$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft (raw, json) Hash identifier: soMDU6/0OvsfGeFGyyKCFmI0AFinejub61Bb5uwJF8Q= Subject key identifier: 41:8C:F8:36:9D:4D:34:31:62:C5:27:90:C4:5A:1A:34:74:24:57:31 Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Certificate serial: 7C14A6A6BBD62B46B6E5C011A900DB0F63E864A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft Manifest number: 020B Signing time: Sun 07 Sep 2025 09:31:56 +0000 Manifest this update: Sun 07 Sep 2025 09:26:56 +0000 Manifest next update: Wed 10 Sep 2025 12:27:56 +0000 Files and hashes: 1: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl (hash: lQqoqcJZUmrwjJRx7sxMS/Z8UXaWj/EzImECFaCmM3M=) 2: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: TsTDpWhEe0S4QbX7Nvx05CapjsmJk1el8Dy5qKfw9Z4=) 3: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: 51ekgtNLYDLFINvFYDj/N8stn5dpVipAbdc9vPbRQ7I=) 4: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: Ykg6X7TmWGcN3xNxQzs8nCjH8QlPm6F3Uq9zQ4bEBTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:14:a6:a6:bb:d6:2b:46:b6:e5:c0:11:a9:00:db:0f:63:e8:64:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Validity Not Before: Sep 7 09:26:56 2025 GMT Not After : Sep 10 12:27:56 2025 GMT Subject: CN=418CF8369D4D343162C52790C45A1A3474245731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:04:5b:50:1f:1c:55:cd:73:b2:4b:a2:53:79: 0d:1e:62:df:de:16:81:1f:44:9e:94:1b:a8:e7:5c: 1f:d6:f3:2d:9f:66:49:e7:01:29:0c:00:86:56:31: c0:8d:48:c4:97:e8:e2:17:94:43:9f:e9:d9:fd:c7: e5:6b:97:27:8d:52:99:cc:90:23:0d:07:2f:ff:b3: 3f:09:73:ee:ad:75:d9:25:52:5b:40:7b:0f:6f:73: 00:36:94:59:93:7c:35:aa:88:d6:c8:a5:72:14:b3: 83:06:27:1a:b6:a7:37:e4:49:6b:72:e7:c9:ff:8e: 7b:11:dd:f9:dd:2b:4e:6c:d2:86:e6:c7:dc:44:2a: 70:7e:d5:7f:26:6e:63:7e:95:83:40:22:5b:3f:80: d4:d8:7e:83:8b:ca:0a:ca:55:62:eb:11:a1:6d:7a: 7e:b8:ef:5c:bc:b4:9b:0b:df:f2:a9:c4:88:94:df: 1d:d8:79:75:a3:4f:bd:6b:01:e9:6a:90:39:0d:23: d7:12:ba:a5:57:0e:09:fd:30:34:07:b5:75:fe:2f: 8b:dd:ec:05:55:46:34:97:c3:54:8e:41:bc:b5:59: 95:db:54:d3:c0:e5:9b:b3:d7:b4:2a:e4:ee:06:6b: 94:f3:c6:a0:85:fb:38:0f:3a:81:84:98:aa:19:ff: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:F8:36:9D:4D:34:31:62:C5:27:90:C4:5A:1A:34:74:24:57:31 X509v3 Authority Key Identifier: keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c4:60:08:9f:87:c3:51:d9:d6:b9:0e:94:9a:81:30:65:5e: 97:f6:c9:f5:65:66:04:f7:54:f4:c0:6e:1e:a5:a4:2f:a4:25: b7:d9:1a:82:cb:02:01:a5:f4:7f:e6:33:6a:8b:67:b9:fc:88: a9:88:e6:11:75:ac:25:22:c4:04:ec:fd:08:07:12:5b:12:56: f8:d1:21:25:8a:9d:76:92:e6:53:fa:dd:33:c4:0a:14:b9:ea: ce:b7:d6:31:77:38:6a:c2:65:c5:b3:00:74:3b:55:48:a0:d8: 39:23:d5:4a:53:70:36:ec:76:50:ae:60:74:63:f0:7f:e3:15: e0:d7:dc:eb:cc:6f:46:01:f2:94:94:7c:f8:01:d0:fe:f7:b7: c8:af:3f:55:7b:1c:45:ae:76:d3:a7:d6:01:f4:99:73:97:ed: 62:10:c5:cb:6a:04:d3:1f:af:3e:4c:a4:43:bf:20:6a:25:d7: 04:90:ab:c6:a3:f6:00:fb:c4:51:31:00:24:d4:7f:96:70:48: ee:57:ed:41:47:52:c3:19:7c:2c:34:07:e2:db:e8:49:30:91: cd:58:db:9f:7c:cd:87:40:8e:01:7e:f3:99:1b:72:16:04:07: 27:cd:e8:a3:95:f4:62:c4:5e:96:d2:24:f1:86:88:b4:82:96: a8:7f:05:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBSmprvWK0a25cARqQDbD2PoZKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy MkNCREVFOTAeFw0yNTA5MDcwOTI2NTZaFw0yNTA5MTAxMjI3NTZaMDMxMTAvBgNV BAMTKDQxOENGODM2OUQ0RDM0MzE2MkM1Mjc5MEM0NUExQTM0NzQyNDU3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBFtQHxxVzXOyS6JTeQ0eYt/e FoEfRJ6UG6jnXB/W8y2fZknnASkMAIZWMcCNSMSX6OIXlEOf6dn9x+VrlyeNUpnM kCMNBy//sz8Jc+6tddklUltAew9vcwA2lFmTfDWqiNbIpXIUs4MGJxq2pzfkSWty 58n/jnsR3fndK05s0obmx9xEKnB+1X8mbmN+lYNAIls/gNTYfoOLygrKVWLrEaFt en6471y8tJsL3/KpxIiU3x3YeXWjT71rAelqkDkNI9cSuqVXDgn9MDQHtXX+L4vd 7AVVRjSXw1SOQby1WZXbVNPA5Zuz17Qq5O4Ga5TzxqCF+zgPOoGEmKoZ/xKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYz4Np1NNDFixSeQxFoaNHQkVzEwHwYDVR0j BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC REVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1 NzAyMkNCREVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjEYAifh8NR2da5DpSagTBlXpf2yfVlZgT3 VPTAbh6lpC+kJbfZGoLLAgGl9H/mM2qLZ7n8iKmI5hF1rCUixATs/QgHElsSVvjR ISWKnXaS5lP63TPEChS56s631jF3OGrCZcWzAHQ7VUig2Dkj1UpTcDbsdlCuYHRj 8H/jFeDX3OvMb0YB8pSUfPgB0P73t8ivP1V7HEWudtOn1gH0mXOX7WIQxctqBNMf rz5MpEO/IGol1wSQq8aj9gD7xFExACTUf5ZwSO5X7UFHUsMZfCw0B+Lb6Ekwkc1Y 2598zYdAjgF+85kbchYEByfN6KOV9GLEXpbSJPGGiLSClqh/BUs= -----END CERTIFICATE-----Generated at Sun Sep 7 13:54:27 2025 by rpki-client