$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: 7lMn5J6H70WKi9G6WUZut1fQ1GdPBgVo0EBbt7MpWs8= Subject key identifier: 80:86:3A:39:ED:85:0B:37:20:F0:18:AF:A5:F1:90:73:5B:F5:50:88 Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 5CA89EBDC8A309A965FB1971943814E0DC80D0A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 0179 Signing time: Sun 20 Jul 2025 20:42:20 +0000 Manifest this update: Sun 20 Jul 2025 20:37:20 +0000 Manifest next update: Thu 24 Jul 2025 08:22:20 +0000 Files and hashes: 1: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: Zc94AGCRw1+FfVaWlhxgQmn/LgU7Du2beIIcvK4fWXI=) 2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) 3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a8:9e:bd:c8:a3:09:a9:65:fb:19:71:94:38:14:e0:dc:80:d0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Jul 20 20:37:20 2025 GMT Not After : Jul 24 08:22:20 2025 GMT Subject: CN=80863A39ED850B3720F018AFA5F190735BF55088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:3c:e2:88:23:2f:26:ea:0c:8e:bd:53:55: 5c:0f:a8:3d:0c:4f:08:10:8b:00:eb:96:93:69:c5: 25:6d:a2:04:6a:cc:88:f9:7a:0b:e0:66:b1:6c:6c: 7c:82:bf:e4:35:0b:70:78:23:2f:91:f7:7d:8f:de: 74:54:d2:ed:17:28:2b:69:71:00:b6:b9:50:be:48: b6:1c:ec:db:7d:c9:5c:50:cf:eb:aa:7e:1a:c3:18: 85:01:66:04:2a:ba:a6:a7:2f:22:4d:39:d8:ae:35: 41:52:8e:a7:fe:32:7b:f8:60:d8:5f:67:b9:7b:88: a9:fe:48:16:d4:ad:f8:a0:71:09:13:06:bd:e1:e4: 53:b1:6b:90:7e:2e:f6:71:d4:a1:b6:69:d7:64:8b: 1d:29:49:2a:b7:d4:ef:f9:d3:10:dc:7f:cc:6b:ec: a8:1d:e6:88:7f:4e:7f:98:a5:b8:96:a1:08:d1:b5: 09:05:3f:19:b5:c9:0d:a8:c8:5d:17:8a:a7:35:11: 75:50:36:98:5a:c4:03:31:1a:96:f8:37:a8:d0:2b: 76:bd:fd:41:dc:87:f1:c9:f5:0d:8f:a7:ee:f3:21: 09:47:fc:c0:62:58:67:8f:bc:e0:ac:b1:be:f8:c1: 05:18:d5:33:10:2a:6b:50:68:15:ff:1d:4b:4d:0f: 48:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:86:3A:39:ED:85:0B:37:20:F0:18:AF:A5:F1:90:73:5B:F5:50:88 X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:93:22:b1:cb:1b:18:e8:50:b9:1e:42:64:9d:8d:1e:ff:e4: 9b:8e:39:4a:81:18:50:f2:0c:67:87:a7:f2:3f:a9:7b:e7:57: 0d:23:05:3e:80:2a:2b:d7:73:1d:f9:9f:41:59:b3:52:9a:66: 45:c1:0f:8e:43:9a:2c:62:43:0d:f2:2a:00:1d:79:63:fb:0b: 42:f4:ce:10:39:79:d7:7d:1f:cc:15:a9:95:f9:96:d2:95:ee: 9e:e5:02:95:79:52:7e:1c:73:82:f8:0c:58:f7:39:53:3b:93: be:70:6e:5d:5d:ea:25:34:7a:23:d0:17:8f:33:6f:e9:68:63: 17:62:43:d4:6e:3b:a1:94:c1:9c:b3:2a:20:01:37:e2:5b:f9: 19:ce:20:f5:15:0e:f1:d8:eb:c4:41:f2:0c:53:66:26:1e:14: 5c:f9:a4:21:10:68:a6:8d:64:2a:33:37:6b:62:02:d9:68:dc: 9d:23:45:77:3a:40:06:f9:d9:1a:ec:3b:b6:0a:32:97:69:dd: 5a:87:39:78:49:34:83:e1:20:a1:bd:67:3e:9a:34:dd:15:32: f8:9f:0b:9d:de:0a:34:67:25:10:0e:0d:96:cd:73:ea:5e:ad: 48:89:18:13:88:59:c7:7a:e2:20:86:41:fc:fd:3f:07:d9:57: 1b:af:01:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXKievcijCall+xlxlDgU4NyA0KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTA3MjAyMDM3MjBaFw0yNTA3MjQwODIyMjBaMDMxMTAvBgNV BAMTKDgwODYzQTM5RUQ4NTBCMzcyMEYwMThBRkE1RjE5MDczNUJGNTUwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87zziiCMvJuoMjr1TVVwPqD0M TwgQiwDrlpNpxSVtogRqzIj5egvgZrFsbHyCv+Q1C3B4Iy+R932P3nRU0u0XKCtp cQC2uVC+SLYc7Nt9yVxQz+uqfhrDGIUBZgQquqanLyJNOdiuNUFSjqf+Mnv4YNhf Z7l7iKn+SBbUrfigcQkTBr3h5FOxa5B+LvZx1KG2addkix0pSSq31O/50xDcf8xr 7Kgd5oh/Tn+YpbiWoQjRtQkFPxm1yQ2oyF0Xiqc1EXVQNphaxAMxGpb4N6jQK3a9 /UHch/HJ9Q2Pp+7zIQlH/MBiWGePvOCssb74wQUY1TMQKmtQaBX/HUtND0h1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgIY6Oe2FCzcg8BivpfGQc1v1UIgwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSTIrHLGxjoULkeQmSdjR7/5JuOOUqBGFDy DGeHp/I/qXvnVw0jBT6AKivXcx35n0FZs1KaZkXBD45DmixiQw3yKgAdeWP7C0L0 zhA5edd9H8wVqZX5ltKV7p7lApV5Un4cc4L4DFj3OVM7k75wbl1d6iU0eiPQF48z b+loYxdiQ9RuO6GUwZyzKiABN+Jb+RnOIPUVDvHY68RB8gxTZiYeFFz5pCEQaKaN ZCozN2tiAtlo3J0jRXc6QAb52RrsO7YKMpdp3VqHOXhJNIPhIKG9Zz6aNN0VMvif C53eCjRnJRAODZbNc+perUiJGBOIWcd64iCGQfz9PwfZVxuvAWk= -----END CERTIFICATE-----Generated at Mon Jul 21 10:34:06 2025 by rpki-client