$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft File: 3E0D060F214DF8E6493243033EBD30ABD627ED36.mft (raw, json) Hash identifier: rVLiH+gErLH/4oj2TO11hb8uRw/j7orwN0NAYsaUjMU= Subject key identifier: 16:EB:00:3A:E7:EB:DE:4A:93:BD:B9:30:D8:55:6C:9B:E2:1C:7A:91 Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Certificate serial: 73BD2DE2E261445DF3DD4926A66A107350B77736 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft Manifest number: 034F Signing time: Wed 03 Sep 2025 15:41:22 +0000 Manifest this update: Wed 03 Sep 2025 15:36:22 +0000 Manifest next update: Sat 06 Sep 2025 21:54:22 +0000 Files and hashes: 1: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: JWZBNDnWrENdctaqQmnbVevM+3EqtVlewochx0EfS+s=) 2: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: xxFYLgnOs6wDgHlT3HJi54CQjUA2KWj+T7DvpjE3DPU=) 3: 3E0D060F214DF8E6493243033EBD30ABD627ED36.crl (hash: wRwiVJKmUtWagZafjJqTxsB6mWVUU4Of2w5edQpZysE=) 4: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: 3D9vuP9WnybAIy/tjpIyzYKT6Y/ASbbbLJ7Kn+x1z7Q=) 5: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: CbVKZtVYvVOggDO1uOKPHPfiUdMOnMjVJFDe5xCk8Yw=) 6: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: fOY5dkAcQph8EWJTLprRbPuleZdE/MLjzsb7GZ9f9kI=) 7: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: jx7v0Idpebq1Ou6PCUn6oQ0kEGw/RyRx4sL+jxJLcZU=) 8: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: weBnxCBwkaeNxkdjFOdohMOR+sXn3+vCk0UPpAqaQI8=) 9: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: Ez6QIdOXrwH3cf8oEyXk+iBGNJ8xFXIz0jGNdzgCm5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 21:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:bd:2d:e2:e2:61:44:5d:f3:dd:49:26:a6:6a:10:73:50:b7:77:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Validity Not Before: Sep 3 15:36:22 2025 GMT Not After : Sep 6 21:54:22 2025 GMT Subject: CN=16EB003AE7EBDE4A93BDB930D8556C9BE21C7A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:69:27:0a:05:1b:54:10:be:10:9e:8b:8c: 90:51:eb:f9:77:68:d0:c4:c0:06:76:11:42:3b:f0: d8:81:43:62:8a:ed:83:13:ce:df:31:bd:62:3f:9c: 8b:53:4f:60:d6:67:8c:9a:c7:e0:f8:a6:77:55:c5: 43:0e:84:3c:f0:25:47:22:49:35:d0:f9:a9:0b:87: c9:d7:3e:a4:ae:46:4b:af:28:b5:5e:48:ff:19:01: 16:8a:a1:2e:0f:bf:fb:ca:2b:f4:89:36:24:7b:84: 01:e0:33:a8:3c:31:72:58:5c:5f:1d:46:6a:d0:f7: bd:10:42:ff:13:a9:33:65:31:d4:1a:24:f6:c5:eb: 27:13:63:71:a0:3f:d6:49:7f:80:9a:e3:9b:ff:c1: 1d:69:28:31:8e:ce:e1:9e:06:1c:32:d2:d9:44:cc: cd:d3:3b:eb:d9:19:78:12:33:6a:73:59:17:3b:ed: 59:5f:43:d2:d8:a6:d3:a3:fc:67:4a:38:9e:62:11: 5c:a3:eb:2b:41:47:ee:c2:fa:a5:76:f8:db:3c:79: 47:b6:31:ff:92:8d:ec:c2:57:fb:8b:94:31:6d:63: 77:6b:27:d6:a5:c0:9b:7e:4e:a1:4e:62:68:36:8b: 