$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: nTOXC19IMe4NO8d+eeEC6KmhU/R237vK8mzTo4rzgMM= Subject key identifier: 50:C7:D6:38:6A:A2:DC:52:B7:8F:4E:13:B5:5E:60:93:D5:88:D8:E9 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 62A6A3E830006CAF8E5CDD347FEC9A47865944A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 0264 Signing time: Sun 07 Sep 2025 00:51:33 +0000 Manifest this update: Sun 07 Sep 2025 00:46:33 +0000 Manifest next update: Wed 10 Sep 2025 05:12:33 +0000 Files and hashes: 1: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 7kMgl/NBAAfJwU+xnPHcsFS6CNKIZl6ydoYTByVrcR4=) 2: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: hct67R+/IHQnDXwJng2i3aVC3dkkDuKgbstOBDaR5yg=) 3: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: ABGCcK0TboSKN20K4dPkcf3C/xR1IoqJbw9jVUWJS7I=) 4: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI=) 5: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=) 6: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: QPCw3h+jt3ndl5rv2sP92pMUKkNEZOsorMtTNe9C8as=) 7: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=) 8: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: BEhpwpF70mjChRFPsier4txZQgVORlmMjII5mo8kK/Y=) 9: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a6:a3:e8:30:00:6c:af:8e:5c:dd:34:7f:ec:9a:47:86:59:44:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Sep 7 00:46:33 2025 GMT Not After : Sep 10 05:12:33 2025 GMT Subject: CN=50C7D6386AA2DC52B78F4E13B55E6093D588D8E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:3a:ea:47:ee:a5:97:42:01:f8:3f:ea:61: cf:56:ee:61:a4:e0:fc:33:11:4a:47:e7:a8:30:81: a0:b8:6f:f1:ab:84:74:df:dd:d0:ac:75:5c:fa:24: 77:f3:56:2c:ea:28:e7:11:55:65:22:16:fc:3f:46: 53:3b:50:81:74:c1:84:6d:9d:06:38:6e:7c:d6:dd: 7f:78:b5:d6:47:5d:8a:0b:bb:ed:6c:38:91:50:68: ea:43:b5:b1:58:40:46:e7:e6:b9:bd:9e:b4:da:d1: e7:fb:54:0a:f4:c9:17:c6:57:e2:b7:b3:cd:0d:85: e6:34:b1:78:61:93:08:86:e6:49:ad:b2:2e:ee:a7: 6e:ed:ae:65:d3:b4:fe:39:90:82:6f:1e:b1:33:1b: 7b:65:dc:8f:f5:6c:c4:8f:39:de:e1:7e:5a:35:19: b0:74:c6:12:5a:db:ff:fc:ca:c8:52:87:fd:de:39: 13:0e:7b:14:9b:0a:46:70:6a:68:24:aa:74:be:bb: a0:55:34:b5:2d:05:01:08:2a:8a:54:79:f4:ab:91: 19:36:ce:91:b3:ac:fa:5f:9e:8c:02:55:eb:48:62: cf:4b:4f:80:24:f1:fc:07:b1:c3:7c:c1:29:30:c9: 8e:3e:ad:de:71:1b:3a:db:85:3f:81:9f:c4:68:4c: 53:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C7:D6:38:6A:A2:DC:52:B7:8F:4E:13:B5:5E:60:93:D5:88:D8:E9 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:09:db:cd:65:a0:85:e6:cc:fc:ac:03:36:5f:a4:42:54:8e: c3:68:e9:5a:1e:fd:ed:73:9c:af:ce:b6:30:f1:0b:ae:c9:36: 08:95:dd:67:96:51:24:aa:46:38:d7:57:e6:b9:2c:eb:eb:62: 52:0f:02:9b:69:a9:35:f5:f8:25:7e:0f:51:25:d3:9b:eb:15: 73:66:f8:66:85:53:c8:49:40:c8:25:41:58:52:dc:65:f6:0f: ca:77:78:85:c0:7c:25:6e:02:dc:5e:de:0b:e1:92:ac:e0:06: 8b:22:28:6a:89:37:66:d0:b1:bd:e4:f5:fe:82:d7:a8:d0:2d: b2:d5:14:01:30:b3:2d:87:b5:03:83:a1:62:2d:2e:e5:d3:7f: 93:f8:2a:e7:4a:57:2c:ee:4e:f5:b6:9e:4c:44:2d:82:b6:55: ab:6d:40:02:9d:0d:25:50:3f:7f:cf:15:bc:ee:78:94:28:90: 0c:fe:67:ff:b1:ea:ab:42:4e:d9:d9:c3:1a:e3:57:05:25:01: cd:05:ad:fc:51:40:d2:1c:3a:a9:24:81:d1:a7:56:ad:b9:3b: 31:7e:c8:37:0f:9e:fc:69:19:bb:99:75:97:ff:8f:ac:93:df: 48:2e:21:51:7b:79:a8:be:74:e5:1c:d0:2e:fd:a2:3c:a8:59: 93:0d:0a:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqaj6DAAbK+OXN00f+yaR4ZZRKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTA5MDcwMDQ2MzNaFw0yNTA5MTAwNTEyMzNaMDMxMTAvBgNV BAMTKDUwQzdENjM4NkFBMkRDNTJCNzhGNEUxM0I1NUU2MDkzRDU4OEQ4RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cjrqR+6ll0IB+D/qYc9W7mGk 4PwzEUpH56gwgaC4b/GrhHTf3dCsdVz6JHfzVizqKOcRVWUiFvw/RlM7UIF0wYRt nQY4bnzW3X94tdZHXYoLu+1sOJFQaOpDtbFYQEbn5rm9nrTa0ef7VAr0yRfGV+K3 s80NheY0sXhhkwiG5kmtsi7up27trmXTtP45kIJvHrEzG3tl3I/1bMSPOd7hflo1 GbB0xhJa2//8yshSh/3eORMOexSbCkZwamgkqnS+u6BVNLUtBQEIKopUefSrkRk2 zpGzrPpfnowCVetIYs9LT4Ak8fwHscN8wSkwyY4+rd5xGzrbhT+Bn8RoTFOhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUMfWOGqi3FK3j04TtV5gk9WI2OkwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUJ281loIXmzPysAzZfpEJUjsNo6Voe/e1z nK/OtjDxC67JNgiV3WeWUSSqRjjXV+a5LOvrYlIPAptpqTX1+CV+D1El05vrFXNm +GaFU8hJQMglQVhS3GX2D8p3eIXAfCVuAtxe3gvhkqzgBosiKGqJN2bQsb3k9f6C 16jQLbLVFAEwsy2HtQODoWItLuXTf5P4KudKVyzuTvW2nkxELYK2VattQAKdDSVQ P3/PFbzueJQokAz+Z/+x6qtCTtnZwxrjVwUlAc0FrfxRQNIcOqkkgdGnVq25OzF+ yDcPnvxpGbuZdZf/j6yT30guIVF7eai+dOUc0C79ojyoWZMNChQ= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:47 2025 by rpki-client