$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: V6eifKJL6eWsca1pMH4zegIUWo3x43r6+qJmpUTKZAc= Subject key identifier: 82:B8:5D:AD:72:4E:CC:18:A3:D7:46:EA:8A:17:69:5D:35:A4:57:52 Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 478AE63C3A0A7C2888743768FA414CBFBFF17D71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: A6 Signing time: Fri 27 Jun 2025 15:02:15 +0000 Manifest this update: Fri 27 Jun 2025 14:57:15 +0000 Manifest next update: Mon 30 Jun 2025 19:26:15 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: jWTtEurxNbzKBHyJJnppZUZ9UJQu5fsySNDk8WH9Srk=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 19:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8a:e6:3c:3a:0a:7c:28:88:74:37:68:fa:41:4c:bf:bf:f1:7d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Jun 27 14:57:15 2025 GMT Not After : Jun 30 19:26:15 2025 GMT Subject: CN=82B85DAD724ECC18A3D746EA8A17695D35A45752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:22:79:73:76:51:7c:a5:7c:b1:83:6d:59: 2b:5f:fd:e9:3c:e8:28:e6:eb:57:12:8b:4f:b8:14: f7:75:f3:d1:7a:82:bc:0e:cf:35:bb:00:5d:1b:c6: 50:74:5a:14:3b:86:eb:54:00:6d:f0:56:b8:d3:1a: 2e:d1:fc:19:7a:a6:19:82:62:9e:64:79:32:b8:4c: f6:47:70:2e:a0:40:d7:86:48:91:0a:70:fd:9a:fa: cd:87:a4:16:24:a2:67:9d:d1:4f:3b:16:2f:f3:df: 74:bb:e7:8c:a2:ef:dd:e8:54:f3:4b:4b:3b:dd:8a: c6:e1:df:a8:06:c5:f5:2c:53:f5:8c:db:8a:ae:79: e5:5b:df:eb:e5:11:36:be:6b:77:ef:a2:7b:be:9e: c7:e0:4d:b8:a2:f7:f5:14:d9:93:4f:b3:88:14:76: ea:69:e5:18:e8:96:aa:b8:90:69:c1:39:8f:e6:3e: ed:ed:9a:22:06:ae:8a:c9:7f:d5:0e:14:42:6a:7f: ec:d1:63:e6:e9:25:cc:44:e2:f2:39:b2:69:f6:fd: 52:74:e6:b6:ef:a6:17:83:aa:47:d3:b3:37:9e:55: 51:0b:cc:09:b3:70:46:55:c4:11:f1:16:72:02:be: de:2d:f8:63:eb:39:02:a9:de:a4:e1:f3:21:36:6f: 00:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B8:5D:AD:72:4E:CC:18:A3:D7:46:EA:8A:17:69:5D:35:A4:57:52 X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a3:3a:7d:50:b0:72:6a:6e:9f:e0:ef:39:93:61:dc:61:f0: b8:5d:e1:2c:96:1f:ec:5f:06:4d:c8:f2:8f:a6:1e:c6:4f:18: 1f:31:ed:a9:80:09:c9:1c:22:18:dc:53:2f:4c:62:56:58:c7: 0f:ac:0c:45:ee:53:1a:23:b1:57:10:80:f6:dd:d5:d4:97:b3: ba:f0:a8:bb:ea:38:fe:6d:d9:80:00:0c:d5:b9:cf:b2:81:22: 0b:88:51:b9:e4:d8:d6:a7:17:75:02:87:f4:51:ac:36:66:a9: 56:4a:ee:70:38:c7:07:37:a8:ec:ab:97:32:db:24:2e:58:74: 9a:5f:05:8d:d7:4a:c1:b4:32:4b:28:b7:29:97:f1:4e:c5:92: e8:1e:2c:b7:10:14:21:4c:fb:fc:cc:cf:4a:0c:30:c5:b6:2e: 39:10:4e:fc:c1:77:58:52:c4:40:f7:52:cd:19:ec:b5:39:4e: 25:92:f1:10:9e:a3:9c:eb:70:95:50:e3:d1:4c:59:ca:e5:9d: 45:59:ba:82:d9:6e:eb:06:27:c8:38:dd:9f:ca:48:d1:c4:25: 70:fd:b3:a4:6f:f6:e5:18:e9:5b:15:9e:98:0c:6c:7f:dc:70: 6b:d2:d9:c0:74:9a:18:15:b5:66:84:5d:7c:ec:92:8d:42:d3: 9c:9c:e4:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4rmPDoKfCiIdDdo+kFMv7/xfXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTA2MjcxNDU3MTVaFw0yNTA2MzAxOTI2MTVaMDMxMTAvBgNV BAMTKDgyQjg1REFENzI0RUNDMThBM0Q3NDZFQThBMTc2OTVEMzVBNDU3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4iJ5c3ZRfKV8sYNtWStf/ek8 6Cjm61cSi0+4FPd189F6grwOzzW7AF0bxlB0WhQ7hutUAG3wVrjTGi7R/Bl6phmC Yp5keTK4TPZHcC6gQNeGSJEKcP2a+s2HpBYkomed0U87Fi/z33S754yi793oVPNL Szvdisbh36gGxfUsU/WM24queeVb3+vlETa+a3fvonu+nsfgTbii9/UU2ZNPs4gU dupp5Rjolqq4kGnBOY/mPu3tmiIGrorJf9UOFEJqf+zRY+bpJcxE4vI5smn2/VJ0 5rbvpheDqkfTszeeVVELzAmzcEZVxBHxFnICvt4t+GPrOQKp3qTh8yE2bwAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgrhdrXJOzBij10bqihdpXTWkV1IwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCjOn1QsHJqbp/g7zmTYdxh8Lhd4SyWH+xf Bk3I8o+mHsZPGB8x7amACckcIhjcUy9MYlZYxw+sDEXuUxojsVcQgPbd1dSXs7rw qLvqOP5t2YAADNW5z7KBIguIUbnk2NanF3UCh/RRrDZmqVZK7nA4xwc3qOyrlzLb JC5YdJpfBY3XSsG0MksotymX8U7FkugeLLcQFCFM+/zMz0oMMMW2LjkQTvzBd1hS xED3Us0Z7LU5TiWS8RCeo5zrcJVQ49FMWcrlnUVZuoLZbusGJ8g43Z/KSNHEJXD9 s6Rv9uUY6VsVnpgMbH/ccGvS2cB0mhgVtWaEXXzsko1C05yc5ME= -----END CERTIFICATE-----Generated at Sun Jun 29 18:44:53 2025 by rpki-client