$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: ulwndr4heDqECgIlh7daD6QP5kLiG9R3LMj6u1mGDMk= Subject key identifier: 6A:51:86:20:76:2F:B0:65:90:24:77:9F:39:27:EC:06:0A:DA:9C:C3 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 0B6018D49F9A175C5FBF078C0BD03998C71021ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 01A7 Signing time: Tue 22 Jul 2025 20:11:57 +0000 Manifest this update: Tue 22 Jul 2025 20:06:57 +0000 Manifest next update: Fri 25 Jul 2025 23:45:57 +0000 Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: NBJeyoLEFjOGYSNGbLXED9R0a7yW38MT6sKaH1cegxo=) 2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:60:18:d4:9f:9a:17:5c:5f:bf:07:8c:0b:d0:39:98:c7:10:21:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Jul 22 20:06:57 2025 GMT Not After : Jul 25 23:45:57 2025 GMT Subject: CN=6A518620762FB0659024779F3927EC060ADA9CC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:97:9f:ce:e9:b8:d7:c9:24:35:56:8b:ac: b3:f6:c2:7b:75:4b:52:65:39:ca:d3:4d:bc:08:a7: 05:70:4f:71:dc:16:94:f7:09:13:19:36:cf:13:63: 4e:75:4b:39:26:aa:6e:7c:b9:e1:4c:16:09:b7:c3: 2e:c7:81:a7:fe:1f:64:3b:bd:04:42:d7:0a:48:b0: 48:4f:90:e8:51:0b:f1:9d:c8:ab:42:5a:17:85:0c: 5a:0e:18:8b:85:ed:e4:5b:9d:92:56:3c:17:d1:ef: c0:4b:2f:cf:b0:46:67:29:6a:43:9f:96:03:28:63: dd:35:9b:8a:14:8b:7d:f9:7e:2c:36:de:b3:d6:0b: ff:e8:3b:94:8a:a7:e2:a3:e5:00:ee:74:75:6f:21: 21:0e:13:2d:d4:c9:b8:e5:ad:a8:73:1c:4f:e4:dd: 62:48:37:d6:d4:d6:47:08:a2:af:c8:78:42:ef:09: f3:58:69:05:e7:28:fc:9b:1a:42:d2:8d:ba:6e:2d: d9:c9:a7:ea:a3:94:4d:1b:ab:ab:5b:43:2f:46:38: 17:2e:a5:ae:f3:91:5a:33:90:56:0d:bd:81:3b:c1: 55:29:af:79:ea:ec:d7:9c:b6:dd:7d:91:af:c4:0b: ff:c4:54:78:33:95:8d:fa:e4:58:13:7c:03:ca:a0: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:51:86:20:76:2F:B0:65:90:24:77:9F:39:27:EC:06:0A:DA:9C:C3 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:dd:4c:58:34:e9:27:37:d0:96:9a:88:e3:56:48:28:cd:12: e1:96:df:13:d1:30:f8:d2:c8:8f:42:13:2e:b9:4e:18:87:26: 3a:cb:e0:88:08:4f:5b:22:5b:4d:b1:74:00:6d:cc:52:e3:a7: 48:d8:03:87:0f:fd:bf:25:b3:c6:74:47:62:c8:4f:54:00:12: 85:8a:c6:ac:fd:57:f9:16:6e:7a:ce:33:7d:75:9a:61:5b:bc: 8f:9a:e2:68:c6:9c:9e:91:a1:d7:9b:d9:b3:2f:7a:86:40:fa: 5d:e3:f6:ed:f9:87:94:0c:d4:29:c2:22:09:ca:d7:44:2a:e3: 99:65:ec:c3:73:5a:63:34:2e:37:92:5d:40:f1:12:11:08:dd: 9a:6c:1e:d7:f5:2c:7e:dc:15:c4:de:96:57:6d:49:d8:e5:79: ae:e4:8a:4a:7b:df:c9:65:5e:5f:13:a7:5c:f5:cb:c8:74:59: cc:e8:07:09:4f:b0:17:a5:12:85:31:87:82:f8:3e:d5:d2:22: 93:a2:44:87:cf:6f:d5:e0:a6:ab:53:ab:2b:d8:7b:f1:96:5f: 0d:13:81:dc:c8:ba:45:da:14:36:f5:91:fb:bb:93:f0:d9:b9: 46:a5:e8:ce:b4:2d:fb:45:05:e3:2b:94:18:ca:08:2f:93:80: 8d:cf:de:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2AY1J+aF1xfvweMC9A5mMcQIe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTA3MjIyMDA2NTdaFw0yNTA3MjUyMzQ1NTdaMDMxMTAvBgNV BAMTKDZBNTE4NjIwNzYyRkIwNjU5MDI0Nzc5RjM5MjdFQzA2MEFEQTlDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rpefzum418kkNVaLrLP2wnt1 S1JlOcrTTbwIpwVwT3HcFpT3CRMZNs8TY051Szkmqm58ueFMFgm3wy7Hgaf+H2Q7 vQRC1wpIsEhPkOhRC/GdyKtCWheFDFoOGIuF7eRbnZJWPBfR78BLL8+wRmcpakOf lgMoY901m4oUi335fiw23rPWC//oO5SKp+Kj5QDudHVvISEOEy3UybjlrahzHE/k 3WJIN9bU1kcIoq/IeELvCfNYaQXnKPybGkLSjbpuLdnJp+qjlE0bq6tbQy9GOBcu pa7zkVozkFYNvYE7wVUpr3nq7Nectt19ka/EC//EVHgzlY365FgTfAPKoF4pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUalGGIHYvsGWQJHefOSfsBgranMMwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPdTFg06Sc30JaaiONWSCjNEuGW3xPRMPjS yI9CEy65ThiHJjrL4IgIT1siW02xdABtzFLjp0jYA4cP/b8ls8Z0R2LIT1QAEoWK xqz9V/kWbnrOM311mmFbvI+a4mjGnJ6Rodeb2bMveoZA+l3j9u35h5QM1CnCIgnK 10Qq45ll7MNzWmM0LjeSXUDxEhEI3ZpsHtf1LH7cFcTelldtSdjlea7kikp738ll Xl8Tp1z1y8h0WczoBwlPsBelEoUxh4L4PtXSIpOiRIfPb9XgpqtTqyvYe/GWXw0T gdzIukXaFDb1kfu7k/DZuUal6M60LftFBeMrlBjKCC+TgI3P3q8= -----END CERTIFICATE-----Generated at Thu Jul 24 12:10:56 2025 by rpki-client