$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft (raw, json) Hash identifier: 3YBwvoyx/WiG5xgBDEdZ0w3MAH8jGxNM0reeJWYFkzM= Subject key identifier: 09:ED:0A:86:1E:05:D2:07:45:60:08:3E:67:26:CD:EB:A3:81:90:36 Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Certificate serial: 6272F52218E4247AFB882CA21958C4D0DF8C3DA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft Manifest number: 01F5 Signing time: Sat 19 Jul 2025 06:31:55 +0000 Manifest this update: Sat 19 Jul 2025 06:26:55 +0000 Manifest next update: Tue 22 Jul 2025 17:48:55 +0000 Files and hashes: 1: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: 51ekgtNLYDLFINvFYDj/N8stn5dpVipAbdc9vPbRQ7I=) 2: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl (hash: CtwVkR7g2s2Y3rCHJalJO9R1miW2W9bXHZZlxOi6uEc=) 3: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: Ykg6X7TmWGcN3xNxQzs8nCjH8QlPm6F3Uq9zQ4bEBTI=) 4: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: TsTDpWhEe0S4QbX7Nvx05CapjsmJk1el8Dy5qKfw9Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 17:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:72:f5:22:18:e4:24:7a:fb:88:2c:a2:19:58:c4:d0:df:8c:3d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Validity Not Before: Jul 19 06:26:55 2025 GMT Not After : Jul 22 17:48:55 2025 GMT Subject: CN=09ED0A861E05D2074560083E6726CDEBA3819036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:3e:d6:24:2b:13:c3:bb:3a:27:2e:1e:f5: 79:0e:f9:95:cc:27:00:37:a5:96:1e:42:16:c2:0e: f3:84:dd:30:94:9e:15:32:56:7f:6a:be:9c:6b:55: f2:bf:2b:f8:22:a1:bb:bc:18:88:15:cf:bf:7e:ee: 82:38:8e:ef:88:aa:0f:ad:e6:e1:a2:de:dd:a0:68: ec:ae:ee:f7:0f:cf:49:46:b8:29:70:7d:c3:ab:1f: 24:68:49:b6:37:1b:b3:a6:6b:02:64:a2:f5:61:ce: d4:91:40:4b:a4:38:86:0c:41:25:32:65:0f:81:8b: 25:cd:93:d3:f8:fb:80:e3:af:d5:83:02:79:68:98: 28:d4:ac:16:cd:b5:87:b1:9f:2f:d1:3a:db:bd:52: fa:d6:bb:4f:78:2d:f9:99:3e:2b:33:23:db:46:e9: 07:1e:b6:0c:09:ee:f9:87:b4:54:26:b9:1c:09:87: f9:72:09:0c:5e:76:3f:8a:55:75:02:4b:8a:67:16: b6:ea:0a:84:55:19:73:e2:5a:8b:95:85:80:16:8e: 5d:d7:33:89:6a:30:cf:19:76:12:0f:13:97:23:95: c5:08:cb:ca:55:ad:c2:a0:44:91:18:ec:fa:09:99: f1:55:71:56:6f:b0:e6:e5:cb:5f:74:bf:a9:06:99: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:ED:0A:86:1E:05:D2:07:45:60:08:3E:67:26:CD:EB:A3:81:90:36 X509v3 Authority Key Identifier: keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:41:4e:93:7a:be:8e:23:99:98:af:92:33:23:4d:21:b0:88: 28:30:07:0e:12:24:fd:3f:08:ce:87:b6:aa:4e:cc:93:5c:95: d0:87:3b:63:2c:fd:b2:67:28:ea:39:05:a2:69:c7:7f:60:5d: 28:7f:24:04:85:5e:4a:f6:75:c9:78:a9:96:da:de:32:0a:b0: be:3c:c8:9c:62:47:0c:0f:74:61:64:de:84:57:5e:4b:4a:e0: 1f:98:ff:3c:b6:9a:09:25:1f:13:c8:b5:46:59:b3:5f:c4:b5: 64:a1:42:a7:4a:7f:ca:f7:35:0f:48:d9:83:db:f2:0e:5f:59: 43:c3:d2:4d:5a:93:dc:7c:9d:a1:72:71:a2:2c:93:0f:6a:82: 71:a1:c6:f3:69:c3:d1:8f:66:55:85:12:ac:73:ce:cb:f7:bb: 11:1a:9a:94:d7:a1:53:7b:de:14:fe:92:89:5a:b5:a3:63:11: b4:2c:60:8c:47:32:af:85:8a:1c:41:cf:10:9f:f9:af:73:fd: 49:6e:2a:dd:86:56:d4:53:32:be:7e:b4:fc:18:29:e7:5c:3b: 15:c4:22:a5:36:77:f5:bf:ad:7b:00:91:c8:c3:3f:51:9b:69: 33:fd:38:d7:cd:96:06:d1:ee:cd:c2:df:dc:8a:4c:c7:49:ba: f7:b0:7b:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnL1IhjkJHr7iCyiGVjE0N+MPaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy MkNCREVFOTAeFw0yNTA3MTkwNjI2NTVaFw0yNTA3MjIxNzQ4NTVaMDMxMTAvBgNV BAMTKDA5RUQwQTg2MUUwNUQyMDc0NTYwMDgzRTY3MjZDREVCQTM4MTkwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zj7WJCsTw7s6Jy4e9XkO+ZXM JwA3pZYeQhbCDvOE3TCUnhUyVn9qvpxrVfK/K/giobu8GIgVz79+7oI4ju+Iqg+t 5uGi3t2gaOyu7vcPz0lGuClwfcOrHyRoSbY3G7OmawJkovVhztSRQEukOIYMQSUy ZQ+BiyXNk9P4+4Djr9WDAnlomCjUrBbNtYexny/ROtu9UvrWu094LfmZPiszI9tG 6QcetgwJ7vmHtFQmuRwJh/lyCQxedj+KVXUCS4pnFrbqCoRVGXPiWouVhYAWjl3X M4lqMM8ZdhIPE5cjlcUIy8pVrcKgRJEY7PoJmfFVcVZvsObly190v6kGmVmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCe0Khh4F0gdFYAg+ZybN66OBkDYwHwYDVR0j BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC REVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1 NzAyMkNCREVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJBTpN6vo4jmZivkjMjTSGwiCgwBw4SJP0/ CM6HtqpOzJNcldCHO2Ms/bJnKOo5BaJpx39gXSh/JASFXkr2dcl4qZba3jIKsL48 yJxiRwwPdGFk3oRXXktK4B+Y/zy2mgklHxPItUZZs1/EtWShQqdKf8r3NQ9I2YPb 8g5fWUPD0k1ak9x8naFycaIskw9qgnGhxvNpw9GPZlWFEqxzzsv3uxEampTXoVN7 3hT+kolataNjEbQsYIxHMq+FihxBzxCf+a9z/UluKt2GVtRTMr5+tPwYKedcOxXE IqU2d/W/rXsAkcjDP1GbaTP9ONfNlgbR7s3C39yKTMdJuvewe3E= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:28 2025 by rpki-client