c2:77:aa: 62:28:10:31:f0:e8:9d:cd:ac:60:49:bf:92:54:a7:d5:44:a7: 24:fc:8b:c0:e6:d4:bf:a1:42:f2:84:c2:06:8d:d6:79:55:6f: 76:08:e4:f4:81:28:b6:94:bb:68:15:de:51:8c:67:fb:de:a8: e2:e0:c0:d2:2c:c3:0c:d6:49:21:0b:94:ae:9a:b5:d2:96:ed: 97:32:a5:31:0a:71:c6:76:9d:a6:0c:38:61:e6:de:73:de:0d: 36:6c:2b:90:17:6e:87:69:62:8a:d6:61:9d:ce:ce:d7:b9:13: c4:cf:fa:28:f3:83:06:33:ef:2d:c3:65:4b:65:f2:12:3b:a2: a2:6b:e4:2f:de:86:31:bf:a9:4e:fb:f9:7f:31:b8:fa:00:98: 5a:d0:54:3f:2d:ef:0e:fe:da:6f:85:6b:f6:8e:6f:15:06:58: 63:ef:ed:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqStU1N0EQlJGMOvckq91WYh6QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNTA4MDYxMTE2MDBaFw0yNTA4MDkyMjI2MDBaMDMxMTAvBgNV BAMTKEMyN0JDNzE3MjkxMDE1QjE0OTAyQTgzMTU3QTJCQzY2NDNCNTRBN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaAvA3mwaZMbpe3egC1c9mqrt/ HlYL7X1PKan6bVmwXmdSkAoiCN5qsb0r+/miRx0SDUo8Kyeygji/eu3zhzyumGN3 K/LurHFqpZHB7WQVLKLziKiC5TGp3snp1B20mq1s7wtRXfL3dbN15QDir+6eBI/T bJL/1rdzE7iHGklfeO3YJuy/jCXqakqnLu4V2pkdmKPDHsxgG6KFVlHUwjX9+YC2 7kEclgZBDLQg2XPA4IyQ2lekMtBtj5TY6IfjHmch0QJB5OLrFRdCiMk2Ghh179Nq nPR6WJj/CvHh47bNIG9Mrjo1i6hk+mOf+8ZP2mkDHaywsw42CckClflHtZvxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwnvHFykQFbFJAqgxV6K8ZkO1Sn0wHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxEt2g7kaFx7uPlPqgV0JvJl004Hs1o4L1G Yapxotovhi1UHBcFqUD8/3n9MaSYcOeoamvoSmUIar1R8KANSDgvuFeKcnB/1Aec 0QPD493hRz6Nam0QqcJ3qmIoEDHw6J3NrGBJv5JUp9VEpyT8i8Dm1L+hQvKEwgaN 1nlVb3YI5PSBKLaUu2gV3lGMZ/veqOLgwNIswwzWSSELlK6atdKW7ZcypTEKccZ2 naYMOGHm3nPeDTZsK5AXbodpYorWYZ3Ozte5E8TP+ijzgwYz7y3DZUtl8hI7oqJr 5C/ehjG/qU77+X8xuPoAmFrQVD8t7w7+2m+Fa/aObxUGWGPv7TA= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:14 2025 by rpki-client