$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: W2e83zZ76jRVehlb8Ehl8kysJkLjtpUFMGgRF5837tw= Subject key identifier: 85:73:F6:DE:5A:13:37:31:26:80:02:BC:EA:26:37:6A:CF:F5:61:51 Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 67B6E944A3CAD238DE6DDC4C23F8BC37B5797C37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 021F Signing time: Sat 23 Aug 2025 00:22:02 +0000 Manifest this update: Sat 23 Aug 2025 00:17:02 +0000 Manifest next update: Tue 26 Aug 2025 10:19:02 +0000 Files and hashes: 1: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=) 2: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=) 3: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=) 4: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: 3HF7GKrMWvA2HVJvaEA0TLWlABe/FvvXdYdd308g/bM=) 5: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=) 6: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=) 7: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=) 8: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=) 9: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: 04DLsyPEsw2Rqp96F5yqA/aV7E4S12TugD1kgbESSjY=) 10: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: r2yKO3KrSmkrfjQ84qnMxwLYCnCinVawrYAR52ueF/A=) 11: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: VUbT8SHEyKOKmASLTaMwWEhd8ggbwmzz2pEnc4bB2PQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b6:e9:44:a3:ca:d2:38:de:6d:dc:4c:23:f8:bc:37:b5:79:7c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Aug 23 00:17:02 2025 GMT Not After : Aug 26 10:19:02 2025 GMT Subject: CN=8573F6DE5A133731268002BCEA26376ACFF56151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a5:cc:3d:f7:44:cb:97:53:9e:f4:00:21:bc: 86:91:6f:26:98:52:56:d4:e6:f7:9f:72:a4:0f:d5: fe:cf:ea:1d:d3:a2:8f:f5:a4:be:8a:6a:5e:4d:e3: 32:26:fa:a4:be:7c:e8:e8:96:b6:3d:25:2a:eb:a6: 1d:5e:af:ab:59:8b:ff:cf:e6:52:32:8e:97:f1:98: ef:7d:93:e2:c6:c6:9f:57:23:c8:f0:41:df:83:dd: 8a:2c:97:c7:ca:9f:1e:cf:c9:de:90:48:8d:b3:6c: 81:ce:f1:37:a2:f2:cf:fc:5b:6a:9d:6a:3d:25:2b: 6b:93:18:6b:40:73:60:48:be:23:3f:7a:d3:6a:66: fc:bf:eb:fe:2a:ce:03:84:33:de:12:ac:ff:f7:1f: d5:ef:c7:b8:4d:54:08:92:de:7e:12:c8:fa:dc:37: 2f:53:21:60:65:15:c7:4d:4b:a4:b3:19:41:28:26: de:52:95:2a:46:37:48:10:8a:8b:46:d4:b2:75:7d: 3c:b9:82:c5:6c:f1:6d:4f:06:d8:dc:5c:16:e8:b5: fd:7a:3c:d8:7c:95:95:2b:16:de:e4:b8:60:24:74: 03:1f:2e:6b:cf:88:88:a1:28:fa:78:ef:43:ad:63: ca:4d:f9:4f:5d:5f:bc:c9:ca:86:d8:86:fe:e3:7c: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:73:F6:DE:5A:13:37:31:26:80:02:BC:EA:26:37:6A:CF:F5:61:51 X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:47:a4:bd:b6:3b:88:9b:5c:88:f0:00:e4:af:bd:b6:eb:dc: f5:44:13:bd:ed:2d:bb:b0:88:bf:af:94:82:3c:be:9c:66:85: 61:5d:00:9d:59:10:a5:85:78:f0:e1:64:06:df:33:3d:fa:4e: 25:10:39:12:41:5c:cd:dd:f4:0a:a2:90:fb:6f:e5:af:f1:2a: d7:76:f2:32:8e:b6:25:8b:27:c4:fe:cd:64:6c:8e:10:f1:1c: e4:ba:dc:54:5b:d1:be:e8:ab:b3:96:f0:7b:d3:57:99:e8:b5: a4:36:f3:be:2d:d3:3a:61:9a:9a:03:b6:00:cf:78:5a:1c:57: 59:89:58:30:60:79:93:35:57:a4:92:db:1a:4b:90:27:28:9a: a5:d5:6b:d8:22:8c:e5:91:82:e5:c4:6c:50:73:8c:78:d2:2e: 79:4c:26:c2:65:b1:f6:e3:45:b5:84:7d:a6:2c:89:0d:34:14: ea:e3:c0:26:fd:85:7c:85:55:b6:fc:22:4d:3c:79:04:47:af: e5:ac:b0:bf:e6:cb:54:1e:b7:8f:d5:65:0e:20:97:3a:98:57: 29:0a:75:d2:6a:4c:5b:94:e3:01:9b:3c:16:bb:72:62:8f:78: e2:3e:d2:99:e1:33:25:49:58:a9:4c:69:ab:b5:13:59:c4:80: 63:8b:56:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7bpRKPK0jjebdxMI/i8N7V5fDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTA4MjMwMDE3MDJaFw0yNTA4MjYxMDE5MDJaMDMxMTAvBgNV BAMTKDg1NzNGNkRFNUExMzM3MzEyNjgwMDJCQ0VBMjYzNzZBQ0ZGNTYxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDapcw990TLl1Oe9AAhvIaRbyaY UlbU5vefcqQP1f7P6h3Too/1pL6Kal5N4zIm+qS+fOjolrY9JSrrph1er6tZi//P 5lIyjpfxmO99k+LGxp9XI8jwQd+D3Yosl8fKnx7Pyd6QSI2zbIHO8Tei8s/8W2qd aj0lK2uTGGtAc2BIviM/etNqZvy/6/4qzgOEM94SrP/3H9Xvx7hNVAiS3n4SyPrc Ny9TIWBlFcdNS6SzGUEoJt5SlSpGN0gQiotG1LJ1fTy5gsVs8W1PBtjcXBbotf16 PNh8lZUrFt7kuGAkdAMfLmvPiIihKPp470OtY8pN+U9dX7zJyobYhv7jfO5nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhXP23loTNzEmgAK86iY3as/1YVEwHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVHpL22O4ibXIjwAOSvvbbr3PVEE73tLbuw iL+vlII8vpxmhWFdAJ1ZEKWFePDhZAbfMz36TiUQORJBXM3d9AqikPtv5a/xKtd2 8jKOtiWLJ8T+zWRsjhDxHOS63FRb0b7oq7OW8HvTV5notaQ2874t0zphmpoDtgDP eFocV1mJWDBgeZM1V6SS2xpLkCcomqXVa9gijOWRguXEbFBzjHjSLnlMJsJlsfbj RbWEfaYsiQ00FOrjwCb9hXyFVbb8Ik08eQRHr+WssL/my1Qet4/VZQ4glzqYVykK ddJqTFuU4wGbPBa7cmKPeOI+0pnhMyVJWKlMaau1E1nEgGOLVgk= -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:22 2025 by rpki-client