$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: 536oU9WRJrCjDiXZgj/2aZDRDuTXkn8GcRg+1Za8fVU= Subject key identifier: 69:05:AF:17:D1:C6:3D:4A:8B:78:40:1B:81:71:22:4F:DE:2D:0C:0C Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 17E90F55E2ED48F7BAE781B0D171CDD7C4D3674F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: B2 Signing time: Fri 25 Jul 2025 03:42:16 +0000 Manifest this update: Fri 25 Jul 2025 03:37:16 +0000 Manifest next update: Mon 28 Jul 2025 13:06:16 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: GYF/RbeivRTRBZpfaNFkZbKa8N0KAzIPmNkl1PwRq+0=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 13:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e9:0f:55:e2:ed:48:f7:ba:e7:81:b0:d1:71:cd:d7:c4:d3:67:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Jul 25 03:37:16 2025 GMT Not After : Jul 28 13:06:16 2025 GMT Subject: CN=6905AF17D1C63D4A8B78401B8171224FDE2D0C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:88:d6:d4:f2:0d:9f:83:b0:86:9c:e6:5a: 48:3d:e4:26:fc:68:5d:95:58:9d:61:8e:c9:f7:df: b5:c8:9b:7a:bf:5b:84:7a:75:1c:16:eb:72:3a:3f: 2c:3e:67:6d:63:dc:98:0f:fe:ff:d4:3a:f9:64:2c: 5b:dc:54:46:a7:d2:26:d8:92:43:17:41:b0:ee:99: d5:d1:52:80:75:34:32:f5:ed:c4:c2:70:d2:90:92: ba:f4:99:a1:68:88:fa:93:ee:35:c6:37:2f:fe:34: ed:13:92:f2:28:48:70:01:d4:e1:49:79:10:a4:8e: 20:b1:d0:6f:5b:b9:3d:18:1e:c3:66:d3:4d:7e:83: 8e:c4:87:37:6e:02:df:d5:62:be:53:14:dc:f2:7d: 15:b0:26:e7:21:41:1d:e9:2b:3e:d3:ba:55:f6:42: 76:af:f4:4e:26:63:a2:51:c8:d6:0b:4b:eb:7e:92: 08:c4:30:59:d1:8c:d5:be:76:50:fa:3d:b9:e4:d6: 7c:4c:81:47:59:69:5f:c3:6e:6e:3b:54:a4:2e:f7: c4:4f:9b:4e:9a:d6:de:86:44:f9:28:cc:59:17:35: 12:b2:c1:b4:1e:45:96:ab:0a:e4:2a:47:b4:9b:6c: 4c:3e:52:03:8b:c3:5c:1c:64:b2:0d:a7:89:be:35: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:05:AF:17:D1:C6:3D:4A:8B:78:40:1B:81:71:22:4F:DE:2D:0C:0C X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0b:81:a9:ee:33:34:1b:b9:c6:85:35:51:0d:96:7d:6b:14: 0f:7f:34:3d:b5:c4:5b:a3:56:80:0c:fa:01:3a:7b:1b:5f:c5: 03:b2:34:7c:bd:6b:28:1f:96:26:9c:18:30:fc:85:6f:19:e7: 04:0c:13:62:57:bb:03:02:e9:a5:e0:ce:04:a9:09:54:13:00: 82:4e:fd:4d:3e:4c:19:e1:dd:9e:ba:ce:26:b8:e3:07:8a:ac: de:94:ac:f1:09:64:97:64:0b:e7:7e:a5:21:fd:1c:47:0f:1d: 5c:80:b5:40:b5:28:c5:3f:3e:aa:b3:72:25:cb:a1:84:e6:24: 7c:74:ef:ab:20:bf:8c:4d:f7:a3:25:37:76:4e:25:55:74:bf: a3:bc:fb:b8:28:48:4c:61:75:16:23:7a:b4:49:6d:2b:72:66: 61:66:d5:fa:5b:16:55:01:32:f4:32:25:99:47:97:98:aa:08: c6:a5:87:ce:b6:4a:d6:94:c7:5f:aa:3b:75:80:fa:d1:2e:90: a9:42:bf:46:20:ab:6c:dc:2a:86:08:a9:29:19:d0:78:b7:7d: 7c:b5:5f:fb:65:2f:bb:0b:32:d9:df:a4:c1:f2:47:b3:4e:8e: f6:8c:e3:bd:4e:9f:cf:19:9e:c9:cb:46:e4:b8:79:19:d7:ed: a8:ba:8b:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+kPVeLtSPe654Gw0XHN18TTZ08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTA3MjUwMzM3MTZaFw0yNTA3MjgxMzA2MTZaMDMxMTAvBgNV BAMTKDY5MDVBRjE3RDFDNjNENEE4Qjc4NDAxQjgxNzEyMjRGREUyRDBDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpIjW1PINn4OwhpzmWkg95Cb8 aF2VWJ1hjsn337XIm3q/W4R6dRwW63I6Pyw+Z21j3JgP/v/UOvlkLFvcVEan0ibY kkMXQbDumdXRUoB1NDL17cTCcNKQkrr0maFoiPqT7jXGNy/+NO0TkvIoSHAB1OFJ eRCkjiCx0G9buT0YHsNm001+g47EhzduAt/VYr5TFNzyfRWwJuchQR3pKz7TulX2 Qnav9E4mY6JRyNYLS+t+kgjEMFnRjNW+dlD6Pbnk1nxMgUdZaV/Dbm47VKQu98RP m06a1t6GRPkozFkXNRKywbQeRZarCuQqR7SbbEw+UgOLw1wcZLINp4m+NVt1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaQWvF9HGPUqLeEAbgXEiT94tDAwwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwLganuMzQbucaFNVENln1rFA9/ND21xFuj VoAM+gE6extfxQOyNHy9aygfliacGDD8hW8Z5wQME2JXuwMC6aXgzgSpCVQTAIJO /U0+TBnh3Z66zia44weKrN6UrPEJZJdkC+d+pSH9HEcPHVyAtUC1KMU/PqqzciXL oYTmJHx076sgv4xN96MlN3ZOJVV0v6O8+7goSExhdRYjerRJbStyZmFm1fpbFlUB MvQyJZlHl5iqCMalh862StaUx1+qO3WA+tEukKlCv0Ygq2zcKoYIqSkZ0Hi3fXy1 X/tlL7sLMtnfpMHyR7NOjvaM471On88ZnsnLRuS4eRnX7ai6i+I= -----END CERTIFICATE-----Generated at Sat Jul 26 00:23:12 2025 by rpki-client