$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: o4Ls6qKtXTdPvHpiVHpX6pVU6QXlNI5eSASc/9AgyE8= Subject key identifier: FC:1E:A6:4C:D0:CB:74:87:5A:23:B5:AD:21:DF:A8:19:AF:28:BE:D0 Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 717B45EB57C4B9BFC2C1F38CCFB50EF51FF5EA02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 0212 Signing time: Sat 06 Sep 2025 01:52:07 +0000 Manifest this update: Sat 06 Sep 2025 01:47:07 +0000 Manifest next update: Tue 09 Sep 2025 13:26:07 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=) 2: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: 3bvnYKWRyJaWX9jYoWrJ5tpdb720IEmFzKisH9syuzY=) 3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: GBEQYhTxh1ijshW+PjDdJIixFy8RkYVQoJldthrFVDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7b:45:eb:57:c4:b9:bf:c2:c1:f3:8c:cf:b5:0e:f5:1f:f5:ea:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Sep 6 01:47:07 2025 GMT Not After : Sep 9 13:26:07 2025 GMT Subject: CN=FC1EA64CD0CB74875A23B5AD21DFA819AF28BED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:35:34:c1:82:e1:2d:ce:e0:53:af:1f:a1: 30:ec:14:b3:85:28:73:63:27:46:5b:ec:ba:bc:1d: 26:c1:f2:e5:cb:ee:b0:15:68:28:81:6a:44:62:e4: 5d:02:f5:31:61:00:d8:e8:45:e2:a7:ff:90:25:39: 9d:67:00:5e:b7:98:25:99:fb:c6:f8:fc:ef:60:58: 5e:5c:6e:a3:09:47:25:12:b4:9f:d7:9a:d5:a2:8f: 66:9a:53:96:42:fb:8d:44:72:5c:9d:00:57:fa:f7: 5c:a8:40:36:5e:43:b5:27:5a:d2:f2:8b:3c:33:ab: 1f:fd:74:88:5a:c3:d3:f9:66:77:e1:99:83:bd:8b: 60:b9:2a:50:fc:9a:c6:2f:94:fb:37:4d:c2:c0:7f: c1:c3:93:57:da:9c:d3:d3:75:7f:c4:ee:e6:fc:e7: 4a:78:11:65:40:19:9d:6a:82:d2:ac:96:39:30:85: 3e:b7:23:54:ce:ba:ad:a9:98:b5:b1:97:87:cf:fb: c6:50:72:a3:ed:69:03:9c:f4:16:56:9f:46:ea:3f: 8d:67:70:37:54:19:aa:68:a5:2a:7d:27:36:32:3b: 7a:c7:1c:f8:df:f6:76:7a:9f:ff:83:e2:ec:87:da: 48:d4:7b:b4:c8:d0:f2:0a:54:b3:d5:39:6c:33:bc: 60:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1E:A6:4C:D0:CB:74:87:5A:23:B5:AD:21:DF:A8:19:AF:28:BE:D0 X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:13:c6:7e:e8:aa:49:ba:30:4c:08:94:9a:8b:28:5d:07:a4: af:a5:3d:08:cf:f5:bc:e2:5f:16:ed:0a:d0:63:a5:10:78:b7: bc:32:07:05:77:0c:f4:e6:81:da:90:e2:a5:e6:8c:d7:3e:46: 5a:cc:41:21:0c:61:c9:e5:27:a9:f9:35:73:19:d7:61:e3:0c: 86:63:db:0e:46:13:c9:18:8d:b0:69:4b:0e:e2:44:cb:3b:96: 9f:b5:47:ea:96:f6:ba:4c:09:5e:d6:fe:2f:1d:a4:73:60:a4: 7f:6f:7c:d1:01:76:55:4c:34:3e:44:78:c4:73:fa:2b:6b:14: e7:df:64:06:3f:01:3f:3c:a3:04:4f:f9:51:54:0e:92:76:48: 92:d5:cf:a9:1a:26:64:48:d9:f1:9c:9b:2c:49:92:a0:ca:c7: c9:fb:a9:0b:5a:88:02:96:b7:2d:6a:68:97:44:a6:54:cc:c2: 66:b1:c7:a1:7e:14:28:d7:55:81:59:4e:dc:6f:f0:34:ea:0b: 41:2e:30:fb:f7:e9:85:50:e1:fd:54:ba:71:80:a7:39:c0:c0: 25:7e:f4:46:db:9a:f1:63:dd:8c:e3:2f:12:80:a8:47:0f:46: c8:b9:f1:85:43:f1:0f:52:d1:34:c5:f1:51:1e:9c:cd:43:f2: af:4e:49:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXtF61fEub/CwfOMz7UO9R/16gIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNTA5MDYwMTQ3MDdaFw0yNTA5MDkxMzI2MDdaMDMxMTAvBgNV BAMTKEZDMUVBNjRDRDBDQjc0ODc1QTIzQjVBRDIxREZBODE5QUYyOEJFRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MjU0wYLhLc7gU68foTDsFLOF KHNjJ0Zb7Lq8HSbB8uXL7rAVaCiBakRi5F0C9TFhANjoReKn/5AlOZ1nAF63mCWZ +8b4/O9gWF5cbqMJRyUStJ/XmtWij2aaU5ZC+41EclydAFf691yoQDZeQ7UnWtLy izwzqx/9dIhaw9P5ZnfhmYO9i2C5KlD8msYvlPs3TcLAf8HDk1fanNPTdX/E7ub8 50p4EWVAGZ1qgtKsljkwhT63I1TOuq2pmLWxl4fP+8ZQcqPtaQOc9BZWn0bqP41n cDdUGapopSp9JzYyO3rHHPjf9nZ6n/+D4uyH2kjUe7TI0PIKVLPVOWwzvGCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/B6mTNDLdIdaI7WtId+oGa8ovtAwHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHETxn7oqkm6MEwIlJqLKF0HpK+lPQjP9bzi XxbtCtBjpRB4t7wyBwV3DPTmgdqQ4qXmjNc+RlrMQSEMYcnlJ6n5NXMZ12HjDIZj 2w5GE8kYjbBpSw7iRMs7lp+1R+qW9rpMCV7W/i8dpHNgpH9vfNEBdlVMND5EeMRz +itrFOffZAY/AT88owRP+VFUDpJ2SJLVz6kaJmRI2fGcmyxJkqDKx8n7qQtaiAKW ty1qaJdEplTMwmaxx6F+FCjXVYFZTtxv8DTqC0EuMPv36YVQ4f1UunGApznAwCV+ 9EbbmvFj3YzjLxKAqEcPRsi58YVD8Q9S0TTF8VEenM1D8q9OSRI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:49 2025 by rpki-client