$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: dhW8VR2hKYpk7vFGv5D+U22Uf/qBMrOVKnR/gjpI31c= Subject key identifier: C2:ED:EA:F2:B5:CB:A1:87:40:AD:56:B5:29:05:12:D0:7E:B2:FA:2D Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 13F6AF4726714C8F687FF3BB8E3FF761BA51F126 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 020C Signing time: Thu 05 Jun 2025 01:11:51 +0000 Manifest this update: Thu 05 Jun 2025 01:06:51 +0000 Manifest next update: Sun 08 Jun 2025 11:51:51 +0000 Files and hashes: 1: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: mpWFCHVjj+zZBz81oEax+KJdChdml8WVupB6NX9bDqg=) 2: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: n+q2U81CpabwVzxAA8UFpKWEjeMzuUZCKUamL/xbPYY=) 3: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: wVRb/hhWbnMDFPxCNLvJynoFELXMVdYHUPAAmqv5U3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 11:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f6:af:47:26:71:4c:8f:68:7f:f3:bb:8e:3f:f7:61:ba:51:f1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Jun 5 01:06:51 2025 GMT Not After : Jun 8 11:51:51 2025 GMT Subject: CN=C2EDEAF2B5CBA18740AD56B5290512D07EB2FA2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:06:a3:87:ae:ee:63:d7:fe:70:48:5d:99: 02:ca:dd:35:be:1a:af:12:c5:11:a3:15:57:03:da: fd:5e:de:d8:43:90:f5:a6:8b:38:df:b3:03:60:fc: 77:5a:25:5b:f7:b2:64:db:b5:3c:f8:bb:a3:c4:79: a7:28:0c:d6:7c:40:43:96:06:5f:92:32:fc:5a:46: 21:de:8e:89:25:c4:eb:6a:df:e7:2a:03:83:e9:2d: 42:9a:41:ca:eb:12:72:06:52:a0:46:f7:f6:ec:68: 76:91:a2:3e:b8:1f:ab:50:b4:13:e4:a7:e6:a2:d6: b5:02:56:9d:5b:f9:b4:4a:3d:51:9a:a9:36:8b:28: 6b:1a:f1:61:c6:43:c9:c2:74:18:e0:06:77:8d:b7: 47:38:ec:2c:9a:01:19:88:8c:0b:b2:cc:c1:44:47: 8b:5b:0c:c4:0e:50:9f:36:a7:e0:cf:df:49:ad:0d: f8:88:ca:a2:cb:06:e8:32:e0:ff:be:f9:19:6d:25: 18:27:9d:b9:f1:ff:4a:8b:ef:f8:2e:8d:d2:f8:95: 35:01:9d:87:bf:25:ed:76:79:73:77:29:9f:78:85: 8a:0a:2f:e4:67:25:9a:cc:dc:06:66:02:f8:84:b4: 0e:bf:b7:e0:ea:63:30:c9:f6:e8:53:09:1b:42:ed: 09:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:ED:EA:F2:B5:CB:A1:87:40:AD:56:B5:29:05:12:D0:7E:B2:FA:2D X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:88:e9:f9:93:9a:e1:bb:f7:07:3b:7c:83:de:01:a9:c9:e1: 74:dc:ba:30:fa:7e:a8:73:c6:b3:c1:7c:a4:a6:f6:fa:1a:3a: 2e:fc:39:dd:e5:3c:c4:10:96:9f:dc:ef:39:5d:bc:42:20:01: 35:b8:5a:13:5b:69:60:cc:ba:9a:a2:da:92:17:69:a0:f8:53: af:24:01:0f:de:d1:48:b4:c9:99:da:33:80:04:ad:1a:46:0f: fb:0e:79:a7:e7:14:b4:b5:ab:ef:77:8d:cc:a6:80:71:1a:48: 8d:d0:85:91:22:1c:e0:4e:92:e7:a1:b8:5f:86:94:58:b7:5b: d2:3c:64:77:14:9f:76:90:8c:42:e2:39:ae:3c:ba:68:f9:cc: 6f:6b:1e:ab:f5:11:48:11:56:a4:2c:53:a0:54:ec:e0:4d:0e: 2e:7c:08:5f:87:4f:32:a1:96:97:ec:71:99:af:00:af:0a:9e: af:00:7a:dc:d4:90:90:6f:cd:dc:16:d6:88:42:cd:8f:e4:08: d9:06:2e:3a:75:70:29:82:0c:ce:1a:b7:64:ed:b8:45:ba:85: 1c:48:5f:99:4c:00:9d:b7:7f:cf:b1:33:33:3c:28:73:13:27: f9:95:25:6a:5a:0a:03:eb:0c:0e:14:af:09:54:05:1e:ce:63: 0e:12:21:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/avRyZxTI9of/O7jj/3YbpR8SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNTA2MDUwMTA2NTFaFw0yNTA2MDgxMTUxNTFaMDMxMTAvBgNV BAMTKEMyRURFQUYyQjVDQkExODc0MEFENTZCNTI5MDUxMkQwN0VCMkZBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhlQajh67uY9f+cEhdmQLK3TW+ Gq8SxRGjFVcD2v1e3thDkPWmizjfswNg/HdaJVv3smTbtTz4u6PEeacoDNZ8QEOW Bl+SMvxaRiHejoklxOtq3+cqA4PpLUKaQcrrEnIGUqBG9/bsaHaRoj64H6tQtBPk p+ai1rUCVp1b+bRKPVGaqTaLKGsa8WHGQ8nCdBjgBneNt0c47CyaARmIjAuyzMFE R4tbDMQOUJ82p+DP30mtDfiIyqLLBugy4P+++RltJRgnnbnx/0qL7/gujdL4lTUB nYe/Je12eXN3KZ94hYoKL+RnJZrM3AZmAviEtA6/t+DqYzDJ9uhTCRtC7Qk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwu3q8rXLoYdArVa1KQUS0H6y+i0wHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+I6fmTmuG79wc7fIPeAanJ4XTcujD6fqhz xrPBfKSm9voaOi78Od3lPMQQlp/c7zldvEIgATW4WhNbaWDMupqi2pIXaaD4U68k AQ/e0Ui0yZnaM4AErRpGD/sOeafnFLS1q+93jcymgHEaSI3QhZEiHOBOkuehuF+G lFi3W9I8ZHcUn3aQjELiOa48umj5zG9rHqv1EUgRVqQsU6BU7OBNDi58CF+HTzKh lpfscZmvAK8Knq8AetzUkJBvzdwW1ohCzY/kCNkGLjp1cCmCDM4at2TtuEW6hRxI X5lMAJ23f8+xMzM8KHMTJ/mVJWpaCgPrDA4UrwlUBR7OYw4SIRc= -----END CERTIFICATE-----Generated at Fri Jun 6 16:54:00 2025 by rpki-client