$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: qZCbqzFlR9geZTWyQxsmDasm1tHcVimkCuilkprVKJA= Subject key identifier: 13:7E:0A:EC:50:24:47:EE:93:CA:3A:EA:6B:3E:12:4C:74:23:FD:F2 Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 6A722368768F733A5DEA448364D631A3A44EC5A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 022E Signing time: Fri 22 Aug 2025 07:01:54 +0000 Manifest this update: Fri 22 Aug 2025 06:56:54 +0000 Manifest next update: Mon 25 Aug 2025 11:25:54 +0000 Files and hashes: 1: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: Tp4WMIp7lRXB6/u+en/jhKgLTAMMFF67m2aPOTBl3xU=) 2: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) 3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:72:23:68:76:8f:73:3a:5d:ea:44:83:64:d6:31:a3:a4:4e:c5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Aug 22 06:56:54 2025 GMT Not After : Aug 25 11:25:54 2025 GMT Subject: CN=137E0AEC502447EE93CA3AEA6B3E124C7423FDF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:09:5a:41:2c:24:65:44:f5:57:7a:28:87: 50:ee:7b:dd:3d:25:e6:e6:91:b2:c8:62:0b:85:56: 2d:fa:d5:54:56:00:70:00:61:07:3a:8a:ea:30:47: 36:b0:af:10:c6:d6:03:36:63:e0:07:58:2d:7b:2f: 1b:d0:8a:36:09:0c:ee:a2:1f:39:8f:f8:3d:39:ed: e3:f4:19:3e:e8:36:7d:53:6b:37:45:7d:9a:b5:95: a5:85:69:41:c5:ae:03:c6:a4:3d:88:f8:07:30:76: 22:7f:0b:b9:9e:b3:e0:3f:35:5c:d7:b7:37:a4:d4: 9a:83:12:32:fe:ba:49:93:a5:28:48:d0:31:04:1f: 24:d7:01:96:0c:e0:36:d7:6a:02:36:84:b7:c1:80: 52:c7:27:e1:4a:58:6d:33:31:3f:06:fd:b8:73:2c: ea:94:9e:92:95:df:2a:82:4c:30:12:53:14:f9:d9: 49:32:2d:4f:8c:a8:66:9a:8f:18:f1:27:12:9a:f7: 51:9d:7f:60:28:6a:47:b2:a7:2c:aa:63:18:8b:03: 6a:07:aa:e4:b6:32:d9:a4:dd:b8:a7:86:ea:18:51: 9b:47:67:43:07:f8:7c:ef:e2:19:bb:e9:66:21:27: c9:9b:d8:33:65:06:9f:0e:0f:c5:fa:d3:03:f0:d5: d5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7E:0A:EC:50:24:47:EE:93:CA:3A:EA:6B:3E:12:4C:74:23:FD:F2 X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:03:9f:a6:8e:20:c8:72:0c:4b:69:f6:a1:26:d8:bc:13:81: ec:f6:c3:e7:3c:a1:57:e9:86:c5:00:82:8c:a9:d8:b3:53:3f: c2:f1:70:d9:15:21:bf:13:2b:a2:f5:8b:af:17:27:78:33:bd: 25:35:11:65:72:af:ff:40:2b:1a:81:fe:12:ce:a5:15:c3:b1: d2:19:86:16:68:6d:7e:3c:30:9b:1f:54:01:1a:52:c7:62:d9: 5d:b2:62:26:b1:e2:3b:bd:03:91:04:df:a4:22:27:4e:cb:99: b4:17:19:eb:ca:c5:c7:e4:29:fe:fa:ff:18:54:07:fe:06:7f: f4:85:8b:a8:5f:93:a9:3d:0f:17:d3:df:4e:e0:98:1b:cb:39: e9:ab:a6:1b:10:25:a1:9b:e1:49:a1:a1:c0:d0:c7:53:bb:03: 3a:90:d9:31:24:3f:a9:38:1e:ae:ac:19:fd:52:05:d6:9e:8d: 97:74:52:6b:4c:ba:76:8e:21:0a:00:8e:2b:e5:92:f0:21:24: b2:7d:9c:1b:7f:02:c6:28:d8:d2:de:20:23:98:0d:1b:9d:00: ef:a4:39:78:3c:85:83:1c:2a:eb:4f:94:65:32:8d:74:f4:01: c4:b2:37:76:3a:38:46:df:a9:13:ea:c5:97:1d:55:f5:32:6f: 8c:ee:83:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanIjaHaPczpd6kSDZNYxo6ROxacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNTA4MjIwNjU2NTRaFw0yNTA4MjUxMTI1NTRaMDMxMTAvBgNV BAMTKDEzN0UwQUVDNTAyNDQ3RUU5M0NBM0FFQTZCM0UxMjRDNzQyM0ZERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUswlaQSwkZUT1V3ooh1Due909 JebmkbLIYguFVi361VRWAHAAYQc6iuowRzawrxDG1gM2Y+AHWC17LxvQijYJDO6i HzmP+D057eP0GT7oNn1TazdFfZq1laWFaUHFrgPGpD2I+AcwdiJ/C7mes+A/NVzX tzek1JqDEjL+ukmTpShI0DEEHyTXAZYM4DbXagI2hLfBgFLHJ+FKWG0zMT8G/bhz LOqUnpKV3yqCTDASUxT52UkyLU+MqGaajxjxJxKa91Gdf2AoakeypyyqYxiLA2oH quS2Mtmk3binhuoYUZtHZ0MH+Hzv4hm76WYhJ8mb2DNlBp8OD8X60wPw1dXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE34K7FAkR+6Tyjrqaz4STHQj/fIwHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgDn6aOIMhyDEtp9qEm2LwTgez2w+c8oVfp hsUAgoyp2LNTP8LxcNkVIb8TK6L1i68XJ3gzvSU1EWVyr/9AKxqB/hLOpRXDsdIZ hhZobX48MJsfVAEaUsdi2V2yYiax4ju9A5EE36QiJ07LmbQXGevKxcfkKf76/xhU B/4Gf/SFi6hfk6k9DxfT307gmBvLOemrphsQJaGb4UmhocDQx1O7AzqQ2TEkP6k4 Hq6sGf1SBdaejZd0UmtMunaOIQoAjivlkvAhJLJ9nBt/AsYo2NLeICOYDRudAO+k OXg8hYMcKutPlGUyjXT0AcSyN3Y6OEbfqRPqxZcdVfUyb4zug/c= -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:30 2025 by rpki-client