$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: CkwyXVp8t3iAzQkxWcaYDQpaVLE9vmsE002VA9xdcDE= Subject key identifier: 73:97:31:E9:86:A1:78:01:A9:E0:8C:A0:0F:CC:F2:28:45:E3:4E:56 Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 4CAB7DD6AC815938818AAFA860B812074C4E0F30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: BE Signing time: Thu 21 Aug 2025 22:42:18 +0000 Manifest this update: Thu 21 Aug 2025 22:37:18 +0000 Manifest next update: Mon 25 Aug 2025 03:21:18 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: YKCgaFaCAjjXvK2pCOVQca8oavNUBAkJVjV6M/f3LBs=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ab:7d:d6:ac:81:59:38:81:8a:af:a8:60:b8:12:07:4c:4e:0f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Aug 21 22:37:18 2025 GMT Not After : Aug 25 03:21:18 2025 GMT Subject: CN=739731E986A17801A9E08CA00FCCF22845E34E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:fa:db:28:14:40:bc:e2:0b:a7:73:8f:af: f8:68:36:4b:93:d6:7b:96:00:fe:cd:f1:a5:ce:01: 1c:ca:7b:90:37:c9:1a:c0:04:e1:19:43:4a:3c:27: 80:48:e7:f8:b6:36:9c:97:17:ee:77:fc:f7:4a:9b: 02:5f:84:98:4f:31:2d:bc:b7:5d:b3:44:ae:2f:60: 15:53:51:d3:b2:80:1e:9a:c1:41:f8:b8:8a:f1:36: ea:ca:da:80:de:c2:74:ef:ac:08:e4:ce:2c:9a:24: d9:f5:3e:1c:20:c0:db:ee:75:f3:43:3a:da:93:be: 0a:bd:d1:df:86:95:e5:ea:b1:21:0f:51:fe:71:24: 3d:21:b2:6e:14:ac:4b:e7:38:d3:ef:c8:cf:6f:66: 79:e5:47:43:1d:8a:86:13:0f:03:eb:37:91:ac:ee: 31:cf:e8:8a:75:29:17:54:be:ea:bf:5e:cf:c2:73: 45:8c:92:d6:a4:72:7a:4c:a5:9b:a1:78:3e:ef:ab: 4d:42:46:99:af:ab:d0:16:77:5d:57:27:7a:4c:c8: 77:d9:00:71:c2:1e:e0:d9:c0:c5:fa:3b:46:5a:3a: 11:7e:7f:48:7c:43:9e:45:06:e1:4e:93:a6:b5:7b: 13:c2:f8:50:dd:da:ad:8a:7e:46:11:4f:e7:96:be: 74:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:97:31:E9:86:A1:78:01:A9:E0:8C:A0:0F:CC:F2:28:45:E3:4E:56 X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:86:2d:8c:0a:d9:25:ea:37:7d:77:0f:00:99:cd:84:71:1b: 1e:cd:88:88:1f:c2:dd:d0:85:c2:1f:a0:be:f1:dd:93:2a:6a: f0:a2:05:fa:5f:0f:8d:5d:fe:4f:f3:fd:19:35:2b:61:5b:be: a5:69:18:25:27:20:91:31:64:b9:36:60:c8:7a:f7:bb:0c:b1: 03:1e:b3:82:9a:97:4c:a4:8c:f4:43:ef:c9:d3:69:d9:ef:09: 42:c6:b6:d3:42:ab:79:cc:10:71:06:3a:aa:c6:81:37:47:a1: c5:3e:08:1b:eb:46:8b:2d:14:fa:54:57:42:7b:7d:7d:12:2e: ae:77:c0:3b:ae:9c:eb:86:6e:9e:06:3c:39:8e:be:e5:9a:0c: 2f:5b:7c:b9:14:e7:f8:bc:72:ef:50:c8:13:76:7f:ea:f8:52: 07:42:e2:c7:ca:e0:bc:89:00:ea:4e:5e:69:18:54:2b:67:43: 0a:f5:a2:f2:81:fa:a3:ba:fc:ea:54:8d:b6:32:b7:58:72:6e: 81:a0:7a:15:63:20:5c:15:e8:15:03:b9:fb:cc:85:c5:3c:92: bb:a5:e3:6d:c0:a0:f9:21:2c:02:8b:94:5e:51:02:96:22:65: f5:11:c0:bb:ac:24:50:4c:46:c5:96:bb:f3:d0:41:86:ab:f8: f6:a1:af:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTKt91qyBWTiBiq+oYLgSB0xODzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTA4MjEyMjM3MThaFw0yNTA4MjUwMzIxMThaMDMxMTAvBgNV BAMTKDczOTczMUU5ODZBMTc4MDFBOUUwOENBMDBGQ0NGMjI4NDVFMzRFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvPrbKBRAvOILp3OPr/hoNkuT 1nuWAP7N8aXOARzKe5A3yRrABOEZQ0o8J4BI5/i2NpyXF+53/PdKmwJfhJhPMS28 t12zRK4vYBVTUdOygB6awUH4uIrxNurK2oDewnTvrAjkziyaJNn1PhwgwNvudfND OtqTvgq90d+GleXqsSEPUf5xJD0hsm4UrEvnONPvyM9vZnnlR0MdioYTDwPrN5Gs 7jHP6Ip1KRdUvuq/Xs/Cc0WMktakcnpMpZuheD7vq01CRpmvq9AWd11XJ3pMyHfZ AHHCHuDZwMX6O0ZaOhF+f0h8Q55FBuFOk6a1exPC+FDd2q2KfkYRT+eWvnS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc5cx6YaheAGp4IygD8zyKEXjTlYwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCGLYwK2SXqN313DwCZzYRxGx7NiIgfwt3Q hcIfoL7x3ZMqavCiBfpfD41d/k/z/Rk1K2FbvqVpGCUnIJExZLk2YMh697sMsQMe s4Kal0ykjPRD78nTadnvCULGttNCq3nMEHEGOqrGgTdHocU+CBvrRostFPpUV0J7 fX0SLq53wDuunOuGbp4GPDmOvuWaDC9bfLkU5/i8cu9QyBN2f+r4UgdC4sfK4LyJ AOpOXmkYVCtnQwr1ovKB+qO6/OpUjbYyt1hyboGgehVjIFwV6BUDufvMhcU8krul 423AoPkhLAKLlF5RApYiZfURwLusJFBMRsWWu/PQQYar+Pahr4Q= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:55 2025 by rpki-client