$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft File: B7260D30835B9D812F7044ECE96F4FB8F698379C.mft (raw, json) Hash identifier: GuscjR+HF204ox1bGQ7ML067w0l+2h7cn3jjmR82qV8= Subject key identifier: F3:B3:C4:14:62:A2:77:FA:6C:3F:80:B7:C1:9D:4A:20:C3:F2:24:C6 Authority key identifier: B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C Certificate issuer: /CN=B7260D30835B9D812F7044ECE96F4FB8F698379C Certificate serial: 44B78F90C7D3ABBDB0F09B0229BB3ED667D9B3B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft Manifest number: 032F Signing time: Tue 05 Aug 2025 17:51:46 +0000 Manifest this update: Tue 05 Aug 2025 17:46:46 +0000 Manifest next update: Fri 08 Aug 2025 20:46:46 +0000 Files and hashes: 1: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: C1fWM39iM3F6U+59gsqeYJ83me8iwLln6AeCDUtsAG4=) 2: B7260D30835B9D812F7044ECE96F4FB8F698379C.crl (hash: eoX52TZRuQcWerIzsVrM/pj/0om8LgDrDGvgc4Y+xBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b7:8f:90:c7:d3:ab:bd:b0:f0:9b:02:29:bb:3e:d6:67:d9:b3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7260D30835B9D812F7044ECE96F4FB8F698379C Validity Not Before: Aug 5 17:46:46 2025 GMT Not After : Aug 8 20:46:46 2025 GMT Subject: CN=F3B3C41462A277FA6C3F80B7C19D4A20C3F224C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:34:ff:f9:e5:74:01:df:52:68:e5:eb:63:8e: 01:dd:f2:91:2a:29:7e:46:57:b1:ff:25:3e:50:34: 2b:d4:6b:5c:4b:c3:da:e4:2e:3f:ef:81:60:8a:6a: e0:82:d4:3b:73:b9:b7:89:3a:9e:a4:90:6e:c7:e2: 05:d2:5f:e5:8c:c0:d0:36:fa:e8:e7:29:32:66:e9: ca:18:e4:46:1b:eb:58:4d:0d:e6:e9:05:8b:9e:89: 10:dd:af:d0:de:ae:db:83:91:51:e6:ec:cb:fa:26: 63:86:7a:73:3a:db:db:e7:6d:d5:6c:e8:40:b4:79: 44:2b:ae:16:81:f0:3d:23:dc:f8:85:54:17:ab:47: c6:a4:7d:a1:e0:ca:ac:2f:7f:32:6d:f2:ed:5a:91: 3c:94:c7:76:a6:d6:21:e1:89:a8:b2:a6:ee:63:46: 02:8f:d6:24:d7:19:0e:40:bb:c6:60:08:06:27:53: 7d:24:de:f7:5a:ca:24:b2:c4:32:e9:51:b3:42:60: f3:a3:f7:89:7e:1e:c9:b6:41:43:2c:38:e0:fc:03: 84:ef:a8:f8:3d:c9:9b:8f:76:2c:17:2f:a1:c5:9e: b9:79:a8:f7:6f:f8:0c:b4:2f:34:92:0e:46:fd:fa: dc:34:81:3b:8c:75:e2:07:49:88:54:34:68:c4:c1: f7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B3:C4:14:62:A2:77:FA:6C:3F:80:B7:C1:9D:4A:20:C3:F2:24:C6 X509v3 Authority Key Identifier: keyid:B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:57:28:cc:78:dc:a5:86:b2:ba:4b:5e:41:0e:0f:f0:02:c6: 