$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: uyB0unHCZQRlsjtIJ9ynGfllmDCjKLbTN1OMS2RWVSo= Subject key identifier: 19:61:64:08:46:76:2C:2C:6A:16:AC:9C:28:75:12:62:F9:44:CA:BD Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 37E0E40E15188742B7E77D6D190CF39ECFE626BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 01FC Signing time: Fri 18 Jul 2025 18:12:06 +0000 Manifest this update: Fri 18 Jul 2025 18:07:06 +0000 Manifest next update: Tue 22 Jul 2025 05:35:06 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) 2: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) 3: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: 8ixW5Z8kBFwAc38BhOerCr6vWAAfZpm0QVA8WwJjBKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 05:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e0:e4:0e:15:18:87:42:b7:e7:7d:6d:19:0c:f3:9e:cf:e6:26:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Jul 18 18:07:06 2025 GMT Not After : Jul 22 05:35:06 2025 GMT Subject: CN=1961640846762C2C6A16AC9C28751262F944CABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:f0:9b:6f:de:4e:40:85:13:b6:4d:68:d0: 97:e8:f8:8e:26:b3:12:2c:1c:67:f6:b5:af:e7:11: 7d:d6:bb:6a:0e:d8:5c:5f:9d:37:2b:e9:6b:89:c1: a4:d0:be:73:b3:5d:21:61:b7:2d:63:2b:c7:5d:8a: 1b:7f:47:84:2d:88:89:54:bc:cd:f4:ab:26:ea:e1: ee:b7:25:14:ba:74:96:f5:dd:e5:63:55:21:6e:ce: 1d:54:74:ce:56:22:5f:60:9e:58:23:73:72:9c:52: 06:3a:76:17:3c:96:5f:21:b8:32:f7:b0:85:24:b5: 2a:b1:67:74:d8:86:fa:fb:24:d1:ee:7c:ee:1b:16: 4a:b6:19:3a:8e:5b:7a:58:e1:35:4e:87:9a:1f:e3: 23:73:03:5b:a3:ae:e7:df:96:31:57:7c:81:56:a4: f9:50:d5:3a:2f:35:b4:f1:3d:64:01:4e:3c:05:c1: 6a:12:66:9e:53:19:b8:4f:5b:48:a6:5b:1b:cd:26: 9c:9c:a1:a4:a6:8c:1a:fd:af:9c:f6:48:20:52:af: 1a:a8:57:5b:2f:f4:83:21:1a:95:8b:90:c7:19:2f: 4a:30:4e:46:81:bd:c4:b6:f8:e4:07:29:d7:7a:d5: 72:d9:35:c1:99:e0:e5:9b:9c:ec:c3:d7:e4:1c:c1: 53:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:61:64:08:46:76:2C:2C:6A:16:AC:9C:28:75:12:62:F9:44:CA:BD X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:63:c6:2f:0d:bd:2b:a9:48:69:91:74:59:54:12:11:f2:fa: 90:e4:0c:8c:b3:5b:1d:c0:bd:a2:63:23:4a:35:c2:3f:ed:cf: 74:24:ac:d3:b9:6b:52:92:15:1e:87:74:69:e3:b2:7f:ec:82: e3:fc:3e:94:24:99:b1:17:09:19:45:d3:62:21:64:db:c5:6d: 0d:25:eb:cb:05:0a:54:7a:e5:69:23:74:ce:95:ce:83:00:2e: 66:6e:ec:a8:8b:e4:97:d7:95:76:16:4e:31:f9:c9:28:28:e8: fc:37:c4:56:3a:cd:01:51:44:6f:50:ca:18:21:14:ea:b5:84: 03:d3:74:ad:64:97:ad:57:94:55:90:ad:0d:a6:4c:53:d6:e8: 93:8e:f2:dc:3c:ac:9c:8d:07:76:4b:c7:cf:64:38:eb:85:4a: 6f:42:5e:1f:f8:3d:a2:9a:3a:9b:59:61:71:c2:83:2b:a8:11: 55:36:32:59:2f:4c:fb:52:68:ac:d5:d3:38:7c:59:f7:d5:49: e8:f9:cd:be:7c:92:b5:26:9b:b0:4f:71:c2:06:bc:57:b1:e8: 72:8c:d0:3c:ab:87:63:e7:12:67:11:f1:65:7d:6b:7a:9f:a0: 07:20:c2:a7:4d:e5:77:a9:fe:a3:9e:f9:c3:cd:74:c3:00:53: 28:cb:2a:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+DkDhUYh0K3531tGQzzns/mJr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTA3MTgxODA3MDZaFw0yNTA3MjIwNTM1MDZaMDMxMTAvBgNV BAMTKDE5NjE2NDA4NDY3NjJDMkM2QTE2QUM5QzI4NzUxMjYyRjk0NENBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChd/Cbb95OQIUTtk1o0Jfo+I4m sxIsHGf2ta/nEX3Wu2oO2FxfnTcr6WuJwaTQvnOzXSFhty1jK8ddiht/R4QtiIlU vM30qybq4e63JRS6dJb13eVjVSFuzh1UdM5WIl9gnlgjc3KcUgY6dhc8ll8huDL3 sIUktSqxZ3TYhvr7JNHufO4bFkq2GTqOW3pY4TVOh5of4yNzA1ujruffljFXfIFW pPlQ1TovNbTxPWQBTjwFwWoSZp5TGbhPW0imWxvNJpycoaSmjBr9r5z2SCBSrxqo V1sv9IMhGpWLkMcZL0owTkaBvcS2+OQHKdd61XLZNcGZ4OWbnOzD1+QcwVNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGWFkCEZ2LCxqFqycKHUSYvlEyr0wHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFjxi8NvSupSGmRdFlUEhHy+pDkDIyzWx3A vaJjI0o1wj/tz3QkrNO5a1KSFR6HdGnjsn/sguP8PpQkmbEXCRlF02IhZNvFbQ0l 68sFClR65WkjdM6VzoMALmZu7KiL5JfXlXYWTjH5ySgo6Pw3xFY6zQFRRG9Qyhgh FOq1hAPTdK1kl61XlFWQrQ2mTFPW6JOO8tw8rJyNB3ZLx89kOOuFSm9CXh/4PaKa OptZYXHCgyuoEVU2MlkvTPtSaKzV0zh8WffVSej5zb58krUmm7BPccIGvFex6HKM 0Dyrh2PnEmcR8WV9a3qfoAcgwqdN5Xep/qOe+cPNdMMAUyjLKrE= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:15 2025 by rpki-client