$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: IzEuUQZJgxCJo0QvJfFZxnwkl0ekZKp3oW6C+Rb5Qvw= Subject key identifier: 46:C2:55:AD:86:F8:76:D6:DC:DC:AB:35:27:20:6D:E9:DE:A2:51:30 Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 4F70D7B578236810A6B26AA4FBB4C8ABCEA078A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 016B Signing time: Fri 06 Jun 2025 11:31:31 +0000 Manifest this update: Fri 06 Jun 2025 11:26:31 +0000 Manifest next update: Mon 09 Jun 2025 23:17:31 +0000 Files and hashes: 1: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=) 2: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: 25iIrmROclUu1xNaKTR+JYgvj8VIsqzhXaBvgLC24Qs=) 3: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: eRm8ddtsmSedKqcG2G82Bp1EhiRufznAWG1/ZjydYPs=) 4: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: sUeabiaVB2ukwhBWG81I3+EgvID0qqm+m2pgkX8lMhc=) 5: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: 5w42C5j8nFPLQ8/TklJq72CWwX+rLT7sVOkbeuIVTnI=) 6: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: IlEiGcTNRfLgc+5n98afB5648nnwVHDEvCuqj1ZmYkQ=) 7: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: 6TBRWvV0MXiO3oTl1QlT4g/ofldIZCFPAsjFaJgzcqE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:70:d7:b5:78:23:68:10:a6:b2:6a:a4:fb:b4:c8:ab:ce:a0:78:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Jun 6 11:26:31 2025 GMT Not After : Jun 9 23:17:31 2025 GMT Subject: CN=46C255AD86F876D6DCDCAB3527206DE9DEA25130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:b5:e0:8d:8a:c3:18:1e:32:6d:10:d4:8a: 23:a4:89:31:8b:28:fe:82:67:17:71:df:48:06:fd: 5b:fe:bc:fb:67:1d:a9:c8:74:19:cb:d2:21:04:71: b9:aa:ea:99:c4:d6:db:bc:08:ab:5f:52:f2:fe:f1: 62:75:f6:87:93:8f:b1:9c:57:84:77:f0:b3:59:69: e1:c7:ba:aa:72:57:9b:f8:d9:99:96:3d:a3:46:cc: f0:9c:66:a0:01:e3:c4:2b:4f:92:af:55:a0:32:b8: 10:36:74:f6:c6:0c:b1:55:f0:1e:c0:19:53:6e:b7: 9e:59:26:e7:64:cd:23:e7:3b:a6:1a:15:60:ab:73: d0:e6:5d:07:2d:90:09:91:94:38:72:91:46:4a:3c: e0:80:44:a2:6c:3b:18:59:11:6a:7c:0d:ce:1a:dc: 4b:22:4d:95:a8:3b:08:63:23:88:64:1c:4a:b3:3c: 7d:d9:09:b5:5d:7e:0f:6e:af:9a:97:f0:62:0f:33: bf:58:0c:2f:1a:df:0f:b1:3d:d6:48:8f:ee:ca:36: 14:0e:ea:fa:a6:e0:b0:90:88:f4:8f:95:14:61:51: c2:54:ba:f4:5c:ae:1e:ad:02:fc:26:8b:84:ab:89: c9:76:94:64:0f:c3:29:a0:d3:59:e9:5b:42:d1:c5: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C2:55:AD:86:F8:76:D6:DC:DC:AB:35:27:20:6D:E9:DE:A2:51:30 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:43:e1:1a:f5:cc:db:42:c7:33:91:75:13:8d:da:35:b2:8a: 07:bd:31:1d:6c:5d:fe:cd:57:b1:e2:92:35:73:80:6a:e0:c0: 5b:7c:99:10:72:7b:cd:b1:c7:4a:0e:ad:cc:ce:b9:e7:6d:d6: b1:28:14:21:e0:18:8b:cc:c7:22:a7:94:ef:d3:8b:08:46:33: 54:cf:40:be:f3:78:69:2f:6a:8b:b2:bc:05:49:17:b3:f0:cb: 02:01:55:8b:aa:5a:33:4f:c8:58:76:1d:8e:98:f0:51:da:90: ee:40:b2:b2:83:94:b6:b5:77:e8:e6:b8:3d:5f:1b:bc:2b:60: 9c:df:33:d2:c7:cb:23:62:b5:6a:b5:48:a3:79:ea:83:89:27: bc:67:35:fa:a7:32:59:df:ba:83:10:d5:d3:ff:28:be:c3:88: b8:55:3c:8c:2a:95:b0:ea:10:79:c4:cc:6e:02:14:66:df:c6: b9:a4:43:c7:f3:c7:f6:dc:da:35:80:a9:0a:5f:f1:da:7f:0c: 15:40:7f:d2:80:aa:e3:fb:8f:d4:11:d3:d1:d3:df:7c:3e:32: 8e:1e:f7:75:17:79:42:bc:be:a4:89:42:8b:0a:98:4f:f6:ab: 87:70:55:4a:c0:21:41:1b:d1:27:07:59:d2:48:0a:ff:27:d8: cd:47:e0:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3DXtXgjaBCmsmqk+7TIq86geKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNTA2MDYxMTI2MzFaFw0yNTA2MDkyMzE3MzFaMDMxMTAvBgNV BAMTKDQ2QzI1NUFEODZGODc2RDZEQ0RDQUIzNTI3MjA2REU5REVBMjUxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC447XgjYrDGB4ybRDUiiOkiTGL KP6CZxdx30gG/Vv+vPtnHanIdBnL0iEEcbmq6pnE1tu8CKtfUvL+8WJ19oeTj7Gc V4R38LNZaeHHuqpyV5v42ZmWPaNGzPCcZqAB48QrT5KvVaAyuBA2dPbGDLFV8B7A GVNut55ZJudkzSPnO6YaFWCrc9DmXQctkAmRlDhykUZKPOCARKJsOxhZEWp8Dc4a 3EsiTZWoOwhjI4hkHEqzPH3ZCbVdfg9ur5qX8GIPM79YDC8a3w+xPdZIj+7KNhQO 6vqm4LCQiPSPlRRhUcJUuvRcrh6tAvwmi4Sricl2lGQPwymg01npW0LRxUxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURsJVrYb4dtbc3Ks1JyBt6d6iUTAwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdD4Rr1zNtCxzORdRON2jWyige9MR1sXf7N V7HikjVzgGrgwFt8mRBye82xx0oOrczOuedt1rEoFCHgGIvMxyKnlO/TiwhGM1TP QL7zeGkvaouyvAVJF7PwywIBVYuqWjNPyFh2HY6Y8FHakO5AsrKDlLa1d+jmuD1f G7wrYJzfM9LHyyNitWq1SKN56oOJJ7xnNfqnMlnfuoMQ1dP/KL7DiLhVPIwqlbDq EHnEzG4CFGbfxrmkQ8fzx/bc2jWAqQpf8dp/DBVAf9KAquP7j9QR09HT33w+Mo4e 93UXeUK8vqSJQosKmE/2q4dwVUrAIUEb0ScHWdJICv8n2M1H4DQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:10:52 2025 by rpki-client