$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: spPmgER4PwirUzpTrmc/zGX7PJmbXA+pPXMTG1ofO2A= Subject key identifier: 4F:0B:BD:C7:8E:31:42:56:7B:E0:D4:6A:17:37:73:87:80:C7:83:73 Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 511D0D5DD8CB5D6E61E16D76F9BF837588A941E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 04F8 Signing time: Sun 20 Jul 2025 02:20:59 +0000 Manifest this update: Sun 20 Jul 2025 02:15:59 +0000 Manifest next update: Wed 23 Jul 2025 05:34:59 +0000 Files and hashes: 1: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=) 2: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: 4CJltJzV0oTd77D6YLU3W7lxMCzH4rPfVOyZIzWDOQY=) 3: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Oi+v4vSiTSM9zUjltxmu968dUNXdnYr8A7jzZ4z/bOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1d:0d:5d:d8:cb:5d:6e:61:e1:6d:76:f9:bf:83:75:88:a9:41:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Jul 20 02:15:59 2025 GMT Not After : Jul 23 05:34:59 2025 GMT Subject: CN=4F0BBDC78E3142567BE0D46A1737738780C78373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:ce:0f:91:3d:db:ec:f5:86:2f:0d:04:5a: 32:d7:64:f6:44:0a:eb:47:9f:f6:10:e3:80:9b:e5: 5f:5e:fd:e5:42:d1:3a:c1:d7:f3:be:42:5e:c6:93: 86:61:96:03:63:9e:0a:af:83:c1:bb:0b:05:99:ed: 8e:cd:32:d5:36:95:fb:d0:7e:17:f2:e5:44:44:2a: 2e:c2:45:3a:21:19:06:de:75:8c:4d:2a:ff:af:d4: f6:fc:5e:cc:19:67:ab:5d:9e:64:bf:ca:06:d3:1d: 76:08:1a:e9:e1:a8:ad:86:c7:fa:98:bc:95:db:3d: c8:71:67:c6:40:98:b3:42:7c:8e:5d:15:d9:3b:04: da:4a:e3:66:7a:b0:e0:76:89:58:ce:e8:5e:cf:a6: dc:ea:1a:4b:7e:87:56:4e:fb:d5:dc:8f:71:b6:d4: 5f:6c:53:d9:28:7e:9c:c2:56:4c:96:2a:07:bd:5a: a9:9e:a7:87:c5:4e:93:ae:37:0c:c5:18:7f:c2:72: b8:65:47:50:47:ca:50:12:b9:b0:c7:dc:75:b4:13: 26:15:cc:19:5e:a8:e0:19:9a:a2:c1:9d:7f:f0:ae: f1:27:77:89:48:08:ef:7e:df:91:67:74:22:e2:65: 14:af:c6:0e:7e:5a:bd:81:3e:e5:00:a0:30:f0:65: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0B:BD:C7:8E:31:42:56:7B:E0:D4:6A:17:37:73:87:80:C7:83:73 X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:db:13:99:a8:7d:07:b9:80:47:a5:c2:dc:3f:37:9c:4e:5b: fa:87:35:7a:68:86:98:e9:05:9c:9a:21:be:af:85:d3:b3:fb: 7d:3c:fd:59:3d:d7:a1:00:cc:6a:d2:f6:65:6b:2e:c3:7e:be: c5:b6:f4:09:60:7d:2c:81:db:e1:e2:16:2b:b3:c0:8b:f4:26: 5e:a2:91:48:0b:6e:b6:22:c9:79:15:d8:77:f1:0b:9a:48:65: 57:cf:93:ba:05:11:e5:94:78:7a:b5:09:22:8d:3c:ca:17:86: d6:99:dc:2f:82:5e:af:1e:cc:7d:0b:cd:c6:1d:91:f7:31:69: 88:98:7c:34:ab:b0:18:2d:59:77:06:bb:8c:d7:8a:b8:ea:84: df:02:9f:ec:1a:1d:6e:7c:21:37:14:e1:52:2f:ed:cf:49:44: ea:dd:d4:72:f1:a5:31:31:36:6e:aa:4d:d3:40:90:7a:48:fd: 2a:68:55:bb:2d:9a:eb:95:ce:48:20:c8:39:93:a5:3e:b3:5c: c7:1a:3b:82:d8:0d:85:4e:59:c9:2a:d0:9c:16:1f:8e:30:f9: f7:c6:98:d4:3b:21:d7:ef:22:69:32:b7:e2:f6:59:62:09:d0: 75:63:69:77:d1:3b:ec:97:21:3e:dd:05:1e:8c:1c:cc:c4:cd: 43:fd:fa:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUR0NXdjLXW5h4W12+b+DdYipQecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNTA3MjAwMjE1NTlaFw0yNTA3MjMwNTM0NTlaMDMxMTAvBgNV BAMTKDRGMEJCREM3OEUzMTQyNTY3QkUwRDQ2QTE3Mzc3Mzg3ODBDNzgzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzc84PkT3b7PWGLw0EWjLXZPZE CutHn/YQ44Cb5V9e/eVC0TrB1/O+Ql7Gk4ZhlgNjngqvg8G7CwWZ7Y7NMtU2lfvQ fhfy5UREKi7CRTohGQbedYxNKv+v1Pb8XswZZ6tdnmS/ygbTHXYIGunhqK2Gx/qY vJXbPchxZ8ZAmLNCfI5dFdk7BNpK42Z6sOB2iVjO6F7PptzqGkt+h1ZO+9Xcj3G2 1F9sU9kofpzCVkyWKge9Wqmep4fFTpOuNwzFGH/CcrhlR1BHylASubDH3HW0EyYV zBleqOAZmqLBnX/wrvEnd4lICO9+35FndCLiZRSvxg5+Wr2BPuUAoDDwZf0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTwu9x44xQlZ74NRqFzdzh4DHg3MwHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3bE5mofQe5gEelwtw/N5xOW/qHNXpohpjp BZyaIb6vhdOz+308/Vk916EAzGrS9mVrLsN+vsW29AlgfSyB2+HiFiuzwIv0Jl6i kUgLbrYiyXkV2HfxC5pIZVfPk7oFEeWUeHq1CSKNPMoXhtaZ3C+CXq8ezH0LzcYd kfcxaYiYfDSrsBgtWXcGu4zXirjqhN8Cn+waHW58ITcU4VIv7c9JROrd1HLxpTEx Nm6qTdNAkHpI/SpoVbstmuuVzkggyDmTpT6zXMcaO4LYDYVOWckq0JwWH44w+ffG mNQ7IdfvImkyt+L2WWIJ0HVjaXfRO+yXIT7dBR6MHMzEzUP9+mY= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:50 2025 by rpki-client