$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: RtNISqtrWkfcgxjTTmOrpg/n+Y6ITDcTNQrdYsPjpB4= Subject key identifier: 34:50:E4:54:E6:AD:5F:8F:ED:E7:26:22:3D:F4:B8:74:E5:6C:EC:49 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 180E6921886A4DF64FBD014FD79CDCBE0A6D4AB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 024E Signing time: Mon 21 Jul 2025 01:01:31 +0000 Manifest this update: Mon 21 Jul 2025 00:56:31 +0000 Manifest next update: Thu 24 Jul 2025 08:59:31 +0000 Files and hashes: 1: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: I64XlKYTZbDf6BIKpFmi7PtcXVjW78w/mVRVIl3MTBo=) 2: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=) 3: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=) 4: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=) 5: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: HF0dYwlz6vdJov/k+WgwRu0xhExNgUTwhPU6qhbpy2A=) 6: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=) 7: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: QWdrnAaVlOBIitG7PPTh7yvLUMWH2oNGIu32jfCgQaE=) 8: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: 5VwR7HDfdfAKISy+dHdojCP894McL9XrCePHeKrbz6E=) 9: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0e:69:21:88:6a:4d:f6:4f:bd:01:4f:d7:9c:dc:be:0a:6d:4a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Jul 21 00:56:31 2025 GMT Not After : Jul 24 08:59:31 2025 GMT Subject: CN=3450E454E6AD5F8FEDE726223DF4B874E56CEC49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f8:1e:54:33:45:98:59:9a:b2:28:cc:b3:33: a0:25:de:47:10:c1:86:2b:2f:7a:24:d0:70:f0:1a: a2:67:f8:46:76:b3:1e:b9:18:c7:25:e7:3f:f3:07: fe:46:20:47:7b:79:83:f8:19:e8:03:37:8e:27:16: 8b:c8:bf:5e:9d:58:56:a4:cb:30:82:58:65:19:b4: 41:76:04:95:b0:71:01:bc:d7:ed:d0:e5:51:fb:c3: dc:aa:cf:c3:cd:5f:54:65:18:b3:a6:00:4f:6e:97: 7b:30:11:01:f4:94:25:3a:42:6c:72:3a:c3:72:a4: 8c:89:f6:77:ac:e0:8c:f6:83:24:c3:ca:b2:b0:73: 3d:17:56:7d:76:ac:11:3d:0f:b8:41:f7:0d:e3:fb: b8:f1:a4:d0:1b:d9:d1:f1:6e:95:04:11:9a:b1:52: 08:ba:28:02:27:c1:ab:92:f6:13:d1:26:86:8c:6d: 13:1a:fe:3c:0d:61:c2:b4:b4:2d:47:ad:50:74:99: 7d:bb:82:c0:66:eb:85:96:c8:9f:48:58:15:7d:2c: 9e:29:f6:94:fe:ed:8e:b4:03:b5:f4:98:13:ff:ac: 99:30:cf:e1:b7:43:a6:18:07:0c:be:78:1d:4d:38: 4e:cc:fc:dc:e7:ea:91:00:fb:78:ec:87:49:c6:a5: c7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:50:E4:54:E6:AD:5F:8F:ED:E7:26:22:3D:F4:B8:74:E5:6C:EC:49 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b8:60:27:b1:b2:00:e7:44:93:e6:a1:33:9f:28:c7:c2:3c: 9e:ac:e3:ff:ab:16:6d:a8:68:45:89:f4:8c:e9:c4:93:b2:d2: cd:9d:b9:6f:32:ff:75:95:c9:46:6d:eb:67:34:0f:b6:5b:3a: ad:cf:c9:59:db:35:cd:38:4e:8c:6f:06:98:08:ad:76:4a:8d: 7b:b5:b5:70:8f:bb:9f:55:f4:4d:1a:70:2b:8a:03:59:0c:f6: 04:c7:a2:4b:bc:c8:88:fb:9c:be:43:b6:76:f2:5c:51:b4:7c: 6d:71:c9:60:c9:e1:51:a5:ca:67:b5:e2:77:74:db:e0:10:47: df:52:77:f4:39:68:c7:57:46:1d:dc:99:8d:7e:9c:e1:91:34: ab:a6:19:fc:e9:04:42:65:5e:ce:5a:59:87:4b:a1:48:f2:f8: 60:b4:9f:a9:72:c9:3d:b7:5b:ea:42:e7:ec:7e:d1:75:d6:db: 91:26:ba:59:b9:b7:a1:db:9f:c6:7e:12:73:99:e7:9c:f5:78: 6a:d7:47:53:c0:ed:0e:08:ee:08:e5:6f:b0:5a:96:08:d6:73: bd:bd:d1:cc:4a:18:a4:96:db:8c:7a:90:cb:82:7c:d0:f0:29: 6b:dd:03:a0:32:58:7b:4f:0a:78:6b:34:d5:3d:f8:92:3d:de: 48:e5:ff:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGA5pIYhqTfZPvQFP15zcvgptSrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTA3MjEwMDU2MzFaFw0yNTA3MjQwODU5MzFaMDMxMTAvBgNV BAMTKDM0NTBFNDU0RTZBRDVGOEZFREU3MjYyMjNERjRCODc0RTU2Q0VDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy+B5UM0WYWZqyKMyzM6Al3kcQ wYYrL3ok0HDwGqJn+EZ2sx65GMcl5z/zB/5GIEd7eYP4GegDN44nFovIv16dWFak yzCCWGUZtEF2BJWwcQG81+3Q5VH7w9yqz8PNX1RlGLOmAE9ul3swEQH0lCU6Qmxy OsNypIyJ9nes4Iz2gyTDyrKwcz0XVn12rBE9D7hB9w3j+7jxpNAb2dHxbpUEEZqx Ugi6KAInwauS9hPRJoaMbRMa/jwNYcK0tC1HrVB0mX27gsBm64WWyJ9IWBV9LJ4p 9pT+7Y60A7X0mBP/rJkwz+G3Q6YYBwy+eB1NOE7M/Nzn6pEA+3jsh0nGpcexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNFDkVOatX4/t5yYiPfS4dOVs7EkwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHy4YCexsgDnRJPmoTOfKMfCPJ6s4/+rFm2o aEWJ9IzpxJOy0s2duW8y/3WVyUZt62c0D7ZbOq3PyVnbNc04ToxvBpgIrXZKjXu1 tXCPu59V9E0acCuKA1kM9gTHoku8yIj7nL5DtnbyXFG0fG1xyWDJ4VGlyme14nd0 2+AQR99Sd/Q5aMdXRh3cmY1+nOGRNKumGfzpBEJlXs5aWYdLoUjy+GC0n6lyyT23 W+pC5+x+0XXW25Emulm5t6Hbn8Z+EnOZ55z1eGrXR1PA7Q4I7gjlb7BalgjWc729 0cxKGKSW24x6kMuCfNDwKWvdA6AyWHtPCnhrNNU9+JI93kjl/70= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:40 2025 by rpki-client