$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: Lmzf4U9yswUPlSgf9ReuO8rZ+pTInvAjJEM69GbW8rI= Subject key identifier: 51:BD:C0:79:BA:22:A9:28:47:FC:33:A1:21:7C:2D:E5:5D:1B:16:B1 Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 73EA831DFA7025A013A1BF41D60E2614D5545B2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 01A7 Signing time: Sun 19 Oct 2025 04:31:32 +0000 Manifest this update: Sun 19 Oct 2025 04:26:32 +0000 Manifest next update: Wed 22 Oct 2025 08:38:32 +0000 Files and hashes: 1: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=) 2: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: IlEiGcTNRfLgc+5n98afB5648nnwVHDEvCuqj1ZmYkQ=) 3: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: 25iIrmROclUu1xNaKTR+JYgvj8VIsqzhXaBvgLC24Qs=) 4: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: 6TBRWvV0MXiO3oTl1QlT4g/ofldIZCFPAsjFaJgzcqE=) 5: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: tkX9h7NONSwXKYE/mxKVi5LYhUD6PI89B9GNuFi4CQU=) 6: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: 5w42C5j8nFPLQ8/TklJq72CWwX+rLT7sVOkbeuIVTnI=) 7: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: eRm8ddtsmSedKqcG2G82Bp1EhiRufznAWG1/ZjydYPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ea:83:1d:fa:70:25:a0:13:a1:bf:41:d6:0e:26:14:d5:54:5b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Oct 19 04:26:32 2025 GMT Not After : Oct 22 08:38:32 2025 GMT Subject: CN=51BDC079BA22A92847FC33A1217C2DE55D1B16B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f1:1d:4c:fa:ac:53:75:73:40:82:e4:96:56: 22:8b:bb:0b:67:88:b9:02:e4:c2:f1:11:19:18:cf: 41:ff:ad:fd:97:09:88:da:41:c7:d3:de:94:8b:f3: 5f:48:1b:95:cd:f4:58:db:17:1d:03:96:27:5f:da: 4d:9e:06:20:d1:c6:5a:c3:e7:51:a7:ff:3b:6b:47: d7:ad:f2:c6:c8:7c:36:ed:0f:47:71:d9:ff:fb:e0: d6:90:20:ff:a2:1e:a4:8b:65:21:29:74:9e:39:07: 53:50:97:08:83:fd:6f:6e:03:6b:52:32:a4:5c:c7: 07:54:0f:cc:f7:25:84:5f:65:bd:18:b2:44:82:35: 86:30:78:06:14:f9:f8:6f:03:30:c0:98:7a:c9:31: 69:11:2e:da:fd:e4:00:5f:d2:af:5c:f9:1d:72:e2: 34:30:42:1a:98:d7:db:4b:4a:bc:fb:88:1a:a5:7e: d3:41:11:8e:24:02:ce:e1:dc:46:5b:8c:0a:8b:1d: 71:8c:11:09:8f:9e:d0:a7:bc:27:c3:8c:f3:60:cc: 46:5c:cc:99:47:67:72:b1:55:cb:a9:a3:8f:5c:9f: fc:84:d0:82:ba:19:d2:a6:cd:7a:87:94:9c:f6:8f: d1:15:bc:e9:e0:a5:1b:27:be:b4:f0:98:a7:f3:3a: 99:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BD:C0:79:BA:22:A9:28:47:FC:33:A1:21:7C:2D:E5:5D:1B:16:B1 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f8:ce:55:e7:1f:39:5c:b3:fb:4b:11:c1:98:f5:b6:c7:26: 53:4c:ad:89:10:a4:cd:fa:d9:17:d5:fe:a0:fe:cd:b3:36:51: 38:16:9a:aa:c6:aa:1d:4f:32:d0:81:3d:2d:a8:4f:ac:08:4e: e7:b6:dc:0c:86:58:cf:2c:6f:25:1f:49:5f:c9:42:38:4f:2b: 4b:f1:d7:08:6c:54:5c:68:43:95:0b:55:a9:16:ea:92:ed:97: 6b:4f:d4:83:6d:6b:bb:ee:09:74:10:15:be:5c:c3:8a:3a:c2: 92:d2:b9:97:68:13:b7:17:0f:11:81:36:ba:80:ba:b8:71:49: 8f:71:0a:a8:dc:c9:e8:6d:ca:1d:ae:99:79:1e:14:fe:c0:01: 48:9d:97:69:ce:b7:6e:4b:02:43:db:eb:63:74:19:6a:d7:15: b4:b2:21:77:9a:ec:96:b0:07:3a:f2:0c:2d:a0:c7:6a:26:c3: d9:9d:84:a3:b4:7e:62:f1:1b:72:85:19:d2:a1:d1:b8:85:6c: e6:c1:1c:25:ed:b2:06:63:d7:8c:64:42:26:56:00:09:98:c3: 64:6a:43:9c:ec:0e:a8:5a:30:d8:fc:39:a8:78:bc:73:f5:5b: 9f:b5:f0:91:4d:ed:ba:6a:97:41:17:d9:e7:4e:12:26:9b:06: 94:e2:e7:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+qDHfpwJaATob9B1g4mFNVUWy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNTEwMTkwNDI2MzJaFw0yNTEwMjIwODM4MzJaMDMxMTAvBgNV BAMTKDUxQkRDMDc5QkEyMkE5Mjg0N0ZDMzNBMTIxN0MyREU1NUQxQjE2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy8R1M+qxTdXNAguSWViKLuwtn iLkC5MLxERkYz0H/rf2XCYjaQcfT3pSL819IG5XN9FjbFx0Dlidf2k2eBiDRxlrD 51Gn/ztrR9et8sbIfDbtD0dx2f/74NaQIP+iHqSLZSEpdJ45B1NQlwiD/W9uA2tS MqRcxwdUD8z3JYRfZb0YskSCNYYweAYU+fhvAzDAmHrJMWkRLtr95ABf0q9c+R1y 4jQwQhqY19tLSrz7iBqlftNBEY4kAs7h3EZbjAqLHXGMEQmPntCnvCfDjPNgzEZc zJlHZ3KxVcupo49cn/yE0IK6GdKmzXqHlJz2j9EVvOngpRsnvrTwmKfzOpktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUb3AeboiqShH/DOhIXwt5V0bFrEwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP4zlXnHzlcs/tLEcGY9bbHJlNMrYkQpM36 2RfV/qD+zbM2UTgWmqrGqh1PMtCBPS2oT6wITue23AyGWM8sbyUfSV/JQjhPK0vx 1whsVFxoQ5ULVakW6pLtl2tP1INta7vuCXQQFb5cw4o6wpLSuZdoE7cXDxGBNrqA urhxSY9xCqjcyehtyh2umXkeFP7AAUidl2nOt25LAkPb62N0GWrXFbSyIXea7Jaw BzryDC2gx2omw9mdhKO0fmLxG3KFGdKh0biFbObBHCXtsgZj14xkQiZWAAmYw2Rq Q5zsDqhaMNj8Oah4vHP1W5+18JFN7bpql0EX2edOEiabBpTi5xI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:39:58 2025 by rpki-client