$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: 33ipTGfSCiuzJ5jHxgtBuOuq791pI5aXbdTrSKDsIBs= Subject key identifier: DC:33:38:F8:F4:ED:51:9A:87:D8:CD:4C:A1:5E:0B:3C:D6:8E:D0:BC Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 56C05E2FD60862F294B7F5A3EAFB37F0EED49452 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 018D Signing time: Thu 21 Aug 2025 13:41:32 +0000 Manifest this update: Thu 21 Aug 2025 13:36:32 +0000 Manifest next update: Sun 24 Aug 2025 17:01:32 +0000 Files and hashes: 1: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: 6TBRWvV0MXiO3oTl1QlT4g/ofldIZCFPAsjFaJgzcqE=) 2: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: eRm8ddtsmSedKqcG2G82Bp1EhiRufznAWG1/ZjydYPs=) 3: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: IlEiGcTNRfLgc+5n98afB5648nnwVHDEvCuqj1ZmYkQ=) 4: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: 25iIrmROclUu1xNaKTR+JYgvj8VIsqzhXaBvgLC24Qs=) 5: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=) 6: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: 2EVrbIDcRAKmWarJpFL+tXyzBlQwFpfnJALLn86PUXA=) 7: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: 5w42C5j8nFPLQ8/TklJq72CWwX+rLT7sVOkbeuIVTnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c0:5e:2f:d6:08:62:f2:94:b7:f5:a3:ea:fb:37:f0:ee:d4:94:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Aug 21 13:36:32 2025 GMT Not After : Aug 24 17:01:32 2025 GMT Subject: CN=DC3338F8F4ED519A87D8CD4CA15E0B3CD68ED0BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:21:64:64:c8:37:37:88:50:71:05:2e:99: 94:8b:8b:89:73:8e:d3:45:b0:ba:f0:bc:11:7f:2a: 77:24:43:a0:d5:c9:1f:16:ca:e8:c3:22:0a:9c:9c: 22:69:28:34:80:6e:9b:ef:ea:09:4c:49:5a:0d:fc: 6d:45:55:7d:d2:6c:95:1a:13:a4:6a:8b:38:72:50: 58:a5:28:28:d0:4d:7f:3f:dd:cf:76:fb:39:1e:92: 9e:8e:bc:ed:7d:4a:72:a9:7d:0f:35:94:34:e9:9a: 49:86:6e:5f:44:0f:7f:ce:3e:ef:0a:fe:76:fe:fe: 4d:8e:d9:d4:b9:9c:bb:8e:26:11:5e:a5:dd:78:c6: 3d:cc:f7:cf:89:ed:6d:79:a7:5c:2d:dd:fe:cd:1b: 7a:1c:02:b1:3d:5b:d1:b3:a2:e7:77:a2:b1:89:0d: fb:16:a6:f4:09:e3:f6:a9:a7:d1:a8:2d:ab:2a:f4: ae:a4:e3:a5:37:85:b7:92:ba:8b:82:fa:7d:bc:8d: 97:4b:c7:ce:3a:90:86:d3:4a:45:6d:a4:e2:e7:93: 6f:5b:ea:0f:be:78:5a:b2:59:48:07:ec:29:eb:fb: 86:0f:ab:fd:e1:80:3f:34:b0:29:d9:9c:7c:f7:1c: 2c:6f:ce:ca:dd:b5:7d:81:65:99:2b:85:12:31:90: f2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:33:38:F8:F4:ED:51:9A:87:D8:CD:4C:A1:5E:0B:3C:D6:8E:D0:BC X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fd:6e:11:3f:ea:c6:8f:87:d1:6f:5e:06:4e:be:e7:e8:c1: c9:8f:7f:b0:d5:29:74:35:56:f7:3f:e1:7e:c7:56:c1:42:59: f3:db:07:c0:61:4c:13:9e:30:99:c5:84:3b:c1:7b:6e:44:3d: 3b:bb:72:47:c3:56:d9:98:01:7c:5a:ad:ea:84:f2:f4:48:cc: 5f:fc:f8:2a:f8:5d:03:00:c5:2c:c1:14:da:f2:d6:56:77:1a: 98:1f:52:f2:de:c8:57:6a:68:43:03:fa:a2:8b:8b:5d:62:a2: 69:2c:62:5c:15:1d:bf:20:e6:4f:76:70:32:21:8e:57:4f:fc: cc:26:18:22:f0:e1:3d:68:ff:9f:ae:63:65:f1:15:13:7f:be: 27:c7:fb:1c:a1:9f:3d:6c:48:18:61:aa:b5:8a:f9:05:4c:19: 2d:cf:12:3c:8f:d0:00:d1:68:87:a9:d9:0b:3b:85:ce:67:08: 1d:9f:0f:b3:3a:65:02:f9:80:5e:30:8c:62:65:ed:c2:a0:e6: 75:e4:e5:12:fa:59:d3:ca:e7:77:9c:e0:30:a8:6f:b4:ca:c0: f5:83:88:9e:fd:c6:42:af:28:1d:b7:ad:04:1a:c8:85:3e:82: 9a:5b:83:97:3c:c1:a1:72:74:51:7d:b2:73:36:c0:99:95:40: 86:54:70:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsBeL9YIYvKUt/Wj6vs38O7UlFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNTA4MjExMzM2MzJaFw0yNTA4MjQxNzAxMzJaMDMxMTAvBgNV BAMTKERDMzMzOEY4RjRFRDUxOUE4N0Q4Q0Q0Q0ExNUUwQjNDRDY4RUQwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7iFkZMg3N4hQcQUumZSLi4lz jtNFsLrwvBF/KnckQ6DVyR8WyujDIgqcnCJpKDSAbpvv6glMSVoN/G1FVX3SbJUa E6RqizhyUFilKCjQTX8/3c92+zkekp6OvO19SnKpfQ81lDTpmkmGbl9ED3/OPu8K /nb+/k2O2dS5nLuOJhFepd14xj3M98+J7W15p1wt3f7NG3ocArE9W9Gzoud3orGJ DfsWpvQJ4/app9GoLasq9K6k46U3hbeSuouC+n28jZdLx846kIbTSkVtpOLnk29b 6g++eFqyWUgH7Cnr+4YPq/3hgD80sCnZnHz3HCxvzsrdtX2BZZkrhRIxkPLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3DM4+PTtUZqH2M1MoV4LPNaO0LwwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/9bhE/6saPh9FvXgZOvufowcmPf7DVKXQ1 Vvc/4X7HVsFCWfPbB8BhTBOeMJnFhDvBe25EPTu7ckfDVtmYAXxareqE8vRIzF/8 +Cr4XQMAxSzBFNry1lZ3GpgfUvLeyFdqaEMD+qKLi11iomksYlwVHb8g5k92cDIh jldP/MwmGCLw4T1o/5+uY2XxFRN/vifH+xyhnz1sSBhhqrWK+QVMGS3PEjyP0ADR aIep2Qs7hc5nCB2fD7M6ZQL5gF4wjGJl7cKg5nXk5RL6WdPK53ec4DCob7TKwPWD iJ79xkKvKB23rQQayIU+gppbg5c8waFydFF9snM2wJmVQIZUcNo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:59 2025 by rpki-client