$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: RS3+bsCSkBwZSMpcgIJnsGJqHQXNhGbK3AyaUSuQ2g4= Subject key identifier: 2F:23:A8:5E:AC:23:9C:63:35:42:92:1B:2E:67:06:5A:9C:CA:C5:66 Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 317442C5316BEA2CAB1272675F590DE7417AFA41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 021D Signing time: Tue 22 Jul 2025 23:31:46 +0000 Manifest this update: Tue 22 Jul 2025 23:26:46 +0000 Manifest next update: Sat 26 Jul 2025 09:47:46 +0000 Files and hashes: 1: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) 2: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 3: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) 4: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: vp97wMNF8KXTw+he3u1XDJucyO7EDvkxpKOE0I42EdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 09:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:74:42:c5:31:6b:ea:2c:ab:12:72:67:5f:59:0d:e7:41:7a:fa:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Jul 22 23:26:46 2025 GMT Not After : Jul 26 09:47:46 2025 GMT Subject: CN=2F23A85EAC239C633542921B2E67065A9CCAC566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:34:80:cf:2e:2f:49:6c:fa:57:d1:83:6d: 7c:eb:bb:2e:bf:5f:55:7a:73:95:6c:af:68:0c:cb: 77:a3:a2:12:8a:8a:82:c9:6c:33:e0:64:7d:25:e7: 00:df:7a:8d:63:35:7d:9a:d6:99:6c:51:07:d5:ed: 6e:d0:ee:a3:ef:33:88:71:1e:cf:81:cc:f9:49:59: 38:30:23:3b:a5:2c:e0:3b:f2:4d:9a:4f:93:a3:cb: 9b:73:2b:83:ad:2e:fd:2c:90:97:21:f4:ee:5a:93: bd:c2:4b:37:ac:64:b4:28:7e:33:d1:d1:5f:23:2b: d3:07:ea:ac:ca:92:7f:33:d1:90:cf:2a:16:95:7c: 9d:3d:7d:27:2a:5a:74:3e:9e:44:0a:52:f9:bd:b0: a0:da:ec:f8:26:b6:32:42:38:82:16:90:1e:b2:ee: 84:f8:55:58:bd:a5:e2:6a:6d:9d:84:a7:4e:0e:e2: 58:d2:87:f9:f0:21:77:ab:f1:eb:80:67:cc:40:6e: c2:cd:47:c8:2c:5e:9c:c2:92:f8:c5:78:50:68:2c: 4a:39:25:a9:09:2b:c1:86:fc:c3:f3:34:1d:a3:ab: 34:3b:ab:88:74:69:02:e2:86:77:de:a9:3b:18:e6: 27:ac:04:2b:3e:5d:10:c8:b9:62:c8:34:ce:6b:7c: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:23:A8:5E:AC:23:9C:63:35:42:92:1B:2E:67:06:5A:9C:CA:C5:66 X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:92:67:e0:1d:d0:f7:f6:91:e7:ac:f0:9a:56:ca:e1:51:0d: 7f:95:21:ca:9c:5f:f9:6e:d1:72:28:fa:57:94:b2:cf:c5:9b: ee:11:f2:5c:50:5c:fe:51:fc:f7:fd:a4:59:b1:49:ab:36:4b: 2d:15:27:07:44:5a:79:77:16:01:97:b1:c8:83:21:a7:6c:20: dc:a6:8e:13:a5:a3:3b:4c:b5:1d:28:b8:3b:7e:1e:72:02:a8: 32:cf:09:73:2e:72:65:15:ec:68:10:3f:6c:ec:14:aa:5c:e3: ef:dd:bc:77:80:5d:a2:9c:2e:be:f3:ac:5c:3a:36:f7:6a:57: 7e:84:e9:99:b8:54:68:ac:65:b5:82:1c:93:93:87:04:37:70: 75:c1:ea:06:03:2b:ab:f2:14:fc:f4:51:ea:b2:0b:2c:76:1a: 37:ff:3c:8d:16:cc:0c:4b:17:bf:ae:49:7d:c1:6a:4c:e1:80: cd:bd:65:8f:e9:44:80:a8:e3:3b:da:ac:84:bb:07:4a:e7:da: af:eb:1e:c0:f8:4e:9f:6e:46:3e:0a:0d:c3:fc:6c:df:26:cd: 0f:c6:79:b1:10:bd:13:a7:c2:58:f9:e7:91:d1:13:d4:a8:b7: b2:ef:6e:ab:32:a2:12:c5:1a:17:57:61:f8:f6:b5:06:f3:a5: 5b:50:5e:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXRCxTFr6iyrEnJnX1kN50F6+kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNTA3MjIyMzI2NDZaFw0yNTA3MjYwOTQ3NDZaMDMxMTAvBgNV BAMTKDJGMjNBODVFQUMyMzlDNjMzNTQyOTIxQjJFNjcwNjVBOUNDQUM1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCamzSAzy4vSWz6V9GDbXzruy6/ X1V6c5Vsr2gMy3ejohKKioLJbDPgZH0l5wDfeo1jNX2a1plsUQfV7W7Q7qPvM4hx Hs+BzPlJWTgwIzulLOA78k2aT5Ojy5tzK4OtLv0skJch9O5ak73CSzesZLQofjPR 0V8jK9MH6qzKkn8z0ZDPKhaVfJ09fScqWnQ+nkQKUvm9sKDa7PgmtjJCOIIWkB6y 7oT4VVi9peJqbZ2Ep04O4ljSh/nwIXer8euAZ8xAbsLNR8gsXpzCkvjFeFBoLEo5 JakJK8GG/MPzNB2jqzQ7q4h0aQLihnfeqTsY5iesBCs+XRDIuWLINM5rfF/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULyOoXqwjnGM1QpIbLmcGWpzKxWYwHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCSZ+Ad0Pf2kees8JpWyuFRDX+VIcqcX/lu 0XIo+leUss/Fm+4R8lxQXP5R/Pf9pFmxSas2Sy0VJwdEWnl3FgGXsciDIadsINym jhOloztMtR0ouDt+HnICqDLPCXMucmUV7GgQP2zsFKpc4+/dvHeAXaKcLr7zrFw6 NvdqV36E6Zm4VGisZbWCHJOThwQ3cHXB6gYDK6vyFPz0UeqyCyx2Gjf/PI0WzAxL F7+uSX3BakzhgM29ZY/pRICo4zvarIS7B0rn2q/rHsD4Tp9uRj4KDcP8bN8mzQ/G ebEQvROnwlj555HRE9Sot7LvbqsyohLFGhdXYfj2tQbzpVtQXuI= -----END CERTIFICATE-----Generated at Wed Jul 23 12:11:10 2025 by rpki-client