$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: zw19VASIvRsSk0x2n7lz52PYaRQS8DtryBLazL/AQ64= Subject key identifier: 2B:57:10:FA:A3:9B:B6:FF:D7:87:D6:51:DA:62:F6:D4:A6:A2:1E:F7 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 6AA6C765F9F53886C6CBB4F44FE64A061902E0F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 0192 Signing time: Wed 04 Jun 2025 08:01:50 +0000 Manifest this update: Wed 04 Jun 2025 07:56:50 +0000 Manifest next update: Sat 07 Jun 2025 16:25:50 +0000 Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: 5RfjIwn4cc+pBdh4Ku1Xe0hoxNCqXY7Ojr7bEmnnM5Y=) 2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a6:c7:65:f9:f5:38:86:c6:cb:b4:f4:4f:e6:4a:06:19:02:e0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Jun 4 07:56:50 2025 GMT Not After : Jun 7 16:25:50 2025 GMT Subject: CN=2B5710FAA39BB6FFD787D651DA62F6D4A6A21EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:11:bd:13:a4:20:90:d2:72:7b:7b:6b:f9:cf: 45:a4:e1:50:2a:ba:8b:a1:e8:0c:dd:33:5a:7a:81: 19:8c:c4:c0:7f:d8:a1:b0:80:9a:1c:55:cf:34:40: cb:27:f6:6d:30:38:88:b7:59:98:fc:89:77:ef:85: 19:d3:fb:7a:f6:cd:6d:a9:bf:ba:30:27:c7:46:50: 1f:a2:e8:6a:bc:bf:69:2e:f7:df:9b:9e:fc:66:a7: 62:29:c1:ef:7f:12:5b:c9:e9:ed:81:71:d4:d1:0e: 1a:65:f7:28:04:a5:38:ee:11:ab:8b:e1:1b:64:35: 96:da:45:44:32:cf:79:dc:2a:0b:71:a3:48:c5:13: 62:b5:e0:e9:52:e4:77:84:70:66:59:67:16:75:e1: 99:6b:65:bd:85:fc:bd:ff:39:7e:c5:46:cf:53:ef: ab:02:16:c7:ee:cc:e1:6d:5e:fb:e0:77:21:8a:b0: 52:67:d8:71:f6:2e:44:47:74:c4:1a:46:87:d9:d4: 74:8b:64:24:9f:82:0e:50:93:18:94:56:0d:4a:a4: ac:00:f3:11:a2:b6:d9:a6:d5:53:c4:ea:ac:2c:e4: 08:3d:50:94:3b:4e:a6:ee:88:4b:cf:8b:5b:c4:07: 2c:7c:a9:27:73:1a:28:dc:9a:c5:47:58:2a:10:b1: cd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:57:10:FA:A3:9B:B6:FF:D7:87:D6:51:DA:62:F6:D4:A6:A2:1E:F7 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a4:1e:af:0e:25:f6:67:70:e2:c4:ba:33:18:18:80:39:4b: 77:d3:33:91:5a:86:7c:9a:87:73:9c:73:de:f8:83:81:f3:28: 69:62:f5:4d:ee:84:80:4a:92:2c:99:c3:78:df:10:68:2e:e9: 72:4d:20:6b:25:e6:a2:78:85:c0:76:82:5b:7d:bf:01:af:50: 50:ad:6f:02:97:5c:20:b9:ca:70:63:8d:bb:5c:cf:a2:0e:9e: 59:c8:50:7e:b4:63:17:e1:a0:22:c9:7c:b2:98:76:eb:3f:ca: 61:22:ac:56:6f:d5:85:3a:b8:01:18:10:0b:5d:42:6c:a2:78: 9d:a3:03:5a:5a:ce:ae:e9:e5:a6:ea:b1:11:90:2e:80:fe:92: 0a:38:0a:77:a1:83:a9:70:60:70:2c:90:f8:cf:1c:1f:f6:9f: 0c:e2:92:10:bf:87:e4:02:26:de:c0:78:46:eb:85:17:e6:20: 94:93:03:2e:56:82:e9:ad:9c:e3:ac:c4:5e:f0:1e:26:85:8b: 0b:57:72:8c:e7:71:87:4a:4d:9b:ca:1d:79:d7:0f:3a:67:59: e7:16:5d:e5:04:2b:32:5a:6b:cd:a2:52:17:c7:2e:b1:5b:5a: a4:9f:fd:70:f1:1a:a6:00:79:ed:7e:13:7e:6c:2e:4e:d9:54: 31:f8:8d:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqbHZfn1OIbGy7T0T+ZKBhkC4PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTA2MDQwNzU2NTBaFw0yNTA2MDcxNjI1NTBaMDMxMTAvBgNV BAMTKDJCNTcxMEZBQTM5QkI2RkZENzg3RDY1MURBNjJGNkQ0QTZBMjFFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgEb0TpCCQ0nJ7e2v5z0Wk4VAq uouh6AzdM1p6gRmMxMB/2KGwgJocVc80QMsn9m0wOIi3WZj8iXfvhRnT+3r2zW2p v7owJ8dGUB+i6Gq8v2ku99+bnvxmp2Ipwe9/ElvJ6e2BcdTRDhpl9ygEpTjuEauL 4RtkNZbaRUQyz3ncKgtxo0jFE2K14OlS5HeEcGZZZxZ14ZlrZb2F/L3/OX7FRs9T 76sCFsfuzOFtXvvgdyGKsFJn2HH2LkRHdMQaRofZ1HSLZCSfgg5QkxiUVg1KpKwA 8xGittmm1VPE6qws5Ag9UJQ7TqbuiEvPi1vEByx8qSdzGijcmsVHWCoQsc0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK1cQ+qObtv/Xh9ZR2mL21KaiHvcwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFakHq8OJfZncOLEujMYGIA5S3fTM5Fahnya h3Occ974g4HzKGli9U3uhIBKkiyZw3jfEGgu6XJNIGsl5qJ4hcB2glt9vwGvUFCt bwKXXCC5ynBjjbtcz6IOnlnIUH60YxfhoCLJfLKYdus/ymEirFZv1YU6uAEYEAtd QmyieJ2jA1pazq7p5abqsRGQLoD+kgo4Cnehg6lwYHAskPjPHB/2nwzikhC/h+QC Jt7AeEbrhRfmIJSTAy5WgumtnOOsxF7wHiaFiwtXcozncYdKTZvKHXnXDzpnWecW XeUEKzJaa82iUhfHLrFbWqSf/XDxGqYAee1+E35sLk7ZVDH4jUw= -----END CERTIFICATE-----Generated at Fri Jun 6 17:17:07 2025 by rpki-client