$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: S0vs8B3gcpJNlNM2fAmNFywU2jxsVPEZHADzEV5dNck= Subject key identifier: 70:F5:22:C6:30:3B:93:59:AC:28:6D:43:C3:89:6E:9E:C1:1C:BF:6B Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 776AAEE25F59E594F90CD6F16C0353CE4ECB709C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 04FE Signing time: Fri 18 Jul 2025 22:02:04 +0000 Manifest this update: Fri 18 Jul 2025 21:57:04 +0000 Manifest next update: Tue 22 Jul 2025 01:36:04 +0000 Files and hashes: 1: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: bFn5Y7JpqG3baSv58HSYajbj+++aONkagR6UZgJDf70=) 2: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) 3: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: SDpHmQWrvR6QYeGR7FQ79oyRI2YwxolyxjXNhlqbQOw=) 4: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: vI68Gh5Oh59Rb2lPrZHZHoQWOjb0zjzOJoq8Na+SUkQ=) 5: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: f+KL9sRBKYThjcUf6Fn4ETIt2vwAYX6+xVDk6HrJGjI=) 6: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: 0u2Z+E8ZPU2YgkQHzYKp1Kt/oDKu9Nza5puMnecXPjQ=) 7: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: E6XmK1t6H2i7DnMzin3eXEnNRLj+glllDjzpw3yQ+tE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 01:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6a:ae:e2:5f:59:e5:94:f9:0c:d6:f1:6c:03:53:ce:4e:cb:70:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Jul 18 21:57:04 2025 GMT Not After : Jul 22 01:36:04 2025 GMT Subject: CN=70F522C6303B9359AC286D43C3896E9EC11CBF6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:28:5f:92:9d:dc:36:fd:d1:40:d7:1f:c1: fd:48:44:89:8b:2e:43:37:31:20:9b:68:23:6e:11: 3b:e6:b2:70:43:ff:1d:f9:d2:45:ab:c2:76:29:98: 15:fa:b5:9a:f2:db:48:7c:44:ee:1b:6d:40:b2:34: 79:c9:b6:ed:69:95:ed:a2:2d:ac:b8:1f:8d:d8:78: d0:68:6c:5a:c2:f7:91:9c:e3:38:ea:3b:22:e8:a6: 42:f9:b4:4c:15:6a:9d:46:4e:b9:74:a3:ac:de:8f: 35:34:d0:ba:32:0c:d3:c7:09:85:5e:38:7f:59:3d: b4:67:ba:2c:8e:6f:9a:a2:79:9f:cf:ee:f6:38:37: 52:88:8d:ea:ac:dc:53:61:5a:91:f6:c2:e5:d2:aa: 6a:95:4a:ed:fd:c0:a2:48:24:61:29:75:d7:4b:e8: 2e:b6:e8:b9:ed:f7:d5:22:64:25:eb:8a:09:69:e4: e9:b9:a3:4e:b2:0f:04:9f:95:0a:43:62:b6:b6:e9: be:a5:18:e5:a4:db:c7:b2:cd:5c:84:96:25:f4:c7: 7a:09:a9:fc:f9:5b:46:80:e2:15:ad:03:1a:f5:b0: d4:9c:de:9a:36:9c:2b:91:23:94:1c:73:b9:2f:9d: 1f:5c:c5:ee:ac:18:e6:5a:48:15:87:d6:dd:a1:b6: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F5:22:C6:30:3B:93:59:AC:28:6D:43:C3:89:6E:9E:C1:1C:BF:6B X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:5d:91:9e:73:63:82:ff:14:45:50:24:3a:98:c3:7e:5d:a9: 26:e2:1b:fa:1f:c1:6c:38:92:eb:f5:0f:ad:ac:41:b8:a3:9d: 65:9f:20:69:2e:88:ed:e6:e1:8e:1f:45:19:e9:4f:d7:8f:1c: 84:38:99:c9:00:36:42:cc:28:4e:3b:26:57:66:65:c8:39:2f: 87:8b:d1:cc:43:a8:df:e1:1d:ce:e3:40:0c:fe:f7:73:0b:25: d0:04:75:24:41:03:b7:ca:b2:f9:22:08:56:df:71:1a:0a:f8: 66:a7:5f:14:86:ea:4d:26:ee:1e:0b:b2:72:ed:56:ad:28:2c: db:a8:57:95:56:9c:62:52:6e:bb:e7:36:68:82:a5:bc:45:09: 5b:1d:c7:a1:62:e8:19:4e:2a:cc:dd:78:e2:f9:95:d8:aa:c8: c9:4c:83:7a:5e:85:3d:9a:41:f3:fa:94:9f:c9:60:f1:06:a7: aa:07:05:10:41:bf:4f:b4:20:73:79:ec:62:95:d3:e2:e2:90: f4:b1:cc:13:47:f8:36:97:de:26:5d:0f:5e:d4:8b:6c:d4:8e: f0:cf:c2:7f:f7:61:9f:af:e3:36:c0:df:e4:e5:e8:64:97:00: b7:70:3f:48:84:be:40:f4:b5:a1:fb:d0:d1:b4:b3:79:95:ef: 05:35:e9:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd2qu4l9Z5ZT5DNbxbANTzk7LcJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNTA3MTgyMTU3MDRaFw0yNTA3MjIwMTM2MDRaMDMxMTAvBgNV BAMTKDcwRjUyMkM2MzAzQjkzNTlBQzI4NkQ0M0MzODk2RTlFQzExQ0JGNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVyhfkp3cNv3RQNcfwf1IRImL LkM3MSCbaCNuETvmsnBD/x350kWrwnYpmBX6tZry20h8RO4bbUCyNHnJtu1ple2i Lay4H43YeNBobFrC95Gc4zjqOyLopkL5tEwVap1GTrl0o6zejzU00LoyDNPHCYVe OH9ZPbRnuiyOb5qieZ/P7vY4N1KIjeqs3FNhWpH2wuXSqmqVSu39wKJIJGEpdddL 6C626Lnt99UiZCXriglp5Om5o06yDwSflQpDYra26b6lGOWk28eyzVyEliX0x3oJ qfz5W0aA4hWtAxr1sNSc3po2nCuRI5Qcc7kvnR9cxe6sGOZaSBWH1t2htu1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcPUixjA7k1msKG1Dw4lunsEcv2swHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9dkZ5zY4L/FEVQJDqYw35dqSbiG/ofwWw4 kuv1D62sQbijnWWfIGkuiO3m4Y4fRRnpT9ePHIQ4mckANkLMKE47JldmZcg5L4eL 0cxDqN/hHc7jQAz+93MLJdAEdSRBA7fKsvkiCFbfcRoK+GanXxSG6k0m7h4LsnLt Vq0oLNuoV5VWnGJSbrvnNmiCpbxFCVsdx6Fi6BlOKszdeOL5ldiqyMlMg3pehT2a QfP6lJ/JYPEGp6oHBRBBv0+0IHN57GKV0+LikPSxzBNH+DaX3iZdD17Ui2zUjvDP wn/3YZ+v4zbA3+Tl6GSXALdwP0iEvkD0taH70NG0s3mV7wU16dY= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:35 2025 by rpki-client