$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: Ox2gLB42eRCH0zBSrmzURXLltdJKfE9AoMBk/teWHTw= Subject key identifier: 74:7E:1B:7F:9B:EB:56:03:3D:CC:41:85:DA:83:0B:1D:BF:4A:60:01 Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 4D9C35A83E258637ACD434158C3058EBB0622136 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: 01AA Signing time: Fri 06 Jun 2025 09:31:37 +0000 Manifest this update: Fri 06 Jun 2025 09:26:37 +0000 Manifest next update: Mon 09 Jun 2025 20:26:37 +0000 Files and hashes: 1: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=) 2: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=) 3: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: 7T58fOq0DPMtcC4WYKEb/YqZbz0lw8nZtLVxYnso2b8=) 4: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: PjOq+FNFeb3w0yAtv/+Tz1G1o/STxOGd/kpIjtd+xeA=) 5: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=) 6: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=) 7: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: Es52GMX/tqc51yu2g6nt3fq52zJNyFSoRWz9LqGhv1o=) 8: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=) 9: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 12:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9c:35:a8:3e:25:86:37:ac:d4:34:15:8c:30:58:eb:b0:62:21:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Jun 6 09:26:37 2025 GMT Not After : Jun 9 20:26:37 2025 GMT Subject: CN=747E1B7F9BEB56033DCC4185DA830B1DBF4A6001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:26:99:6f:d8:18:b8:6f:9c:7c:fc:1f:5c:36: 3f:5b:53:6f:6d:99:9e:ae:18:3a:64:45:8f:31:fb: 4a:99:c9:fe:31:33:5b:b6:7d:ec:47:49:0c:ba:c0: 8f:6a:45:aa:2d:79:ac:0c:f9:71:ee:f6:b8:72:d3: fa:52:f4:3c:cb:2f:69:ea:1a:4e:a1:2c:4d:e1:b2: 11:d6:45:ff:3a:32:49:99:74:61:d4:c0:a7:e5:13: 9e:1f:45:6b:f2:5b:26:54:02:32:81:a4:4d:c3:33: 35:6e:66:13:ca:2e:d3:c0:ad:dd:90:af:63:73:88: a3:09:22:17:85:91:7d:9c:a0:31:cf:02:03:91:c9: 4e:2c:50:ea:bc:ec:74:4b:51:ef:ee:f2:26:e5:07: 14:1c:ac:2f:eb:6c:bb:b2:95:af:fe:f8:ac:ca:df: e5:7c:37:13:9d:02:4e:cb:a4:54:19:39:f6:f3:41: 17:32:bc:58:0d:9e:16:47:a9:8b:47:59:3f:04:4d: fb:3d:2d:26:29:15:a2:c5:5f:90:04:17:9b:a6:e9: c4:8f:1e:ea:e2:e8:d8:8e:02:5e:53:ee:f1:cc:31: 9f:77:9e:ba:79:67:d4:6c:3d:0f:05:08:2d:7f:48: a3:d6:00:2e:9b:dd:ba:65:01:64:56:82:aa:8f:04: 7d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7E:1B:7F:9B:EB:56:03:3D:CC:41:85:DA:83:0B:1D:BF:4A:60:01 X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9c:07:ee:29:5c:01:22:97:06:86:68:a3:4d:9e:0e:d5:9d: 9a:25:0d:a7:5d:17:85:cb:67:40:29:81:64:35:6c:c3:c8:51: e7:2b:55:f9:dc:c8:24:1e:13:a0:6c:0c:1e:4d:fc:67:88:24: 75:22:8f:de:15:3b:06:b3:6f:f3:c7:ee:71:86:4f:43:40:a5: 4d:8c:24:04:96:a5:11:05:e2:b6:4a:74:7a:9d:41:f1:5b:5c: 1d:b1:8f:cc:83:2e:7c:50:f2:f9:04:21:c7:c4:82:ef:59:47: b4:67:74:23:25:bc:12:25:7b:1a:67:f1:fe:8a:2f:5e:12:ce: 93:b4:0e:ae:4a:92:ff:f0:cd:40:3b:89:d4:6a:e3:04:86:19: 4f:7d:26:dd:cc:d5:a1:08:93:3b:c8:87:47:77:ef:21:33:64: 19:dc:21:49:75:97:27:8a:9c:e2:d3:0a:7e:cb:d8:30:c1:f2: 91:51:6d:84:01:3f:3f:b8:33:82:92:40:24:29:43:ba:d4:8d: f7:1f:96:d2:7e:e8:70:64:39:bf:cf:10:6e:c5:da:48:2d:42: d9:63:20:46:c0:56:39:69:fd:1a:93:60:7b:0e:e2:49:38:7c: a2:f3:e5:dd:cd:58:91:9e:e5:65:e5:d1:07:2c:67:88:96:6c: c4:77:5f:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZw1qD4lhjes1DQVjDBY67BiITYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTA2MDYwOTI2MzdaFw0yNTA2MDkyMDI2MzdaMDMxMTAvBgNV BAMTKDc0N0UxQjdGOUJFQjU2MDMzRENDNDE4NURBODMwQjFEQkY0QTYwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+Jplv2Bi4b5x8/B9cNj9bU29t mZ6uGDpkRY8x+0qZyf4xM1u2fexHSQy6wI9qRaoteawM+XHu9rhy0/pS9DzLL2nq Gk6hLE3hshHWRf86MkmZdGHUwKflE54fRWvyWyZUAjKBpE3DMzVuZhPKLtPArd2Q r2NziKMJIheFkX2coDHPAgORyU4sUOq87HRLUe/u8iblBxQcrC/rbLuyla/++KzK 3+V8NxOdAk7LpFQZOfbzQRcyvFgNnhZHqYtHWT8ETfs9LSYpFaLFX5AEF5um6cSP Huri6NiOAl5T7vHMMZ93nrp5Z9RsPQ8FCC1/SKPWAC6b3bplAWRWgqqPBH31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdH4bf5vrVgM9zEGF2oMLHb9KYAEwHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKicB+4pXAEilwaGaKNNng7VnZolDaddF4XL Z0ApgWQ1bMPIUecrVfncyCQeE6BsDB5N/GeIJHUij94VOwazb/PH7nGGT0NApU2M JASWpREF4rZKdHqdQfFbXB2xj8yDLnxQ8vkEIcfEgu9ZR7RndCMlvBIlexpn8f6K L14SzpO0Dq5Kkv/wzUA7idRq4wSGGU99Jt3M1aEIkzvIh0d37yEzZBncIUl1lyeK nOLTCn7L2DDB8pFRbYQBPz+4M4KSQCQpQ7rUjfcfltJ+6HBkOb/PEG7F2kgtQtlj IEbAVjlp/RqTYHsO4kk4fKLz5d3NWJGe5WXl0QcsZ4iWbMR3X54= -----END CERTIFICATE-----Generated at Fri Jun 6 16:45:18 2025 by rpki-client