39:c0:69:7f:ed:f9:5a:9b:0d:ed:76:82:72:f3:6a:b3:47:20: 2b:b1:e1:aa:4e:0a:38:7c:a2:96:21:3f:d9:d5:4c:b6:80:dd: 5a:c8:b9:50:44:a5:1b:81:97:05:b2:dc:3b:d6:be:d5:00:e0: 8b:3b:bf:74:a5:fa:70:67:1a:fa:f1:e9:2b:28:a0:9d:bf:4f: 49:94:31:f2:ad:9b:59:c0:57:d5:ab:9f:78:83:0c:73:f9:60: ce:ed:62:51:76:48:cd:74:61:35:02:08:2a:50:93:96:76:c1: d9:45:bf:cb:60:65:62:7e:1c:7c:70:22:47:3a:5f:d6:8f:74: 21:8b:79:c6:f6:04:58:2f:46:e6:cd:a0:91:c1:b6:be:38:64: 8d:c5:35:06:bc:f1:3c:1b:60:83:e3:9a:06:df:a9:77:c3:f4: f5:18:e5:a2:39:b5:58:4c:0f:65:4f:d4:a0:b6:6c:30:9c:d0: 95:95:09:fb:2f:b6:50:e0:5a:d2:0e:38:76:d6:56:3e:4f:f3: e9:5c:77:b8:5c:ef:f0:80:a1:21:5f:7a:58:bd:ec:c2:07:b7: 83:79:9f:67:35:bc:04:ff:01:46:be:28:74:22:26:3f:9f:c2: 09:d7:2d:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLePkMfTq72w8JsCKbs+1mfZs7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRGQjhG Njk4Mzc5QzAeFw0yNTA4MDUxNzQ2NDZaFw0yNTA4MDgyMDQ2NDZaMDMxMTAvBgNV BAMTKEYzQjNDNDE0NjJBMjc3RkE2QzNGODBCN0MxOUQ0QTIwQzNGMjI0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsNP/55XQB31Jo5etjjgHd8pEq KX5GV7H/JT5QNCvUa1xLw9rkLj/vgWCKauCC1DtzubeJOp6kkG7H4gXSX+WMwNA2 +ujnKTJm6coY5EYb61hNDebpBYueiRDdr9DertuDkVHm7Mv6JmOGenM629vnbdVs 6EC0eUQrrhaB8D0j3PiFVBerR8akfaHgyqwvfzJt8u1akTyUx3am1iHhiaiypu5j RgKP1iTXGQ5Au8ZgCAYnU30k3vdayiSyxDLpUbNCYPOj94l+Hsm2QUMsOOD8A4Tv qPg9yZuPdiwXL6HFnrl5qPdv+Ay0LzSSDkb9+tw0gTuMdeIHSYhUNGjEwfdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU87PEFGKid/psP4C3wZ1KIMPyJMYwHwYDVR0j BBgwFoAUtyYNMINbnYEvcETs6W9PuPaYN5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E1ZmZkYy0xNTFhLTRhYWQtYTJiNy00MzI2NDlkZTZkYmUvMC9CNzI2MEQzMDgz NUI5RDgxMkY3MDQ0RUNFOTZGNEZCOEY2OTgzNzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRGQjhGNjk4 Mzc5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhNWZmZGMtMTUxYS00YWFkLWEy YjctNDMyNjQ5ZGU2ZGJlLzAvQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRG QjhGNjk4Mzc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBXKMx43KWGsrpLXkEOD/ACxjnAaX/t+Vqb De12gnLzarNHICux4apOCjh8opYhP9nVTLaA3VrIuVBEpRuBlwWy3DvWvtUA4Is7 v3Sl+nBnGvrx6SsooJ2/T0mUMfKtm1nAV9Wrn3iDDHP5YM7tYlF2SM10YTUCCCpQ k5Z2wdlFv8tgZWJ+HHxwIkc6X9aPdCGLecb2BFgvRubNoJHBtr44ZI3FNQa88Twb YIPjmgbfqXfD9PUY5aI5tVhMD2VP1KC2bDCc0JWVCfsvtlDgWtIOOHbWVj5P8+lc d7hc7/CAoSFfeli97MIHt4N5n2c1vAT/AUa+KHQiJj+fwgnXLXE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:57 2025 by rpki-client