9c:6d:0e:1b:4d:a5:e6:f6:4b:45:17:cf:0e:07:8a: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EB:00:3A:E7:EB:DE:4A:93:BD:B9:30:D8:55:6C:9B:E2:1C:7A:91 X509v3 Authority Key Identifier: keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:05:48:eb:5a:c5:c8:61:fe:24:9c:2a:ce:5e:7f:e1:0b:5c: 4a:b4:c0:df:34:ef:cb:d1:a4:48:96:1b:f4:38:ab:be:ed:e5: e4:b1:bf:e8:c8:89:c2:21:6f:de:a6:8b:35:a1:e9:8f:bf:b6: 86:81:66:7f:35:f7:37:15:16:56:10:6f:93:44:dd:7d:05:ff: d5:14:20:0d:24:49:dd:32:00:a8:35:ca:f0:f4:f4:0b:22:3c: e4:b6:1e:71:f6:5b:8f:ba:5e:ea:2b:60:49:51:ae:f8:17:3a: f8:14:4d:5b:c1:b7:06:15:76:85:02:74:43:5e:de:35:f4:2f: df:4b:98:2f:52:a6:1b:a3:14:80:b3:f2:01:26:9d:bd:39:0a: c4:2b:17:8f:bc:94:ad:b3:f6:2f:34:9f:a8:61:8e:25:f0:df: 4a:b5:a9:e9:15:4c:a0:3b:cb:22:78:93:cd:13:e0:0a:dd:d4: 09:e4:b4:2b:ad:ce:a6:37:4b:55:84:67:f2:fa:8d:07:22:64: 15:c4:ab:09:0c:d0:38:39:3a:6f:a3:87:67:73:e5:77:a8:38: 3e:39:ef:9d:b7:4d:a7:80:b3:7a:95:a0:bb:95:1f:75:21:2a: 63:e3:18:ef:cc:e3:8f:d8:bf:75:d1:3a:a8:d3:b4:be:67:70: 46:85:ea:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc70t4uJhRF3z3UkmpmoQc1C3dzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJE NjI3RUQzNjAeFw0yNTA5MDMxNTM2MjJaFw0yNTA5MDYyMTU0MjJaMDMxMTAvBgNV BAMTKDE2RUIwMDNBRTdFQkRFNEE5M0JEQjkzMEQ4NTU2QzlCRTIxQzdBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3P2knCgUbVBC+EJ6LjJBR6/l3 aNDEwAZ2EUI78NiBQ2KK7YMTzt8xvWI/nItTT2DWZ4yax+D4pndVxUMOhDzwJUci STXQ+akLh8nXPqSuRkuvKLVeSP8ZARaKoS4Pv/vKK/SJNiR7hAHgM6g8MXJYXF8d RmrQ970QQv8TqTNlMdQaJPbF6ycTY3GgP9ZJf4Ca45v/wR1pKDGOzuGeBhwy0tlE zM3TO+vZGXgSM2pzWRc77VlfQ9LYptOj/GdKOJ5iEVyj6ytBR+7C+qV2+Ns8eUe2 Mf+SjezCV/uLlDFtY3drJ9alwJt+TqFOYmg2i5xtDhtNpeb2S0UXzw4HirO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFusAOufr3kqTvbkw2FVsm+IcepEwHwYDVR0j BBgwFoAUPg0GDyFN+OZJMkMDPr0wq9Yn7TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjRmODUxMS0wN2IzLTRhNjEtYmQwNC0yZTY2NWM5Mjc4ZmMvMC8zRTBEMDYwRjIx NERGOEU2NDkzMjQzMDMzRUJEMzBBQkQ2MjdFRDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJENjI3 RUQzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI0Zjg1MTEtMDdiMy00YTYxLWJk MDQtMmU2NjVjOTI3OGZjLzAvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMw QUJENjI3RUQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOUFSOtaxchh/iScKs5ef+ELXEq0wN8078vR pEiWG/Q4q77t5eSxv+jIicIhb96mizWh6Y+/toaBZn819zcVFlYQb5NE3X0F/9UU IA0kSd0yAKg1yvD09AsiPOS2HnH2W4+6XuorYElRrvgXOvgUTVvBtwYVdoUCdENe 3jX0L99LmC9SphujFICz8gEmnb05CsQrF4+8lK2z9i80n6hhjiXw30q1qekVTKA7 yyJ4k80T4Ard1AnktCutzqY3S1WEZ/L6jQciZBXEqwkM0Dg5Om+jh2dz5XeoOD45 7523TaeAs3qVoLuVH3UhKmPjGO/M44/Yv3XROqjTtL5ncEaF6o0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:17 2025 by rpki-client