$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: OtsHs6atyi6WyUpQNqZMlJ55L1K5oUucxfM+GMT4LzY= Subject key identifier: 2B:6A:F3:AC:98:AD:D5:21:86:D4:8F:6F:CA:F8:B7:C5:02:CF:30:75 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 10CF040C4E8E37D9BF5054E7C54471992EB52048 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 01AF Signing time: Sat 09 Aug 2025 21:01:54 +0000 Manifest this update: Sat 09 Aug 2025 20:56:54 +0000 Manifest next update: Wed 13 Aug 2025 02:16:54 +0000 Files and hashes: 1: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) 2: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: iNvF66pPu6otoCG7/VkM6n9k6awnYAYjSYVUMvVfLCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 02:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cf:04:0c:4e:8e:37:d9:bf:50:54:e7:c5:44:71:99:2e:b5:20:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Aug 9 20:56:54 2025 GMT Not After : Aug 13 02:16:54 2025 GMT Subject: CN=2B6AF3AC98ADD52186D48F6FCAF8B7C502CF3075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:c1:cf:1e:78:79:86:d4:d8:2f:3e:ff:63: 45:9a:95:6f:41:54:b8:15:37:bf:c2:36:f4:3e:72: 1d:ed:36:6a:a2:de:59:97:ac:07:d0:40:11:01:8b: 1a:76:0e:ce:a5:f6:dd:47:ba:87:9d:cf:b5:f3:1a: c1:76:1b:29:6e:c9:99:35:df:e6:8c:7a:35:47:ea: 2c:8a:16:4f:aa:2a:77:cf:8a:01:52:76:28:ee:25: 5a:af:aa:06:ec:ab:34:db:43:bc:06:00:27:62:d8: 65:84:e4:ef:d1:33:25:b9:c0:8f:a5:0b:3b:d5:f0: 53:6d:55:6b:5e:43:ef:72:20:c7:82:7e:4c:c5:a1: 35:33:a2:c6:30:73:5f:b1:9d:e9:39:39:f3:21:89: 60:b7:5e:23:34:39:5e:05:43:82:2e:8b:04:cd:58: 5b:9b:68:83:9c:23:8a:26:df:39:34:64:00:37:19: af:2a:cf:86:21:b8:ef:e7:0c:19:d5:da:49:80:6c: 86:bb:15:ce:d1:9c:33:20:73:a2:3e:3d:5d:16:f8: e1:80:a3:e8:08:f7:0d:22:74:7a:9f:3f:8f:62:52: b3:12:74:05:2b:e6:28:39:38:32:f1:1d:df:fd:f8: 77:6b:40:9e:48:ac:66:68:b5:c7:69:24:59:fe:c2: 89:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6A:F3:AC:98:AD:D5:21:86:D4:8F:6F:CA:F8:B7:C5:02:CF:30:75 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:01:a9:36:d3:df:f0:08:4e:5c:ae:02:0e:10:a1:68:83:f1: d0:07:c9:a9:98:47:4f:4d:f0:65:30:c7:07:e0:bd:40:1b:ed: 37:94:58:ed:a0:41:02:f5:de:bf:9f:61:91:26:a5:d8:0c:c0: 0c:a2:9a:ff:14:d6:65:ab:c5:d4:1d:c4:97:2d:66:4d:13:de: 1b:89:d9:a0:ea:14:18:a1:fe:19:3f:33:e1:aa:26:e1:d5:b6: 74:21:34:6b:c6:48:1e:e5:27:f2:20:7a:a6:6c:ec:58:46:a7: 5e:fb:15:c1:ff:79:dd:02:50:2a:1d:12:ea:15:4f:b3:96:9e: 52:4b:8a:f0:07:26:7d:ee:e7:4f:36:26:6f:37:e1:cb:be:fb: 1f:47:eb:80:cb:6b:1e:4a:eb:5e:46:17:62:57:00:55:a9:85: 04:df:48:b0:ea:fb:ad:3c:41:23:09:b0:9a:f9:2e:b9:4f:28: 90:21:cf:12:c5:48:fb:82:15:f0:5e:f2:2d:32:95:9d:df:5a: 94:79:ca:bc:58:38:17:a1:8b:68:a1:b8:43:0a:5a:c6:92:dc: d4:6e:1e:ab:d2:f5:df:0a:f3:97:8a:1b:fd:80:0e:86:f6:9c: 09:27:b4:68:df:51:e9:35:8d:8a:f5:6c:4c:68:1e:b6:db:6b: a6:e7:23:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEM8EDE6ON9m/UFTnxURxmS61IEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTA4MDkyMDU2NTRaFw0yNTA4MTMwMjE2NTRaMDMxMTAvBgNV BAMTKDJCNkFGM0FDOThBREQ1MjE4NkQ0OEY2RkNBRjhCN0M1MDJDRjMwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspcHPHnh5htTYLz7/Y0WalW9B VLgVN7/CNvQ+ch3tNmqi3lmXrAfQQBEBixp2Ds6l9t1Huoedz7XzGsF2GyluyZk1 3+aMejVH6iyKFk+qKnfPigFSdijuJVqvqgbsqzTbQ7wGACdi2GWE5O/RMyW5wI+l CzvV8FNtVWteQ+9yIMeCfkzFoTUzosYwc1+xnek5OfMhiWC3XiM0OV4FQ4IuiwTN WFubaIOcI4om3zk0ZAA3Ga8qz4YhuO/nDBnV2kmAbIa7Fc7RnDMgc6I+PV0W+OGA o+gI9w0idHqfP49iUrMSdAUr5ig5ODLxHd/9+HdrQJ5IrGZotcdpJFn+wom3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2rzrJit1SGG1I9vyvi3xQLPMHUwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0BqTbT3/AITlyuAg4QoWiD8dAHyamYR09N 8GUwxwfgvUAb7TeUWO2gQQL13r+fYZEmpdgMwAyimv8U1mWrxdQdxJctZk0T3huJ 2aDqFBih/hk/M+GqJuHVtnQhNGvGSB7lJ/IgeqZs7FhGp177FcH/ed0CUCodEuoV T7OWnlJLivAHJn3u5082Jm834cu++x9H64DLax5K615GF2JXAFWphQTfSLDq+608 QSMJsJr5LrlPKJAhzxLFSPuCFfBe8i0ylZ3fWpR5yrxYOBehi2ihuEMKWsaS3NRu HqvS9d8K85eKG/2ADob2nAkntGjfUek1jYr1bExoHrbba6bnI6A= -----END CERTIFICATE-----Generated at Sun Aug 10 05:39:14 2025 by rpki-client