$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: n9jiYHp0+yQfWxobLHd/RE50uEVphS6v1mpJdb3k5Qg= Subject key identifier: 92:24:FD:F1:4A:52:E4:87:F2:21:12:FF:50:E4:E5:37:A7:A2:B9:89 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 6F17B37461328D539EEA656859A3CF865725D6D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: 01CC Signing time: Fri 22 Aug 2025 07:51:38 +0000 Manifest this update: Fri 22 Aug 2025 07:46:38 +0000 Manifest next update: Mon 25 Aug 2025 17:18:38 +0000 Files and hashes: 1: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=) 2: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=) 3: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: wo+Vf/WVstlW+hrlLASq40YGuiizH2illASZ9B75T4A=) 4: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: 7T58fOq0DPMtcC4WYKEb/YqZbz0lw8nZtLVxYnso2b8=) 5: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=) 6: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: PjOq+FNFeb3w0yAtv/+Tz1G1o/STxOGd/kpIjtd+xeA=) 7: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=) 8: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=) 9: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:17:b3:74:61:32:8d:53:9e:ea:65:68:59:a3:cf:86:57:25:d6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Aug 22 07:46:38 2025 GMT Not After : Aug 25 17:18:38 2025 GMT Subject: CN=9224FDF14A52E487F22112FF50E4E537A7A2B989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:95:b5:18:5b:94:94:c6:26:38:e3:c3:2d: d1:3f:ab:07:e2:1a:d4:52:cf:99:d0:be:f3:2b:38: 72:74:6b:50:35:1b:a3:04:61:c3:cc:8e:4b:80:33: cc:bd:4c:77:cf:0e:f5:aa:5d:bd:23:bd:2d:d3:03: c6:20:64:97:96:5c:1e:19:a3:e0:a9:5b:08:8b:48: 3b:08:98:5e:fb:81:07:c6:a0:53:df:c3:3c:17:54: 19:a5:42:3c:90:24:60:6c:fc:dc:44:1a:84:44:e6: 73:c9:6b:ff:1e:c2:ec:bd:e9:93:ec:da:fe:d3:ff: 62:b0:f2:53:17:2c:57:25:ac:da:13:78:99:a6:d1: b2:32:4f:93:48:f5:60:7e:82:e1:53:1d:b2:17:b9: 76:d7:97:9f:f8:5a:1c:2f:33:80:b0:da:e8:dc:c4: 7e:ec:84:3a:a5:3a:c8:60:48:7e:97:a3:77:5f:5a: 8c:08:5f:d1:89:ce:ec:63:6c:8f:cf:65:a1:64:53: 8f:3b:c0:70:4f:93:da:f8:92:75:0a:2d:d9:d8:84: b5:ca:0a:b4:1c:e9:5c:1d:bb:e3:3f:5c:c4:42:3f: 6d:5d:ab:a2:ee:51:13:b4:da:3f:9a:1f:e2:c0:51: d9:03:83:be:f3:5d:4a:4e:a7:7e:fd:b2:0c:8e:6f: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:24:FD:F1:4A:52:E4:87:F2:21:12:FF:50:E4:E5:37:A7:A2:B9:89 X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d9:85:4f:e4:5e:a2:90:9b:92:56:03:4a:a5:20:4f:46:08: 31:32:04:a4:9a:a8:c7:6f:0c:ce:7c:fb:80:15:c1:2c:16:e1: 94:a7:96:31:52:76:28:03:27:2e:e1:1f:f4:07:df:99:ac:75: 11:d7:58:9b:d1:79:26:ac:6d:2c:1b:5f:dd:74:cc:9f:9d:7f: 6f:0d:61:07:0e:33:32:01:fb:22:af:db:7c:b4:ae:63:63:de: 1f:2f:9b:0a:93:3a:2a:ac:ec:c3:e4:55:d6:0a:46:eb:06:c2: 8c:87:5b:96:ae:94:76:ac:f1:0e:ac:91:bb:39:5c:e5:37:94: 3f:4c:1a:4b:13:a4:63:b6:f9:20:f4:64:01:a3:e5:ea:b8:4d: dc:f3:a8:b2:0f:6f:67:eb:67:ba:33:ff:9b:27:46:67:6b:ee: 73:2b:98:e4:bf:bc:40:78:a3:99:65:b3:f0:70:8b:9b:a7:aa: 58:80:ba:93:1f:3f:67:b5:82:72:6b:62:7c:d8:75:5c:79:75: ba:40:eb:7c:ef:57:07:41:29:d6:11:e9:e6:f1:09:06:69:f7: e6:83:46:d3:fa:fc:6f:cc:a9:9f:f6:9b:1d:bd:27:29:bc:4f: 67:c2:a9:4d:0e:49:b0:81:25:b0:be:bb:07:bb:55:9f:a8:85: 79:5d:7c:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbxezdGEyjVOe6mVoWaPPhlcl1tIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTA4MjIwNzQ2MzhaFw0yNTA4MjUxNzE4MzhaMDMxMTAvBgNV BAMTKDkyMjRGREYxNEE1MkU0ODdGMjIxMTJGRjUwRTRFNTM3QTdBMkI5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOJW1GFuUlMYmOOPDLdE/qwfi GtRSz5nQvvMrOHJ0a1A1G6MEYcPMjkuAM8y9THfPDvWqXb0jvS3TA8YgZJeWXB4Z o+CpWwiLSDsImF77gQfGoFPfwzwXVBmlQjyQJGBs/NxEGoRE5nPJa/8ewuy96ZPs 2v7T/2Kw8lMXLFclrNoTeJmm0bIyT5NI9WB+guFTHbIXuXbXl5/4WhwvM4Cw2ujc xH7shDqlOshgSH6Xo3dfWowIX9GJzuxjbI/PZaFkU487wHBPk9r4knUKLdnYhLXK CrQc6Vwdu+M/XMRCP21dq6LuURO02j+aH+LAUdkDg77zXUpOp379sgyOb6yXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkiT98UpS5IfyIRL/UOTlN6eiuYkwHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXZhU/kXqKQm5JWA0qlIE9GCDEyBKSaqMdv DM58+4AVwSwW4ZSnljFSdigDJy7hH/QH35msdRHXWJvReSasbSwbX910zJ+df28N YQcOMzIB+yKv23y0rmNj3h8vmwqTOiqs7MPkVdYKRusGwoyHW5aulHas8Q6skbs5 XOU3lD9MGksTpGO2+SD0ZAGj5eq4TdzzqLIPb2frZ7oz/5snRmdr7nMrmOS/vEB4 o5lls/Bwi5unqliAupMfP2e1gnJrYnzYdVx5dbpA63zvVwdBKdYR6ebxCQZp9+aD RtP6/G/MqZ/2mx29Jym8T2fCqU0OSbCBJbC+uwe7VZ+ohXldfNc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:14 2025 by rpki-client