$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: 4r3LnyDRasPJxRLXGHjwkA/eYtrquHBGIVS+sxW5ukU= Subject key identifier: 2F:26:60:D3:49:91:08:5E:58:BF:D2:AD:C2:2D:2B:09:24:30:91:1B Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 0BBE2E5AD1D24E4520E498F6924307FFF97CD6ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 017F Signing time: Mon 21 Jul 2025 21:41:29 +0000 Manifest this update: Mon 21 Jul 2025 21:36:29 +0000 Manifest next update: Fri 25 Jul 2025 01:05:29 +0000 Files and hashes: 1: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: 6TBRWvV0MXiO3oTl1QlT4g/ofldIZCFPAsjFaJgzcqE=) 2: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: vtm6XKZHMyLGk5LEJgxjhTCxBfmAHD6H+G9irQsVs9c=) 3: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=) 4: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: 25iIrmROclUu1xNaKTR+JYgvj8VIsqzhXaBvgLC24Qs=) 5: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: 5w42C5j8nFPLQ8/TklJq72CWwX+rLT7sVOkbeuIVTnI=) 6: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: IlEiGcTNRfLgc+5n98afB5648nnwVHDEvCuqj1ZmYkQ=) 7: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: eRm8ddtsmSedKqcG2G82Bp1EhiRufznAWG1/ZjydYPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:be:2e:5a:d1:d2:4e:45:20:e4:98:f6:92:43:07:ff:f9:7c:d6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Jul 21 21:36:29 2025 GMT Not After : Jul 25 01:05:29 2025 GMT Subject: CN=2F2660D34991085E58BFD2ADC22D2B092430911B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:c3:78:03:c3:8f:75:e8:6b:09:e3:0f:58: 26:ee:03:40:33:b1:ab:57:09:ca:54:36:67:9a:33: 46:d4:f7:fd:09:36:62:74:19:90:72:62:6e:f8:fc: 1f:3e:1c:59:49:a9:d1:62:83:a5:0d:1c:4f:cb:46: 98:80:44:81:5e:b7:ea:c6:30:28:0d:0a:b2:8e:9c: 3e:90:26:e3:76:f9:87:0c:97:cd:05:ae:03:75:e0: b3:4c:35:5d:5f:b7:24:5a:00:5b:06:1f:72:af:e1: f5:3a:66:b3:80:8e:b6:be:cc:12:c4:39:87:db:7a: b9:5f:ee:dc:12:70:42:23:da:5d:66:4c:8c:2e:fb: 23:8d:7b:52:d6:81:d4:fe:05:1e:b8:10:de:14:84: 3a:fe:09:c0:61:e7:b2:22:6a:68:53:90:0d:67:9e: cc:1c:39:bf:3c:fc:47:31:a9:a7:da:83:05:3a:5e: e4:9a:ce:09:05:48:02:ed:6c:3d:e4:99:03:31:d8: 43:df:91:98:7a:9e:d2:71:60:0f:23:7e:54:3f:81: 68:30:48:91:f4:b8:93:60:9b:82:a3:85:67:01:7a: 21:c1:82:c4:9a:d7:4b:5a:bd:60:c4:ab:82:33:06: 42:b4:b3:4e:14:25:31:49:b4:c7:3f:c3:f1:9f:09: 04:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:26:60:D3:49:91:08:5E:58:BF:D2:AD:C2:2D:2B:09:24:30:91:1B X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:53:bc:17:b9:aa:45:99:ee:d8:6a:8b:be:d9:db:f0:69:3d: b1:5d:c0:20:3e:af:f3:39:9a:f4:f3:2f:da:d1:c1:1a:3a:1d: 98:12:09:f6:b0:fe:b7:31:32:81:a3:ac:72:63:f7:96:d8:38: f9:cb:77:bc:c5:c3:26:24:11:9b:2a:72:b9:f5:13:3a:18:38: 49:05:bf:90:c6:38:34:71:b0:ca:c6:fd:40:b3:df:bf:40:c8: 03:64:89:65:45:06:d5:44:38:06:e7:00:dc:6b:4e:67:75:dd: 2e:3c:f2:41:ac:29:d4:c2:8d:6e:ce:57:1c:18:80:2d:cf:85: d7:ae:7f:f3:28:b5:04:e6:35:6a:e2:1c:2e:60:1d:8d:68:38: 08:8d:1b:c9:e2:c8:3f:e8:50:68:f3:56:61:fd:38:c1:43:3b: 79:d2:87:7e:dd:ed:6b:16:a8:01:1e:64:cb:1f:9c:b4:16:33: 22:85:9a:2f:6a:70:de:48:e4:56:fc:54:a9:4b:8c:ff:5d:3b: 4d:dd:ab:0e:93:1c:7f:91:99:42:c9:a6:fa:94:50:03:76:3e: f5:16:63:9b:fc:e1:d3:d7:3f:37:35:9e:5d:0e:8a:c8:a0:a1: 0e:81:63:d1:71:75:db:10:f0:cd:55:bb:c8:0e:00:6c:06:b1: e6:7b:c3:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC74uWtHSTkUg5Jj2kkMH//l81u0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNTA3MjEyMTM2MjlaFw0yNTA3MjUwMTA1MjlaMDMxMTAvBgNV BAMTKDJGMjY2MEQzNDk5MTA4NUU1OEJGRDJBREMyMkQyQjA5MjQzMDkxMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOcN4A8OPdehrCeMPWCbuA0Az satXCcpUNmeaM0bU9/0JNmJ0GZByYm74/B8+HFlJqdFig6UNHE/LRpiARIFet+rG MCgNCrKOnD6QJuN2+YcMl80FrgN14LNMNV1ftyRaAFsGH3Kv4fU6ZrOAjra+zBLE OYfberlf7twScEIj2l1mTIwu+yONe1LWgdT+BR64EN4UhDr+CcBh57IiamhTkA1n nswcOb88/EcxqafagwU6XuSazgkFSALtbD3kmQMx2EPfkZh6ntJxYA8jflQ/gWgw SJH0uJNgm4KjhWcBeiHBgsSa10tavWDEq4IzBkK0s04UJTFJtMc/w/GfCQSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULyZg00mRCF5Yv9Ktwi0rCSQwkRswHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItTvBe5qkWZ7thqi77Z2/BpPbFdwCA+r/M5 mvTzL9rRwRo6HZgSCfaw/rcxMoGjrHJj95bYOPnLd7zFwyYkEZsqcrn1EzoYOEkF v5DGODRxsMrG/UCz379AyANkiWVFBtVEOAbnANxrTmd13S488kGsKdTCjW7OVxwY gC3Phdeuf/MotQTmNWriHC5gHY1oOAiNG8niyD/oUGjzVmH9OMFDO3nSh37d7WsW qAEeZMsfnLQWMyKFmi9qcN5I5Fb8VKlLjP9dO03dqw6THH+RmULJpvqUUAN2PvUW Y5v84dPXPzc1nl0OisigoQ6BY9FxddsQ8M1Vu8gOAGwGseZ7w2k= -----END CERTIFICATE-----Generated at Wed Jul 23 18:38:38 2025 by rpki-client