$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: dv3gVBPsxWdoC7ffk9WvQOnt6aTZgFQID5hPfWBlegI= Subject key identifier: AD:B3:01:04:25:40:7B:1E:7E:AB:C6:BB:84:41:B7:99:FE:E7:71:58 Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 51B62BF001C866DCC7F9D4712A0F66ED2A89CF4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 0174 Signing time: Fri 27 Jun 2025 11:21:30 +0000 Manifest this update: Fri 27 Jun 2025 11:16:30 +0000 Manifest next update: Mon 30 Jun 2025 23:09:30 +0000 Files and hashes: 1: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: 6TBRWvV0MXiO3oTl1QlT4g/ofldIZCFPAsjFaJgzcqE=) 2: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: IlEiGcTNRfLgc+5n98afB5648nnwVHDEvCuqj1ZmYkQ=) 3: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: 25iIrmROclUu1xNaKTR+JYgvj8VIsqzhXaBvgLC24Qs=) 4: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: SsBVuJ8olglwTeySZR0cxtJFRzixXLr84GI4KisghwM=) 5: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: 5w42C5j8nFPLQ8/TklJq72CWwX+rLT7sVOkbeuIVTnI=) 6: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: eRm8ddtsmSedKqcG2G82Bp1EhiRufznAWG1/ZjydYPs=) 7: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 23:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b6:2b:f0:01:c8:66:dc:c7:f9:d4:71:2a:0f:66:ed:2a:89:cf:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Jun 27 11:16:30 2025 GMT Not After : Jun 30 23:09:30 2025 GMT Subject: CN=ADB3010425407B1E7EABC6BB8441B799FEE77158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:01:54:c8:f3:9f:83:e6:24:9a:7d:8f:7a: 34:b9:14:5a:90:be:59:ab:c2:66:9d:74:32:ba:33: 1d:ea:f4:2f:7a:b6:28:68:12:96:33:05:6a:25:2e: 8a:7d:a2:85:7f:ad:b1:49:0e:27:f5:7a:57:8e:9a: 9a:ff:6c:8b:6b:09:79:a5:fe:d6:fa:3b:da:19:a6: bf:a8:af:65:87:f1:dd:7d:06:64:22:b5:d4:79:ce: d8:62:2b:c1:d3:42:fd:60:e9:04:bb:53:40:3a:23: 01:cc:dc:d5:0e:66:a3:83:7b:0f:95:4c:f4:4c:69: 38:e1:fc:96:e7:f9:1b:a7:16:af:5c:be:f9:59:f4: 24:c0:a3:32:f5:4f:59:86:b1:d0:ac:1d:44:fe:31: 15:6b:f1:f5:dc:bb:3b:21:7c:71:7d:cc:18:b4:48: b2:5e:b6:f1:39:a4:cb:ce:90:66:dc:84:33:c5:0e: 84:d1:7e:9c:cd:72:14:84:d8:95:16:66:4d:85:bb: 61:b3:30:b5:2a:f3:30:12:72:93:29:dc:37:9d:ad: de:45:f7:e4:59:0e:c2:d0:fd:23:be:0a:a9:97:16: 98:36:2e:60:17:00:5e:51:51:3a:d4:6a:01:86:a1: a1:b9:b9:9f:eb:d7:9b:95:08:1d:98:b3:50:49:76: e5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B3:01:04:25:40:7B:1E:7E:AB:C6:BB:84:41:B7:99:FE:E7:71:58 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:77:47:06:4c:47:37:e6:22:0b:ca:e1:2d:b9:c5:e3:62:6e: f4:e1:f0:9e:10:f3:fc:40:4d:8e:81:8a:09:71:ca:ac:60:f7: 82:e9:08:e7:57:04:7d:17:4e:49:b9:c6:a5:db:f3:ef:3f:e1: ae:cf:97:75:77:84:58:17:84:57:8f:42:6c:ad:e7:6a:b1:5f: e3:6a:1c:28:86:fb:a1:2c:21:48:6d:c4:9e:76:f8:ab:45:d6: f5:6d:eb:c2:69:f1:52:d4:a7:c1:f9:a3:0c:21:fd:89:ab:08: d0:45:64:a3:d7:d5:fd:53:2d:e7:4e:4d:e5:af:41:a7:72:3b: 89:11:d0:32:e8:d2:4e:35:16:c2:be:6c:b1:9d:b8:32:9b:19: 54:05:27:53:73:93:2f:90:d8:7d:b4:e6:69:7f:47:d1:a3:50: 2b:64:15:d2:9e:ac:74:c8:22:e0:8f:42:ff:93:7f:63:da:16: bb:da:d1:02:5e:48:e7:89:5d:4e:f7:ef:4a:c9:a1:94:29:d7: df:e4:77:f3:10:e8:15:01:1c:b0:d9:b6:a3:1f:93:f0:a1:0b: 60:14:53:43:a9:23:0b:35:11:d4:98:43:73:98:14:f1:9e:f2: dd:e4:b0:7a:51:d3:d8:65:77:80:87:53:05:cb:71:da:9c:75: 1d:3b:72:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbYr8AHIZtzH+dRxKg9m7SqJz0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNTA2MjcxMTE2MzBaFw0yNTA2MzAyMzA5MzBaMDMxMTAvBgNV BAMTKEFEQjMwMTA0MjU0MDdCMUU3RUFCQzZCQjg0NDFCNzk5RkVFNzcxNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuAwFUyPOfg+Ykmn2PejS5FFqQ vlmrwmaddDK6Mx3q9C96tihoEpYzBWolLop9ooV/rbFJDif1eleOmpr/bItrCXml /tb6O9oZpr+or2WH8d19BmQitdR5zthiK8HTQv1g6QS7U0A6IwHM3NUOZqODew+V TPRMaTjh/Jbn+RunFq9cvvlZ9CTAozL1T1mGsdCsHUT+MRVr8fXcuzshfHF9zBi0 SLJetvE5pMvOkGbchDPFDoTRfpzNchSE2JUWZk2Fu2GzMLUq8zAScpMp3Dedrd5F 9+RZDsLQ/SO+CqmXFpg2LmAXAF5RUTrUagGGoaG5uZ/r15uVCB2Ys1BJduXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrbMBBCVAex5+q8a7hEG3mf7ncVgwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFN3RwZMRzfmIgvK4S25xeNibvTh8J4Q8/xA TY6Biglxyqxg94LpCOdXBH0XTkm5xqXb8+8/4a7Pl3V3hFgXhFePQmyt52qxX+Nq HCiG+6EsIUhtxJ52+KtF1vVt68Jp8VLUp8H5owwh/YmrCNBFZKPX1f1TLedOTeWv QadyO4kR0DLo0k41FsK+bLGduDKbGVQFJ1Nzky+Q2H205ml/R9GjUCtkFdKerHTI IuCPQv+Tf2PaFrva0QJeSOeJXU7370rJoZQp19/kd/MQ6BUBHLDZtqMfk/ChC2AU U0OpIws1EdSYQ3OYFPGe8t3ksHpR09hld4CHUwXLcdqcdR07cqE= -----END CERTIFICATE-----Generated at Sun Jun 29 19:12:54 2025 by rpki-client