$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: cEePyl/aNRuTOTgFPjQeTyICfBFryNBhYfwq7YVz9fE= Subject key identifier: EE:2A:A9:A9:4C:CE:E4:C2:9A:15:6C:1D:5C:0B:E3:C2:A4:8D:11:07 Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 22DEB9E472C9B3ADFAC6786A974601AAC3806B1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 016F Signing time: Sun 15 Jun 2025 21:41:30 +0000 Manifest this update: Sun 15 Jun 2025 21:36:30 +0000 Manifest next update: Thu 19 Jun 2025 01:08:30 +0000 Files and hashes: 1: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: 25iIrmROclUu1xNaKTR+JYgvj8VIsqzhXaBvgLC24Qs=) 2: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: +3CpuxE5woNgyUCmmxhso5AFv+PRRLfm+mDWwqpYYyE=) 3: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: 6TBRWvV0MXiO3oTl1QlT4g/ofldIZCFPAsjFaJgzcqE=) 4: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=) 5: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: eRm8ddtsmSedKqcG2G82Bp1EhiRufznAWG1/ZjydYPs=) 6: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: 5w42C5j8nFPLQ8/TklJq72CWwX+rLT7sVOkbeuIVTnI=) 7: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: IlEiGcTNRfLgc+5n98afB5648nnwVHDEvCuqj1ZmYkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:de:b9:e4:72:c9:b3:ad:fa:c6:78:6a:97:46:01:aa:c3:80:6b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Jun 15 21:36:30 2025 GMT Not After : Jun 19 01:08:30 2025 GMT Subject: CN=EE2AA9A94CCEE4C29A156C1D5C0BE3C2A48D1107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:87:a4:36:4d:c3:b1:87:fe:fc:ea:28:b6: a9:69:d4:71:ca:1d:83:2c:2e:bf:57:6f:3e:84:73: 8f:a8:58:04:dd:8f:e5:47:30:a8:19:7c:34:5a:d7: 2f:4a:bf:cd:83:bc:c0:e0:74:d0:d1:70:75:81:d7: 4f:1a:76:a8:df:6d:0f:13:fd:74:5d:59:e5:df:2b: 09:51:0f:f6:4f:ff:53:b1:b4:75:19:bd:c8:4d:11: 8e:a0:31:c0:be:1d:3f:2d:67:31:e5:03:ec:14:46: ae:ca:6c:c9:92:fb:e4:a5:46:6c:ad:18:f1:b4:2f: 9d:71:25:28:d4:c8:45:1c:1c:1f:05:e7:a3:b2:0d: b7:26:10:31:6d:de:93:c6:22:56:05:d4:db:3c:b7: 42:b3:5a:95:e7:75:33:dc:ca:d2:21:c0:c7:af:35: 72:4a:dd:0e:9a:89:b9:d6:46:6c:6e:37:4f:40:f1: a2:e8:65:3f:8a:ab:01:07:71:81:8c:ee:f5:20:cc: 4c:59:14:8e:71:5e:1b:60:22:d4:50:c7:d9:0b:7c: 30:24:a8:10:46:61:98:42:ae:2b:44:b5:48:c8:95: 33:10:d5:b6:55:ce:0a:37:5a:87:95:f3:76:f9:6d: 4b:59:1c:4a:8a:d2:0a:57:75:75:59:33:83:a9:a3: 68:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2A:A9:A9:4C:CE:E4:C2:9A:15:6C:1D:5C:0B:E3:C2:A4:8D:11:07 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d4:4d:08:51:3b:e8:02:73:d4:1e:8e:57:e5:9b:63:0b:b0: f3:d7:dd:28:1d:4e:d0:15:0b:e0:e3:bb:b2:a9:7f:19:31:8e: 1e:3a:67:03:06:85:03:b5:0f:e6:14:3a:ca:f4:0c:cc:57:6a: 90:b2:e9:e7:d7:49:be:e3:35:69:a1:84:3c:37:54:7f:f8:8e: 65:4e:ee:5f:09:94:01:ea:ae:b3:bd:49:5b:b0:0d:55:7a:26: 11:46:a4:59:5e:b8:a7:75:52:94:fc:31:5d:cf:93:b6:8c:31: 67:e2:fb:fc:e5:af:10:18:c5:b8:c0:9c:a5:47:61:c5:83:1b: 98:8e:0d:60:42:0e:a7:ee:55:55:25:7b:de:d1:aa:89:df:28: 66:44:80:7e:04:56:90:ca:6f:f9:b7:09:d8:b8:6e:f9:ea:4b: 8f:f3:d1:f3:e9:4c:12:8f:fe:60:6c:d9:79:a3:83:fe:97:35: 1d:b6:fa:93:d0:5f:da:47:66:a6:5e:52:a3:b6:fe:cd:05:c1: e5:02:78:f8:43:54:79:d4:03:b5:cd:db:62:cb:dc:72:c6:f1: ca:46:62:ca:d1:f8:51:19:9c:52:a8:cd:ec:ff:ed:6e:73:d9: 35:00:d8:c9:6b:57:f8:64:3d:37:4b:c6:ae:b4:b8:0c:1f:d0: 71:1b:17:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIt655HLJs636xnhql0YBqsOAax4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNTA2MTUyMTM2MzBaFw0yNTA2MTkwMTA4MzBaMDMxMTAvBgNV BAMTKEVFMkFBOUE5NENDRUU0QzI5QTE1NkMxRDVDMEJFM0MyQTQ4RDExMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvIekNk3DsYf+/Oootqlp1HHK HYMsLr9Xbz6Ec4+oWATdj+VHMKgZfDRa1y9Kv82DvMDgdNDRcHWB108adqjfbQ8T /XRdWeXfKwlRD/ZP/1OxtHUZvchNEY6gMcC+HT8tZzHlA+wURq7KbMmS++SlRmyt GPG0L51xJSjUyEUcHB8F56OyDbcmEDFt3pPGIlYF1Ns8t0KzWpXndTPcytIhwMev NXJK3Q6aibnWRmxuN09A8aLoZT+KqwEHcYGM7vUgzExZFI5xXhtgItRQx9kLfDAk qBBGYZhCritEtUjIlTMQ1bZVzgo3WoeV83b5bUtZHEqK0gpXdXVZM4Opo2hTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7iqpqUzO5MKaFWwdXAvjwqSNEQcwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPUTQhRO+gCc9Qejlflm2MLsPPX3SgdTtAV C+Dju7Kpfxkxjh46ZwMGhQO1D+YUOsr0DMxXapCy6efXSb7jNWmhhDw3VH/4jmVO 7l8JlAHqrrO9SVuwDVV6JhFGpFleuKd1UpT8MV3Pk7aMMWfi+/zlrxAYxbjAnKVH YcWDG5iODWBCDqfuVVUle97RqonfKGZEgH4EVpDKb/m3Cdi4bvnqS4/z0fPpTBKP /mBs2Xmjg/6XNR22+pPQX9pHZqZeUqO2/s0FweUCePhDVHnUA7XN22LL3HLG8cpG YsrR+FEZnFKozez/7W5z2TUA2MlrV/hkPTdLxq60uAwf0HEbFzU= -----END CERTIFICATE-----Generated at Tue Jun 17 12:44:29 2025 by rpki-client