$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: GkDV+RrfOte8CbdMBYaumM9eprBSC3qD+VsfM7d4mrU= Subject key identifier: 54:4A:83:06:FA:F5:70:E0:74:CF:1B:B0:27:C4:A6:C9:27:BE:E1:3C Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 4436E6E3D0EAFEA1CF928204E8D34D7CBD23C6FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 0235 Signing time: Sun 07 Sep 2025 06:31:53 +0000 Manifest this update: Sun 07 Sep 2025 06:26:53 +0000 Manifest next update: Wed 10 Sep 2025 07:48:53 +0000 Files and hashes: 1: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: kAUE5XiSEftZDD7hfQCvIIfVaVgj0C8rMdRnkvwq8yo=) 2: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) 3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:36:e6:e3:d0:ea:fe:a1:cf:92:82:04:e8:d3:4d:7c:bd:23:c6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Sep 7 06:26:53 2025 GMT Not After : Sep 10 07:48:53 2025 GMT Subject: CN=544A8306FAF570E074CF1BB027C4A6C927BEE13C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7a:6f:a5:3c:16:99:f9:89:47:36:bf:d9:98: 4e:e2:42:8c:78:1b:a1:39:a2:02:89:8b:85:dd:16: bb:a1:3a:e1:bd:78:8d:1b:9f:12:c3:fb:fd:9f:47: 55:0e:5c:cc:b7:c6:51:d6:a3:8e:4e:cd:ba:17:ae: 24:2c:87:3c:db:71:3d:b2:07:32:59:ff:ea:02:32: ce:ec:c8:6c:84:33:f7:69:b4:98:5e:d2:6d:94:bd: 4b:5c:fc:3e:e1:34:e9:28:a5:09:04:d4:5f:71:78: 28:97:59:37:aa:7f:ac:f7:ec:91:51:62:a7:9d:26: 48:12:d3:d5:7e:40:82:fa:f4:b7:3a:06:08:f7:09: 89:93:ad:2e:73:9d:cc:ce:de:db:2d:6a:40:36:2e: 09:35:86:b6:82:20:ca:44:66:c3:df:53:08:13:43: a1:66:29:b8:d6:3f:50:fa:14:aa:bc:fd:2c:a2:a1: c5:4b:21:6e:43:38:52:d1:96:9c:52:17:04:b5:d7: 7c:bb:c4:78:b3:2a:29:9d:3d:99:1f:02:45:18:bf: 35:a1:8e:57:6e:c3:ab:9b:14:5b:b9:a0:c7:a4:eb: df:2d:0e:77:fb:6f:8c:aa:e6:c2:2a:17:9f:fc:a5: 5c:1d:ce:0f:21:ea:e4:12:0f:7e:d2:7e:7b:c7:dd: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4A:83:06:FA:F5:70:E0:74:CF:1B:B0:27:C4:A6:C9:27:BE:E1:3C X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:aa:58:7e:6b:57:4c:86:ae:fe:2d:1a:cc:3c:4e:f8:42:8c: 27:e1:e7:1b:d3:30:6b:e9:7c:a6:28:57:d2:ff:9e:50:cb:fc: 34:ba:81:92:52:83:4c:45:2f:f6:e0:9f:74:db:1e:67:ed:3e: 92:27:c9:32:99:06:f5:52:00:e3:6c:f7:3b:e8:92:f6:31:c3: df:52:d3:d2:6e:05:95:32:93:27:a0:f8:2e:42:00:dc:8e:ba: e8:03:8f:ab:9d:41:18:2d:b8:4b:1a:29:37:e4:d9:ab:fd:e8: 90:85:be:75:b3:80:78:15:99:64:54:a9:32:93:f0:4b:56:c7: b5:be:4d:3e:45:f2:f7:7e:e5:5a:c4:93:33:2f:21:6d:06:90: d5:13:a8:8d:f2:b2:13:88:cd:6c:9d:de:23:7c:14:53:99:1e: 3d:56:04:c0:78:66:c8:73:6a:ca:43:42:29:06:29:f1:a3:7e: 12:22:8b:69:34:b7:2a:82:8c:81:f6:29:21:1f:91:74:d7:40: a0:46:2a:41:90:eb:a6:8f:21:03:90:3c:49:e1:51:44:5e:23: f3:d5:04:aa:a3:34:82:b8:1a:cf:fb:1b:44:f0:5d:ab:bc:dd: a8:74:b8:fe:0e:36:c4:64:45:62:c9:a7:4d:f4:a5:af:e9:9d: ab:ef:dc:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDbm49Dq/qHPkoIE6NNNfL0jxv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNTA5MDcwNjI2NTNaFw0yNTA5MTAwNzQ4NTNaMDMxMTAvBgNV BAMTKDU0NEE4MzA2RkFGNTcwRTA3NENGMUJCMDI3QzRBNkM5MjdCRUUxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRem+lPBaZ+YlHNr/ZmE7iQox4 G6E5ogKJi4XdFruhOuG9eI0bnxLD+/2fR1UOXMy3xlHWo45OzboXriQshzzbcT2y BzJZ/+oCMs7syGyEM/dptJhe0m2UvUtc/D7hNOkopQkE1F9xeCiXWTeqf6z37JFR YqedJkgS09V+QIL69Lc6Bgj3CYmTrS5znczO3tstakA2Lgk1hraCIMpEZsPfUwgT Q6FmKbjWP1D6FKq8/SyiocVLIW5DOFLRlpxSFwS113y7xHizKimdPZkfAkUYvzWh jlduw6ubFFu5oMek698tDnf7b4yq5sIqF5/8pVwdzg8h6uQSD37SfnvH3aKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVEqDBvr1cOB0zxuwJ8SmySe+4TwwHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqqWH5rV0yGrv4tGsw8TvhCjCfh5xvTMGvp fKYoV9L/nlDL/DS6gZJSg0xFL/bgn3TbHmftPpInyTKZBvVSAONs9zvokvYxw99S 09JuBZUykyeg+C5CANyOuugDj6udQRgtuEsaKTfk2av96JCFvnWzgHgVmWRUqTKT 8EtWx7W+TT5F8vd+5VrEkzMvIW0GkNUTqI3yshOIzWyd3iN8FFOZHj1WBMB4Zshz aspDQikGKfGjfhIii2k0tyqCjIH2KSEfkXTXQKBGKkGQ66aPIQOQPEnhUUReI/PV BKqjNIK4Gs/7G0TwXau83ah0uP4ONsRkRWLJp030pa/pnavv3Fc= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:10 2025 by rpki-client