$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: OM1Jgo7CtOm8Xk35EVgKezOwxZZgLSZ4I0fqgRWPl8o= Subject key identifier: C7:DB:42:AE:97:DE:56:9D:5E:4A:45:54:61:C8:0B:04:66:D3:65:89 Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 7EADCDED2C209AD8C735D7016AB5A1C163AC05E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 0248 Signing time: Sun 19 Oct 2025 21:01:54 +0000 Manifest this update: Sun 19 Oct 2025 20:56:54 +0000 Manifest next update: Thu 23 Oct 2025 06:00:54 +0000 Files and hashes: 1: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: 5x0EtfBQVJ6DiQZPNZj+5n25EEOpmixGbRSufap/8co=) 2: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) 3: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ad:cd:ed:2c:20:9a:d8:c7:35:d7:01:6a:b5:a1:c1:63:ac:05:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Oct 19 20:56:54 2025 GMT Not After : Oct 23 06:00:54 2025 GMT Subject: CN=C7DB42AE97DE569D5E4A455461C80B0466D36589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:cb:9d:c9:56:99:b5:2f:cd:5e:dd:82:65: 21:ab:39:eb:0c:41:e4:f8:e2:15:f9:77:fb:db:a5: ad:94:67:50:5c:44:ae:51:cf:e6:6d:08:1f:0c:17: b9:a5:32:10:d9:10:06:0f:75:41:52:2a:6e:86:fe: ea:6d:f4:8f:1d:ac:68:69:d3:05:ef:21:cc:7e:d2: 10:b2:ca:e0:3d:2b:39:7e:38:93:f3:3f:ef:30:5b: 63:55:4b:17:83:d4:55:2b:19:76:42:08:8d:b9:48: 37:4f:8e:12:b8:9f:47:83:ec:5e:db:4e:57:56:7f: fc:70:77:27:10:ce:c8:d7:12:5b:07:e9:ff:92:ce: 06:6a:76:17:89:26:14:52:23:6a:e8:8f:13:69:49: 9c:63:00:03:c0:0b:9a:2f:ea:b5:a5:59:e6:38:69: cc:c8:36:62:56:d3:f5:22:56:f1:d2:02:89:10:31: 0d:f1:79:aa:90:37:65:5c:59:77:12:28:58:28:e9: b2:97:31:66:80:90:8a:a2:bd:6e:f1:12:cc:13:49: ba:5e:e8:06:cc:6b:24:aa:01:4f:4a:0e:a9:63:97: 69:75:65:c4:20:54:53:7f:3b:7d:5c:3f:4a:75:d5: ba:2a:3b:ef:2d:c3:00:5a:0f:9a:f0:00:7f:18:03: ed:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DB:42:AE:97:DE:56:9D:5E:4A:45:54:61:C8:0B:04:66:D3:65:89 X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:eb:64:8b:73:b8:66:fc:4a:9f:65:cc:22:82:ee:e8:8b:d5: 73:f2:1a:ed:51:52:39:02:1a:16:48:f3:b3:71:40:21:66:df: a6:04:e5:2c:9a:a7:14:1b:1f:de:10:fb:3d:d1:14:e6:32:7f: ff:6e:1d:d5:a7:7c:e4:a8:ef:18:86:3e:c8:38:a2:af:1a:de: fc:d0:e1:9a:42:9f:09:e6:c8:a1:3f:8c:b5:29:b7:0e:45:19: 02:38:48:c4:41:bd:24:42:71:49:b0:3e:71:80:7c:21:35:fc: 2c:84:75:d9:08:02:ec:f7:5e:7e:58:10:6f:ed:fb:ea:a0:07: b3:14:59:41:26:d5:4c:00:87:fe:7d:7e:04:cc:5f:b4:eb:98: 3c:16:3e:65:73:e0:37:73:74:60:20:69:71:a4:2f:95:33:a2: 43:de:aa:58:e9:59:5a:be:c8:0f:d0:07:79:13:a9:78:c6:f5: f5:3c:0e:75:d3:27:74:a5:ba:ca:59:4f:e7:21:70:0c:3b:4b: ea:54:45:6d:9c:ef:88:1a:99:ce:45:cb:71:60:ed:db:23:24: 2d:8c:32:1b:14:f1:e3:75:60:cc:c7:a1:50:40:3d:b2:00:d3: f2:d1:66:0d:88:24:8f:a0:4a:4b:9d:1c:a3:8c:b5:b3:d9:4c: 2e:78:5d:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfq3N7SwgmtjHNdcBarWhwWOsBeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNTEwMTkyMDU2NTRaFw0yNTEwMjMwNjAwNTRaMDMxMTAvBgNV BAMTKEM3REI0MkFFOTdERTU2OUQ1RTRBNDU1NDYxQzgwQjA0NjZEMzY1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCazcudyVaZtS/NXt2CZSGrOesM QeT44hX5d/vbpa2UZ1BcRK5Rz+ZtCB8MF7mlMhDZEAYPdUFSKm6G/upt9I8drGhp 0wXvIcx+0hCyyuA9Kzl+OJPzP+8wW2NVSxeD1FUrGXZCCI25SDdPjhK4n0eD7F7b TldWf/xwdycQzsjXElsH6f+SzgZqdheJJhRSI2rojxNpSZxjAAPAC5ov6rWlWeY4 aczINmJW0/UiVvHSAokQMQ3xeaqQN2VcWXcSKFgo6bKXMWaAkIqivW7xEswTSbpe 6AbMaySqAU9KDqljl2l1ZcQgVFN/O31cP0p11boqO+8twwBaD5rwAH8YA+3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx9tCrpfeVp1eSkVUYcgLBGbTZYkwHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANnrZItzuGb8Sp9lzCKC7uiL1XPyGu1RUjkC GhZI87NxQCFm36YE5SyapxQbH94Q+z3RFOYyf/9uHdWnfOSo7xiGPsg4oq8a3vzQ 4ZpCnwnmyKE/jLUptw5FGQI4SMRBvSRCcUmwPnGAfCE1/CyEddkIAuz3Xn5YEG/t ++qgB7MUWUEm1UwAh/59fgTMX7TrmDwWPmVz4DdzdGAgaXGkL5UzokPeqljpWVq+ yA/QB3kTqXjG9fU8DnXTJ3SluspZT+chcAw7S+pURW2c74gamc5Fy3Fg7dsjJC2M MhsU8eN1YMzHoVBAPbIA0/LRZg2IJI+gSkudHKOMtbPZTC54Xe8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:50 2025 by rpki-client