$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: 8+TLJn6PC8dlMnAZe1vHJKG2dGJMTWPJ4aCm+D2/s9w= Subject key identifier: 63:AD:5B:3C:4A:30:78:F0:AE:AB:0A:C5:C3:5E:9F:09:98:2C:EB:E0 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 1276B19466C4F911DA362BC71545781B36ACD5C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 01A8 Signing time: Thu 24 Jul 2025 23:51:49 +0000 Manifest this update: Thu 24 Jul 2025 23:46:49 +0000 Manifest next update: Mon 28 Jul 2025 03:42:49 +0000 Files and hashes: 1: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) 2: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: jjIHZLVT7X+lDHmP0OCjLc9YJAgnzbrqfW8+X/XB50c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:76:b1:94:66:c4:f9:11:da:36:2b:c7:15:45:78:1b:36:ac:d5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Jul 24 23:46:49 2025 GMT Not After : Jul 28 03:42:49 2025 GMT Subject: CN=63AD5B3C4A3078F0AEAB0AC5C35E9F09982CEBE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:50:9d:64:35:e3:29:1a:f3:c1:8f:58:91: db:7a:e9:c2:03:36:e4:97:41:6b:bf:ec:4c:74:ba: 07:3c:64:65:e9:20:29:98:7c:b8:9d:77:10:a5:e4: c5:96:e7:90:62:31:10:2d:57:64:da:55:9d:56:ce: c9:51:12:6a:c7:9d:6f:86:e6:a6:10:33:a8:30:a1: 9b:3e:3b:45:98:25:22:43:63:14:98:c4:81:cb:35: 3c:93:43:92:f4:6e:c6:5e:41:cb:93:f8:2c:25:33: 8a:ca:a6:56:25:3b:b6:df:0f:49:fb:7c:e6:01:da: e4:a9:3d:57:d4:81:2b:e4:2e:04:41:ed:de:18:b3: 56:20:ec:26:36:f7:25:40:8d:66:1f:5a:34:f8:f9: b7:32:83:0d:55:0c:8c:15:fe:56:96:be:de:5f:bc: c7:e9:1a:f8:49:94:64:ef:48:93:66:bc:af:33:15: 1b:53:4c:60:16:64:7d:0b:8c:e7:45:1b:bc:91:5d: 2e:10:5b:c2:69:cc:94:67:44:3b:d3:54:fb:01:0e: a7:d6:e1:01:88:70:1e:43:ba:43:c7:1e:b7:0d:79: 4e:a9:7c:55:b6:2d:00:b0:16:52:bc:8b:c2:ce:13: 0a:21:26:e2:f3:6a:52:f6:dd:be:6f:b2:f1:95:72: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AD:5B:3C:4A:30:78:F0:AE:AB:0A:C5:C3:5E:9F:09:98:2C:EB:E0 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:d9:d3:8d:a6:ae:fd:62:40:dc:a1:1a:95:23:f6:4a:10:8f: a9:5d:e5:85:67:6a:ce:bb:19:c4:d0:7d:7f:d2:5a:33:3e:50: d0:c8:b0:a8:ab:69:82:71:fc:b9:14:cc:09:c7:01:85:e6:e3: 61:1a:c0:25:81:6c:de:34:90:d8:21:dd:b4:37:1f:ec:b6:73: 77:1e:62:f9:4b:2a:51:83:d0:c4:72:5d:6c:df:93:ce:3b:bb: fa:d6:f9:f0:bb:54:0b:3a:9b:89:eb:fd:f9:79:88:14:79:a8: da:77:c7:34:32:2e:b9:6b:6b:60:51:9c:a0:72:fe:f9:78:13: fe:b5:39:8f:0b:41:d4:e9:fe:ac:7a:6a:ec:e9:48:9c:16:74: a1:1d:9f:ff:d0:bf:cc:7e:33:25:f8:21:e2:98:a1:d0:27:50: c9:5c:fb:0d:c8:5a:3e:d6:63:47:76:d6:65:61:91:fd:c2:8e: 2a:da:5f:b5:6e:e2:08:c1:bf:1c:c1:aa:ae:27:40:85:91:75: 7b:d1:e0:4b:97:7c:38:63:a8:b8:a6:33:38:76:8d:95:89:34: 3b:3c:3c:30:d0:0f:d0:d4:fa:95:cc:bf:0a:4d:57:69:71:17: a1:80:9e:0f:29:44:86:44:76:26:d9:33:c8:b6:83:c2:ac:5a: ca:e6:e8:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEnaxlGbE+RHaNivHFUV4Gzas1cEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTA3MjQyMzQ2NDlaFw0yNTA3MjgwMzQyNDlaMDMxMTAvBgNV BAMTKDYzQUQ1QjNDNEEzMDc4RjBBRUFCMEFDNUMzNUU5RjA5OTgyQ0VCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEW1CdZDXjKRrzwY9Ykdt66cID NuSXQWu/7Ex0ugc8ZGXpICmYfLiddxCl5MWW55BiMRAtV2TaVZ1WzslREmrHnW+G 5qYQM6gwoZs+O0WYJSJDYxSYxIHLNTyTQ5L0bsZeQcuT+CwlM4rKplYlO7bfD0n7 fOYB2uSpPVfUgSvkLgRB7d4Ys1Yg7CY29yVAjWYfWjT4+bcygw1VDIwV/laWvt5f vMfpGvhJlGTvSJNmvK8zFRtTTGAWZH0LjOdFG7yRXS4QW8JpzJRnRDvTVPsBDqfW 4QGIcB5DukPHHrcNeU6pfFW2LQCwFlK8i8LOEwohJuLzalL23b5vsvGVcqGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY61bPEowePCuqwrFw16fCZgs6+AwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANDZ042mrv1iQNyhGpUj9koQj6ld5YVnas67 GcTQfX/SWjM+UNDIsKiraYJx/LkUzAnHAYXm42EawCWBbN40kNgh3bQ3H+y2c3ce YvlLKlGD0MRyXWzfk847u/rW+fC7VAs6m4nr/fl5iBR5qNp3xzQyLrlra2BRnKBy /vl4E/61OY8LQdTp/qx6auzpSJwWdKEdn//Qv8x+MyX4IeKYodAnUMlc+w3IWj7W Y0d21mVhkf3CjiraX7Vu4gjBvxzBqq4nQIWRdXvR4EuXfDhjqLimMzh2jZWJNDs8 PDDQD9DU+pXMvwpNV2lxF6GAng8pRIZEdibZM8i2g8KsWsrm6L4= -----END CERTIFICATE-----Generated at Fri Jul 25 06:51:06 2025 by rpki-client