$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: 59+wYpp2Rdbq4c90oRlEjEGW4/Dogl5X3mpMQ3mw0Wc= Subject key identifier: BB:AF:5F:E2:77:3D:97:0B:3F:07:72:94:24:DA:4C:47:72:AC:C6:3C Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 457D90DC52194A4E241E1A316C58D05F03464AD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 0225 Signing time: Fri 05 Sep 2025 12:22:02 +0000 Manifest this update: Fri 05 Sep 2025 12:17:02 +0000 Manifest next update: Mon 08 Sep 2025 16:03:02 +0000 Files and hashes: 1: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: zeRE8kRLU10fZinrxheN0Pa2vJERrJvGi+x+q9dKzBY=) 2: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: 3HF7GKrMWvA2HVJvaEA0TLWlABe/FvvXdYdd308g/bM=) 3: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=) 4: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=) 5: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=) 6: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: VUbT8SHEyKOKmASLTaMwWEhd8ggbwmzz2pEnc4bB2PQ=) 7: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=) 8: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=) 9: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=) 10: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=) 11: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: r2yKO3KrSmkrfjQ84qnMxwLYCnCinVawrYAR52ueF/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7d:90:dc:52:19:4a:4e:24:1e:1a:31:6c:58:d0:5f:03:46:4a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Sep 5 12:17:02 2025 GMT Not After : Sep 8 16:03:02 2025 GMT Subject: CN=BBAF5FE2773D970B3F07729424DA4C4772ACC63C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:73:2b:91:c3:32:04:66:67:be:70:7a:a2: 7e:6a:be:07:7a:cf:d2:89:c3:fe:c8:0a:35:38:98: 0e:0b:16:00:5c:f4:23:6c:1b:67:4f:bb:4b:99:ab: c9:b2:9c:08:29:7e:04:13:5c:bb:d6:7e:e8:7a:6b: 19:8c:b2:e3:5f:95:20:37:78:ed:e4:d3:71:e7:cd: 26:8f:cf:e6:49:d4:7c:d8:ca:f9:74:08:b9:7b:58: 11:1c:91:96:ca:6e:cd:04:9f:c6:da:95:37:33:79: cb:a7:05:16:f1:c3:30:3f:6d:4e:30:78:60:fe:d5: 15:70:14:1c:9a:72:17:42:99:ff:c0:79:6d:dd:a9: be:81:5c:68:ae:bb:ff:90:3d:db:41:0e:ef:56:e1: 0f:ad:2c:2c:11:a2:26:c4:0e:1f:f1:1a:86:ee:86: 44:e5:6a:2c:18:ea:d5:fd:08:59:68:77:c1:af:6e: b8:d0:9e:62:c3:96:67:9b:8b:9b:a8:49:96:7c:e7: 57:8b:68:42:89:97:2a:13:80:ef:c6:04:35:bc:42: c7:82:97:21:cc:b5:57:17:ea:f9:48:d3:27:98:73: b1:de:cd:e0:7c:2b:fb:97:09:2d:83:c0:53:77:37: cd:37:79:3e:5d:08:90:a0:83:e1:ce:fd:cc:cb:43: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AF:5F:E2:77:3D:97:0B:3F:07:72:94:24:DA:4C:47:72:AC:C6:3C X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:98:9d:08:1b:ba:9e:91:06:42:fe:51:fe:01:21:49:69:a5: 54:ee:2a:7b:4d:75:7b:11:d6:1d:84:d8:53:20:30:e8:50:1a: 32:20:34:9e:1a:96:59:0e:ba:ef:e5:3b:f1:89:29:10:5b:ed: fc:39:5b:a5:6a:00:95:26:96:6c:6f:b6:93:bb:9b:b3:e0:07: 1d:e2:f7:51:97:e4:26:82:7c:03:7a:26:62:2d:00:64:cf:ae: 6c:18:c3:3e:17:5c:17:bb:79:b2:4c:65:71:50:1a:41:30:b5: e4:3a:86:2e:3f:ba:f0:92:a0:32:88:b4:49:f1:02:1d:d5:57: 4d:62:75:4a:69:e7:b2:af:6b:4e:6f:9c:b4:be:f3:3c:dd:4a: 6c:ba:7e:13:c2:34:98:68:68:2a:b6:dd:7d:a5:2b:f0:d3:b3: ba:4a:45:50:1c:9a:c8:3b:80:37:11:aa:37:83:40:e8:16:a0: c5:53:2a:e5:05:53:a8:97:6a:20:83:9e:e7:4d:cd:b4:ca:8a: e3:d8:0e:58:74:65:81:d5:79:f7:b3:11:c9:89:e6:e9:24:d4: ce:05:29:36:b3:26:e7:ee:62:7e:51:51:46:68:6b:a8:d9:e2: 4e:95:ac:2b:57:60:00:c7:fe:b8:85:fb:10:8f:33:e8:7a:f5: c0:9d:4a:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURX2Q3FIZSk4kHhoxbFjQXwNGStUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTA5MDUxMjE3MDJaFw0yNTA5MDgxNjAzMDJaMDMxMTAvBgNV BAMTKEJCQUY1RkUyNzczRDk3MEIzRjA3NzI5NDI0REE0QzQ3NzJBQ0M2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nnMrkcMyBGZnvnB6on5qvgd6 z9KJw/7ICjU4mA4LFgBc9CNsG2dPu0uZq8mynAgpfgQTXLvWfuh6axmMsuNflSA3 eO3k03HnzSaPz+ZJ1HzYyvl0CLl7WBEckZbKbs0En8balTczecunBRbxwzA/bU4w eGD+1RVwFByachdCmf/AeW3dqb6BXGiuu/+QPdtBDu9W4Q+tLCwRoibEDh/xGobu hkTlaiwY6tX9CFlod8GvbrjQnmLDlmebi5uoSZZ851eLaEKJlyoTgO/GBDW8QseC lyHMtVcX6vlI0yeYc7HezeB8K/uXCS2DwFN3N803eT5dCJCgg+HO/czLQ8ozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu69f4nc9lws/B3KUJNpMR3KsxjwwHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaYnQgbup6RBkL+Uf4BIUlppVTuKntNdXsR 1h2E2FMgMOhQGjIgNJ4allkOuu/lO/GJKRBb7fw5W6VqAJUmlmxvtpO7m7PgBx3i 91GX5CaCfAN6JmItAGTPrmwYwz4XXBe7ebJMZXFQGkEwteQ6hi4/uvCSoDKItEnx Ah3VV01idUpp57Kva05vnLS+8zzdSmy6fhPCNJhoaCq23X2lK/DTs7pKRVAcmsg7 gDcRqjeDQOgWoMVTKuUFU6iXaiCDnudNzbTKiuPYDlh0ZYHVefezEcmJ5ukk1M4F KTazJufuYn5RUUZoa6jZ4k6VrCtXYADH/riF+xCPM+h69cCdSsc= -----END CERTIFICATE-----Generated at Sat Sep 6 11:59:09 2025 by rpki-client