$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: OedAkonw0aTou+TI0rewF/TawA5awxzmzzsKkA5cn6E= Subject key identifier: A2:55:61:70:E6:40:03:D5:9B:8C:C8:0B:05:7B:C5:78:51:99:51:E2 Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 4CC5508B9AB1CBA009F6F21C2CA9274BB53A1D94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 01DB Signing time: Wed 23 Jul 2025 20:42:27 +0000 Manifest this update: Wed 23 Jul 2025 20:37:27 +0000 Manifest next update: Sun 27 Jul 2025 01:52:27 +0000 Files and hashes: 1: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) 2: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: NK7ClTvv4/NDBbf89x9B3VnTnm5k2ddyF3YW/vuXpLs=) 3: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) 4: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: 1QFmqqnDt9FD4CT5iXH8IaTJeZQAgHohWAPwCtiQfbk=) 5: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: TGl5cNstaB3Hzjjkbbef8lqck/uz3qhav6tP2pRxt/M=) 6: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: j7/0o24Y/Dntb2SDxDz2B+Eis79rWFB0ghqmTnU55LQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 01:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c5:50:8b:9a:b1:cb:a0:09:f6:f2:1c:2c:a9:27:4b:b5:3a:1d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: Jul 23 20:37:27 2025 GMT Not After : Jul 27 01:52:27 2025 GMT Subject: CN=A2556170E64003D59B8CC80B057BC578519951E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:98:79:fd:a1:72:d0:e2:36:12:e0:83:37: f2:18:70:84:4f:e8:39:46:38:b5:66:c3:31:e6:07: 1b:70:b1:d6:22:94:d2:f6:b9:39:0c:6e:e1:5b:d8: dd:c2:9d:2c:e6:b2:ed:75:92:0a:c2:b9:9c:0c:2e: 30:2c:fb:56:ff:70:68:64:ed:fa:70:6f:cf:33:c1: b4:44:a7:1c:ca:86:ba:1b:ba:34:8f:f2:79:21:a1: 71:0e:b7:01:c0:c0:ac:02:3d:82:ff:0d:c5:f6:6c: 05:fc:b1:90:42:ca:64:87:2d:59:60:6c:42:f5:32: ee:44:29:41:66:44:67:42:28:b6:c4:86:f8:23:bf: c5:b5:c3:01:40:e5:94:7c:a3:7b:4c:3b:a5:71:ce: 59:a5:2d:fe:56:5f:34:32:49:57:1c:1e:67:ab:50: 1a:56:9e:5d:4c:e9:b2:7e:9f:c4:5f:5a:98:d5:68: 00:8b:03:ac:5c:06:28:e7:eb:56:34:38:0c:db:d4: f6:e4:9a:b0:03:33:4c:a3:86:93:87:6f:41:d1:77: 39:96:a4:d8:75:9d:3c:02:7c:33:f8:94:d5:8f:6d: 73:be:cf:e2:ab:03:bd:08:53:7c:8e:c0:7b:7c:aa: e4:13:53:e8:6c:8e:70:8b:3a:d7:90:a8:10:f0:94: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:55:61:70:E6:40:03:D5:9B:8C:C8:0B:05:7B:C5:78:51:99:51:E2 X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2b:61:ab:d6:96:f6:4e:7d:85:df:83:86:fe:c0:48:ca:65: 3e:cc:5c:e8:8f:2c:23:39:c5:bb:4f:2c:84:20:ff:6f:92:2d: 77:48:1d:16:6c:5f:f1:42:01:f4:83:7d:22:85:33:52:d2:90: 32:75:4b:63:68:0b:28:21:91:4e:f5:c4:fa:b5:9f:6e:a1:ea: 3e:98:c3:a7:4c:b2:69:28:83:f6:05:11:80:15:04:57:4f:6c: db:c8:b8:a0:86:4a:0c:c8:f4:16:d2:ed:ec:d9:5a:a3:c9:12: 6d:9d:5e:12:a9:3d:2e:3c:73:73:33:fa:e1:8d:e3:c1:f8:6d: 9b:73:e6:c7:f0:9f:00:1f:ac:56:19:22:e8:73:55:21:87:92: 21:74:9b:bb:80:c9:66:29:2f:e8:30:6b:f3:46:22:13:34:4f: 12:63:04:6f:3d:32:cb:a5:a2:32:58:77:d9:d0:30:1f:63:0f: 93:5e:cb:f9:d3:28:9a:a0:ec:05:87:e8:ac:8b:b8:11:0c:8f: ca:12:69:5f:da:6d:e2:f9:3d:5f:49:39:23:01:2c:5f:3f:f7: 40:71:69:7e:c7:06:dd:b8:eb:0f:1c:75:ed:50:7d:74:37:a4: 54:42:44:40:a1:82:4a:7d:e6:30:dd:3a:c3:71:bc:37:46:44: c5:97:a1:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMVQi5qxy6AJ9vIcLKknS7U6HZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNTA3MjMyMDM3MjdaFw0yNTA3MjcwMTUyMjdaMDMxMTAvBgNV BAMTKEEyNTU2MTcwRTY0MDAzRDU5QjhDQzgwQjA1N0JDNTc4NTE5OTUxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeZh5/aFy0OI2EuCDN/IYcIRP 6DlGOLVmwzHmBxtwsdYilNL2uTkMbuFb2N3CnSzmsu11kgrCuZwMLjAs+1b/cGhk 7fpwb88zwbREpxzKhrobujSP8nkhoXEOtwHAwKwCPYL/DcX2bAX8sZBCymSHLVlg bEL1Mu5EKUFmRGdCKLbEhvgjv8W1wwFA5ZR8o3tMO6VxzlmlLf5WXzQySVccHmer UBpWnl1M6bJ+n8RfWpjVaACLA6xcBijn61Y0OAzb1PbkmrADM0yjhpOHb0HRdzmW pNh1nTwCfDP4lNWPbXO+z+KrA70IU3yOwHt8quQTU+hsjnCLOteQqBDwlBJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUolVhcOZAA9WbjMgLBXvFeFGZUeIwHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgrYavWlvZOfYXfg4b+wEjKZT7MXOiPLCM5 xbtPLIQg/2+SLXdIHRZsX/FCAfSDfSKFM1LSkDJ1S2NoCyghkU71xPq1n26h6j6Y w6dMsmkog/YFEYAVBFdPbNvIuKCGSgzI9BbS7ezZWqPJEm2dXhKpPS48c3Mz+uGN 48H4bZtz5sfwnwAfrFYZIuhzVSGHkiF0m7uAyWYpL+gwa/NGIhM0TxJjBG89Msul ojJYd9nQMB9jD5Ney/nTKJqg7AWH6KyLuBEMj8oSaV/abeL5PV9JOSMBLF8/90Bx aX7HBt246w8cde1QfXQ3pFRCREChgkp95jDdOsNxvDdGRMWXoT0= -----END CERTIFICATE-----Generated at Fri Jul 25 07:03:11 2025 by rpki-client