$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: n6K1CZl8qoMnfaytYgg9f/Xq2zRNeSyvQ/RBNvw6AVg= Subject key identifier: 45:7F:9F:02:AB:CE:40:D8:8C:A4:86:B7:24:DC:3D:2E:D3:B4:10:E8 Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 20A77A4BE7D83576B09A7C017FF07503DAA1D3F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 03D2 Signing time: Fri 08 Aug 2025 17:40:39 +0000 Manifest this update: Fri 08 Aug 2025 17:35:39 +0000 Manifest next update: Mon 11 Aug 2025 22:23:39 +0000 Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: 1TOBRX5MwL8nChJl6awL2w3BUZFHaDBm1061l2puz4s=) 2: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: ky+/BeqDD6P6x2rSi8GJnTuSuyvFEk1/LW7uIiL5eX0=) 3: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 5SkHB/Kz3ud3kzZYvQ/j1QLOIE2ORuolpv99BxFmP4E=) 4: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: pFYo+rYQ4y01OiD99PWpXB905d+F4ZorCo/4HXyMapk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 22:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a7:7a:4b:e7:d8:35:76:b0:9a:7c:01:7f:f0:75:03:da:a1:d3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Aug 8 17:35:39 2025 GMT Not After : Aug 11 22:23:39 2025 GMT Subject: CN=457F9F02ABCE40D88CA486B724DC3D2ED3B410E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:d9:2b:1a:55:b9:9c:83:20:e1:5c:22:a2: 13:cc:20:2a:47:a4:dc:c6:91:a3:a7:e8:5e:05:30: 86:2a:fb:67:49:fe:2f:ec:94:1b:26:7d:e2:fa:62: 17:0e:19:12:96:b3:32:15:d2:a5:67:23:e1:f4:92: 9e:51:b9:59:0a:a1:ab:ee:87:d0:86:b4:78:c8:71: 7f:00:3e:c8:fe:f6:0a:4c:0a:6c:0a:07:d6:c0:c1: b4:48:69:fc:1c:73:7e:f4:52:b6:8c:e7:48:4e:97: bb:8e:c5:14:b0:85:8b:d0:30:e2:6b:30:cf:05:65: 8d:2e:02:7d:17:23:77:33:92:95:db:67:9d:96:e1: 52:3e:57:3d:d6:61:7c:3e:d0:95:23:11:c4:5c:59: 6a:77:d9:30:af:fd:02:b8:32:ec:37:70:36:6f:b1: bf:a3:15:cd:9b:aa:f9:f7:a9:fa:8e:a2:97:e0:42: e7:d5:1c:c8:09:48:2f:b3:63:28:69:d3:06:e3:6f: 0d:88:77:9c:81:4b:6f:0a:cf:40:32:e5:df:eb:23: 6e:bf:9a:bf:74:b3:1d:fb:84:4e:33:df:c7:47:1a: d8:af:c9:9f:5f:a0:ec:73:3a:0c:ba:2d:fc:0a:78: bd:f1:9d:9f:1e:c3:c0:c3:1d:ab:3f:56:ca:b8:7c: 1f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7F:9F:02:AB:CE:40:D8:8C:A4:86:B7:24:DC:3D:2E:D3:B4:10:E8 X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:80:1c:ab:8c:05:ec:8b:a6:29:b2:8d:23:54:f5:dc:9e:5b: 2b:b9:5f:26:f9:1d:fb:f0:42:9b:c0:2d:76:6b:b5:a6:af:59: d5:44:9a:34:19:4a:a6:80:c5:fd:57:ee:85:3f:d6:79:21:35: c0:27:ac:d2:f3:71:44:30:4a:14:b5:80:f4:d0:89:74:67:cd: 85:7b:ea:c9:68:28:72:80:a2:b7:9e:d6:ba:27:2f:34:1f:05: ee:f1:3a:5f:53:07:9c:d3:38:58:47:50:b4:d9:f0:91:59:73: 3f:cc:a6:79:fb:ec:d3:b0:b7:c8:f3:68:d8:30:ea:36:84:4b: 70:70:51:95:9b:8f:5b:8e:0c:72:90:b4:05:45:16:ce:87:4e: ec:14:91:c3:98:84:9c:e5:bc:d4:ba:a0:d4:52:69:00:d3:8a: 9e:c4:68:55:d3:a2:40:55:50:52:f3:06:1d:8f:2a:30:a0:eb: 0d:f5:16:9c:1b:4a:65:18:5e:ba:49:32:ae:de:1d:49:d9:a2: 36:d9:36:53:5e:a9:4c:08:68:70:c6:db:d4:2b:73:a9:ed:15: cc:32:18:4d:bc:03:96:be:bf:72:1b:b3:a9:5c:af:b6:35:e7: e3:7f:5a:0b:10:42:3f:14:87:b0:67:5c:34:c1:6b:2c:e8:86: a2:bd:cf:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKd6S+fYNXawmnwBf/B1A9qh0/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNTA4MDgxNzM1MzlaFw0yNTA4MTEyMjIzMzlaMDMxMTAvBgNV BAMTKDQ1N0Y5RjAyQUJDRTQwRDg4Q0E0ODZCNzI0REMzRDJFRDNCNDEwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm19krGlW5nIMg4VwiohPMICpH pNzGkaOn6F4FMIYq+2dJ/i/slBsmfeL6YhcOGRKWszIV0qVnI+H0kp5RuVkKoavu h9CGtHjIcX8APsj+9gpMCmwKB9bAwbRIafwcc370UraM50hOl7uOxRSwhYvQMOJr MM8FZY0uAn0XI3czkpXbZ52W4VI+Vz3WYXw+0JUjEcRcWWp32TCv/QK4Muw3cDZv sb+jFc2bqvn3qfqOopfgQufVHMgJSC+zYyhp0wbjbw2Id5yBS28Kz0Ay5d/rI26/ mr90sx37hE4z38dHGtivyZ9foOxzOgy6LfwKeL3xnZ8ew8DDHas/Vsq4fB+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURX+fAqvOQNiMpIa3JNw9LtO0EOgwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiAHKuMBeyLpimyjSNU9dyeWyu5Xyb5Hfvw QpvALXZrtaavWdVEmjQZSqaAxf1X7oU/1nkhNcAnrNLzcUQwShS1gPTQiXRnzYV7 6sloKHKAoree1ronLzQfBe7xOl9TB5zTOFhHULTZ8JFZcz/Mpnn77NOwt8jzaNgw 6jaES3BwUZWbj1uODHKQtAVFFs6HTuwUkcOYhJzlvNS6oNRSaQDTip7EaFXTokBV UFLzBh2PKjCg6w31FpwbSmUYXrpJMq7eHUnZojbZNlNeqUwIaHDG29Qrc6ntFcwy GE28A5a+v3Ibs6lcr7Y15+N/WgsQQj8Uh7BnXDTBayzohqK9z2E= -----END CERTIFICATE-----Generated at Sat Aug 9 20:45:07 2025 by rpki-client