$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: 4vLv/DEwrDfJUvIb90sdfNVrjyVw+dMQUpWlqjcWb84= Subject key identifier: 06:73:F5:BB:A4:C1:83:FC:86:5E:3C:1F:EF:33:2F:4F:12:AA:99:C4 Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 5D3AA5D93D1E623503EEF2BEC50F1C771BC2867A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 0224 Signing time: Wed 03 Sep 2025 16:52:06 +0000 Manifest this update: Wed 03 Sep 2025 16:47:06 +0000 Manifest next update: Sat 06 Sep 2025 17:05:06 +0000 Files and hashes: 1: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: PLz5/9tMIkmrX9WNP/eC433wOkM4gPObjNtME34vqoI=) 2: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) 3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 17:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3a:a5:d9:3d:1e:62:35:03:ee:f2:be:c5:0f:1c:77:1b:c2:86:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Sep 3 16:47:06 2025 GMT Not After : Sep 6 17:05:06 2025 GMT Subject: CN=0673F5BBA4C183FC865E3C1FEF332F4F12AA99C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:75:ce:12:ca:a7:1f:66:b4:22:52:e2:e6: 69:5e:4d:b6:be:e0:9c:91:a0:d5:bb:b9:8a:52:48: 82:b6:9e:44:86:07:10:71:8a:4c:3b:67:21:8a:ba: 0c:93:ac:46:73:83:4b:6a:eb:5c:0d:78:86:14:29: 5d:2d:aa:f4:f0:9d:4b:c9:90:e5:6e:f6:f3:b6:c3: b7:3c:63:ee:8a:bd:78:13:98:ec:b8:45:9b:c0:c2: d5:e8:b0:f8:9d:97:1c:f2:2d:01:5a:f8:9b:b1:a5: 47:1a:26:4e:e4:6b:15:f7:e2:29:8c:0c:5c:84:ac: 92:10:0c:a8:6f:72:f0:9a:dc:5a:1b:80:20:b7:78: 0c:21:9b:46:9a:ca:5b:44:ea:2a:ac:42:80:d0:a9: 8e:09:4b:7c:ec:0e:49:39:e0:39:4e:73:8e:84:10: 60:69:a6:fa:3d:00:69:07:c5:24:f7:dd:76:41:5f: 3d:7e:27:10:59:d9:67:6d:a6:98:c0:93:71:15:ae: 16:cc:95:4d:2d:fc:86:d8:ac:f8:3c:9c:cd:2c:9c: a4:7c:f3:d7:82:ab:bd:46:bf:07:93:64:2c:d2:a3: e3:39:0e:6c:af:e7:34:11:32:b2:70:9b:95:94:9b: c2:6b:af:13:c4:56:93:82:f7:f0:85:78:c4:b5:63: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:73:F5:BB:A4:C1:83:FC:86:5E:3C:1F:EF:33:2F:4F:12:AA:99:C4 X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fc:bc:26:a3:f8:ee:55:6f:3c:78:f1:fd:6a:1b:31:a1:8e: 7d:46:45:01:2c:c1:9a:18:d8:63:00:a6:cc:09:8f:4c:4c:ab: af:a0:da:b0:8e:58:81:9f:9d:b5:a3:d4:85:48:f9:bc:17:47: e3:3d:2a:3d:af:10:66:bf:46:53:c8:bb:89:83:20:35:bc:75: 2d:20:2c:0f:48:a0:40:60:03:92:db:dd:26:6b:e7:2d:e3:3c: ed:38:4a:f2:dc:99:c7:de:6b:12:72:f8:5a:48:a0:89:9e:83: b3:bd:05:94:36:4a:cf:44:ac:92:ba:56:1d:7d:01:45:48:b4: 5d:f5:fb:e7:1e:b3:5b:a1:fc:b4:a8:7f:5c:fb:50:ba:a2:76: b4:b7:96:3d:ce:95:4f:a6:fb:af:7d:da:79:99:2f:1f:60:bd: 70:3f:fa:58:73:b3:d1:1b:b6:2b:e3:b4:d0:cf:11:24:4c:d8: 36:99:89:40:0e:8d:85:d3:77:22:b8:d8:02:99:a4:52:3a:d5: 46:f5:b1:3c:dc:81:f7:c1:a9:91:35:a0:70:16:91:ae:3b:0d: 7f:72:63:c2:fd:ca:14:40:ab:59:c8:8b:e3:11:de:dd:31:c6: dc:7b:0a:e0:88:c0:4a:80:72:e4:a3:00:9a:a5:f0:89:37:74: d4:72:d6:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTql2T0eYjUD7vK+xQ8cdxvChnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTA5MDMxNjQ3MDZaFw0yNTA5MDYxNzA1MDZaMDMxMTAvBgNV BAMTKDA2NzNGNUJCQTRDMTgzRkM4NjVFM0MxRkVGMzMyRjRGMTJBQTk5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYXXOEsqnH2a0IlLi5mleTba+ 4JyRoNW7uYpSSIK2nkSGBxBxikw7ZyGKugyTrEZzg0tq61wNeIYUKV0tqvTwnUvJ kOVu9vO2w7c8Y+6KvXgTmOy4RZvAwtXosPidlxzyLQFa+JuxpUcaJk7kaxX34imM DFyErJIQDKhvcvCa3FobgCC3eAwhm0aayltE6iqsQoDQqY4JS3zsDkk54DlOc46E EGBppvo9AGkHxST33XZBXz1+JxBZ2WdtppjAk3EVrhbMlU0t/IbYrPg8nM0snKR8 89eCq71GvweTZCzSo+M5Dmyv5zQRMrJwm5WUm8JrrxPEVpOC9/CFeMS1Y/ALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBnP1u6TBg/yGXjwf7zMvTxKqmcQwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ78vCaj+O5Vbzx48f1qGzGhjn1GRQEswZoY 2GMApswJj0xMq6+g2rCOWIGfnbWj1IVI+bwXR+M9Kj2vEGa/RlPIu4mDIDW8dS0g LA9IoEBgA5Lb3SZr5y3jPO04SvLcmcfeaxJy+FpIoImeg7O9BZQ2Ss9ErJK6Vh19 AUVItF31++ces1uh/LSof1z7ULqidrS3lj3OlU+m+6992nmZLx9gvXA/+lhzs9Eb tivjtNDPESRM2DaZiUAOjYXTdyK42AKZpFI61Ub1sTzcgffBqZE1oHAWka47DX9y Y8L9yhRAq1nIi+MR3t0xxtx7CuCIwEqAcuSjAJql8Ik3dNRy1qg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:10:46 2025 by rpki-client