$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: 264C0gi1S9caqXm8XVLOFKViLh1Hf/ITY6dXy0OCO2M= Subject key identifier: AC:A1:CA:12:59:ED:AC:B8:06:21:08:0D:0C:05:A0:52:4C:E7:BE:54 Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 7461B555528FF4BA5B0109E0D01B419E661AED14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 03CA Signing time: Mon 21 Jul 2025 09:00:40 +0000 Manifest this update: Mon 21 Jul 2025 08:55:40 +0000 Manifest next update: Thu 24 Jul 2025 12:27:40 +0000 Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: pFYo+rYQ4y01OiD99PWpXB905d+F4ZorCo/4HXyMapk=) 2: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: s2CyP4XDH5h9EzCADOKG5bQvdvSrhMWJcmQ8mlfxqv4=) 3: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: 1TOBRX5MwL8nChJl6awL2w3BUZFHaDBm1061l2puz4s=) 4: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 5SkHB/Kz3ud3kzZYvQ/j1QLOIE2ORuolpv99BxFmP4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:61:b5:55:52:8f:f4:ba:5b:01:09:e0:d0:1b:41:9e:66:1a:ed:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Jul 21 08:55:40 2025 GMT Not After : Jul 24 12:27:40 2025 GMT Subject: CN=ACA1CA1259EDACB80621080D0C05A0524CE7BE54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:0c:25:17:ed:f4:f6:77:7d:ca:44:52:2c: cc:3c:80:c2:1b:74:08:a2:0a:4a:4d:3e:11:0b:f4: 49:c1:7b:04:b7:b2:81:14:d6:2f:a3:f0:11:4e:2e: f8:2e:5d:7a:aa:f3:68:9d:75:78:84:3d:22:7a:2a: 90:27:12:a4:17:c6:d3:51:b2:80:72:1d:5e:89:f9: 90:93:f6:8a:38:4d:6d:1a:50:19:7b:32:80:b6:88: 6f:88:bc:d5:f8:10:32:31:9d:e7:78:92:31:33:a1: dc:e7:1d:65:a7:9b:5c:3f:1e:0e:a7:6a:e7:ee:10: 38:6b:ab:f6:6c:d4:60:06:03:cf:47:dc:a2:ee:5b: 0d:ff:71:a4:1d:07:1c:be:6a:63:30:91:a5:6c:64: 50:ac:bf:76:34:a6:30:d2:a5:0b:24:cc:b2:7d:d6: 8c:b1:f7:8d:71:ac:cc:ee:d3:6e:11:81:a4:e5:8e: 84:9b:cd:50:5b:54:54:75:9e:5e:c4:25:d1:f0:e5: cc:5b:36:86:09:7c:2b:f1:9d:91:a1:60:6b:65:de: a4:e5:97:09:6a:19:2e:89:3b:17:dd:2a:8d:13:9d: c1:1c:10:b6:53:96:13:a3:b0:99:9b:81:10:c2:74: d2:51:53:30:73:66:f5:c5:e5:6f:9e:e5:20:7b:6f: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A1:CA:12:59:ED:AC:B8:06:21:08:0D:0C:05:A0:52:4C:E7:BE:54 X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d9:42:ad:14:9e:0e:bc:6b:93:75:68:dc:c3:c3:fa:01:60: 9d:fa:18:0a:01:33:0f:c8:3d:e1:6d:14:1d:9d:d7:6b:ac:5c: cb:b9:81:1c:a8:19:14:c8:fa:8b:aa:8a:54:c5:a7:94:1a:9e: a0:9e:ae:63:0c:6b:ca:b6:55:3a:64:54:a9:97:72:f0:d9:dd: 3e:31:5c:dc:75:d4:5c:c2:0f:93:47:61:f8:f4:5d:de:cc:e4: 34:bb:e7:7c:f8:77:a9:56:5f:67:58:51:ed:58:1a:21:a9:ed: 08:7c:9d:94:39:2c:aa:e1:29:7a:06:f4:8c:3a:17:2f:98:bf: 8b:a5:94:ad:f2:53:61:75:f6:4e:66:5a:f0:dd:02:51:7c:cb: 60:16:79:0b:90:00:31:15:1b:10:91:21:77:a8:95:ee:0a:d4: a7:46:d7:bc:fc:28:14:5b:5b:7d:d2:6e:f9:07:f8:32:f7:d1: 54:05:2c:57:9d:29:93:44:c5:f5:ef:57:be:fc:46:7a:1c:7a: 5e:c2:f3:72:34:96:7a:aa:b1:2b:c8:66:2e:a4:79:ed:4d:8c: 4c:a3:4f:4f:cd:69:78:47:05:f7:4d:f3:64:67:c9:91:cf:f8: 1a:29:30:18:b8:26:89:1a:67:ce:69:03:ba:49:19:db:ab:c7: 6d:6e:16:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGG1VVKP9LpbAQng0BtBnmYa7RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNTA3MjEwODU1NDBaFw0yNTA3MjQxMjI3NDBaMDMxMTAvBgNV BAMTKEFDQTFDQTEyNTlFREFDQjgwNjIxMDgwRDBDMDVBMDUyNENFN0JFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznwwlF+309nd9ykRSLMw8gMIb dAiiCkpNPhEL9EnBewS3soEU1i+j8BFOLvguXXqq82iddXiEPSJ6KpAnEqQXxtNR soByHV6J+ZCT9oo4TW0aUBl7MoC2iG+IvNX4EDIxned4kjEzodznHWWnm1w/Hg6n aufuEDhrq/Zs1GAGA89H3KLuWw3/caQdBxy+amMwkaVsZFCsv3Y0pjDSpQskzLJ9 1oyx941xrMzu024RgaTljoSbzVBbVFR1nl7EJdHw5cxbNoYJfCvxnZGhYGtl3qTl lwlqGS6JOxfdKo0TncEcELZTlhOjsJmbgRDCdNJRUzBzZvXF5W+e5SB7b/E1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrKHKElntrLgGIQgNDAWgUkznvlQwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADZQq0Ung68a5N1aNzDw/oBYJ36GAoBMw/I PeFtFB2d12usXMu5gRyoGRTI+ouqilTFp5QanqCermMMa8q2VTpkVKmXcvDZ3T4x XNx11FzCD5NHYfj0Xd7M5DS753z4d6lWX2dYUe1YGiGp7Qh8nZQ5LKrhKXoG9Iw6 Fy+Yv4ullK3yU2F19k5mWvDdAlF8y2AWeQuQADEVGxCRIXeole4K1KdG17z8KBRb W33SbvkH+DL30VQFLFedKZNExfXvV778Rnocel7C83I0lnqqsSvIZi6kee1NjEyj T0/NaXhHBfdN82RnyZHP+BopMBi4JokaZ85pA7pJGdurx21uFpE= -----END CERTIFICATE-----Generated at Mon Jul 21 21:20:11 2025 by rpki-client