$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft File: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json) Hash identifier: DRlpw5HJzcaSQPlT9OiUk1eV3wgN4TJFS8gZBaXwTdE= Subject key identifier: 66:54:C0:34:7F:CD:0D:B5:6A:DD:E8:32:EB:B5:C0:35:BD:4E:02:2D Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 296385DFD42EC8D4C8C75AA767D19B821E4FC457 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft Manifest number: 021E Signing time: Wed 06 Aug 2025 14:32:27 +0000 Manifest this update: Wed 06 Aug 2025 14:27:27 +0000 Manifest next update: Sat 09 Aug 2025 17:15:27 +0000 Files and hashes: 1: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: +2WLn8Po9xWSOtJ784Ftk/EogBdMMhgS50iHZ0BmO9w=) 2: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: fmU/gB/7itVGB2sFtyfrKlK+5/0j2F7s2JNU9ipGEtI=) 3: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: 74adhrSbVzuFjVRQo3T/YKEFIp0ssVu9vw6ZXWstTjg=) 4: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: E7Xvq+98P7calV+Tra/HI6VBncPkJLZ2WfRUwzVpBzQ=) 5: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: OXb58XdJvFeTkl1pb8qqXtG1NjsRZSztJ+uUatv4+8w=) 6: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: VDmzAE5nsSn3VcTtdUYB+JjYbBbEx+qEZDLzkKkFw30=) 7: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: lQ+fQzdjr0S1DLs1lSSCMj5N6c3fuO+jsggHmQtAADw=) 8: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: gQMVqNF5pbofU8fWwfLf24IOx5Rve68FRF/gYFgAFMM=) 9: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: iGn1V/gq7zu3cpw0mI8Bqv3oMJsgKj/I69u4ba5O7zE=) 10: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: YHuUg4uxFrthFFepE05C4PM9gH2UZAw5dOg3ZxdbMHs=) 11: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: FzI5GbnAo75yoelWpGp51ySqxG4wQ2wlQL4r6iiASgc=) 12: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64=) 13: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: aZ1nkOt0ZwL5bWsxMWDTHMMRjscg2q9LS9hs3Z383Ew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:63:85:df:d4:2e:c8:d4:c8:c7:5a:a7:67:d1:9b:82:1e:4f:c4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Aug 6 14:27:27 2025 GMT Not After : Aug 9 17:15:27 2025 GMT Subject: CN=6654C0347FCD0DB56ADDE832EBB5C035BD4E022D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:74:be:6d:52:cf:9c:fc:93:e5:63:eb:42: 28:30:0a:bf:d1:b7:16:1f:ae:d4:62:0a:52:4b:45: 23:2b:ef:d0:7a:f4:15:92:80:8a:d6:a4:db:d0:4a: 6b:d3:2e:d5:f5:79:8d:ab:ff:9d:81:a3:a3:68:f1: 82:59:2b:48:8e:a8:06:a5:4e:48:e8:39:c8:c0:87: a1:47:45:41:c9:e5:dd:d4:a4:03:c5:7b:22:fc:55: ca:b6:6f:64:09:0b:f5:ec:37:98:a9:7c:24:87:6b: a3:c5:b8:8a:06:b5:7b:99:5c:00:6d:0e:bd:d4:31: 13:a4:3d:6b:3f:57:01:b4:e9:7c:7f:d5:38:ab:e0: