$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: jxP61uyH0NcXViZ5HZh4HKpdTCWOrBIW5gKipBNBSqc= Subject key identifier: 1B:B4:94:D6:46:04:68:07:4A:4D:C7:C0:AF:25:5C:B7:BA:4A:85:25 Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 6F998A94A30B1751340610EEEBDFB45B61C663B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 01C5 Signing time: Sat 06 Sep 2025 07:10:40 +0000 Manifest this update: Sat 06 Sep 2025 07:05:40 +0000 Manifest next update: Tue 09 Sep 2025 18:27:40 +0000 Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: cVFaX5vsSnlCiBXiYi7VFBsU8ifDtbmqTWAW0Jfdf/M=) 2: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: o9/BwDHeHSdSdeuYGMGcNLwa2VS20E+Tz7Gqg5dipFg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:99:8a:94:a3:0b:17:51:34:06:10:ee:eb:df:b4:5b:61:c6:63:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Sep 6 07:05:40 2025 GMT Not After : Sep 9 18:27:40 2025 GMT Subject: CN=1BB494D6460468074A4DC7C0AF255CB7BA4A8525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:8a:b3:25:93:12:ff:7b:d8:26:fd:c2:47: 5d:24:ba:38:24:b2:21:b4:ef:e9:53:02:23:e4:15: ab:b7:4d:9a:b7:70:d5:f2:2e:96:b6:df:34:21:dd: 4d:ee:53:43:df:b8:35:9e:f4:4b:e3:fd:34:52:1c: 91:24:26:d3:ab:dd:99:df:bd:c3:95:c9:0f:96:fe: d3:c4:28:f2:76:0b:ab:4f:24:fd:51:ef:71:89:42: e7:a7:b0:78:4a:fe:df:c3:57:f5:1a:b3:1b:b9:00: 35:de:d3:a0:de:31:5d:c4:9e:47:58:0e:17:1a:7d: 44:1b:46:48:21:25:82:2c:d1:90:91:59:aa:92:75: cb:33:f8:bf:97:39:b1:71:f9:b3:9d:3e:11:9b:46: 26:ce:ef:02:af:e8:a3:7f:10:53:8d:95:88:9c:16: f4:f7:ab:4e:b4:76:3f:03:26:c8:5b:63:aa:c9:dd: 36:21:4f:ce:ec:74:5c:e0:2b:10:46:0a:f7:c0:8d: 69:b2:22:9b:02:26:ad:6c:1a:ba:e2:57:d1:e7:91: ae:53:b8:13:dd:47:30:3b:de:52:8a:9d:f4:b4:fd: 33:b1:c8:cb:cf:16:d1:70:2c:7d:2d:01:f6:66:e6: d8:1e:c9:ce:7f:e2:91:75:ea:3a:dd:45:c7:56:3d: 6b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B4:94:D6:46:04:68:07:4A:4D:C7:C0:AF:25:5C:B7:BA:4A:85:25 X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:71:8f:1a:bd:1c:9f:f7:67:63:92:5e:13:dd:ea:c6:d8:c3: 85:0c:98:dc:9e:a2:6d:15:1f:11:23:97:5f:1a:9c:d4:ea:0d: 3b:f2:e1:06:1f:a0:2e:d2:36:33:1f:09:a6:e6:ed:36:81:d0: d6:ce:bf:db:2a:68:27:98:1d:83:6c:30:3c:de:05:47:d4:a2: 41:b2:7c:72:13:4d:1f:a6:d6:17:7e:f2:9f:d3:e3:be:af:d5: 3b:3a:ae:2d:a1:9a:e8:fc:1d:cf:35:64:3e:03:d4:1b:70:c6: 65:21:57:18:ea:c9:64:98:53:84:7c:82:1d:89:14:ee:d2:e0: cf:00:a2:3c:02:f0:a2:78:86:fb:91:58:6c:7a:35:ea:18:33: 13:da:26:2f:cc:15:36:8a:ab:8c:db:25:59:5c:3d:39:fa:76: 88:0a:f6:86:6c:2d:b7:c4:32:e9:68:38:55:c3:32:29:4f:96: ea:46:44:75:01:f4:b4:e3:76:37:5c:a5:3d:4b:e0:b0:5b:a7: 0e:bd:60:96:09:70:eb:87:1f:31:7f:fd:02:f6:17:59:39:e1: f2:ab:77:25:5a:d8:74:6f:de:4d:b5:2d:44:95:4d:4b:e6:e8: 01:c1:e2:b0:f8:3a:2e:18:e5:f8:16:c6:d1:15:11:a3:55:46: 97:c5:0e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5mKlKMLF1E0BhDu69+0W2HGY7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNTA5MDYwNzA1NDBaFw0yNTA5MDkxODI3NDBaMDMxMTAvBgNV BAMTKDFCQjQ5NEQ2NDYwNDY4MDc0QTREQzdDMEFGMjU1Q0I3QkE0QTg1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChsIqzJZMS/3vYJv3CR10kujgk siG07+lTAiPkFau3TZq3cNXyLpa23zQh3U3uU0PfuDWe9Evj/TRSHJEkJtOr3Znf vcOVyQ+W/tPEKPJ2C6tPJP1R73GJQuensHhK/t/DV/Uasxu5ADXe06DeMV3EnkdY DhcafUQbRkghJYIs0ZCRWaqSdcsz+L+XObFx+bOdPhGbRibO7wKv6KN/EFONlYic FvT3q060dj8DJshbY6rJ3TYhT87sdFzgKxBGCvfAjWmyIpsCJq1sGrriV9Hnka5T uBPdRzA73lKKnfS0/TOxyMvPFtFwLH0tAfZm5tgeyc5/4pF16jrdRcdWPWtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG7SU1kYEaAdKTcfAryVct7pKhSUwHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNxjxq9HJ/3Z2OSXhPd6sbYw4UMmNyeom0V HxEjl18anNTqDTvy4QYfoC7SNjMfCabm7TaB0NbOv9sqaCeYHYNsMDzeBUfUokGy fHITTR+m1hd+8p/T476v1Ts6ri2hmuj8Hc81ZD4D1BtwxmUhVxjqyWSYU4R8gh2J FO7S4M8AojwC8KJ4hvuRWGx6NeoYMxPaJi/MFTaKq4zbJVlcPTn6dogK9oZsLbfE MuloOFXDMilPlupGRHUB9LTjdjdcpT1L4LBbpw69YJYJcOuHHzF//QL2F1k54fKr dyVa2HRv3k21LUSVTUvm6AHB4rD4Oi4Y5fgWxtEVEaNVRpfFDqg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:21 2025 by rpki-client