$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: 2N3BiVh4duOwXqJOsgmhGxppxgHEAEb7JmnAF1EiVmc= Subject key identifier: 4F:62:60:55:09:A0:0A:1A:83:43:26:DB:A2:80:CE:C1:A5:04:89:97 Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 0AB3A22EEA90DE35400E7EDDE02D2D58F45BFE70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 03DE Signing time: Thu 04 Sep 2025 16:20:40 +0000 Manifest this update: Thu 04 Sep 2025 16:15:40 +0000 Manifest next update: Sun 07 Sep 2025 23:54:40 +0000 Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=) 2: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=) 3: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: U2GdgU73GY2X7+2sYK8lnQIfPPpBQNjyeeZshBA/x/E=) 4: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 5SkHB/Kz3ud3kzZYvQ/j1QLOIE2ORuolpv99BxFmP4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 23:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b3:a2:2e:ea:90:de:35:40:0e:7e:dd:e0:2d:2d:58:f4:5b:fe:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Sep 4 16:15:40 2025 GMT Not After : Sep 7 23:54:40 2025 GMT Subject: CN=4F62605509A00A1A834326DBA280CEC1A5048997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0d:69:b1:87:44:b3:09:d5:06:9a:b4:80:e7: 41:f8:c0:a9:aa:df:60:2d:e9:d6:de:6d:2d:40:4a: 7c:12:29:0c:57:c7:cd:d4:8a:b6:a3:a7:f8:48:1b: b2:85:dc:11:fb:a3:3b:0c:6e:c8:1f:d1:91:68:5c: 21:c1:00:af:3f:db:34:e9:e3:65:da:1f:57:81:68: c1:65:ae:d5:9f:75:3d:ac:6e:72:6b:3f:ad:4a:fc: f0:0c:a5:ed:1e:a2:05:c7:d3:a4:ae:b6:aa:a6:24: 79:db:54:fa:0f:90:96:d5:4a:1b:3b:20:64:a4:00: 50:d3:b0:b2:69:d4:bc:c0:f0:f1:62:71:af:45:4c: c4:1b:91:7b:2c:c5:2c:c2:80:41:27:40:ca:4b:16: c9:e8:e4:6e:72:bd:d4:47:be:bd:99:ec:d9:74:00: b9:b0:17:99:3c:fa:30:00:4a:c0:2f:a4:a7:8f:cf: 02:3b:ba:06:fe:12:f3:38:d7:20:61:84:f7:70:94: b8:72:c9:58:7a:3a:65:cb:63:03:32:c2:b4:1c:e1: 56:29:e1:c9:4b:c3:24:62:44:a3:ea:4b:ff:7a:8e: e9:ca:da:bb:9b:96:8d:6f:41:ed:50:68:85:24:e1: e0:3e:78:68:b4:a0:69:5a:22:74:31:26:04:b4:e6: 52:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:62:60:55:09:A0:0A:1A:83:43:26:DB:A2:80:CE:C1:A5:04:89:97 X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a9:48:93:d3:b9:76:7f:0e:61:6d:ee:a3:51:3e:30:18:32: 89:3c:43:a0:91:75:65:09:12:26:28:da:e4:ef:a1:c4:75:cf: 78:03:56:ce:78:2b:02:dc:d1:d5:44:2b:d0:24:a1:53:cc:a7: 78:ad:82:b8:49:d7:d4:b1:1f:e1:7e:79:f7:a5:68:7a:b7:7e: 5f:65:5b:a3:df:0d:05:f8:1b:2a:c4:d6:1c:7e:9f:53:cd:33: c8:05:21:39:c1:fa:ec:a0:db:14:ee:d3:65:76:75:a3:81:94: 02:58:b2:ea:7e:b2:34:88:6e:ee:e2:1d:e2:eb:92:af:63:84: 78:d0:a6:fd:cd:55:27:11:e4:ca:2b:2b:ef:35:66:83:30:ba: d8:40:57:68:7d:9a:98:22:59:52:8d:76:24:ce:45:cd:36:2d: 27:cb:79:7a:d6:3b:cb:12:e7:8c:7e:8a:bc:80:47:b1:63:6c: 87:51:99:90:39:1e:ce:59:66:9c:49:17:db:86:42:a6:56:c9: 75:a3:98:48:33:09:30:2d:f4:72:4f:80:30:45:a1:e0:fa:60: 25:98:52:1d:61:59:24:a6:e2:06:b5:4f:2f:8f:80:33:4f:7d: 77:6e:f6:d7:e6:d3:0e:9a:2c:13:77:dd:30:13:dd:46:e7:31: b4:09:66:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrOiLuqQ3jVADn7d4C0tWPRb/nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNTA5MDQxNjE1NDBaFw0yNTA5MDcyMzU0NDBaMDMxMTAvBgNV BAMTKDRGNjI2MDU1MDlBMDBBMUE4MzQzMjZEQkEyODBDRUMxQTUwNDg5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDWmxh0SzCdUGmrSA50H4wKmq 32At6dbebS1ASnwSKQxXx83Uirajp/hIG7KF3BH7ozsMbsgf0ZFoXCHBAK8/2zTp 42XaH1eBaMFlrtWfdT2sbnJrP61K/PAMpe0eogXH06SutqqmJHnbVPoPkJbVShs7 IGSkAFDTsLJp1LzA8PFica9FTMQbkXssxSzCgEEnQMpLFsno5G5yvdRHvr2Z7Nl0 ALmwF5k8+jAASsAvpKePzwI7ugb+EvM41yBhhPdwlLhyyVh6OmXLYwMywrQc4VYp 4clLwyRiRKPqS/96junK2rublo1vQe1QaIUk4eA+eGi0oGlaInQxJgS05lJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT2JgVQmgChqDQybbooDOwaUEiZcwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKpSJPTuXZ/DmFt7qNRPjAYMok8Q6CRdWUJ EiYo2uTvocR1z3gDVs54KwLc0dVEK9AkoVPMp3itgrhJ19SxH+F+efelaHq3fl9l W6PfDQX4GyrE1hx+n1PNM8gFITnB+uyg2xTu02V2daOBlAJYsup+sjSIbu7iHeLr kq9jhHjQpv3NVScR5MorK+81ZoMwuthAV2h9mpgiWVKNdiTORc02LSfLeXrWO8sS 54x+iryAR7FjbIdRmZA5Hs5ZZpxJF9uGQqZWyXWjmEgzCTAt9HJPgDBFoeD6YCWY Uh1hWSSm4ga1Ty+PgDNPfXdu9tfm0w6aLBN33TAT3UbnMbQJZgQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:15 2025 by rpki-client