$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: S9bHgsyTBuhADkcXJN7xD2b54GeJdX5S3YVPi6fD1WE= Subject key identifier: 96:B9:A4:DB:0C:16:BD:44:50:4E:9E:B1:D9:48:84:FF:FF:70:7E:E3 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 0C67F78DC500B21BD060BCC4D044532D8EF0884E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 0198 Signing time: Wed 18 Jun 2025 04:51:52 +0000 Manifest this update: Wed 18 Jun 2025 04:46:52 +0000 Manifest next update: Sat 21 Jun 2025 13:31:52 +0000 Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: rE6AEGKmothAz6iMzuFlOEh+Ch977yRTteWTQXBwn64=) 2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 08:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:67:f7:8d:c5:00:b2:1b:d0:60:bc:c4:d0:44:53:2d:8e:f0:88:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Jun 18 04:46:52 2025 GMT Not After : Jun 21 13:31:52 2025 GMT Subject: CN=96B9A4DB0C16BD44504E9EB1D94884FFFF707EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:45:dc:f0:db:75:4a:0d:a1:5c:5f:26:a1: a5:f5:fd:7a:dd:7b:b8:89:d5:45:3a:35:0a:65:9c: 01:ae:f2:f9:9d:e0:08:71:0a:f5:c0:7f:cd:dc:18: a0:80:bc:6e:34:9d:8b:4b:9e:30:56:02:c6:e9:17: 49:a2:63:36:b6:04:8b:a8:c8:1c:41:d2:0b:09:51: f9:7c:55:20:88:25:20:3e:2d:c2:f6:cb:43:42:a8: bb:f3:e1:69:02:bc:6d:e7:3d:28:ca:9c:8b:3f:58: 37:c6:90:56:64:10:ef:90:b2:e9:f8:dc:97:2d:5c: 3b:4e:e7:e3:3f:ad:07:af:29:79:7b:c4:f3:b3:a8: 98:87:37:99:a0:14:7c:f6:51:e0:6a:e7:1a:15:a0: 31:aa:61:1f:b4:3f:4e:11:01:3c:d8:b9:f7:45:c3: 3d:0c:3c:34:d8:d5:81:d7:63:45:ed:e1:43:5e:95: 7a:a2:9b:bf:07:b8:b0:82:b3:9f:af:28:f2:71:9e: eb:22:92:f1:77:12:9a:89:56:fb:bd:b6:bb:d2:75: d1:fb:c7:39:97:59:ae:3e:28:ad:fe:a0:84:b6:e8: 2b:38:76:4f:6b:dc:af:a5:97:c8:f1:58:74:00:78: 5f:61:eb:c4:91:f5:9d:e8:f8:b1:7f:8e:61:e2:c6: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B9:A4:DB:0C:16:BD:44:50:4E:9E:B1:D9:48:84:FF:FF:70:7E:E3 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9c:14:0e:b8:d0:27:15:e8:28:73:7b:73:c7:09:9c:24:3a: ce:23:11:73:a4:72:c2:cc:29:be:5d:52:17:1a:2e:f0:13:65: 61:c2:b7:81:83:92:fc:ea:ce:62:f4:50:28:ac:a8:fb:ea:27: db:80:87:b6:8a:44:40:21:e8:a4:90:ca:60:e3:36:dc:f8:59: 3a:48:f5:4c:98:fe:5a:1c:ae:9c:bd:7e:f6:46:82:8d:85:3d: f7:16:4b:8f:a1:43:4c:e9:d9:c3:36:85:db:37:7a:60:0c:6b: d5:c5:6f:b5:49:d7:5f:a4:1b:58:0b:ad:fe:2e:03:e0:c7:39: 67:9c:c0:fb:98:99:b4:b5:d2:4d:64:2c:bb:55:58:e1:70:d2: 5b:84:36:50:8e:6d:3b:6c:57:7a:d9:5f:95:4c:00:25:50:fc: 0c:48:6f:30:5a:c0:0e:dd:7b:57:67:ef:f3:d3:34:fc:4a:d8: 1e:60:cb:7e:58:69:94:9c:72:00:12:a5:3f:56:5b:98:25:c0: b4:6b:db:ae:6f:2e:6e:6a:ed:bb:27:80:ae:7c:ee:ff:74:c5: 27:cc:f3:7a:99:ad:65:23:17:e2:35:af:b0:e6:c9:cc:10:52: 70:c1:8e:73:a9:9e:a4:b4:18:7c:ec:df:4d:4d:9c:3b:9b:1a: 0a:8f:8f:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGf3jcUAshvQYLzE0ERTLY7wiE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTA2MTgwNDQ2NTJaFw0yNTA2MjExMzMxNTJaMDMxMTAvBgNV BAMTKDk2QjlBNERCMEMxNkJENDQ1MDRFOUVCMUQ5NDg4NEZGRkY3MDdFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZGEXc8Nt1Sg2hXF8moaX1/Xrd e7iJ1UU6NQplnAGu8vmd4AhxCvXAf83cGKCAvG40nYtLnjBWAsbpF0miYza2BIuo yBxB0gsJUfl8VSCIJSA+LcL2y0NCqLvz4WkCvG3nPSjKnIs/WDfGkFZkEO+Qsun4 3JctXDtO5+M/rQevKXl7xPOzqJiHN5mgFHz2UeBq5xoVoDGqYR+0P04RATzYufdF wz0MPDTY1YHXY0Xt4UNelXqim78HuLCCs5+vKPJxnusikvF3EpqJVvu9trvSddH7 xzmXWa4+KK3+oIS26Cs4dk9r3K+ll8jxWHQAeF9h68SR9Z3o+LF/jmHixqnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlrmk2wwWvURQTp6x2UiE//9wfuMwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJucFA640CcV6Chze3PHCZwkOs4jEXOkcsLM Kb5dUhcaLvATZWHCt4GDkvzqzmL0UCisqPvqJ9uAh7aKREAh6KSQymDjNtz4WTpI 9UyY/locrpy9fvZGgo2FPfcWS4+hQ0zp2cM2hds3emAMa9XFb7VJ11+kG1gLrf4u A+DHOWecwPuYmbS10k1kLLtVWOFw0luENlCObTtsV3rZX5VMACVQ/AxIbzBawA7d e1dn7/PTNPxK2B5gy35YaZSccgASpT9WW5glwLRr265vLm5q7bsngK587v90xSfM 83qZrWUjF+I1r7DmycwQUnDBjnOpnqS0GHzs301NnDubGgqPj3k= -----END CERTIFICATE-----Generated at Wed Jun 18 08:20:32 2025 by rpki-client