$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft File: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json) Hash identifier: st1DB1gUXNQ2YM5YxPIRYqdJ4RVjnrGKhi7nYGQXX2M= Subject key identifier: 3A:3A:04:1E:E0:66:E7:E4:A6:4F:CD:6C:50:86:E2:E8:06:96:1E:EB Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 6F1A481BEB86E3DDBE28977447CDA273888F262B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft Manifest number: 050E Signing time: Sun 07 Sep 2025 08:00:59 +0000 Manifest this update: Sun 07 Sep 2025 07:55:59 +0000 Manifest next update: Wed 10 Sep 2025 10:14:59 +0000 Files and hashes: 1: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=) 2: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: Oi+v4vSiTSM9zUjltxmu968dUNXdnYr8A7jzZ4z/bOI=) 3: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: IHqBGTCjtlfYXD31qMdiLwpUWpx92TcrkDjOt0IIGwA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1a:48:1b:eb:86:e3:dd:be:28:97:74:47:cd:a2:73:88:8f:26:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Sep 7 07:55:59 2025 GMT Not After : Sep 10 10:14:59 2025 GMT Subject: CN=3A3A041EE066E7E4A64FCD6C5086E2E806961EEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:ad:05:7b:ae:30:21:81:44:a0:eb:c3:bc: 62:94:aa:1c:77:a2:86:3b:16:7f:a2:8e:00:30:03: 71:ee:ee:46:98:32:95:a3:50:99:c1:76:99:65:50: e8:90:0e:0f:c7:5d:5c:43:3d:62:6a:f9:7d:f5:3b: ad:18:3b:bd:43:7e:fb:fb:cf:15:19:76:d4:e1:0f: 6d:dd:0c:87:58:12:5e:9d:70:ae:5e:cc:7a:f0:f0: 4c:fe:f1:fe:36:43:55:11:78:0a:71:77:e8:c3:37: 7b:fc:51:e1:95:50:65:0b:3d:f7:68:12:83:db:03: 3c:bb:81:82:6d:74:f2:6f:ab:5d:9d:7b:d0:d4:71: 34:e1:6e:1f:ac:57:76:9a:78:34:b7:9a:81:6b:bf: 7b:86:0b:3c:94:a5:5f:63:ad:e8:cd:aa:b4:00:d5: d3:65:b6:23:3a:4e:58:e4:18:ec:5b:00:2e:eb:98: c6:e3:38:eb:6e:a9:40:2f:da:d4:f9:57:1a:81:f3: 4f:bd:0b:ab:83:e3:40:59:b5:d2:04:9a:a1:d7:1c: 8c:c5:84:82:61:22:af:e2:a5:2c:67:a6:af:43:c0: df:1a:7a:de:c7:23:16:23:1c:73:dc:01:bf:d9:13: e8:e0:84:3f:75:30:a3:76:41:a3:bc:42:67:07:6e: 2b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3A:04:1E:E0:66:E7:E4:A6:4F:CD:6C:50:86:E2:E8:06:96:1E:EB X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cc:29:ce:36:d4:7d:7f:67:5c:7e:47:14:15:08:a3:d8:59: 7f:4d:89:24:68:d3:48:40:a6:ba:53:93:52:a6:21:d0:ed:80: 44:95:c8:36:11:77:ae:25:6b:33:28:f2:da:74:69:b1:b5:f0: aa:c5:6f:45:33:28:aa:16:10:c5:94:02:82:1c:a7:87:7b:f4: a9:ed:ed:b3:16:15:29:25:35:37:c5:c1:b0:16:b8:25:cb:c1: ab:5c:69:7b:92:29:77:1a:85:30:06:d5:26:45:e6:3b:de:9d: 9f:fb:36:60:09:63:4c:ab:3f:87:bc:9d:a7:ac:a3:af:75:5a: 05:22:ef:10:b2:1d:64:f4:7e:d9:71:c0:aa:93:8a:55:14:6d: b9:7a:a1:9d:d8:14:b4:2e:a2:9b:21:f7:8f:1e:36:0d:67:94: 77:49:51:60:de:1b:ad:f4:1e:bf:98:35:7a:e3:e3:2c:f6:59: 1c:a4:a0:4b:11:62:eb:a5:83:00:90:7a:ed:96:54:6f:0a:f4: 74:2a:eb:d1:09:b6:c6:47:bd:12:e3:b2:51:13:3e:93:91:d2: 2f:95:ff:0b:5d:0d:aa:4f:e4:62:fa:e9:69:16:d2:a2:16:7d: 57:49:93:25:b7:63:93:89:de:af:b8:2b:ef:c7:50:e0:be:18: 6d:09:53:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbxpIG+uG492+KJd0R82ic4iPJiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yNTA5MDcwNzU1NTlaFw0yNTA5MTAxMDE0NTlaMDMxMTAvBgNV BAMTKDNBM0EwNDFFRTA2NkU3RTRBNjRGQ0Q2QzUwODZFMkU4MDY5NjFFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIq0Fe64wIYFEoOvDvGKUqhx3 ooY7Fn+ijgAwA3Hu7kaYMpWjUJnBdpllUOiQDg/HXVxDPWJq+X31O60YO71Dfvv7 zxUZdtThD23dDIdYEl6dcK5ezHrw8Ez+8f42Q1UReApxd+jDN3v8UeGVUGULPfdo EoPbAzy7gYJtdPJvq12de9DUcTThbh+sV3aaeDS3moFrv3uGCzyUpV9jrejNqrQA 1dNltiM6TljkGOxbAC7rmMbjOOtuqUAv2tT5VxqB80+9C6uD40BZtdIEmqHXHIzF hIJhIq/ipSxnpq9DwN8aet7HIxYjHHPcAb/ZE+jghD91MKN2QaO8QmcHbishAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOjoEHuBm5+SmT81sUIbi6AaWHuswHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIzNmU4OGQtZDU3My00Y2JiLWI0 NjAtYTBiOTY5YWE4NGQ1LzAvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAz RkNGRDI2NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7MKc421H1/Z1x+RxQVCKPYWX9NiSRo00hA prpTk1KmIdDtgESVyDYRd64lazMo8tp0abG18KrFb0UzKKoWEMWUAoIcp4d79Knt 7bMWFSklNTfFwbAWuCXLwatcaXuSKXcahTAG1SZF5jvenZ/7NmAJY0yrP4e8naes o691WgUi7xCyHWT0ftlxwKqTilUUbbl6oZ3YFLQuopsh948eNg1nlHdJUWDeG630 Hr+YNXrj4yz2WRykoEsRYuulgwCQeu2WVG8K9HQq69EJtsZHvRLjslETPpOR0i+V /wtdDapP5GL66WkW0qIWfVdJkyW3Y5OJ3q+4K+/HUOC+GG0JU5I= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:41 2025 by rpki-client