$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: hryu/gEzCLYpcGMy+RiMMFdaX/71ATqeuiwAGlAXwPI= Subject key identifier: A4:3D:E1:6A:3E:31:03:A2:36:17:1B:B8:34:0C:F1:1B:32:12:F5:89 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 6EE6013226EF1E88E234DB2998AEE5170E8088 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: 01BE Signing time: Mon 21 Jul 2025 21:31:36 +0000 Manifest this update: Mon 21 Jul 2025 21:26:36 +0000 Manifest next update: Thu 24 Jul 2025 22:57:36 +0000 Files and hashes: 1: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=) 2: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=) 3: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=) 4: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=) 5: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=) 6: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: u/ChO9U9YojkdeEMVw8xKUP5K0hO/wSVBygTSGNHx0U=) 7: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: PjOq+FNFeb3w0yAtv/+Tz1G1o/STxOGd/kpIjtd+xeA=) 8: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=) 9: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: 7T58fOq0DPMtcC4WYKEb/YqZbz0lw8nZtLVxYnso2b8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e6:01:32:26:ef:1e:88:e2:34:db:29:98:ae:e5:17:0e:80:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Jul 21 21:26:36 2025 GMT Not After : Jul 24 22:57:36 2025 GMT Subject: CN=A43DE16A3E3103A236171BB8340CF11B3212F589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:1b:78:ec:d9:84:c8:79:6d:10:f4:a3:ba: 0d:26:63:21:57:36:50:aa:bc:84:f8:44:d1:82:d2: a5:f7:b5:27:df:99:4f:8b:a5:3e:47:16:6e:4b:90: 2c:19:19:18:58:11:95:93:3d:b8:2e:65:18:b5:9f: b8:12:d1:53:33:a7:98:cd:58:d3:20:40:42:e0:3b: c8:6a:22:1d:ee:a7:a4:1e:33:91:e6:14:b1:d0:0c: fa:60:7b:a8:75:3e:ba:96:84:58:77:7a:4e:14:4a: b2:19:29:d2:42:22:52:00:e8:c7:0c:92:fe:65:02: d6:bb:df:84:d1:a0:eb:e6:67:d6:9c:b7:12:8f:e9: 7e:a1:b7:e1:fb:a7:ab:14:be:8a:54:f7:76:ed:ee: 63:69:dc:15:3c:c6:39:89:ec:f1:31:f4:8e:b1:3c: c9:80:23:ab:12:47:26:d0:18:a2:60:1f:c6:23:e8: a8:45:0d:71:8d:bd:d2:1e:9e:71:ad:71:25:82:2f: 4a:6c:63:28:62:01:08:38:3e:db:77:62:28:97:be: 6e:25:e1:84:f9:b5:56:26:bb:25:c2:a0:4e:93:ae: ce:f7:5c:12:06:af:c8:c7:45:3c:e1:ca:f0:a7:50: 7c:2f:3b:b4:c5:97:a7:bf:73:98:bc:16:4f:76:92: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3D:E1:6A:3E:31:03:A2:36:17:1B:B8:34:0C:F1:1B:32:12:F5:89 X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a5:6d:8a:ba:5e:d2:75:c4:83:94:62:3d:89:f1:c8:7f:f3: 05:2e:29:60:17:70:dd:0f:7f:32:70:3c:64:4e:11:ca:d5:b5: 20:a6:dd:65:8b:c1:c6:0f:c8:82:99:46:88:a7:d3:a9:5b:31: 93:6a:9e:7d:cc:9e:57:96:9e:c3:cc:80:8b:48:60:ee:ae:cf: 37:54:7e:86:c2:99:8a:3b:f8:47:d1:1f:9f:5c:82:08:12:b9: 96:bd:75:8b:96:d4:b4:7f:2a:ba:29:ee:41:9b:e3:59:f1:74: 3e:b6:db:8d:67:56:cb:fd:90:b1:8a:44:dc:85:6e:8b:9c:0f: 04:c9:74:b5:59:bc:9b:dd:43:37:9d:70:75:c2:3f:01:93:55: ff:71:13:ff:68:61:51:a1:1f:a4:b1:83:24:6c:34:47:13:39: 36:49:00:f5:90:8a:2c:5e:d5:60:2d:89:cf:b3:25:8b:cf:b1: d1:45:93:82:39:69:b8:0f:49:0d:e0:bb:5e:c4:f1:dc:a8:c4: 42:92:12:e4:fa:ae:1e:f1:7b:ce:00:ed:ad:c1:b3:fc:c0:42: 5d:86:15:a5:cd:88:37:52:75:cb:da:7e:78:98:99:37:1c:e4: 7f:4e:e2:26:03:3a:9e:bd:50:d3:0d:49:5a:15:13:95:3a:84: 83:c2:fa:e5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITbuYBMibvHojiNNspmK7lFw6AiDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzRjZFOUJDNUYxNkYxQzNBQjVGRDYzNkU3REUwNkZERDY0 ODkyQzI1MB4XDTI1MDcyMTIxMjYzNloXDTI1MDcyNDIyNTczNlowMzExMC8GA1UE AxMoQTQzREUxNkEzRTMxMDNBMjM2MTcxQkI4MzQwQ0YxMUIzMjEyRjU4OTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhLG3js2YTIeW0Q9KO6DSZjIVc2 UKq8hPhE0YLSpfe1J9+ZT4ulPkcWbkuQLBkZGFgRlZM9uC5lGLWfuBLRUzOnmM1Y 0yBAQuA7yGoiHe6npB4zkeYUsdAM+mB7qHU+upaEWHd6ThRKshkp0kIiUgDoxwyS /mUC1rvfhNGg6+Zn1py3Eo/pfqG34funqxS+ilT3du3uY2ncFTzGOYns8TH0jrE8 yYAjqxJHJtAYomAfxiPoqEUNcY290h6eca1xJYIvSmxjKGIBCDg+23diKJe+biXh hPm1Via7JcKgTpOuzvdcEgavyMdFPOHK8KdQfC87tMWXp79zmLwWT3aShR8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSkPeFqPjEDojYXG7g0DPEbMhL1iTAfBgNVHSME GDAWgBQ/bpvF8W8cOrX9Y2594G/dZIksJTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQx ZGIzNzMwLWY0OTktNDQ5Zi1iNmYyLTdhNWRlYjUzMmIwYy8wLzNGNkU5QkM1RjE2 RjFDM0FCNUZENjM2RTdERTA2RkRENjQ4OTJDMjUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8zRjZFOUJDNUYxNkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODky QzI1LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80MWRiMzczMC1mNDk5LTQ0OWYtYjZm Mi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYxNkYxQzNBQjVGRDYzNkU3REUwNkZE RDY0ODkyQzI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAdqVtirpe0nXEg5RiPYnxyH/zBS4pYBdw3Q9/ MnA8ZE4RytW1IKbdZYvBxg/IgplGiKfTqVsxk2qefcyeV5aew8yAi0hg7q7PN1R+ hsKZijv4R9Efn1yCCBK5lr11i5bUtH8quinuQZvjWfF0PrbbjWdWy/2QsYpE3IVu i5wPBMl0tVm8m91DN51wdcI/AZNV/3ET/2hhUaEfpLGDJGw0RxM5NkkA9ZCKLF7V YC2Jz7Mli8+x0UWTgjlpuA9JDeC7XsTx3KjEQpIS5PquHvF7zgDtrcGz/MBCXYYV pc2IN1J1y9p+eJiZNxzkf07iJgM6nr1Q0w1JWhUTlTqEg8L65Q== -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:20 2025 by rpki-client