$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: MTXzjuc+Qg9r7aXpeEvY/deRVOp3JBe4LooGajRoCDE= Subject key identifier: 65:7A:FE:E2:D6:4F:2B:84:D9:14:16:E7:81:F5:D5:01:53:57:DE:FA Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 2639B5AB92B962454BE09EFFD2E5EDBDBDE9F267 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: 01B6 Signing time: Thu 03 Jul 2025 02:51:35 +0000 Manifest this update: Thu 03 Jul 2025 02:46:35 +0000 Manifest next update: Sun 06 Jul 2025 11:06:35 +0000 Files and hashes: 1: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=) 2: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=) 3: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=) 4: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: 7T58fOq0DPMtcC4WYKEb/YqZbz0lw8nZtLVxYnso2b8=) 5: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: 9qcFDTJvzuIGVKLeqikqoPgUwFhTz1qb44MH/bLwZ7M=) 6: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=) 7: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=) 8: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: PjOq+FNFeb3w0yAtv/+Tz1G1o/STxOGd/kpIjtd+xeA=) 9: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 11:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:39:b5:ab:92:b9:62:45:4b:e0:9e:ff:d2:e5:ed:bd:bd:e9:f2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Jul 3 02:46:35 2025 GMT Not After : Jul 6 11:06:35 2025 GMT Subject: CN=657AFEE2D64F2B84D91416E781F5D5015357DEFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:24:6c:4e:a8:ec:f9:fb:65:f8:c7:71:bb: f7:7f:3d:b8:8b:56:60:df:0f:f1:35:99:be:ef:3d: 46:d0:27:5f:ab:d2:e1:95:a1:b9:40:99:60:13:0d: e3:08:45:d6:3b:4b:e7:0d:f9:7c:72:66:f2:76:db: e8:ec:e2:0b:55:8e:0e:e6:be:d3:b3:6b:ac:5d:b7: 78:54:8b:92:9b:9d:44:0e:18:5f:31:fc:94:4b:ae: a3:be:a8:4b:13:87:b4:47:5f:40:3a:54:01:bc:db: 6e:73:33:5f:54:94:d4:50:ef:18:88:de:c8:7f:ff: 5e:70:29:39:53:6a:bc:64:82:5a:07:9a:36:0a:61: ba:08:c7:c6:a2:43:7a:4b:df:2f:6c:8f:da:ab:bd: cd:95:88:f5:66:2b:68:5a:0c:ac:1e:45:28:3d:26: 4c:c2:b1:b9:55:bf:c3:ee:7d:d2:3c:04:1b:8a:fd: 11:f2:04:32:fa:93:5c:fb:84:b5:6e:16:bf:48:25: ee:48:13:5c:03:5e:cc:f8:b5:85:7b:91:ca:db:45: 76:2a:6c:e8:23:cb:96:9a:81:99:ec:56:b3:08:f4: 74:3d:4d:c3:92:90:07:80:a0:66:77:ad:a6:5c:fb: 65:68:0e:0d:90:44:ce:b9:30:69:96:45:97:0a:73: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7A:FE:E2:D6:4F:2B:84:D9:14:16:E7:81:F5:D5:01:53:57:DE:FA X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5f:6b:c2:7f:d3:04:22:a6:cd:ab:ba:99:c0:5c:e5:7b:7c: 23:ba:64:ee:df:ed:f6:27:50:b9:e0:a3:ea:9c:d4:5d:ac:7e: 9c:6e:d1:d9:3b:b8:66:70:9d:0c:4a:cf:8a:b1:28:92:0a:7e: 1c:c9:6c:a7:8f:04:ca:df:ec:40:e0:b1:7a:ae:3e:bf:b7:73: bb:02:7f:ef:3d:36:5c:40:99:ea:bf:56:af:0f:2d:b8:b1:52: 3f:aa:f6:99:5b:da:d6:dc:a9:e1:c6:f7:01:d9:47:ea:71:73: 26:1a:55:76:f8:bd:40:98:2f:b6:7f:8b:82:98:da:9c:71:98: 94:03:5a:7e:0b:e4:ab:52:c6:25:14:73:49:31:c0:ad:db:41: d5:6c:ae:54:d9:9d:6c:0d:72:e5:30:1c:53:ca:da:33:50:fb: 3b:a7:23:16:14:02:0b:cc:d6:1e:4b:97:46:9b:9b:eb:70:69: 02:97:fb:34:0e:d7:17:b0:07:60:ea:68:4c:c9:ae:56:61:17: 0f:ed:43:4b:d2:00:40:b7:03:9d:0b:73:89:cb:a9:92:e3:6f: b0:9e:20:dc:dd:5e:a1:fd:0d:08:e7:3f:85:1e:c5:08:d7:7b: e4:87:a2:31:94:d9:d3:eb:8e:3c:be:18:0c:be:6b:da:d5:b1: db:3f:41:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjm1q5K5YkVL4J7/0uXtvb3p8mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTA3MDMwMjQ2MzVaFw0yNTA3MDYxMTA2MzVaMDMxMTAvBgNV BAMTKDY1N0FGRUUyRDY0RjJCODREOTE0MTZFNzgxRjVENTAxNTM1N0RFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnmCRsTqjs+ftl+Mdxu/d/PbiL VmDfD/E1mb7vPUbQJ1+r0uGVoblAmWATDeMIRdY7S+cN+XxyZvJ22+js4gtVjg7m vtOza6xdt3hUi5KbnUQOGF8x/JRLrqO+qEsTh7RHX0A6VAG8225zM19UlNRQ7xiI 3sh//15wKTlTarxkgloHmjYKYboIx8aiQ3pL3y9sj9qrvc2ViPVmK2haDKweRSg9 JkzCsblVv8PufdI8BBuK/RHyBDL6k1z7hLVuFr9IJe5IE1wDXsz4tYV7kcrbRXYq bOgjy5aagZnsVrMI9HQ9TcOSkAeAoGZ3raZc+2VoDg2QRM65MGmWRZcKc1vlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZXr+4tZPK4TZFBbngfXVAVNX3vowHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlfa8J/0wQips2rupnAXOV7fCO6ZO7f7fYn ULngo+qc1F2sfpxu0dk7uGZwnQxKz4qxKJIKfhzJbKePBMrf7EDgsXquPr+3c7sC f+89NlxAmeq/Vq8PLbixUj+q9plb2tbcqeHG9wHZR+pxcyYaVXb4vUCYL7Z/i4KY 2pxxmJQDWn4L5KtSxiUUc0kxwK3bQdVsrlTZnWwNcuUwHFPK2jNQ+zunIxYUAgvM 1h5Ll0abm+twaQKX+zQO1xewB2DqaEzJrlZhFw/tQ0vSAEC3A50Lc4nLqZLjb7Ce INzdXqH9DQjnP4UexQjXe+SHojGU2dPrjjy+GAy+a9rVsds/QYg= -----END CERTIFICATE-----Generated at Fri Jul 4 13:33:16 2025 by rpki-client