$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: orGRnPg1Oi5VxleCz476kMmILFaQKtjzT1M07glV0js= Subject key identifier: 14:96:CB:54:37:10:C5:4C:C1:04:93:1F:73:21:0E:0E:26:F1:2C:14 Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 04126ADDF912740598667D320404833FBCAC6554 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 015C Signing time: Sat 03 May 2025 18:11:29 +0000 Manifest this update: Sat 03 May 2025 18:06:29 +0000 Manifest next update: Tue 06 May 2025 21:37:29 +0000 Files and hashes: 1: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: 5w42C5j8nFPLQ8/TklJq72CWwX+rLT7sVOkbeuIVTnI=) 2: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: IlEiGcTNRfLgc+5n98afB5648nnwVHDEvCuqj1ZmYkQ=) 3: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=) 4: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: 25iIrmROclUu1xNaKTR+JYgvj8VIsqzhXaBvgLC24Qs=) 5: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: eRm8ddtsmSedKqcG2G82Bp1EhiRufznAWG1/ZjydYPs=) 6: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: 6TBRWvV0MXiO3oTl1QlT4g/ofldIZCFPAsjFaJgzcqE=) 7: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: 86yVQIq3TFLUW+JPZZQO+d2VH5dYWBvHnUvFwPuRCIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 21:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:12:6a:dd:f9:12:74:05:98:66:7d:32:04:04:83:3f:bc:ac:65:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: May 3 18:06:29 2025 GMT Not After : May 6 21:37:29 2025 GMT Subject: CN=1496CB543710C54CC104931F73210E0E26F12C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:05:fb:c7:f8:b4:e1:3c:b4:a7:31:97:07: 95:b2:ee:a8:15:36:f3:cf:18:dd:39:07:18:6b:d7: 2b:a3:b5:da:35:d2:e1:79:9d:f0:c3:7a:2b:22:fe: a2:8c:d8:d1:ea:6f:cb:01:99:cf:c3:0f:2a:23:8a: 32:5d:53:54:59:d4:d8:f5:72:f5:3b:a1:ee:61:bd: 2f:2d:36:e9:99:ee:8a:5e:4e:bb:ba:64:1c:22:dc: 0d:4f:aa:52:fe:45:05:cd:43:53:ed:50:3e:d4:ae: 39:96:30:a5:d2:34:02:c5:9e:45:ef:95:b5:34:61: d9:27:98:cb:46:1b:b1:59:15:31:75:aa:2e:e5:5e: 77:19:e7:79:06:86:1e:7c:2d:4f:92:b7:2f:90:14: a7:e9:12:7a:b9:1c:a5:a0:ef:92:08:35:a2:99:6d: eb:5f:04:0e:31:bf:d2:69:65:ff:5b:55:86:71:83: 84:af:58:5d:4c:bc:22:03:29:a6:c3:dd:e6:51:a0: d5:0d:59:66:2f:23:1a:76:3b:05:f8:82:b2:8e:ae: de:27:78:3f:e6:78:a4:fc:ea:a6:16:c8:80:7e:80: 86:c2:0c:09:64:21:d5:6b:ec:e0:27:16:b0:82:6b: 03:ab:eb:63:25:ae:87:a4:77:2d:6b:2e:6b:bc:6e: 39:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:96:CB:54:37:10:C5:4C:C1:04:93:1F:73:21:0E:0E:26:F1:2C:14 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:17:ab:df:5c:ae:68:c4:60:05:18:e2:37:59:ed:98:52:1b: dd:4d:ba:f8:8c:22:dc:e8:f6:ef:b9:24:11:6c:cb:7f:c3:9f: ed:fe:67:1c:7b:f7:88:c0:e7:2e:72:02:1b:8c:cb:44:e4:5d: 55:dc:70:9d:79:5b:eb:52:e3:39:58:01:24:fb:f8:62:c8:44: f4:88:a1:44:f2:69:b9:3d:aa:9a:af:ab:0c:ea:5e:5c:e4:3c: b3:8e:4b:42:ce:52:ae:d5:e3:4c:6d:4e:c6:b8:97:12:05:46: 71:a0:5a:91:e2:bf:c8:e2:7d:90:d8:16:0a:78:3e:f3:9e:97: 00:de:56:7c:e6:d0:31:c9:81:da:bb:a8:67:80:cf:d4:f1:4a: 4e:cb:bb:01:19:7d:fa:94:de:f7:bb:43:f2:0b:0a:a7:20:2d: 2c:bc:7c:ec:1d:e5:9e:63:d7:84:b9:19:41:6e:f9:79:ff:b0: 7d:59:43:8c:88:0f:ea:cf:f5:77:51:a7:0c:8e:1f:7f:95:57: bd:a9:0b:ed:2c:22:1d:47:6e:1a:0d:f5:93:db:1d:e1:e1:33: d5:4d:1a:ee:fa:93:ef:f4:36:f2:56:f3:ef:f2:c6:b4:85:de: f2:48:5a:78:42:fa:6b:7c:2e:5b:df:cf:b5:0c:da:91:64:09: c7:54:b1:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBBJq3fkSdAWYZn0yBASDP7ysZVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNTA1MDMxODA2MjlaFw0yNTA1MDYyMTM3MjlaMDMxMTAvBgNV BAMTKDE0OTZDQjU0MzcxMEM1NENDMTA0OTMxRjczMjEwRTBFMjZGMTJDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2AgX7x/i04Ty0pzGXB5Wy7qgV NvPPGN05Bxhr1yujtdo10uF5nfDDeisi/qKM2NHqb8sBmc/DDyojijJdU1RZ1Nj1 cvU7oe5hvS8tNumZ7opeTru6ZBwi3A1PqlL+RQXNQ1PtUD7UrjmWMKXSNALFnkXv lbU0YdknmMtGG7FZFTF1qi7lXncZ53kGhh58LU+Sty+QFKfpEnq5HKWg75IINaKZ betfBA4xv9JpZf9bVYZxg4SvWF1MvCIDKabD3eZRoNUNWWYvIxp2OwX4grKOrt4n eD/meKT86qYWyIB+gIbCDAlkIdVr7OAnFrCCawOr62Mlroekdy1rLmu8bjn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJbLVDcQxUzBBJMfcyEODibxLBQwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAXq99crmjEYAUY4jdZ7ZhSG91NuviMItzo 9u+5JBFsy3/Dn+3+Zxx794jA5y5yAhuMy0TkXVXccJ15W+tS4zlYAST7+GLIRPSI oUTyabk9qpqvqwzqXlzkPLOOS0LOUq7V40xtTsa4lxIFRnGgWpHiv8jifZDYFgp4 PvOelwDeVnzm0DHJgdq7qGeAz9TxSk7LuwEZffqU3ve7Q/ILCqcgLSy8fOwd5Z5j 14S5GUFu+Xn/sH1ZQ4yID+rP9XdRpwyOH3+VV72pC+0sIh1HbhoN9ZPbHeHhM9VN Gu76k+/0NvJW8+/yxrSF3vJIWnhC+mt8Llvfz7UM2pFkCcdUscc= -----END CERTIFICATE-----Generated at Tue May 6 03:07:21 2025 by rpki-client