$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: 84EaCgritMJZsM9SR+mEjkuEQEtbRDHl7iwB+aOos4w= Subject key identifier: 1B:46:F8:2D:37:04:F6:A0:CC:3E:19:21:07:04:F2:73:C3:5C:D6:76 Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 13EB1C3BD53205070C6AAC02C067E50E3482B977 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 01F0 Signing time: Sun 07 Sep 2025 11:02:19 +0000 Manifest this update: Sun 07 Sep 2025 10:57:19 +0000 Manifest next update: Wed 10 Sep 2025 12:14:19 +0000 Files and hashes: 1: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) 2: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: aqjjgo9NqIHjwWeUEoQJXx4LLXSJfVn9Uev+rlExGlY=) 3: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: Htm5ahdXQHhKpRzE/h5i9KHcwL0XsZbOLaHTHLcsMN8=) 4: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: j7/0o24Y/Dntb2SDxDz2B+Eis79rWFB0ghqmTnU55LQ=) 5: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) 6: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: sJUN/+XYslzThounXZW+MFwCm1lc8VEvrGvUm5/WqYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 12:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:eb:1c:3b:d5:32:05:07:0c:6a:ac:02:c0:67:e5:0e:34:82:b9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: Sep 7 10:57:19 2025 GMT Not After : Sep 10 12:14:19 2025 GMT Subject: CN=1B46F82D3704F6A0CC3E19210704F273C35CD676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e6:f9:13:43:82:d6:65:5c:d3:5a:a1:8d:b9: 6f:25:8e:2c:67:81:1b:ab:59:02:8a:cd:18:08:1b: 70:ba:e7:ac:7e:45:77:d2:fd:d9:a9:3d:a0:ac:2d: 63:38:88:fe:44:89:73:f6:18:2a:b2:a8:f6:c4:b2: db:95:e4:b8:3b:bf:ec:4e:00:bf:9c:c7:17:8c:90: b1:68:f4:d3:99:aa:fb:c0:05:f1:80:ac:6f:18:6b: 29:2e:8b:9b:9e:28:be:77:8e:66:5b:45:d4:c9:c3: 92:f2:8b:6c:ce:1c:d1:ca:3d:af:0e:cb:68:b6:89: 28:43:fc:9d:dc:bc:85:92:ce:79:ba:56:00:ec:80: b3:eb:06:f8:ae:13:a1:e6:bd:91:bd:fe:75:34:ac: 55:84:17:fc:7e:3a:dc:53:29:df:86:78:3b:b5:26: 9e:90:01:d6:94:13:dd:a1:3d:4e:71:05:c4:78:48: 63:54:0d:f3:d4:3a:f9:cd:72:46:d7:3a:6e:4a:f3: 1d:3c:d4:ae:77:fc:fd:20:66:33:86:9a:53:38:a6: 21:b9:ec:14:24:a7:4c:d6:57:24:0f:08:ce:ff:95: 95:b4:db:57:33:d2:df:00:d6:5a:08:6d:92:0c:64: 71:89:95:07:aa:a1:29:a3:b6:03:8a:cd:fb:a1:b8: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:46:F8:2D:37:04:F6:A0:CC:3E:19:21:07:04:F2:73:C3:5C:D6:76 X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:18:56:80:0c:61:97:a4:29:5c:ff:ac:88:43:f9:6b:39:86: d1:eb:19:14:3d:c4:58:a5:a0:a7:1c:dd:ca:c7:98:22:1b:05: 57:fb:e1:e7:b8:d9:d3:22:ff:9d:20:42:cf:11:76:13:4b:bd: 48:0f:ba:93:3b:5b:00:c8:d1:3b:a2:60:64:e9:55:58:72:f5: 80:4b:28:2c:19:3b:76:d0:04:a7:80:b1:d0:89:4e:80:c7:7e: 07:76:1c:5a:fb:9b:4f:cf:d3:8f:fd:2c:ed:24:3e:99:50:59: 98:67:e2:9b:fb:c0:c6:f5:29:84:9f:37:5d:70:67:ef:bb:04: d2:17:11:11:34:37:3d:ff:16:4f:a6:11:93:44:46:50:0c:7d: c8:36:80:43:a5:f2:54:6b:ff:07:9c:ee:0c:48:13:32:47:71: ea:c0:fc:ca:c9:02:47:51:a2:9d:be:f4:53:5f:65:73:80:20: 7e:18:c8:df:83:cc:73:ce:b2:e9:4e:6a:00:f7:bc:ea:ee:e7: 80:dc:c0:41:88:8a:ab:bf:64:fe:ed:6e:54:e6:31:b7:8b:29: 5e:3a:5c:81:67:68:19:3d:8c:b9:98:f8:a7:f8:5e:67:2b:7b: 09:92:fc:8a:34:76:1a:63:5d:77:9c:ad:8e:e3:60:a5:8f:f8: 91:ca:79:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+scO9UyBQcMaqwCwGflDjSCuXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNTA5MDcxMDU3MTlaFw0yNTA5MTAxMjE0MTlaMDMxMTAvBgNV BAMTKDFCNDZGODJEMzcwNEY2QTBDQzNFMTkyMTA3MDRGMjczQzM1Q0Q2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5vkTQ4LWZVzTWqGNuW8ljixn gRurWQKKzRgIG3C656x+RXfS/dmpPaCsLWM4iP5EiXP2GCqyqPbEstuV5Lg7v+xO AL+cxxeMkLFo9NOZqvvABfGArG8Yaykui5ueKL53jmZbRdTJw5Lyi2zOHNHKPa8O y2i2iShD/J3cvIWSznm6VgDsgLPrBviuE6HmvZG9/nU0rFWEF/x+OtxTKd+GeDu1 Jp6QAdaUE92hPU5xBcR4SGNUDfPUOvnNckbXOm5K8x081K53/P0gZjOGmlM4piG5 7BQkp0zWVyQPCM7/lZW021cz0t8A1loIbZIMZHGJlQeqoSmjtgOKzfuhuLnXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG0b4LTcE9qDMPhkhBwTyc8Nc1nYwHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0YVoAMYZekKVz/rIhD+Ws5htHrGRQ9xFil oKcc3crHmCIbBVf74ee42dMi/50gQs8RdhNLvUgPupM7WwDI0TuiYGTpVVhy9YBL KCwZO3bQBKeAsdCJToDHfgd2HFr7m0/P04/9LO0kPplQWZhn4pv7wMb1KYSfN11w Z++7BNIXERE0Nz3/Fk+mEZNERlAMfcg2gEOl8lRr/wec7gxIEzJHcerA/MrJAkdR op2+9FNfZXOAIH4YyN+DzHPOsulOagD3vOru54DcwEGIiqu/ZP7tblTmMbeLKV46 XIFnaBk9jLmY+Kf4XmcrewmS/Io0dhpjXXecrY7jYKWP+JHKeV4= -----END CERTIFICATE-----Generated at Tue Sep 9 01:24:11 2025 by rpki-client