$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: qv2D7HPkF2+MaqFGCHjY6e7m9gWnKZBbZcTlO/cSZq4= Subject key identifier: E6:B6:D7:23:33:9C:FF:5E:E5:91:A4:35:CF:49:3E:D1:83:6B:E8:38 Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 0BAF3F61981A1995B93DF4030D57EA98CA84743C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 0204 Signing time: Tue 05 Aug 2025 12:52:09 +0000 Manifest this update: Tue 05 Aug 2025 12:47:09 +0000 Manifest next update: Fri 08 Aug 2025 14:33:09 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) 2: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) 3: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: hHHrSKuS3cwAQCN/RaRliI+S6+NLmRIHqTPPIRdmR1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:af:3f:61:98:1a:19:95:b9:3d:f4:03:0d:57:ea:98:ca:84:74:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Aug 5 12:47:09 2025 GMT Not After : Aug 8 14:33:09 2025 GMT Subject: CN=E6B6D723339CFF5EE591A435CF493ED1836BE838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:d0:31:e0:a5:32:0c:3f:62:7d:fb:f4:bd: 08:97:92:fa:86:ee:3f:8b:87:63:3c:c0:b1:0a:38: d5:0c:21:7d:5c:a3:d0:e7:e3:83:0e:d8:3e:00:75: 87:5a:9e:26:ec:6e:74:ef:29:1e:04:5a:8a:01:19: 3f:1b:e5:43:1d:af:e3:56:a5:37:e3:f1:18:bd:58: ff:80:b4:bf:db:6e:83:fc:a4:f0:2d:2d:1a:ee:61: 25:f5:db:d3:91:12:68:20:8c:96:66:fe:a1:d0:04: 69:86:4f:14:37:cf:46:69:bf:d9:27:f2:81:a7:79: 57:fb:a6:44:f7:25:67:76:2c:4f:58:a6:5d:73:f9: 57:bf:5f:c2:c9:1a:82:6b:3a:ae:18:a1:7a:9a:45: 65:51:75:0d:10:e0:29:cb:6b:cd:3d:bb:92:e6:f7: 4e:0a:9f:e9:17:ab:aa:3b:77:a9:8f:eb:62:6e:5f: 71:0c:45:06:5a:59:bd:59:5a:52:82:a9:ad:14:bf: 91:b9:e5:59:fe:71:45:fd:1f:72:60:74:10:48:da: 7c:f6:88:eb:ab:8d:55:9c:e9:77:9e:26:fd:14:87: 8b:20:da:65:98:e7:1c:09:0b:a8:e7:e9:bc:e7:9d: c6:ab:2a:04:00:da:a2:d3:bd:0e:e0:3a:d2:b4:5f: 98:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B6:D7:23:33:9C:FF:5E:E5:91:A4:35:CF:49:3E:D1:83:6B:E8:38 X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b3:21:ac:9c:61:62:d9:1a:1c:d3:1b:4f:2b:3b:7e:c4:1a: cc:98:83:c5:53:c6:6e:aa:fc:7b:cd:10:fd:0a:97:19:b8:ee: 0b:8b:41:59:7d:e4:de:50:6e:b0:8f:eb:c5:2d:7f:85:49:9e: 01:d3:6c:a2:52:17:7d:68:bb:aa:87:e4:93:25:7d:93:5f:f4: 64:18:94:af:e6:1f:10:e1:b8:b2:9b:38:4f:b2:d9:68:df:25: 12:9f:ed:66:9e:75:d0:a5:71:d8:67:b1:53:ac:b1:46:5d:88: db:66:87:13:e0:02:fc:5a:35:d7:75:42:c1:3b:85:f4:72:0f: a9:d4:da:04:45:fb:cf:2c:12:09:c3:96:99:15:96:9d:fc:75: da:e5:13:31:d7:aa:83:2c:53:d3:d3:31:ea:68:71:e5:ad:ac: 3c:e2:c2:da:fd:0e:aa:89:0e:99:1a:87:35:e0:cc:bf:f3:b0: 52:81:73:13:6b:b5:85:0a:57:2b:d9:89:56:7c:b0:e6:e5:3e: 92:89:8b:3e:6d:82:8c:d5:f4:01:45:fe:75:b9:23:d2:3d:12: 50:b1:1c:b4:c5:f8:5a:6f:fd:dc:f9:86:0b:6b:1b:4c:29:9e: 73:87:41:fb:8c:f6:cc:0a:4a:43:03:ac:a4:33:2e:31:75:e9: 06:d8:57:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC68/YZgaGZW5PfQDDVfqmMqEdDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTA4MDUxMjQ3MDlaFw0yNTA4MDgxNDMzMDlaMDMxMTAvBgNV BAMTKEU2QjZENzIzMzM5Q0ZGNUVFNTkxQTQzNUNGNDkzRUQxODM2QkU4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8y9Ax4KUyDD9iffv0vQiXkvqG 7j+Lh2M8wLEKONUMIX1co9Dn44MO2D4AdYdanibsbnTvKR4EWooBGT8b5UMdr+NW pTfj8Ri9WP+AtL/bboP8pPAtLRruYSX129OREmggjJZm/qHQBGmGTxQ3z0Zpv9kn 8oGneVf7pkT3JWd2LE9Ypl1z+Ve/X8LJGoJrOq4YoXqaRWVRdQ0Q4CnLa809u5Lm 904Kn+kXq6o7d6mP62JuX3EMRQZaWb1ZWlKCqa0Uv5G55Vn+cUX9H3JgdBBI2nz2 iOurjVWc6XeeJv0Uh4sg2mWY5xwJC6jn6bznncarKgQA2qLTvQ7gOtK0X5gbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5rbXIzOc/17lkaQ1z0k+0YNr6DgwHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEizIaycYWLZGhzTG08rO37EGsyYg8VTxm6q /HvNEP0Klxm47guLQVl95N5QbrCP68Utf4VJngHTbKJSF31ou6qH5JMlfZNf9GQY lK/mHxDhuLKbOE+y2WjfJRKf7WaeddClcdhnsVOssUZdiNtmhxPgAvxaNdd1QsE7 hfRyD6nU2gRF+88sEgnDlpkVlp38ddrlEzHXqoMsU9PTMepoceWtrDziwtr9DqqJ DpkahzXgzL/zsFKBcxNrtYUKVyvZiVZ8sOblPpKJiz5tgozV9AFF/nW5I9I9ElCx HLTF+Fpv/dz5hgtrG0wpnnOHQfuM9swKSkMDrKQzLjF16QbYV6E= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:25 2025 by rpki-client