$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: XKBCPC49o6pNIuaatJJ9bMIjplrifzWyOEIMJIbTXBA= Subject key identifier: D6:5F:6B:FC:17:74:78:8A:4D:04:D7:A3:80:26:C9:26:B5:32:34:8D Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 70948C52ABEFBDE4D565F9D30FEB079B41D906A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: A1 Signing time: Mon 16 Jun 2025 00:12:15 +0000 Manifest this update: Mon 16 Jun 2025 00:07:15 +0000 Manifest next update: Thu 19 Jun 2025 05:46:15 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: YE9lCJ9lzGozuXvNhpulTjTknb4DPPPY/MDlJYCpAfY=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 05:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:94:8c:52:ab:ef:bd:e4:d5:65:f9:d3:0f:eb:07:9b:41:d9:06:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Jun 16 00:07:15 2025 GMT Not After : Jun 19 05:46:15 2025 GMT Subject: CN=D65F6BFC1774788A4D04D7A38026C926B532348D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:ea:1a:fb:89:df:36:a3:d4:42:c1:34:2a: c4:b9:a8:e1:a5:38:73:81:d4:f5:fc:f5:cc:b3:84: 68:1d:c0:ae:66:5a:0e:7a:76:8c:96:cc:ae:40:f3: 04:26:9b:54:24:94:95:65:3c:10:9a:e5:a2:5d:a1: 4b:79:e4:45:0f:a4:4d:f5:5d:63:4d:56:92:d5:e5: 12:cb:72:55:31:b0:22:af:ab:8d:44:69:af:cf:79: 4a:ff:a1:b1:a9:06:38:cd:3f:28:81:23:3c:89:ec: f6:c6:90:ea:51:b8:e9:38:a4:15:60:28:d7:cf:54: 14:91:c5:b7:63:01:93:10:28:87:01:54:1a:ed:bd: 10:9a:94:dd:fd:2a:5d:bd:1a:cc:cb:52:ef:e0:c3: 65:28:ac:fe:1a:85:87:46:87:0c:b7:1c:39:4c:88: ab:25:7e:60:6a:bc:0a:ee:a2:08:01:9c:03:d8:2d: b4:94:8e:3e:6f:8b:5b:b2:0d:4f:10:5e:fb:dd:79: 39:be:cb:37:1d:00:c9:2f:96:e0:d3:40:c8:90:5d: 88:b7:cb:8c:45:ce:ec:e7:b2:f0:9b:6a:c6:d9:52: 87:38:21:b1:36:92:c1:bb:46:aa:21:3b:57:af:b6: 29:b8:37:dc:b4:80:50:61:b1:38:8b:46:f7:76:7e: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5F:6B:FC:17:74:78:8A:4D:04:D7:A3:80:26:C9:26:B5:32:34:8D X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2f:90:0d:ed:23:02:c8:dd:83:f2:77:3d:05:e5:49:03:7e: 9b:27:ed:6b:10:ea:f0:07:f6:01:f5:e8:82:6c:38:a6:b5:33: 58:87:07:6c:25:32:67:77:1e:23:a8:0d:1d:d2:05:69:83:c6: c3:f8:a7:30:f6:fe:49:54:59:3f:ad:83:68:de:e4:ed:1d:bb: 2c:15:d7:86:4e:6c:4a:e0:98:71:74:e7:3e:cf:e6:f4:53:14: c4:c2:1c:fe:0d:f3:96:15:2f:29:11:4b:95:33:2a:bf:cf:31: f3:e2:03:a0:21:8d:91:dc:41:65:2a:05:48:7a:90:14:e7:5b: 93:1c:91:6c:9e:64:21:2b:11:9f:c4:f6:09:77:33:71:75:c8: e7:73:ff:09:b3:33:3f:f8:7f:16:ad:ca:72:e3:ad:78:7f:77: c6:b0:e5:a2:5c:59:2a:a9:51:87:50:d2:84:d4:9c:f5:9a:8d: 53:38:e9:4d:9d:63:8a:38:32:eb:3a:5d:77:15:6c:cb:e2:2a: c5:d1:f6:e8:e3:32:48:d7:75:28:c8:ad:d7:4b:78:ae:5f:59: 5c:3f:2b:c9:c1:9a:51:9a:f2:21:91:49:5d:b3:4c:d7:86:0a: 2d:3a:37:9b:29:8e:ef:b6:0b:3e:a5:2b:39:08:44:23:8c:2c: c5:6f:21:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJSMUqvvveTVZfnTD+sHm0HZBqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTA2MTYwMDA3MTVaFw0yNTA2MTkwNTQ2MTVaMDMxMTAvBgNV BAMTKEQ2NUY2QkZDMTc3NDc4OEE0RDA0RDdBMzgwMjZDOTI2QjUzMjM0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZwuoa+4nfNqPUQsE0KsS5qOGl OHOB1PX89cyzhGgdwK5mWg56doyWzK5A8wQmm1QklJVlPBCa5aJdoUt55EUPpE31 XWNNVpLV5RLLclUxsCKvq41Eaa/PeUr/obGpBjjNPyiBIzyJ7PbGkOpRuOk4pBVg KNfPVBSRxbdjAZMQKIcBVBrtvRCalN39Kl29GszLUu/gw2UorP4ahYdGhwy3HDlM iKslfmBqvAruoggBnAPYLbSUjj5vi1uyDU8QXvvdeTm+yzcdAMkvluDTQMiQXYi3 y4xFzuznsvCbasbZUoc4IbE2ksG7RqohO1evtim4N9y0gFBhsTiLRvd2fuFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1l9r/Bd0eIpNBNejgCbJJrUyNI0wHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4vkA3tIwLI3YPydz0F5UkDfpsn7WsQ6vAH 9gH16IJsOKa1M1iHB2wlMmd3HiOoDR3SBWmDxsP4pzD2/klUWT+tg2je5O0duywV 14ZObErgmHF05z7P5vRTFMTCHP4N85YVLykRS5UzKr/PMfPiA6AhjZHcQWUqBUh6 kBTnW5MckWyeZCErEZ/E9gl3M3F1yOdz/wmzMz/4fxatynLjrXh/d8aw5aJcWSqp UYdQ0oTUnPWajVM46U2dY4o4Mus6XXcVbMviKsXR9ujjMkjXdSjIrddLeK5fWVw/ K8nBmlGa8iGRSV2zTNeGCi06N5spju+2Cz6lKzkIRCOMLMVvIVo= -----END CERTIFICATE-----Generated at Mon Jun 16 15:30:42 2025 by rpki-client