$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: O49RHzftFLQKSBBKQXKjVnaHKZ14jWy8QMA6J1dsMa8= Subject key identifier: 94:96:CD:E1:C9:AF:5F:F5:23:BD:40:D2:FF:09:1D:D1:71:86:DA:82 Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 1BA006D2873A3E2C085242B0E61B2422B132D42C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 016F Signing time: Sat 28 Jun 2025 23:52:13 +0000 Manifest this update: Sat 28 Jun 2025 23:47:13 +0000 Manifest next update: Wed 02 Jul 2025 04:39:13 +0000 Files and hashes: 1: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) 2: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: BQdskaednHbjrXTsvpgOXGoLn11c3mkOeXl7R99+gG8=) 3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a0:06:d2:87:3a:3e:2c:08:52:42:b0:e6:1b:24:22:b1:32:d4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Jun 28 23:47:13 2025 GMT Not After : Jul 2 04:39:13 2025 GMT Subject: CN=9496CDE1C9AF5FF523BD40D2FF091DD17186DA82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:8b:ec:a8:80:ef:6f:e9:5f:0f:e2:90:b8: a5:fd:53:35:7b:52:5b:41:d7:e1:57:6d:6e:07:32: 2c:e5:ef:60:38:94:15:44:cf:4b:60:d4:a1:53:79: 74:e8:a8:ba:03:55:7b:09:9e:3f:97:75:77:69:59: 21:6e:a9:45:e9:10:ce:64:f8:1e:e9:27:dd:e0:3c: d3:35:92:89:2a:a2:f7:59:9b:f4:45:f8:bb:54:5d: aa:21:89:fc:b1:25:88:cf:23:ea:94:13:1c:43:0f: f8:f5:95:c9:b8:e0:86:95:82:0f:91:ee:ba:61:8c: a3:d5:6a:e3:b7:13:10:a4:62:01:1d:1e:1c:78:ff: 7b:ed:bd:57:17:bd:e2:e5:a8:8c:fd:88:5f:bb:88: e1:e5:99:b7:45:4f:80:5c:11:5d:0f:09:08:82:08: 81:52:00:0f:fd:b1:f9:24:a1:31:5b:51:27:5a:19: 04:24:d7:71:6e:b2:fb:9c:fa:a2:b5:6c:5e:95:c9: be:20:8d:2d:d7:a1:74:0e:4a:f5:1b:fb:4f:4c:40: ec:9e:e5:d5:e7:14:5f:73:6d:a6:f5:e8:db:2b:79: dd:97:77:97:d3:23:48:ec:b8:63:ff:4e:54:3a:e9: 51:ed:44:f1:e6:7c:49:ca:5f:5d:ff:bc:10:25:2f: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:96:CD:E1:C9:AF:5F:F5:23:BD:40:D2:FF:09:1D:D1:71:86:DA:82 X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:92:8f:04:62:63:43:79:2d:cb:b8:0f:2a:69:3b:44:0b:d7: 55:db:03:f7:2e:a6:75:d0:8e:5f:c1:3d:e6:ae:07:f0:91:35: 2a:3c:a5:04:72:20:92:8b:58:d7:71:7f:e7:8e:f1:84:b7:ba: c6:58:44:42:07:10:a9:b9:52:16:b5:ee:fb:1c:43:b5:36:a6: db:39:e7:a1:53:ea:76:75:0e:ed:f5:4c:5e:86:17:2a:cb:97: 23:99:21:7d:9d:b7:74:1b:85:16:6d:93:af:25:c6:3d:28:a7: 88:f1:52:94:da:25:11:b9:54:02:b2:73:7c:8a:6b:6a:30:33: 9c:82:78:ac:20:a4:33:4f:97:26:35:db:51:a5:c0:b2:75:a0: a8:ee:87:78:70:14:c3:88:89:08:37:5a:ca:ae:1e:81:8a:5c: 77:aa:bf:75:a1:81:96:8e:a1:ba:c1:c8:58:01:0b:2c:b7:4f: f0:46:a0:7b:29:9d:5d:5e:c7:ca:77:db:66:52:8d:c6:7f:09: 11:29:e6:e4:38:28:3f:91:5b:3f:74:19:b1:8f:f8:c2:5d:45: a3:41:05:ab:a2:57:84:c9:e7:87:54:d3:4e:7d:4b:dc:d0:f3: 87:62:90:12:52:7c:47:a9:a3:63:53:09:62:5b:e6:26:1e:94: 97:2c:ed:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6AG0oc6PiwIUkKw5hskIrEy1CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTA2MjgyMzQ3MTNaFw0yNTA3MDIwNDM5MTNaMDMxMTAvBgNV BAMTKDk0OTZDREUxQzlBRjVGRjUyM0JENDBEMkZGMDkxREQxNzE4NkRBODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6WIvsqIDvb+lfD+KQuKX9UzV7 UltB1+FXbW4HMizl72A4lBVEz0tg1KFTeXToqLoDVXsJnj+XdXdpWSFuqUXpEM5k +B7pJ93gPNM1kokqovdZm/RF+LtUXaohifyxJYjPI+qUExxDD/j1lcm44IaVgg+R 7rphjKPVauO3ExCkYgEdHhx4/3vtvVcXveLlqIz9iF+7iOHlmbdFT4BcEV0PCQiC CIFSAA/9sfkkoTFbUSdaGQQk13Fusvuc+qK1bF6Vyb4gjS3XoXQOSvUb+09MQOye 5dXnFF9zbab16Nsred2Xd5fTI0jsuGP/TlQ66VHtRPHmfEnKX13/vBAlLySRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlJbN4cmvX/UjvUDS/wkd0XGG2oIwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiSjwRiY0N5Lcu4DyppO0QL11XbA/cupnXQ jl/BPeauB/CRNSo8pQRyIJKLWNdxf+eO8YS3usZYREIHEKm5Uha17vscQ7U2pts5 56FT6nZ1Du31TF6GFyrLlyOZIX2dt3QbhRZtk68lxj0op4jxUpTaJRG5VAKyc3yK a2owM5yCeKwgpDNPlyY121GlwLJ1oKjuh3hwFMOIiQg3WsquHoGKXHeqv3WhgZaO obrByFgBCyy3T/BGoHspnV1ex8p322ZSjcZ/CREp5uQ4KD+RWz90GbGP+MJdRaNB BauiV4TJ54dU0059S9zQ84dikBJSfEepo2NTCWJb5iYelJcs7ZM= -----END CERTIFICATE-----Generated at Sun Jun 29 18:51:32 2025 by rpki-client