$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: pnZ6t1b/B9CrDyP6pfNao04PWNCAS8Oon0ydaWI63Og= Subject key identifier: EB:D2:00:8C:65:EC:31:78:4C:8D:A5:D6:93:FF:CF:8E:A3:00:04:62 Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 7D69C9072E327F5599C633775604694690D7DF18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 018F Signing time: Sat 06 Sep 2025 22:22:13 +0000 Manifest this update: Sat 06 Sep 2025 22:17:13 +0000 Manifest next update: Wed 10 Sep 2025 04:57:13 +0000 Files and hashes: 1: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: qapQRiCaRC7OsFrcNzMh2kfxvW1dCswHQmWmMRB3ZmU=) 2: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) 3: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:69:c9:07:2e:32:7f:55:99:c6:33:77:56:04:69:46:90:d7:df:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Sep 6 22:17:13 2025 GMT Not After : Sep 10 04:57:13 2025 GMT Subject: CN=EBD2008C65EC31784C8DA5D693FFCF8EA3000462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ea:52:c8:38:af:79:5b:0a:b6:cb:36:07:6d: 41:21:e7:90:35:65:01:7c:18:d9:e1:be:61:d8:43: f8:43:40:c7:a5:20:97:18:19:15:ac:aa:51:e2:dc: 8a:25:79:26:99:3d:dd:c8:3b:e0:44:37:6f:4e:7e: e2:92:40:14:07:56:73:a8:76:58:61:91:aa:7d:51: 8d:cd:f1:53:17:37:bc:58:fc:68:76:69:e8:93:05: 6b:ff:57:1c:ed:50:34:a0:14:38:ca:94:d7:5c:d3: 12:59:d8:06:80:bc:4d:84:12:c9:9e:b8:a1:42:d5: c3:98:b5:a9:c0:91:e8:46:ff:08:0f:eb:64:14:53: 94:7e:6a:64:4e:35:85:54:f5:c9:1f:29:b3:c9:c8: 56:57:81:90:9c:14:a5:3d:8f:83:5c:92:d8:57:9b: ad:bd:d8:0f:95:8f:e1:4e:3d:b6:33:d9:7d:3b:b3: 42:02:79:da:6d:54:52:24:e4:e5:96:cd:1a:60:e7: b7:61:61:35:7d:68:cc:cb:53:ba:8a:fc:77:42:b8: 6e:a2:c2:fa:80:5f:53:44:22:dd:7d:c1:ee:6e:a1: fe:8a:7c:c3:93:bf:06:c2:b0:88:3b:75:61:1a:cf: f4:55:5f:56:65:35:62:6b:6a:51:c2:eb:0c:be:2d: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D2:00:8C:65:EC:31:78:4C:8D:A5:D6:93:FF:CF:8E:A3:00:04:62 X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:88:52:5c:dd:49:55:63:7a:2f:21:c5:47:41:d6:5f:41:2d: 10:9d:4d:23:85:61:c9:73:bf:22:de:18:43:20:c6:a0:09:5e: 92:52:15:e7:fa:cf:9e:ca:19:54:8d:cb:df:b9:c1:cf:90:6c: 05:68:2f:bd:df:2d:60:ed:aa:68:c3:cd:74:b0:1f:79:40:bd: b6:b7:ed:58:27:1d:6c:19:28:be:73:cb:c2:69:49:b2:66:e9: 58:92:c0:6c:2b:c4:ca:0d:10:a2:ee:a5:06:d8:6f:97:48:ba: 04:8b:ae:4d:3f:a7:86:24:7a:cb:97:62:ef:f9:62:e3:0a:e1: 71:06:cd:24:09:62:d0:9e:1f:29:db:26:a1:e8:fe:b2:98:8a: 3b:0e:92:4a:33:b8:a0:cb:c2:a5:ea:06:c8:1a:30:ae:74:d6: 3e:e3:0e:67:5f:e8:39:89:b0:eb:2a:e6:36:09:03:d1:e6:b7: fd:34:90:06:32:4e:e5:d8:92:76:88:9a:6b:07:e4:44:ee:b7: 4b:5e:a3:d9:e0:0d:62:69:4c:26:c2:00:80:fa:4f:6a:36:de: 72:13:ca:2b:e9:1b:db:c6:ec:79:9e:2d:e6:17:55:28:2e:a4: 89:39:68:90:48:79:c7:e8:a7:e9:7d:70:fe:dc:c6:e4:f6:04: d9:1c:2c:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWnJBy4yf1WZxjN3VgRpRpDX3xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTA5MDYyMjE3MTNaFw0yNTA5MTAwNDU3MTNaMDMxMTAvBgNV BAMTKEVCRDIwMDhDNjVFQzMxNzg0QzhEQTVENjkzRkZDRjhFQTMwMDA0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi6lLIOK95Wwq2yzYHbUEh55A1 ZQF8GNnhvmHYQ/hDQMelIJcYGRWsqlHi3IoleSaZPd3IO+BEN29OfuKSQBQHVnOo dlhhkap9UY3N8VMXN7xY/Gh2aeiTBWv/VxztUDSgFDjKlNdc0xJZ2AaAvE2EEsme uKFC1cOYtanAkehG/wgP62QUU5R+amRONYVU9ckfKbPJyFZXgZCcFKU9j4NckthX m6292A+Vj+FOPbYz2X07s0ICedptVFIk5OWWzRpg57dhYTV9aMzLU7qK/HdCuG6i wvqAX1NEIt19we5uof6KfMOTvwbCsIg7dWEaz/RVX1ZlNWJralHC6wy+LVCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU69IAjGXsMXhMjaXWk//PjqMABGIwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWIUlzdSVVjei8hxUdB1l9BLRCdTSOFYclz vyLeGEMgxqAJXpJSFef6z57KGVSNy9+5wc+QbAVoL73fLWDtqmjDzXSwH3lAvba3 7VgnHWwZKL5zy8JpSbJm6ViSwGwrxMoNEKLupQbYb5dIugSLrk0/p4YkesuXYu/5 YuMK4XEGzSQJYtCeHynbJqHo/rKYijsOkkozuKDLwqXqBsgaMK501j7jDmdf6DmJ sOsq5jYJA9Hmt/00kAYyTuXYknaImmsH5ETut0teo9ngDWJpTCbCAID6T2o23nIT yivpG9vG7HmeLeYXVSgupIk5aJBIecfop+l9cP7cxuT2BNkcLCM= -----END CERTIFICATE-----Generated at Sun Sep 7 16:50:17 2025 by rpki-client