$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: BK8H51j9HmEaQnJ1NwDqm42q0sVNaMPd6yi4NNxdrAY= Subject key identifier: 55:9C:04:58:2F:F1:41:32:D0:6D:F3:36:93:50:CA:74:D9:2F:ED:E2 Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 4586FF53B55D76172498FCDFA06D9DF07CD3C971 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 0217 Signing time: Mon 30 Jun 2025 16:21:49 +0000 Manifest this update: Mon 30 Jun 2025 16:16:49 +0000 Manifest next update: Fri 04 Jul 2025 02:13:49 +0000 Files and hashes: 1: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: DERSpgGy3HA7ZNfTWOvd0dG/6nZiei07cXmvCNVTxak=) 2: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: wVRb/hhWbnMDFPxCNLvJynoFELXMVdYHUPAAmqv5U3g=) 3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: mpWFCHVjj+zZBz81oEax+KJdChdml8WVupB6NX9bDqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:86:ff:53:b5:5d:76:17:24:98:fc:df:a0:6d:9d:f0:7c:d3:c9:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Jun 30 16:16:49 2025 GMT Not After : Jul 4 02:13:49 2025 GMT Subject: CN=559C04582FF14132D06DF3369350CA74D92FEDE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f3:40:9e:0c:55:d3:c7:f0:d1:de:d2:68:83: b2:a8:55:5f:de:6b:9a:9d:e6:55:b9:a3:13:1a:e1: a2:bd:b3:36:0c:f7:28:90:c0:c6:9a:fd:09:21:16: ad:90:45:8e:57:cb:3d:fd:fd:b2:12:ad:a1:f9:a1: 2f:06:e8:e6:2e:2e:74:3d:dd:d0:ca:48:f3:e4:6d: 17:46:6f:66:b1:2d:e2:98:36:11:e1:09:b9:e2:d8: cc:35:4c:56:2f:bf:ca:59:eb:f4:08:f3:a4:3d:1d: 31:fe:65:3c:60:13:3e:27:ff:d3:00:5b:19:98:8e: b0:3c:f3:fb:cc:da:b4:ad:b3:98:a9:f7:9b:55:9d: 5d:31:25:c1:c5:ac:09:70:75:b4:a0:f9:2d:c6:a4: 46:75:9f:93:11:e7:1a:db:88:04:5b:71:9b:b1:c1: 5d:4d:a7:cc:cb:ba:e9:c8:11:87:be:b3:8e:f1:60: 2d:a2:74:cc:f1:4a:a0:53:07:c4:36:62:7b:de:d2: 82:f8:61:b2:88:8d:fc:3a:74:13:a0:87:2b:d5:5c: ef:42:52:d5:98:c7:d0:65:f1:3e:3e:7d:48:ee:b8: 15:48:0b:c6:c7:34:a1:36:cd:80:d9:82:36:3d:76: 3c:58:b6:4f:86:fc:9d:4b:01:68:06:8c:2e:69:1b: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9C:04:58:2F:F1:41:32:D0:6D:F3:36:93:50:CA:74:D9:2F:ED:E2 X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e8:d6:b6:9e:e6:10:8d:31:f0:9d:93:7a:75:72:2a:72:4f: fd:19:e1:f3:2d:e0:cd:9e:ea:15:ba:69:b5:fd:8c:2d:f7:24: ad:cc:b0:84:f0:80:5e:7d:ee:01:54:5d:ab:0e:e8:ab:d0:9c: b0:e0:41:38:e4:cf:77:50:1d:21:2b:01:dd:16:2d:e2:28:8e: 79:71:00:bb:3e:f9:8e:d3:52:37:34:8e:ae:bf:ca:f1:ea:73: 6e:1c:e9:33:01:fc:7c:7c:c5:dc:84:5d:68:67:95:c0:06:95: 03:14:3b:f2:ac:52:9b:20:38:c1:1d:7b:5b:4b:e6:b0:31:34: d5:f1:bb:f8:f5:be:63:89:fe:9f:f6:80:14:42:43:32:d5:85: bb:24:e9:60:b3:8c:b3:73:cf:d7:c2:3e:ab:c2:9b:33:5b:f3: 20:c6:7f:a5:70:b4:63:f5:93:7d:20:90:be:b4:11:eb:c7:c0: e8:f7:c9:2d:bb:40:7e:73:58:9f:cf:bd:63:2c:a6:9b:10:f0: c6:9f:36:7e:4d:94:0f:50:40:22:ed:37:2a:dc:b8:50:85:19: e0:b1:6c:c3:6d:8e:39:0f:8e:ba:44:2e:c4:b2:71:4b:69:3c: 9b:14:f7:a7:4d:53:02:04:73:d8:f6:0b:45:cb:69:05:ae:24: 74:f6:53:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURYb/U7VddhckmPzfoG2d8HzTyXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNTA2MzAxNjE2NDlaFw0yNTA3MDQwMjEzNDlaMDMxMTAvBgNV BAMTKDU1OUMwNDU4MkZGMTQxMzJEMDZERjMzNjkzNTBDQTc0RDkyRkVERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW80CeDFXTx/DR3tJog7KoVV/e a5qd5lW5oxMa4aK9szYM9yiQwMaa/QkhFq2QRY5Xyz39/bISraH5oS8G6OYuLnQ9 3dDKSPPkbRdGb2axLeKYNhHhCbni2Mw1TFYvv8pZ6/QI86Q9HTH+ZTxgEz4n/9MA WxmYjrA88/vM2rSts5ip95tVnV0xJcHFrAlwdbSg+S3GpEZ1n5MR5xrbiARbcZux wV1Np8zLuunIEYe+s47xYC2idMzxSqBTB8Q2Ynve0oL4YbKIjfw6dBOghyvVXO9C UtWYx9Bl8T4+fUjuuBVIC8bHNKE2zYDZgjY9djxYtk+G/J1LAWgGjC5pG0WxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVZwEWC/xQTLQbfM2k1DKdNkv7eIwHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjo1rae5hCNMfCdk3p1cipyT/0Z4fMt4M2e 6hW6abX9jC33JK3MsITwgF597gFUXasO6KvQnLDgQTjkz3dQHSErAd0WLeIojnlx ALs++Y7TUjc0jq6/yvHqc24c6TMB/Hx8xdyEXWhnlcAGlQMUO/KsUpsgOMEde1tL 5rAxNNXxu/j1vmOJ/p/2gBRCQzLVhbsk6WCzjLNzz9fCPqvCmzNb8yDGf6VwtGP1 k30gkL60EevHwOj3yS27QH5zWJ/PvWMsppsQ8MafNn5NlA9QQCLtNyrcuFCFGeCx bMNtjjkPjrpELsSycUtpPJsU96dNUwIEc9j2C0XLaQWuJHT2Uwk= -----END CERTIFICATE-----Generated at Tue Jul 1 08:59:56 2025 by rpki-client