$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: FP3rust1f1hjdAErMVCDyrW34RzLKMsshTimW606784= Subject key identifier: C8:09:DB:6C:FA:E5:C4:12:D9:CE:AE:2E:2D:DD:7F:4B:EC:2D:0B:7B Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 768E5773A3FE4947151EE30ABAC2C2E9094BA6C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: 9C Signing time: Thu 05 Jun 2025 04:02:16 +0000 Manifest this update: Thu 05 Jun 2025 03:57:16 +0000 Manifest next update: Sun 08 Jun 2025 10:24:16 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: lr/ZiGv3pfvOtAXKBh35aTuv736HN5dUYZSv5Ci9+UY=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 10:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8e:57:73:a3:fe:49:47:15:1e:e3:0a:ba:c2:c2:e9:09:4b:a6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Jun 5 03:57:16 2025 GMT Not After : Jun 8 10:24:16 2025 GMT Subject: CN=C809DB6CFAE5C412D9CEAE2E2DDD7F4BEC2D0B7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:68:d4:39:f7:dc:f0:27:1c:91:da:21:80: da:9c:a1:e7:3b:fb:93:8c:75:48:df:9e:01:3f:c8: 2e:9b:25:00:27:75:34:1b:9d:9a:46:dd:15:4c:e0: 36:43:12:7d:42:c3:2a:49:41:68:82:7a:b4:0f:49: bc:9e:41:b0:57:a1:c5:c7:48:c8:36:f1:be:89:fa: 87:83:f2:cb:d1:ed:d8:e9:5a:39:4c:87:97:6c:f7: fe:ea:d4:3c:23:39:a1:41:3a:24:10:f6:63:28:da: 94:00:67:63:d5:ea:92:42:9e:fd:ff:01:58:1f:4a: 78:43:e7:e4:7f:e3:61:29:f3:e1:76:4e:c4:25:09: b9:5a:88:ea:48:ef:6d:59:be:7c:31:0d:3e:d5:25: 4b:21:6a:35:7b:b6:15:25:6a:7c:be:5a:69:7c:07: 0d:ac:75:ba:5f:00:37:33:2e:2d:c0:35:0e:94:fb: ae:ee:f7:c1:7f:9f:39:ff:67:76:52:dc:41:47:a1: 6c:d6:45:06:fc:62:63:59:82:17:6d:b4:59:56:e8: 59:5b:9c:47:8c:f5:e7:11:05:3d:22:b1:fb:fe:fc: a9:b5:19:b6:34:88:6a:dd:32:69:51:91:79:d5:a1: b9:d7:72:48:d9:28:6b:a5:d4:b4:dc:38:ac:75:60: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:09:DB:6C:FA:E5:C4:12:D9:CE:AE:2E:2D:DD:7F:4B:EC:2D:0B:7B X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ce:e5:e3:75:a2:57:5a:09:31:fe:1c:11:b8:d5:60:b1:9e: a3:96:57:05:43:e5:40:25:3c:0c:a5:91:ea:c3:95:95:b6:8f: 5d:40:7d:08:e2:15:4f:58:82:0e:16:9d:59:9a:44:5a:a3:f2: 32:b6:1c:3b:55:a3:04:6b:f9:74:ee:53:68:93:c0:42:d2:db: e4:75:96:a2:3b:fa:ff:94:ae:b0:dd:4e:1d:2c:22:60:8e:d1: f6:f7:cc:59:0a:da:97:2e:ad:48:ee:ab:59:f5:8f:26:70:d9: fb:8b:47:af:6e:61:53:fe:dc:fe:e7:96:6b:df:6d:a1:d4:97: ce:40:66:fb:9a:b2:e2:bb:84:bd:e3:4c:7c:b3:31:3f:0b:95: 11:d7:0d:a2:5c:bc:2e:16:21:f1:1b:76:58:61:bb:3e:a1:dc: a8:c8:d7:9d:eb:24:fb:ed:a2:d4:d4:f5:64:90:d1:15:47:b2: e0:62:82:bd:b9:ea:fd:71:3c:5e:9b:e6:9a:d2:72:3a:e3:62: c5:3a:2b:04:70:26:34:24:ef:0e:b6:d7:52:f8:78:c8:d8:14: 8e:20:56:03:9a:56:24:50:ab:4d:df:f1:e3:dc:c7:d1:82:04: c3:56:43:7e:e6:24:12:8b:84:ff:17:74:cb:80:a4:0f:9d:7c: 38:b6:64:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdo5Xc6P+SUcVHuMKusLC6QlLpsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTA2MDUwMzU3MTZaFw0yNTA2MDgxMDI0MTZaMDMxMTAvBgNV BAMTKEM4MDlEQjZDRkFFNUM0MTJEOUNFQUUyRTJEREQ3RjRCRUMyRDBCN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9zmjUOffc8CcckdohgNqcoec7 +5OMdUjfngE/yC6bJQAndTQbnZpG3RVM4DZDEn1CwypJQWiCerQPSbyeQbBXocXH SMg28b6J+oeD8svR7djpWjlMh5ds9/7q1DwjOaFBOiQQ9mMo2pQAZ2PV6pJCnv3/ AVgfSnhD5+R/42Ep8+F2TsQlCblaiOpI721ZvnwxDT7VJUshajV7thUlany+Wml8 Bw2sdbpfADczLi3ANQ6U+67u98F/nzn/Z3ZS3EFHoWzWRQb8YmNZghdttFlW6Flb nEeM9ecRBT0isfv+/Km1GbY0iGrdMmlRkXnVobnXckjZKGul1LTcOKx1YCchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyAnbbPrlxBLZzq4uLd1/S+wtC3swHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3O5eN1oldaCTH+HBG41WCxnqOWVwVD5UAl PAylkerDlZW2j11AfQjiFU9Ygg4WnVmaRFqj8jK2HDtVowRr+XTuU2iTwELS2+R1 lqI7+v+UrrDdTh0sImCO0fb3zFkK2pcurUjuq1n1jyZw2fuLR69uYVP+3P7nlmvf baHUl85AZvuasuK7hL3jTHyzMT8LlRHXDaJcvC4WIfEbdlhhuz6h3KjI153rJPvt otTU9WSQ0RVHsuBigr256v1xPF6b5prScjrjYsU6KwRwJjQk7w6211L4eMjYFI4g VgOaViRQq03f8ePcx9GCBMNWQ37mJBKLhP8XdMuApA+dfDi2ZLg= -----END CERTIFICATE-----Generated at Sat Jun 7 04:01:30 2025 by rpki-client