$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json) Hash identifier: R+F6gk8QNoz7bzRFzCp0mMq5WkliQcjwMujJdvTroNM= Subject key identifier: 84:83:DE:1F:8B:9C:3A:46:3A:DD:22:BC:4D:C6:C1:D0:3F:A8:E7:CF Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 2B81FFEAFBD9253CB7304FCA6332395AAA64D515 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft Manifest number: 0191 Signing time: Sun 20 Jul 2025 16:21:35 +0000 Manifest this update: Sun 20 Jul 2025 16:16:35 +0000 Manifest next update: Thu 24 Jul 2025 02:19:35 +0000 Files and hashes: 1: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 9QXIOR5p9E/ECayeIb5+Pzn8r00Xjm0tMLmC+/Pg7aE=) 2: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: bOVjgO7qn+b+8CNNq2l13PKIm2KK4rgpaABSsGT8/iQ=) 3: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: wnZO7kQR9JZHcXEpTkJ6URQ49yRUAKEaIg5OVxBtq9k=) 4: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: vGG0asOC2Xl7EswH7KA3jLAIJRd+GCTUKsA4WpfXyjU=) 5: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: g3O85uHYQ5H3CYzPQLQFqdssgPM5rhi5A/BzEIRFoas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:81:ff:ea:fb:d9:25:3c:b7:30:4f:ca:63:32:39:5a:aa:64:d5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Jul 20 16:16:35 2025 GMT Not After : Jul 24 02:19:35 2025 GMT Subject: CN=8483DE1F8B9C3A463ADD22BC4DC6C1D03FA8E7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:c9:ec:bf:e2:26:a2:f9:8b:a2:d5:e0:15: 1c:ff:de:43:d0:bc:f1:43:3c:15:30:74:3a:8c:ba: 13:d1:b3:70:1a:9a:2f:49:2e:bb:85:56:52:80:88: 3d:57:c4:11:e2:6e:f0:85:4a:7f:2f:e6:80:50:40: a6:48:e3:a8:93:83:17:5b:d4:1f:76:2b:33:d3:65: f1:00:01:37:f7:0a:ee:57:0f:cd:36:a3:33:7a:9b: 53:e1:77:2e:b4:4b:b1:7e:3a:99:b3:a6:b9:76:93: 0a:e9:7f:44:d7:26:88:dc:d8:0a:46:af:d2:58:92: 2c:f8:d1:2f:ba:b3:04:8e:24:0f:ce:bc:51:16:6a: ce:90:d3:fd:f3:d0:f2:29:b4:51:cb:db:db:af:d8: ab:20:c4:2c:cd:5b:87:f8:57:2f:26:ac:81:a7:e8: 90:81:e6:e2:63:08:33:b3:4e:f4:55:90:55:4d:85: 39:af:c5:da:d9:5d:04:d1:be:90:8c:34:88:e6:ec: 07:5d:9b:c7:a3:59:71:bc:23:e9:e9:bf:5b:2c:74: 11:5e:eb:17:22:34:c8:f7:58:2d:82:ff:f8:61:20: c7:8b:43:13:cc:21:d8:53:1b:74:dc:44:3f:d5:f1: e2:7e:e4:ce:a5:bc:e4:9c:64:e9:75:21:a1:06:c8: d7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:83:DE:1F:8B:9C:3A:46:3A:DD:22:BC:4D:C6:C1:D0:3F:A8:E7:CF X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:55:91:a9:7e:15:90:1f:ee:c1:f6:47:40:fe:68:28:54:d6: ac:06:39:0f:75:84:07:7e:db:db:27:6d:9b:be:c4:c5:78:aa: 91:48:eb:8b:b4:46:68:5e:7d:c5:54:8c:38:93:69:ce:a7:3c: 87:d6:a6:2d:4a:83:ec:dc:0f:fc:09:15:6c:7e:38:b1:29:7c: 60:77:82:46:b7:0a:e9:da:5e:59:57:2a:d3:9f:c9:91:5b:fd: 64:ef:99:6a:5a:07:18:81:58:35:13:49:16:b0:1c:81:1b:42: f3:15:30:b1:97:6c:d9:df:51:3c:4d:7e:9d:1b:5c:24:10:72: 6c:fb:47:e4:85:9d:2e:38:ad:aa:88:f8:d6:0b:b2:40:f1:ff: 75:0c:ab:60:c6:61:9f:5c:8d:50:e5:ac:1a:88:3a:a7:0a:7a: 8b:df:70:ed:a6:42:64:6b:5d:12:40:ea:2b:ba:5c:e9:77:4f: f9:81:2f:e6:a7:e1:fb:12:d5:30:91:e4:17:d5:e7:13:f6:94: 9c:b9:97:3f:9c:3b:ed:81:88:3d:00:bc:10:a2:71:2b:e0:f2: b3:cc:20:4c:d9:e0:aa:5c:27:dd:91:05:d5:9b:87:03:d2:0e: 37:36:8e:2d:58:9f:28:b6:20:a0:c2:ca:2a:86:68:48:63:ea: 55:b0:03:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4H/6vvZJTy3ME/KYzI5Wqpk1RUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNTA3MjAxNjE2MzVaFw0yNTA3MjQwMjE5MzVaMDMxMTAvBgNV BAMTKDg0ODNERTFGOEI5QzNBNDYzQUREMjJCQzREQzZDMUQwM0ZBOEU3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiIsnsv+ImovmLotXgFRz/3kPQ vPFDPBUwdDqMuhPRs3Aami9JLruFVlKAiD1XxBHibvCFSn8v5oBQQKZI46iTgxdb 1B92KzPTZfEAATf3Cu5XD802ozN6m1Phdy60S7F+Opmzprl2kwrpf0TXJojc2ApG r9JYkiz40S+6swSOJA/OvFEWas6Q0/3z0PIptFHL29uv2KsgxCzNW4f4Vy8mrIGn 6JCB5uJjCDOzTvRVkFVNhTmvxdrZXQTRvpCMNIjm7Addm8ejWXG8I+npv1ssdBFe 6xciNMj3WC2C//hhIMeLQxPMIdhTG3TcRD/V8eJ+5M6lvOScZOl1IaEGyNePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhIPeH4ucOkY63SK8TcbB0D+o588wHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIx MDM1RUVBQUI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRVkal+FZAf7sH2R0D+aChU1qwGOQ91hAd+ 29snbZu+xMV4qpFI64u0RmhefcVUjDiTac6nPIfWpi1Kg+zcD/wJFWx+OLEpfGB3 gka3CunaXllXKtOfyZFb/WTvmWpaBxiBWDUTSRawHIEbQvMVMLGXbNnfUTxNfp0b XCQQcmz7R+SFnS44raqI+NYLskDx/3UMq2DGYZ9cjVDlrBqIOqcKeovfcO2mQmRr XRJA6iu6XOl3T/mBL+an4fsS1TCR5BfV5xP2lJy5lz+cO+2BiD0AvBCicSvg8rPM IEzZ4KpcJ92RBdWbhwPSDjc2ji1Ynyi2IKDCyiqGaEhj6lWwAwQ= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:34 2025 by rpki-client