$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: sDpnMJxgV8ms0mBhV9cW8Vyc5SZlOUbyN7L2MB3ge4E= Subject key identifier: FD:18:75:37:21:1B:EF:C6:B2:2F:AC:56:98:49:46:1A:C1:E3:34:A0 Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 111FD58ABA1C462E6BF965AF41A54A12E17B5CDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 0243 Signing time: Fri 17 Oct 2025 17:31:48 +0000 Manifest this update: Fri 17 Oct 2025 17:26:48 +0000 Manifest next update: Mon 20 Oct 2025 22:42:48 +0000 Files and hashes: 1: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 2: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) 3: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: ibP4vjvhUR0gIoG3AFODgNcfl9XimG2ly44SHqkS9ow=) 4: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1f:d5:8a:ba:1c:46:2e:6b:f9:65:af:41:a5:4a:12:e1:7b:5c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Oct 17 17:26:48 2025 GMT Not After : Oct 20 22:42:48 2025 GMT Subject: CN=FD187537211BEFC6B22FAC569849461AC1E334A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:9f:45:6a:72:a0:90:66:32:44:7f:df:99: 85:90:19:b4:f8:06:8c:05:63:a9:ca:a8:7d:2b:46: f9:dc:61:52:d8:8d:9b:e2:ed:5f:dc:fd:b9:b6:72: 55:18:f9:63:9c:b0:a4:5e:49:21:f5:70:5a:ca:7f: 29:23:06:c1:84:dc:9c:01:ab:bf:72:dc:06:e3:0e: fb:17:cb:39:38:7c:13:79:24:4f:b0:0b:4b:3c:78: 4b:87:3d:3a:41:c7:dc:25:74:bb:10:7f:26:47:36: 73:a7:63:7e:d5:62:21:4a:02:3c:9a:6a:ba:3f:fe: ba:e2:7e:78:ef:be:9f:f6:04:0c:1c:ba:9c:53:74: d6:41:7f:a7:12:c5:50:81:c3:be:bd:91:e7:1f:9c: 39:5b:e2:4b:c3:d8:1f:78:3c:a5:cf:17:12:9f:35: 05:67:47:6e:86:91:bc:b6:0f:e5:f9:58:bc:a3:e1: b8:52:81:46:c4:79:98:90:6f:89:fb:ae:b8:4d:da: f5:29:7a:6f:07:ee:20:f0:7a:e6:39:fb:8f:e6:88: 90:9b:5e:e0:6d:f4:85:72:8a:25:3f:9d:4d:04:dc: 18:a3:a6:0f:b6:e6:a0:34:44:d7:12:38:14:10:35: d1:d5:80:2f:0a:31:b3:53:e2:66:df:48:76:bf:4b: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:18:75:37:21:1B:EF:C6:B2:2F:AC:56:98:49:46:1A:C1:E3:34:A0 X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5e:bf:0d:aa:1c:1f:24:16:0c:a2:02:39:e3:54:7e:63:e0: 5f:a7:d6:c2:c2:8b:1b:42:47:3b:f9:0f:3c:9e:7f:63:36:b4: 3d:55:ca:72:bb:01:c4:22:57:26:55:8f:d5:1b:9a:39:e7:e8: fd:cd:52:21:b3:3d:6a:cb:fb:8d:d8:d5:1e:d5:f8:e1:99:b2: 3d:25:b5:eb:40:3d:0f:83:27:88:b7:f3:2a:57:c9:2e:b4:b4: cb:e9:87:70:a0:e7:91:f0:48:42:9a:fd:0b:36:ce:d1:ec:0d: 1a:0f:d6:e9:ef:f4:05:11:ea:69:1d:95:84:38:9b:89:bf:cd: b6:f8:d0:81:c2:3c:f2:f3:96:17:53:2f:3b:17:a6:9d:10:3f: b4:13:a4:32:55:83:b1:ba:2a:a1:d4:f0:5e:ef:08:15:b1:0c: 93:1d:d2:8f:67:15:29:9b:5f:ab:7c:a4:5a:65:2e:07:5d:2c: c7:13:6c:69:ca:c4:17:58:33:c7:86:97:2d:e5:48:f5:5e:c9: ee:8c:55:04:cf:3f:f5:d0:2e:a6:b9:8c:46:89:ac:3a:04:1c: d0:ef:7f:3d:3a:f4:c1:ee:31:60:bc:82:42:e0:79:51:db:3e: 6f:57:09:14:5f:97:43:ee:0d:89:89:c8:d3:fc:ec:f0:e0:6e: 86:da:c5:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUER/VirocRi5r+WWvQaVKEuF7XN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNTEwMTcxNzI2NDhaFw0yNTEwMjAyMjQyNDhaMDMxMTAvBgNV BAMTKEZEMTg3NTM3MjExQkVGQzZCMjJGQUM1Njk4NDk0NjFBQzFFMzM0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEp9FanKgkGYyRH/fmYWQGbT4 BowFY6nKqH0rRvncYVLYjZvi7V/c/bm2clUY+WOcsKReSSH1cFrKfykjBsGE3JwB q79y3AbjDvsXyzk4fBN5JE+wC0s8eEuHPTpBx9wldLsQfyZHNnOnY37VYiFKAjya aro//rrifnjvvp/2BAwcupxTdNZBf6cSxVCBw769kecfnDlb4kvD2B94PKXPFxKf NQVnR26Gkby2D+X5WLyj4bhSgUbEeZiQb4n7rrhN2vUpem8H7iDweuY5+4/miJCb XuBt9IVyiiU/nU0E3Bijpg+25qA0RNcSOBQQNdHVgC8KMbNT4mbfSHa/S3lpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Rh1NyEb78ayL6xWmElGGsHjNKAwHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1evw2qHB8kFgyiAjnjVH5j4F+n1sLCixtC Rzv5Dzyef2M2tD1VynK7AcQiVyZVj9Ubmjnn6P3NUiGzPWrL+43Y1R7V+OGZsj0l tetAPQ+DJ4i38ypXyS60tMvph3Cg55HwSEKa/Qs2ztHsDRoP1unv9AUR6mkdlYQ4 m4m/zbb40IHCPPLzlhdTLzsXpp0QP7QTpDJVg7G6KqHU8F7vCBWxDJMd0o9nFSmb X6t8pFplLgddLMcTbGnKxBdYM8eGly3lSPVeye6MVQTPP/XQLqa5jEaJrDoEHNDv fz069MHuMWC8gkLgeVHbPm9XCRRfl0PuDYmJyNP87PDgbobaxSw= -----END CERTIFICATE-----Generated at Sun Oct 19 17:58:09 2025 by rpki-client