$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: aX4f/NSPytx/onxGRvWb6RcjqqiBGihfpdv3aZ19aVo= Subject key identifier: 6D:8D:E7:22:48:09:A3:A2:4C:05:CA:78:48:21:9D:2B:CF:9B:07:9F Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 4FA6F7A3B36823B77F13D1E316F9D0FAA3882904 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: 01AE Signing time: Sun 15 Jun 2025 15:01:36 +0000 Manifest this update: Sun 15 Jun 2025 14:56:36 +0000 Manifest next update: Wed 18 Jun 2025 15:54:36 +0000 Files and hashes: 1: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: 7T58fOq0DPMtcC4WYKEb/YqZbz0lw8nZtLVxYnso2b8=) 2: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=) 3: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: IfQbqeYDFE143sRiG210sGz7TisDRmqjUItkN6FeDA4=) 4: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=) 5: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=) 6: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: PjOq+FNFeb3w0yAtv/+Tz1G1o/STxOGd/kpIjtd+xeA=) 7: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=) 8: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=) 9: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a6:f7:a3:b3:68:23:b7:7f:13:d1:e3:16:f9:d0:fa:a3:88:29:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: Jun 15 14:56:36 2025 GMT Not After : Jun 18 15:54:36 2025 GMT Subject: CN=6D8DE7224809A3A24C05CA7848219D2BCF9B079F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:83:c2:50:25:84:94:01:5f:ef:2b:cd:7b: c9:ef:77:f6:e5:07:23:4f:4e:8e:f3:e7:2c:7e:a1: db:fe:06:6b:cc:c1:f4:d7:44:d1:7b:b9:83:1d:8a: 4f:ca:fd:dd:36:87:f8:35:58:35:1c:22:c8:84:28: 1c:88:62:20:4c:52:25:a4:ef:0d:aa:25:27:3a:81: 47:75:59:b9:a1:f1:a5:d5:47:a2:5d:66:3f:b0:b6: 98:eb:88:ff:cb:99:09:7b:fc:b4:50:62:7e:dc:4e: 66:36:82:51:a8:ed:44:0c:fc:e5:29:38:83:34:3d: 42:51:d8:a7:41:f6:b4:34:08:89:c0:be:8e:82:e0: 84:6d:08:8a:2d:73:4b:2d:27:e4:eb:d7:fd:fc:69: 3e:94:fe:ea:f9:da:4f:db:3a:5b:45:32:62:36:6a: 4a:0e:ed:35:d2:57:9f:91:d7:03:2f:eb:01:ff:fe: 77:15:83:d4:bd:0a:3f:31:2f:ae:07:4f:bc:2c:5e: 82:da:f6:3e:37:5a:33:12:3e:5d:5e:71:57:3e:5b: 1b:2e:2f:81:a1:7b:11:59:c8:60:89:e7:ab:d5:9d: 38:06:67:29:25:70:bd:03:ea:4b:42:96:cd:c3:85: 27:4c:ef:f9:4e:d9:4e:f1:19:19:20:10:d7:28:c7: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8D:E7:22:48:09:A3:A2:4C:05:CA:78:48:21:9D:2B:CF:9B:07:9F X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:da:ac:77:5a:2d:f9:fd:c2:65:35:ab:eb:13:70:aa:57:74: 5a:98:5d:5f:bb:92:bd:1c:cb:f7:b6:35:5c:72:9c:b1:2b:bf: 31:22:1d:1d:8a:ee:88:a2:09:3b:9f:2f:45:46:e4:f8:9e:dd: 7e:d7:f4:ea:3e:73:4a:db:4d:29:67:89:86:ab:0e:61:47:7b: 4d:96:1b:7c:e7:34:fe:80:4c:7c:fb:d5:ff:de:4e:e7:ed:e2: f6:32:6c:20:fe:4f:aa:9c:30:36:23:2e:f8:7d:4c:59:99:a6: 6a:36:f6:79:6d:d0:de:5a:73:b6:3a:74:9b:6f:37:25:2c:1b: ec:9d:dd:88:e1:04:58:df:cc:e5:66:0a:9f:a5:62:c6:ad:45: 70:c0:59:cf:1f:22:c8:e7:e8:d0:32:d6:e0:ed:08:a2:7a:78: 81:cf:66:fb:82:c9:b0:e5:c1:c7:66:69:a8:9f:e4:b3:b6:03: c7:42:89:6d:07:b0:59:34:1f:f9:0d:76:90:10:63:a7:4f:7d: a4:e8:f5:09:d8:e8:a9:c3:7c:8a:53:05:2f:e4:9c:a6:b6:99: 60:43:3c:1a:f5:69:fe:0c:1d:f4:ee:2b:b5:65:ef:70:b0:b9: 05:cd:83:3b:20:99:a9:df:0d:9f:0f:c3:84:9d:15:bd:cd:85: ad:a4:a0:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6b3o7NoI7d/E9HjFvnQ+qOIKQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNTA2MTUxNDU2MzZaFw0yNTA2MTgxNTU0MzZaMDMxMTAvBgNV BAMTKDZEOERFNzIyNDgwOUEzQTI0QzA1Q0E3ODQ4MjE5RDJCQ0Y5QjA3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/oPCUCWElAFf7yvNe8nvd/bl ByNPTo7z5yx+odv+BmvMwfTXRNF7uYMdik/K/d02h/g1WDUcIsiEKByIYiBMUiWk 7w2qJSc6gUd1Wbmh8aXVR6JdZj+wtpjriP/LmQl7/LRQYn7cTmY2glGo7UQM/OUp OIM0PUJR2KdB9rQ0CInAvo6C4IRtCIotc0stJ+Tr1/38aT6U/ur52k/bOltFMmI2 akoO7TXSV5+R1wMv6wH//ncVg9S9Cj8xL64HT7wsXoLa9j43WjMSPl1ecVc+Wxsu L4GhexFZyGCJ56vVnTgGZyklcL0D6ktCls3DhSdM7/lO2U7xGRkgENcoxxhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbY3nIkgJo6JMBcp4SCGdK8+bB58wHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbarHdaLfn9wmU1q+sTcKpXdFqYXV+7kr0c y/e2NVxynLErvzEiHR2K7oiiCTufL0VG5Pie3X7X9Oo+c0rbTSlniYarDmFHe02W G3znNP6ATHz71f/eTuft4vYybCD+T6qcMDYjLvh9TFmZpmo29nlt0N5ac7Y6dJtv NyUsG+yd3YjhBFjfzOVmCp+lYsatRXDAWc8fIsjn6NAy1uDtCKJ6eIHPZvuCybDl wcdmaaif5LO2A8dCiW0HsFk0H/kNdpAQY6dPfaTo9QnY6KnDfIpTBS/knKa2mWBD PBr1af4MHfTuK7Vl73CwuQXNgzsgmanfDZ8Pw4SdFb3Nha2koBI= -----END CERTIFICATE-----Generated at Mon Jun 16 13:50:51 2025 by rpki-client