b1:76:02:3c:3c:55:dd:f6:8e:37:4f:96:38:95:28: 10:47:0d:8c:5e:ba:22:b1:69:e4:74:e7:40:85:76: 76:39:5a:f2:c6:b9:33:54:b4:34:f9:e9:95:39:33: ab:51:79:d7:6a:f7:bc:b5:e0:99:96:b3:60:88:d1: 0f:9b:1b:ce:99:4f:34:8a:24:92:e9:75:d7:c8:d1: 1e:ab:28:56:a0:b4:f1:18:5d:14:9b:24:70:f6:9c: 44:ff:bb:61:4e:98:92:99:46:b6:16:f4:07:dd:e2: d9:e8:e7:6d:8b:a8:91:e9:46:df:c4:29:ac:96:74: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:54:C0:34:7F:CD:0D:B5:6A:DD:E8:32:EB:B5:C0:35:BD:4E:02:2D X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:11:1c:ff:cb:a5:1b:1d:8e:ef:53:3f:b5:75:4a:79:93:ee: 39:24:b2:de:55:88:84:8b:e0:03:da:ec:b1:87:c2:8c:ec:2d: 2f:90:9a:6c:ca:cc:bb:48:24:ae:a5:14:b2:df:38:52:11:cd: cc:c5:88:33:3c:d7:03:17:63:7c:be:17:8b:ac:34:f1:06:2a: 2e:e5:e7:c9:8d:bc:3e:5f:4c:0e:47:dc:51:6e:0e:f2:65:e3: 44:48:6b:d3:07:00:98:84:d7:92:53:e8:90:cd:cd:21:2d:c0: a3:f3:ca:c4:67:d3:ec:cb:6c:fa:18:7a:45:46:ee:91:be:d1: 49:14:e7:e2:83:08:78:3b:c4:33:3b:4f:27:a7:23:5d:60:6d: 82:f8:79:3b:b7:74:ce:15:13:60:96:53:e1:4a:80:f7:35:fe: a2:94:51:91:db:d2:23:f9:31:62:9b:f7:24:a0:c8:35:29:8a: fd:e9:2e:24:84:04:d7:c3:3c:66:eb:b2:d8:5d:64:7e:cb:21: 26:96:1f:05:cd:e7:7f:e6:6a:85:35:21:26:1e:68:89:d0:90: 83:c6:4e:e6:7d:cc:4d:79:1b:66:81:b4:40:ff:3b:23:46:19: 2a:06:13:1c:73:16:da:05:29:46:b5:3b:af:67:47:24:34:91: f3:4d:1b:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWOF39QuyNTIx1qnZ9Gbgh5PxFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNTA4MDYxNDI3MjdaFw0yNTA4MDkxNzE1MjdaMDMxMTAvBgNV BAMTKDY2NTRDMDM0N0ZDRDBEQjU2QURERTgzMkVCQjVDMDM1QkQ0RTAyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTXS+bVLPnPyT5WPrQigwCr/R txYfrtRiClJLRSMr79B69BWSgIrWpNvQSmvTLtX1eY2r/52Bo6No8YJZK0iOqAal TkjoOcjAh6FHRUHJ5d3UpAPFeyL8Vcq2b2QJC/XsN5ipfCSHa6PFuIoGtXuZXABt Dr3UMROkPWs/VwG06Xx/1Tir4LF2Ajw8Vd32jjdPljiVKBBHDYxeuiKxaeR050CF dnY5WvLGuTNUtDT56ZU5M6tReddq97y14JmWs2CI0Q+bG86ZTzSKJJLpddfI0R6r KFagtPEYXRSbJHD2nET/u2FOmJKZRrYW9Afd4tno522LqJHpRt/EKayWdO8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZlTANH/NDbVq3egy67XANb1OAi0wHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm NTUtYjZiMTM0ZDlhYjEzLzAvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTRE MzU3QUM2NkE4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsRHP/LpRsdju9TP7V1SnmT7jkkst5ViISL 4APa7LGHwozsLS+QmmzKzLtIJK6lFLLfOFIRzczFiDM81wMXY3y+F4usNPEGKi7l 58mNvD5fTA5H3FFuDvJl40RIa9MHAJiE15JT6JDNzSEtwKPzysRn0+zLbPoYekVG 7pG+0UkU5+KDCHg7xDM7TyenI11gbYL4eTu3dM4VE2CWU+FKgPc1/qKUUZHb0iP5 MWKb9ySgyDUpiv3pLiSEBNfDPGbrsthdZH7LISaWHwXN53/maoU1ISYeaInQkIPG TuZ9zE15G2aBtED/OyNGGSoGExxzFtoFKUa1O69nRyQ0kfNNG9I= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:39 2025 by rpki-client