$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: cfyRi9A5OcSdQIU0uSQCbfjVgih3EeKvhP1lKg0R7xA= Subject key identifier: B0:15:50:2D:42:C1:7B:E4:04:FD:71:0E:42:2A:08:CC:BB:10:9F:56 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 59B0C8430B8D9442D53EE542DAF9370E7FFC75D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 0256 Signing time: Thu 07 Aug 2025 00:11:34 +0000 Manifest this update: Thu 07 Aug 2025 00:06:34 +0000 Manifest next update: Sun 10 Aug 2025 11:10:34 +0000 Files and hashes: 1: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: NhdH7Fhc5462h34Die1n3utYNU6KsHjCdASHFF9S2No=) 2: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=) 3: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=) 4: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=) 5: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=) 6: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=) 7: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=) 8: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=) 9: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 11:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b0:c8:43:0b:8d:94:42:d5:3e:e5:42:da:f9:37:0e:7f:fc:75:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Aug 7 00:06:34 2025 GMT Not After : Aug 10 11:10:34 2025 GMT Subject: CN=B015502D42C17BE404FD710E422A08CCBB109F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:86:46:89:2c:ed:77:b9:0d:21:91:f3:f5: 5f:95:b0:80:94:09:55:63:c5:c6:f0:09:45:d6:2c: fa:cb:96:d2:2e:74:80:f1:1b:ec:1a:2c:88:d2:f5: 93:f5:8a:79:7a:de:59:81:4c:81:98:ad:b8:1b:c3: ce:82:d7:4a:6a:41:1f:f6:57:8e:98:7a:1a:ab:28: 55:bb:ae:68:21:a4:e1:a9:48:3a:11:b7:b7:60:c0: 80:ac:03:8d:66:0c:df:d9:65:d3:b9:51:c3:26:ae: 65:80:c1:7f:e5:e9:e9:06:b4:f6:76:b8:ed:c8:d8: a6:fd:1e:5f:3a:f6:ed:30:c5:5a:4f:b4:7b:19:a3: b1:29:dc:ee:53:81:04:c1:8a:7c:44:72:a2:fb:44: 9d:4c:76:b2:98:5a:e9:b6:0d:b4:e6:6c:c8:36:f4: 82:95:d8:f9:24:85:0d:ef:71:c3:71:7a:a1:a2:6d: 96:c4:04:3f:96:0e:4d:0a:cb:19:e9:14:80:e9:9c: 4a:22:d3:c6:95:fc:64:92:67:9d:48:12:0f:be:65: 5f:e7:9e:59:d2:a2:cb:74:17:42:97:40:e9:a5:b8: cf:f8:84:4a:f8:06:fd:56:74:43:d3:9e:37:28:95: aa:ab:40:43:8d:c3:ff:51:94:b5:fc:dd:8a:d1:1b: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:15:50:2D:42:C1:7B:E4:04:FD:71:0E:42:2A:08:CC:BB:10:9F:56 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4e:6c:7b:1e:21:2a:f3:b2:63:92:ec:ed:3f:67:1a:7a:cf: 2f:95:45:87:4c:81:b6:4c:46:4d:4d:ff:e3:b8:1f:64:c9:d1: 8b:0b:dd:09:16:b3:a6:1b:45:bd:fd:39:9b:90:b4:b5:47:6c: 7a:50:51:94:51:56:f6:e9:1c:87:22:b3:27:d8:c1:c8:bb:4e: ed:53:88:ed:71:9d:fb:c0:cd:1f:25:62:b4:15:b7:cb:61:32: e6:f2:df:7f:c0:d8:fd:5d:ec:66:44:9f:ad:c3:62:cc:0f:f1: 21:e4:ec:f3:4f:e9:35:3c:22:5e:96:e8:dd:48:a6:3a:76:21: 2c:20:de:9a:d8:72:f1:fc:0c:ad:7f:9a:f0:96:ae:3e:4d:f9: 02:3e:45:c8:52:d7:de:10:e1:f0:7c:3a:1d:4b:64:81:49:78: 3b:bd:eb:e3:6a:45:e2:3a:4a:83:0b:5e:f2:ba:b4:18:52:5a: 20:4f:88:e9:2f:67:ec:9b:b2:10:3e:e8:de:1d:78:a5:9d:c7: e0:bd:c5:32:28:cb:f8:c2:32:d0:48:30:66:ae:b1:47:8b:cd: a4:cf:f8:76:83:9b:f3:b4:e7:66:8b:55:13:38:23:2c:63:3e: 4d:10:eb:4a:df:a6:99:02:47:61:b2:17:21:8f:42:b1:38:d6: f1:f5:0e:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWbDIQwuNlELVPuVC2vk3Dn/8ddQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTA4MDcwMDA2MzRaFw0yNTA4MTAxMTEwMzRaMDMxMTAvBgNV BAMTKEIwMTU1MDJENDJDMTdCRTQwNEZENzEwRTQyMkEwOENDQkIxMDlGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA84ZGiSztd7kNIZHz9V+VsICU CVVjxcbwCUXWLPrLltIudIDxG+waLIjS9ZP1inl63lmBTIGYrbgbw86C10pqQR/2 V46YehqrKFW7rmghpOGpSDoRt7dgwICsA41mDN/ZZdO5UcMmrmWAwX/l6ekGtPZ2 uO3I2Kb9Hl869u0wxVpPtHsZo7Ep3O5TgQTBinxEcqL7RJ1MdrKYWum2DbTmbMg2 9IKV2PkkhQ3vccNxeqGibZbEBD+WDk0KyxnpFIDpnEoi08aV/GSSZ51IEg++ZV/n nlnSost0F0KXQOmluM/4hEr4Bv1WdEPTnjcolaqrQEONw/9RlLX83YrRG6tzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsBVQLULBe+QE/XEOQioIzLsQn1YwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1ObHseISrzsmOS7O0/Zxp6zy+VRYdMgbZM Rk1N/+O4H2TJ0YsL3QkWs6YbRb39OZuQtLVHbHpQUZRRVvbpHIcisyfYwci7Tu1T iO1xnfvAzR8lYrQVt8thMuby33/A2P1d7GZEn63DYswP8SHk7PNP6TU8Il6W6N1I pjp2ISwg3prYcvH8DK1/mvCWrj5N+QI+RchS194Q4fB8Oh1LZIFJeDu96+NqReI6 SoMLXvK6tBhSWiBPiOkvZ+ybshA+6N4deKWdx+C9xTIoy/jCMtBIMGausUeLzaTP +HaDm/O052aLVRM4IyxjPk0Q60rfppkCR2GyFyGPQrE41vH1Duk= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:26 2025 by rpki-client