$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: kKQvXBszCnGUwtTFa+oi35cJeXzehf86Nf/4r9DDVvg= Subject key identifier: 62:1F:3E:2A:39:E4:3C:79:74:DB:60:52:1B:47:25:75:D1:20:39:71 Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 792FA9778C0C77CE6F762CFB88A9862CE58E17BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 04F5 Signing time: Sun 29 Jun 2025 08:52:02 +0000 Manifest this update: Sun 29 Jun 2025 08:47:02 +0000 Manifest next update: Wed 02 Jul 2025 12:31:02 +0000 Files and hashes: 1: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: vI68Gh5Oh59Rb2lPrZHZHoQWOjb0zjzOJoq8Na+SUkQ=) 2: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) 3: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: bFn5Y7JpqG3baSv58HSYajbj+++aONkagR6UZgJDf70=) 4: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: f+KL9sRBKYThjcUf6Fn4ETIt2vwAYX6+xVDk6HrJGjI=) 5: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: SDpHmQWrvR6QYeGR7FQ79oyRI2YwxolyxjXNhlqbQOw=) 6: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: HyRkRbrn2+VrOJ4tAEhub8kMvTWrBtzySfndzPRWEe4=) 7: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: E6XmK1t6H2i7DnMzin3eXEnNRLj+glllDjzpw3yQ+tE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2f:a9:77:8c:0c:77:ce:6f:76:2c:fb:88:a9:86:2c:e5:8e:17:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Jun 29 08:47:02 2025 GMT Not After : Jul 2 12:31:02 2025 GMT Subject: CN=621F3E2A39E43C7974DB60521B472575D1203971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:62:b4:29:98:0b:61:2f:b7:bf:9e:4b:a2:cf: bf:0e:e2:fb:f2:f0:6f:87:8c:10:2c:90:ae:53:19: 62:22:92:aa:cf:2e:be:4e:1e:39:44:d2:ba:ad:b2: c6:11:12:1d:b8:aa:69:56:cb:47:e9:6b:3c:53:61: db:c3:c4:1b:76:90:0c:be:f6:4d:e8:8f:87:f9:42: 6a:a3:29:e4:60:bd:be:b1:9f:0a:c0:70:cd:4e:03: e1:83:5a:8d:a9:98:04:ca:a6:23:3b:31:d1:58:66: ad:3f:39:8a:07:a9:bf:24:52:e0:63:d6:25:17:a5: 6f:95:28:3d:9f:68:b7:fb:80:d9:b8:b1:29:7a:da: 61:a2:f7:cd:1d:23:c8:b0:61:9f:65:15:74:58:99: b5:4f:b5:9c:03:9c:19:93:ab:c7:89:1e:6d:28:ee: eb:f4:5e:88:0b:ac:6c:92:ba:35:66:96:f9:06:19: cd:b6:43:c0:a1:4b:de:37:76:f7:b3:48:80:61:e3: 88:53:6e:c8:7c:43:ad:3e:22:dd:c1:0c:93:85:ba: 87:cd:c6:9b:b1:e3:3d:d1:76:19:f5:00:79:0f:11: cb:8a:f9:2a:04:36:14:88:ef:64:89:c8:50:a0:69: 9d:90:1c:d6:9c:91:05:b1:7b:f5:e0:ac:8c:14:ff: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1F:3E:2A:39:E4:3C:79:74:DB:60:52:1B:47:25:75:D1:20:39:71 X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:90:8d:8c:31:18:d3:4a:ac:f4:98:f3:25:bc:79:f7:fe:79: 9e:43:fc:ae:ad:8e:df:17:57:6d:f8:59:7d:39:bd:28:5e:58: 75:d6:7e:16:e7:09:fb:0f:65:2e:32:e8:33:18:39:2c:db:ae: 1f:4a:a5:21:c7:6f:28:9d:9d:e3:ab:b0:0a:89:ee:51:25:a0: 6e:f4:ab:02:a0:66:39:6c:68:77:6b:d9:82:d8:db:63:1f:17: 52:a4:36:e8:c2:62:b6:d6:90:05:3b:de:d7:36:93:6c:1c:3b: 48:5a:8f:f1:ec:ca:64:2b:50:b4:73:be:74:40:e4:dc:12:a0: 8e:03:fe:75:06:00:0a:5f:10:9d:df:23:a6:8c:92:14:18:63: de:1d:5f:6a:e0:44:c1:3c:4d:54:80:31:8c:d3:3f:1e:6e:49: 5f:ff:9e:e1:03:7f:95:3d:a0:78:f3:b0:6a:46:09:f5:c0:1f: f1:c5:47:f7:f0:72:a5:88:5d:75:43:78:ec:70:ba:16:9b:7b: fb:e6:0a:d4:13:e5:1a:fb:d4:db:8a:70:56:ab:6f:e3:d4:9f: 8a:73:4c:6e:f8:37:de:62:3e:d7:57:23:0f:78:1c:df:17:b2: 26:b3:2c:93:b2:c0:f7:9a:3c:f2:e9:8c:07:bb:20:25:9b:44: a2:b8:bc:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeS+pd4wMd85vdiz7iKmGLOWOF7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNTA2MjkwODQ3MDJaFw0yNTA3MDIxMjMxMDJaMDMxMTAvBgNV BAMTKDYyMUYzRTJBMzlFNDNDNzk3NERCNjA1MjFCNDcyNTc1RDEyMDM5NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoYrQpmAthL7e/nkuiz78O4vvy 8G+HjBAskK5TGWIikqrPLr5OHjlE0rqtssYREh24qmlWy0fpazxTYdvDxBt2kAy+ 9k3oj4f5QmqjKeRgvb6xnwrAcM1OA+GDWo2pmATKpiM7MdFYZq0/OYoHqb8kUuBj 1iUXpW+VKD2faLf7gNm4sSl62mGi980dI8iwYZ9lFXRYmbVPtZwDnBmTq8eJHm0o 7uv0XogLrGySujVmlvkGGc22Q8ChS943dvezSIBh44hTbsh8Q60+It3BDJOFuofN xpux4z3Rdhn1AHkPEcuK+SoENhSI72SJyFCgaZ2QHNackQWxe/XgrIwU/7frAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYh8+KjnkPHl022BSG0clddEgOXEwHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGQjYwxGNNKrPSY8yW8eff+eZ5D/K6tjt8X V234WX05vSheWHXWfhbnCfsPZS4y6DMYOSzbrh9KpSHHbyidneOrsAqJ7lEloG70 qwKgZjlsaHdr2YLY22MfF1KkNujCYrbWkAU73tc2k2wcO0haj/HsymQrULRzvnRA 5NwSoI4D/nUGAApfEJ3fI6aMkhQYY94dX2rgRME8TVSAMYzTPx5uSV//nuEDf5U9 oHjzsGpGCfXAH/HFR/fwcqWIXXVDeOxwuhabe/vmCtQT5Rr71NuKcFarb+PUn4pz TG74N95iPtdXIw94HN8XsiazLJOywPeaPPLpjAe7ICWbRKK4vG0= -----END CERTIFICATE-----Generated at Sun Jun 29 18:48:59 2025 by rpki-client