$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: opOqeb7Esl1t1SfLcE7uvBR5hH1JXx9pLp1BXPJ7O0M= Subject key identifier: D0:D9:28:E3:DF:5A:54:9F:F7:72:8A:A6:22:36:93:58:D1:00:6D:2E Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 6513A87BE1C371281A7D8BBA8F1237EA98EE6FBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 0532 Signing time: Sun 16 Nov 2025 21:41:02 +0000 Manifest this update: Sun 16 Nov 2025 21:36:02 +0000 Manifest next update: Wed 19 Nov 2025 22:16:02 +0000 Files and hashes: 1: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: LP2EhXEfcbXGHg8lbTaJsuTwtuetRXu7hZB0XiRuUog=) 2: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: dZSB/gSxOY7UKqB6f6AoUZuRdwpTE/RXX5o4gj8yNrA=) 3: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: cmv59nNsRTRKeMV0c4HuiujTHOVfbugS8maMc0aBwq0=) 4: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: 3PZFIN0jiG1liVNOYS5bc8JkLCWSH93e9B5ZRAydDG8=) 5: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: f1EdJawAFE33t1rxrdKPcs3d9VEItcNJb2cJ7vIPk2M=) 6: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: B9YgdbWic7qXvAvHz1n/3UtrpjolL03glGipzRrFEzY=) 7: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 22:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:13:a8:7b:e1:c3:71:28:1a:7d:8b:ba:8f:12:37:ea:98:ee:6f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Nov 16 21:36:02 2025 GMT Not After : Nov 19 22:16:02 2025 GMT Subject: CN=D0D928E3DF5A549FF7728AA622369358D1006D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:b3:fa:7f:a7:1f:7e:40:af:38:9d:ae:d9: 82:4c:8b:99:39:49:ba:75:02:99:f5:77:a2:ce:ca: d3:c5:02:ee:14:08:59:f3:2c:3e:ce:e8:6d:14:2d: 9d:d0:85:29:1c:37:b7:a3:80:12:49:25:fe:c4:a7: b5:39:a4:1e:0b:55:eb:e2:09:2b:64:17:ec:b7:7c: 61:4b:4f:ca:41:2e:5d:82:b2:a5:89:23:71:42:ec: b4:d8:2d:93:2e:79:f9:44:d6:36:e1:f0:56:ea:db: b1:89:e5:8b:b8:c8:31:8f:2d:32:5a:a9:43:a6:b4: 1e:7a:fc:53:6f:a1:39:79:9b:e2:b6:a2:cf:bd:62: b4:cb:9d:5f:48:63:0c:3f:cb:d8:b0:cd:d2:b2:80: d1:36:57:7b:14:1c:d2:7a:86:56:4f:0a:60:71:79: de:be:19:45:0d:9d:b0:12:2b:c6:5f:9a:d9:8d:78: 27:2a:5b:48:7e:99:bb:a3:76:78:7a:25:85:af:23: 3e:0a:29:dc:5d:c9:39:b9:f9:bd:1c:2d:f7:dd:40: 9a:37:4d:e0:23:82:e2:26:11:57:c5:2d:90:5d:0b: b9:33:bc:3f:52:47:61:f0:64:a3:ba:51:be:f7:aa: ed:97:ba:60:71:13:bf:29:e2:6c:00:49:68:ff:92: ce:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D9:28:E3:DF:5A:54:9F:F7:72:8A:A6:22:36:93:58:D1:00:6D:2E X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5b:f5:9e:4f:78:92:e7:13:96:cd:3e:41:83:31:76:de:6e: dc:e8:fd:95:1c:37:01:a4:99:2c:c0:84:60:08:4d:79:a1:3a: e8:e1:e7:cc:8c:6a:10:f8:b3:c7:23:88:91:50:f1:75:fe:fe: b3:1d:bf:a7:53:7d:ab:0e:51:28:88:56:6e:87:0c:65:0b:f2: 54:9b:20:fc:6b:ae:2c:0f:4e:a3:97:43:f6:76:78:55:39:7a: 98:59:e8:bf:f9:6b:20:bb:29:52:c5:5c:f6:fe:a8:ca:e9:36: 08:58:e4:de:2f:d3:43:f0:ea:48:92:3e:59:36:6b:51:92:9b: 5c:77:8c:15:eb:77:27:f3:85:bf:05:f1:e2:3e:4d:20:1e:56: f5:00:ea:43:88:29:6e:ba:99:61:ab:36:6d:7a:0d:6e:8d:aa: 70:36:cc:f0:a4:85:d0:6d:b1:6a:8a:1c:e5:c9:60:88:08:85: d2:ce:ee:4c:56:d7:a1:1f:0e:4c:f5:3c:da:c2:b6:6b:42:7b: c2:6e:d2:65:e4:85:41:6e:56:14:39:a2:e5:f0:64:9e:d7:93: 64:67:ee:0d:22:fe:f3:ef:12:60:75:97:54:44:81:7c:c0:0c: f7:55:52:7f:a9:a6:7d:1c:5d:ae:7b:67:03:1a:c0:84:e2:5a: 6b:e7:02:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZROoe+HDcSgafYu6jxI36pjub74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNTExMTYyMTM2MDJaFw0yNTExMTkyMjE2MDJaMDMxMTAvBgNV BAMTKEQwRDkyOEUzREY1QTU0OUZGNzcyOEFBNjIyMzY5MzU4RDEwMDZEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bbP6f6cffkCvOJ2u2YJMi5k5 Sbp1Apn1d6LOytPFAu4UCFnzLD7O6G0ULZ3QhSkcN7ejgBJJJf7Ep7U5pB4LVevi CStkF+y3fGFLT8pBLl2CsqWJI3FC7LTYLZMueflE1jbh8Fbq27GJ5Yu4yDGPLTJa qUOmtB56/FNvoTl5m+K2os+9YrTLnV9IYww/y9iwzdKygNE2V3sUHNJ6hlZPCmBx ed6+GUUNnbASK8ZfmtmNeCcqW0h+mbujdnh6JYWvIz4KKdxdyTm5+b0cLffdQJo3 TeAjguImEVfFLZBdC7kzvD9SR2HwZKO6Ub73qu2XumBxE78p4mwASWj/ks7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Nko499aVJ/3coqmIjaTWNEAbS4wHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItb9Z5PeJLnE5bNPkGDMXbebtzo/ZUcNwGk mSzAhGAITXmhOujh58yMahD4s8cjiJFQ8XX+/rMdv6dTfasOUSiIVm6HDGUL8lSb IPxrriwPTqOXQ/Z2eFU5ephZ6L/5ayC7KVLFXPb+qMrpNghY5N4v00Pw6kiSPlk2 a1GSm1x3jBXrdyfzhb8F8eI+TSAeVvUA6kOIKW66mWGrNm16DW6NqnA2zPCkhdBt sWqKHOXJYIgIhdLO7kxW16EfDkz1PNrCtmtCe8Ju0mXkhUFuVhQ5ouXwZJ7Xk2Rn 7g0i/vPvEmB1l1REgXzADPdVUn+ppn0cXa57ZwMawITiWmvnAtw= -----END CERTIFICATE-----Generated at Mon Nov 17 11:54:46 2025 by rpki-client