$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: liM/ndx7vJrLTLiJlnPOOPMLIX5B+vISVSZUExl1+xM= Subject key identifier: 20:F2:FF:D0:4A:EF:96:D0:C2:9B:E7:24:3A:A2:67:E2:26:DD:91:99 Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 7DD31E2B9863A007BCB18658F3630553F415E22B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 0188 Signing time: Sat 23 Aug 2025 03:32:20 +0000 Manifest this update: Sat 23 Aug 2025 03:27:20 +0000 Manifest next update: Tue 26 Aug 2025 06:10:20 +0000 Files and hashes: 1: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: cFrN6UFQvqbJFV2htW5GCIk5z4FjkyGJSxpTftmVLGs=) 2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) 3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d3:1e:2b:98:63:a0:07:bc:b1:86:58:f3:63:05:53:f4:15:e2:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Aug 23 03:27:20 2025 GMT Not After : Aug 26 06:10:20 2025 GMT Subject: CN=20F2FFD04AEF96D0C29BE7243AA267E226DD9199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:86:cb:75:c5:b1:8a:3a:f4:df:ce:c9:a2:78: 73:5e:86:a5:71:60:76:af:90:1f:8b:31:20:e0:0f: 43:31:be:ff:ad:a4:80:a9:fc:f9:5f:77:08:03:6d: d2:bc:53:71:bf:4b:13:39:5b:29:80:70:17:ed:1c: df:b3:60:35:79:61:58:bb:71:51:dd:ed:87:0e:70: fe:8c:56:f5:2c:2e:d2:96:9d:e5:ba:7d:54:af:57: 32:91:10:ed:5a:cb:c9:27:5d:e3:f9:05:25:51:1b: 26:08:94:a7:77:ba:c3:d3:c2:2f:12:fc:2f:6f:99: 6d:d8:f3:54:f2:73:56:d3:8e:5e:78:a3:22:2d:5d: 06:22:c3:83:01:3c:1a:96:1d:1d:c7:92:27:32:1d: ae:b9:2e:b9:e2:50:c8:37:27:64:01:fd:22:0c:a6: e4:fd:81:87:bc:a0:90:30:8e:46:1b:5f:a0:cd:e3: c3:04:27:66:4a:ca:37:13:a2:ee:85:7a:a1:54:f7: f7:2b:ca:eb:59:1b:3c:eb:07:1e:b4:fb:1a:74:71: 72:aa:a7:1e:5a:a1:0e:d1:b9:8b:4f:ec:0f:2c:06: 41:1e:3f:5d:50:1b:3b:14:49:5c:64:fc:ef:15:c7: a6:32:09:a1:07:5e:a0:fc:20:a4:d9:54:c3:c6:81: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F2:FF:D0:4A:EF:96:D0:C2:9B:E7:24:3A:A2:67:E2:26:DD:91:99 X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:f2:54:cc:a7:0c:66:28:d2:5a:2f:41:04:f9:69:e6:91:b1: 5e:a4:ee:31:19:3c:e1:4f:a0:6c:a3:b8:a3:a8:4c:f6:e7:47: 50:58:f4:30:e9:85:4d:71:2a:0f:a9:97:05:25:89:eb:6f:87: 50:dd:a7:07:c5:3d:f0:76:e4:e6:29:d9:b2:58:61:58:b0:d5: 56:9f:be:83:37:86:ea:d2:a1:6b:1a:05:cc:4e:d8:8b:9a:fe: 93:f6:23:0d:8f:c3:82:36:07:31:c9:52:95:62:17:e4:8c:a1: 58:d3:22:8b:d5:d9:73:48:32:88:6d:49:49:e4:28:5c:84:d3: 24:cc:87:f0:e4:9e:30:ff:ea:e5:9a:2a:de:cc:ca:c1:2b:7e: 21:82:39:1e:d6:3a:2f:10:e2:30:e4:66:22:4b:aa:b1:4c:c6: ff:50:86:46:2c:95:de:d9:a6:57:9c:82:fd:30:72:9b:e2:02: 0d:d1:51:af:c0:bd:88:a7:b8:51:4a:9e:37:6b:ab:85:ad:be: 12:65:0b:cc:c7:68:8e:89:c3:1c:6a:9f:ac:94:29:1a:14:82: 68:b6:3e:13:29:c2:05:32:77:96:55:f6:6e:e3:a4:4a:7a:ca: c7:5e:08:02:02:ab:79:88:f4:69:09:bc:e0:aa:9e:8f:b8:ea: 0b:af:75:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdMeK5hjoAe8sYZY82MFU/QV4iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTA4MjMwMzI3MjBaFw0yNTA4MjYwNjEwMjBaMDMxMTAvBgNV BAMTKDIwRjJGRkQwNEFFRjk2RDBDMjlCRTcyNDNBQTI2N0UyMjZERDkxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhst1xbGKOvTfzsmieHNehqVx YHavkB+LMSDgD0Mxvv+tpICp/PlfdwgDbdK8U3G/SxM5WymAcBftHN+zYDV5YVi7 cVHd7YcOcP6MVvUsLtKWneW6fVSvVzKREO1ay8knXeP5BSVRGyYIlKd3usPTwi8S /C9vmW3Y81Tyc1bTjl54oyItXQYiw4MBPBqWHR3HkicyHa65LrniUMg3J2QB/SIM puT9gYe8oJAwjkYbX6DN48MEJ2ZKyjcTou6FeqFU9/cryutZGzzrBx60+xp0cXKq px5aoQ7RuYtP7A8sBkEeP11QGzsUSVxk/O8Vx6YyCaEHXqD8IKTZVMPGgTfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIPL/0ErvltDCm+ckOqJn4ibdkZkwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjyVMynDGYo0lovQQT5aeaRsV6k7jEZPOFP oGyjuKOoTPbnR1BY9DDphU1xKg+plwUlietvh1DdpwfFPfB25OYp2bJYYViw1Vaf voM3hurSoWsaBcxO2Iua/pP2Iw2Pw4I2BzHJUpViF+SMoVjTIovV2XNIMohtSUnk KFyE0yTMh/DknjD/6uWaKt7MysErfiGCOR7WOi8Q4jDkZiJLqrFMxv9QhkYsld7Z plecgv0wcpviAg3RUa/AvYinuFFKnjdrq4WtvhJlC8zHaI6Jwxxqn6yUKRoUgmi2 PhMpwgUyd5ZV9m7jpEp6ysdeCAICq3mI9GkJvOCqno+46guvdbE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:33 2025 by rpki-client