$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: Txj+7R70P6VWp+w64V2xb8haY85IUDvxms7c77DgeSQ= Subject key identifier: 41:F1:79:0E:D3:61:F0:4C:53:42:D1:1D:DF:94:E9:82:8D:9E:61:C2 Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 102953595231202979777D429AC746E9450939EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 0227 Signing time: Wed 06 Aug 2025 17:01:53 +0000 Manifest this update: Wed 06 Aug 2025 16:56:53 +0000 Manifest next update: Sat 09 Aug 2025 18:20:53 +0000 Files and hashes: 1: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: mpWFCHVjj+zZBz81oEax+KJdChdml8WVupB6NX9bDqg=) 2: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: LQowrj4ArN4jV6P0oo0aIUmMcLURhttHOwjOHXOUnv0=) 3: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: wVRb/hhWbnMDFPxCNLvJynoFELXMVdYHUPAAmqv5U3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:29:53:59:52:31:20:29:79:77:7d:42:9a:c7:46:e9:45:09:39:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Aug 6 16:56:53 2025 GMT Not After : Aug 9 18:20:53 2025 GMT Subject: CN=41F1790ED361F04C5342D11DDF94E9828D9E61C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:b6:6c:f1:81:1c:38:c4:53:b5:b2:7f:a0: c6:9b:99:ed:eb:b1:a9:f3:b6:98:51:c8:8a:c9:6d: 16:bf:52:af:39:92:f6:6d:b9:d9:1f:2d:f9:57:ad: 37:8b:ae:cb:9a:28:64:23:92:73:3e:7c:c3:32:66: d4:0c:03:67:10:2e:70:78:44:53:cd:fb:a9:dd:4f: 10:c1:ba:f8:26:e9:49:93:ea:e6:40:5c:d1:9e:fd: 78:14:1e:d1:8b:bd:f0:09:5a:05:81:99:0a:3d:d6: 50:49:7e:73:b5:9e:a1:df:56:9b:e6:74:fa:de:fa: ae:28:21:e6:ba:e2:dc:cf:80:c6:a5:ec:c9:c8:c4: ea:57:17:d8:76:2c:4f:0b:71:e0:db:bf:8d:b8:0a: 8b:ad:81:21:3f:fb:7d:24:f7:fa:d2:95:29:0a:8b: 8a:63:e6:a1:87:01:d9:ad:70:c1:89:74:b7:48:63: 9f:5e:df:d3:36:0b:49:47:5f:30:29:9d:c8:b7:9f: 57:eb:4c:99:6c:b3:65:f7:7b:ad:42:6c:87:39:07: e6:80:13:df:e5:c6:62:ba:16:bb:de:27:19:e4:84: 65:f5:90:51:22:ef:e7:e8:2a:aa:c5:37:48:6b:44: af:b5:c0:c8:11:f3:f5:4e:bb:b4:ea:79:2e:d7:21: 7d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F1:79:0E:D3:61:F0:4C:53:42:D1:1D:DF:94:E9:82:8D:9E:61:C2 X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:5c:06:d9:14:ab:b8:76:5c:66:09:b6:1e:b7:8d:f5:ba:f5: a6:da:ae:a1:0d:fe:89:c8:10:cf:c4:26:0b:95:7c:c5:85:64: d0:c1:08:ce:cc:9d:e7:fb:54:7c:28:86:12:28:a8:46:db:92: 96:1a:11:2a:23:2b:d3:3c:47:66:85:59:7d:22:1c:06:5d:1d: 36:3e:2e:90:6e:24:e0:b2:f7:d3:8b:c6:75:78:c2:0e:ef:a1: e9:c4:97:1f:56:56:46:32:2e:96:57:33:85:09:65:7f:5e:0b: 6c:80:13:ca:2c:27:80:13:a9:ba:35:1a:f4:4b:c4:65:82:f3: 97:23:36:5d:df:69:09:65:78:69:6f:15:0b:74:3c:fa:f5:03: 9b:fb:14:84:6e:9f:d2:d8:8c:ac:76:75:94:96:1b:eb:35:20: 6e:f4:1a:47:74:62:12:26:26:f4:c6:62:37:5b:55:1b:55:92: 82:4e:59:bf:b0:fa:d9:c6:30:ff:24:2c:7a:a1:a9:e2:4a:a5: 53:c4:0e:be:a2:cc:95:c5:1c:ce:5c:c3:17:6e:b2:f3:d3:33: 71:ff:da:4f:21:03:e0:52:c2:fb:c4:6d:17:88:47:66:e9:bd: 9a:db:c5:98:94:a6:74:b3:28:82:6d:f6:31:ae:c5:59:a8:e5: e4:e0:ab:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEClTWVIxICl5d31CmsdG6UUJOeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNTA4MDYxNjU2NTNaFw0yNTA4MDkxODIwNTNaMDMxMTAvBgNV BAMTKDQxRjE3OTBFRDM2MUYwNEM1MzQyRDExRERGOTRFOTgyOEQ5RTYxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwbZs8YEcOMRTtbJ/oMabme3r sanztphRyIrJbRa/Uq85kvZtudkfLflXrTeLrsuaKGQjknM+fMMyZtQMA2cQLnB4 RFPN+6ndTxDBuvgm6UmT6uZAXNGe/XgUHtGLvfAJWgWBmQo91lBJfnO1nqHfVpvm dPre+q4oIea64tzPgMal7MnIxOpXF9h2LE8LceDbv424CoutgSE/+30k9/rSlSkK i4pj5qGHAdmtcMGJdLdIY59e39M2C0lHXzApnci3n1frTJlss2X3e61CbIc5B+aA E9/lxmK6FrveJxnkhGX1kFEi7+foKqrFN0hrRK+1wMgR8/VOu7TqeS7XIX3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQfF5DtNh8ExTQtEd35Tpgo2eYcIwHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhcBtkUq7h2XGYJth63jfW69abarqEN/onI EM/EJguVfMWFZNDBCM7Mnef7VHwohhIoqEbbkpYaESojK9M8R2aFWX0iHAZdHTY+ LpBuJOCy99OLxnV4wg7voenElx9WVkYyLpZXM4UJZX9eC2yAE8osJ4ATqbo1GvRL xGWC85cjNl3faQlleGlvFQt0PPr1A5v7FIRun9LYjKx2dZSWG+s1IG70Gkd0YhIm JvTGYjdbVRtVkoJOWb+w+tnGMP8kLHqhqeJKpVPEDr6izJXFHM5cwxdusvPTM3H/ 2k8hA+BSwvvEbReIR2bpvZrbxZiUpnSzKIJt9jGuxVmo5eTgqx0= -----END CERTIFICATE-----Generated at Thu Aug 7 02:01:09 2025 by rpki-client