$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: qPl7lzAEItewnioTQOa7MdePdiRh0dsyFmB9UxOkM8U= Subject key identifier: 56:78:5C:A3:29:2D:DF:D2:E3:2C:98:B4:52:51:90:2D:53:DE:0E:BE Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 59E6FC631C24F4E0746399A400FD24AD5071AC5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 0186 Signing time: Wed 06 Aug 2025 13:11:34 +0000 Manifest this update: Wed 06 Aug 2025 13:06:34 +0000 Manifest next update: Sat 09 Aug 2025 13:29:34 +0000 Files and hashes: 1: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: 5w42C5j8nFPLQ8/TklJq72CWwX+rLT7sVOkbeuIVTnI=) 2: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: IlEiGcTNRfLgc+5n98afB5648nnwVHDEvCuqj1ZmYkQ=) 3: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: eRm8ddtsmSedKqcG2G82Bp1EhiRufznAWG1/ZjydYPs=) 4: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: 25iIrmROclUu1xNaKTR+JYgvj8VIsqzhXaBvgLC24Qs=) 5: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: LyVr5RhZXY4BxQnZPKTBEfxBLyWa9L5hsqltSjS8FPA=) 6: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: 6TBRWvV0MXiO3oTl1QlT4g/ofldIZCFPAsjFaJgzcqE=) 7: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e6:fc:63:1c:24:f4:e0:74:63:99:a4:00:fd:24:ad:50:71:ac:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Aug 6 13:06:34 2025 GMT Not After : Aug 9 13:29:34 2025 GMT Subject: CN=56785CA3292DDFD2E32C98B45251902D53DE0EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0b:10:60:ca:22:be:3e:45:6c:86:71:ad:53: 63:38:37:10:90:a8:0c:b7:95:a6:e2:ad:f4:97:e8: 80:83:8c:45:fc:81:32:40:81:69:18:b3:35:8a:07: 52:4c:be:04:e1:9a:c2:7a:a8:54:86:a2:cf:cb:ac: 07:dd:6b:66:5f:27:cc:1e:56:67:2d:9d:ba:0f:90: 14:bb:9e:92:9a:ed:1c:00:95:6c:b7:44:0d:b5:47: 8e:a5:54:c2:f0:26:e0:b8:af:1d:98:86:24:c2:7b: e2:07:b2:55:a5:c3:d6:f2:3d:64:2d:1e:ac:cc:55: 10:bc:e1:57:cd:22:f4:4b:4b:8b:98:5d:cd:4e:3a: 3a:98:6b:94:98:ce:bb:e4:68:9a:d6:05:56:16:35: dd:1e:a6:f9:b0:7e:31:04:6c:dc:67:98:34:84:81: 08:fc:d1:61:5c:57:00:94:93:5d:cf:02:de:9d:90: c3:04:0e:eb:d6:7c:36:db:36:61:e2:68:c0:a4:e4: b6:37:10:49:cb:bf:62:17:3b:8d:86:3a:e8:a0:e8: bd:70:e5:a5:cc:8d:e8:12:e2:ac:f1:e8:73:6f:3a: 02:4d:27:54:ba:c2:e8:6d:71:7e:cb:fc:7e:4a:2e: 8c:bd:01:a2:ca:28:d3:08:76:f0:0a:60:18:95:68: 9a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:78:5C:A3:29:2D:DF:D2:E3:2C:98:B4:52:51:90:2D:53:DE:0E:BE X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:37:6f:c2:40:4d:fd:59:49:dd:ea:b1:70:80:96:13:8a:cd: a2:6c:5d:96:06:f3:29:96:a5:af:ad:6e:b5:86:d3:84:fb:a3: f1:57:b4:0b:76:eb:91:69:80:2f:43:45:98:3b:c0:8e:a9:c3: 99:cf:23:43:75:f6:c4:f5:f6:c5:9c:e4:f0:02:c8:6d:a8:c3: 24:f7:b6:f6:f0:32:46:a2:6d:44:e2:4d:8e:f7:b5:89:67:8f: c4:05:d8:36:f0:10:cd:eb:b3:96:b8:b2:fb:0e:48:89:f9:0a: 8a:32:36:b4:c4:79:4c:c2:fa:51:50:7b:05:80:a3:35:79:b0: ea:20:53:d3:f1:82:ef:b7:15:21:33:0e:43:a1:39:56:10:d0: 13:12:35:28:48:4b:2f:1a:4b:70:bb:1d:9c:b4:31:36:6c:cc: 55:42:d4:d7:e0:8d:6f:19:57:fc:45:57:38:de:c9:a2:87:66: 0e:32:4f:57:f0:26:d5:49:f1:c4:35:18:3c:a7:ef:6e:cf:94: 64:4f:e1:28:b5:93:c7:3f:60:c7:c8:a4:e6:44:fa:91:2f:df: ec:2c:76:d8:9d:79:76:1e:18:2d:f2:05:24:56:2f:28:b6:1e: a7:0e:c6:0d:25:38:96:14:2b:c2:17:47:79:76:db:a4:55:69: 9b:6f:13:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWeb8Yxwk9OB0Y5mkAP0krVBxrFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNTA4MDYxMzA2MzRaFw0yNTA4MDkxMzI5MzRaMDMxMTAvBgNV BAMTKDU2Nzg1Q0EzMjkyRERGRDJFMzJDOThCNDUyNTE5MDJENTNERTBFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCxBgyiK+PkVshnGtU2M4NxCQ qAy3labirfSX6ICDjEX8gTJAgWkYszWKB1JMvgThmsJ6qFSGos/LrAfda2ZfJ8we VmctnboPkBS7npKa7RwAlWy3RA21R46lVMLwJuC4rx2YhiTCe+IHslWlw9byPWQt HqzMVRC84VfNIvRLS4uYXc1OOjqYa5SYzrvkaJrWBVYWNd0epvmwfjEEbNxnmDSE gQj80WFcVwCUk13PAt6dkMMEDuvWfDbbNmHiaMCk5LY3EEnLv2IXO42GOuig6L1w 5aXMjegS4qzx6HNvOgJNJ1S6wuhtcX7L/H5KLoy9AaLKKNMIdvAKYBiVaJpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVnhcoykt39LjLJi0UlGQLVPeDr4wHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALg3b8JATf1ZSd3qsXCAlhOKzaJsXZYG8ymW pa+tbrWG04T7o/FXtAt265FpgC9DRZg7wI6pw5nPI0N19sT19sWc5PACyG2owyT3 tvbwMkaibUTiTY73tYlnj8QF2DbwEM3rs5a4svsOSIn5CooyNrTEeUzC+lFQewWA ozV5sOogU9Pxgu+3FSEzDkOhOVYQ0BMSNShISy8aS3C7HZy0MTZszFVC1NfgjW8Z V/xFVzjeyaKHZg4yT1fwJtVJ8cQ1GDyn727PlGRP4Si1k8c/YMfIpOZE+pEv3+ws dtideXYeGC3yBSRWLyi2HqcOxg0lOJYUK8IXR3l226RVaZtvE8E= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:42 2025 by rpki-client