$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: FyUZnmrXLNL7fGG3vyKLdVe+U5/XCXiRFDZhHfhXBqk= Subject key identifier: 35:F8:CA:59:37:0E:35:24:C8:F3:58:01:3D:0A:A7:97:17:17:C7:A4 Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 52D16DFEFEF0E407C7C472AA9852FB3C45E9F8F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 01AE Signing time: Mon 03 Nov 2025 14:51:32 +0000 Manifest this update: Mon 03 Nov 2025 14:46:32 +0000 Manifest next update: Thu 06 Nov 2025 21:42:32 +0000 Files and hashes: 1: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: 6TBRWvV0MXiO3oTl1QlT4g/ofldIZCFPAsjFaJgzcqE=) 2: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=) 3: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: 25iIrmROclUu1xNaKTR+JYgvj8VIsqzhXaBvgLC24Qs=) 4: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: 89uLp70du3ndPcZNl1H5Nk2O6ZHn9JMvGjuVHTSWLsE=) 5: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: ZUJaOM7TjN3ZOkkd17p4sDGoaaTCp41XCuWUIewHiik=) 6: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: 5w42C5j8nFPLQ8/TklJq72CWwX+rLT7sVOkbeuIVTnI=) 7: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: In7/y6k0tKU1onXjk4QJUAhlh710hxTg1r3tOp5IDjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d1:6d:fe:fe:f0:e4:07:c7:c4:72:aa:98:52:fb:3c:45:e9:f8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Nov 3 14:46:32 2025 GMT Not After : Nov 6 21:42:32 2025 GMT Subject: CN=35F8CA59370E3524C8F358013D0AA7971717C7A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:7d:2d:41:5c:88:89:97:e8:68:3b:ee:b7: c1:4b:da:81:27:df:66:e8:13:66:9b:23:be:b7:80: 49:3b:4a:3d:ac:09:9b:26:68:bc:7d:fa:3f:aa:a9: fd:3e:f6:39:aa:78:b9:85:da:50:a4:c6:b0:13:b6: ab:89:56:e7:3f:74:b6:e3:66:27:9f:ff:4d:8c:3f: 6f:fa:91:2f:86:86:b9:83:15:b9:b3:6f:d2:4b:a0: a6:3c:aa:59:bc:d0:36:70:e4:d6:7a:3f:da:77:87: e2:97:4e:35:14:f6:a8:45:ca:03:e8:77:7d:f5:ea: 97:cd:ed:76:1d:83:42:9f:78:2c:4c:b1:b3:ad:f4: d7:59:ad:be:db:ca:07:98:70:ac:e8:82:55:34:e5: a7:34:bc:9c:98:51:f9:47:6b:45:76:b6:20:d0:d0: e5:bf:ef:fd:01:5e:53:5e:6a:13:0c:4b:50:a9:fe: fa:42:e5:29:c8:83:2d:2a:cf:1d:2b:24:f1:7e:3c: ba:3e:a2:2c:6d:2e:7b:c8:0f:c2:6a:e0:57:2c:50: a5:13:f4:a1:82:92:e0:1f:41:3b:38:6e:b4:4b:bc: 42:20:18:6f:3f:05:a0:40:42:85:b5:ce:42:2f:f0: 73:26:a4:d3:3a:dc:9d:6a:73:f3:e8:64:ed:12:4f: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F8:CA:59:37:0E:35:24:C8:F3:58:01:3D:0A:A7:97:17:17:C7:A4 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:1a:1f:8e:01:2c:9b:05:30:15:7d:8e:2c:89:94:f6:fb:c4: 52:b8:a8:e1:4b:4f:b1:d7:ac:9f:8e:2d:c5:cf:dd:9f:12:5d: 49:3e:21:7b:77:13:88:58:d8:06:4b:1b:fb:32:28:43:34:30: 88:1c:bf:51:50:96:5a:4c:04:c6:c5:bb:ff:02:d3:33:69:e9: 16:68:68:20:ee:dc:46:30:a9:3d:12:a9:c6:37:ac:67:40:9f: d1:fa:e6:42:94:1f:98:1b:8d:61:b2:2a:ea:7b:76:62:69:be: 7b:d2:3c:d7:6b:b6:33:1b:ac:29:aa:0d:64:55:43:d3:22:92: 38:d1:32:38:4a:1d:82:5a:7e:d8:cb:0d:9b:52:fd:29:c7:98: 53:25:17:c7:d3:68:74:1a:e8:93:6d:09:89:ef:74:ee:fd:a5: d8:7f:30:52:ea:63:e7:62:f0:6e:87:5d:58:6e:5f:b3:d4:71: ec:57:13:ee:86:13:3d:8a:71:e7:f9:a5:c6:45:ed:57:25:5d: 91:cd:28:dc:c3:9c:5a:53:47:96:39:a3:82:0b:9d:85:15:aa: fc:2a:90:a3:af:11:de:ea:2c:79:48:ef:13:20:61:c1:40:c2: 66:d1:e6:ac:63:ec:5b:5d:f8:69:d2:84:2d:f7:2d:9b:e7:8f: ed:a9:bf:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUtFt/v7w5AfHxHKqmFL7PEXp+PkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNTExMDMxNDQ2MzJaFw0yNTExMDYyMTQyMzJaMDMxMTAvBgNV BAMTKDM1RjhDQTU5MzcwRTM1MjRDOEYzNTgwMTNEMEFBNzk3MTcxN0M3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrS30tQVyIiZfoaDvut8FL2oEn 32boE2abI763gEk7Sj2sCZsmaLx9+j+qqf0+9jmqeLmF2lCkxrATtquJVuc/dLbj Zief/02MP2/6kS+GhrmDFbmzb9JLoKY8qlm80DZw5NZ6P9p3h+KXTjUU9qhFygPo d3316pfN7XYdg0KfeCxMsbOt9NdZrb7bygeYcKzoglU05ac0vJyYUflHa0V2tiDQ 0OW/7/0BXlNeahMMS1Cp/vpC5SnIgy0qzx0rJPF+PLo+oixtLnvID8Jq4FcsUKUT 9KGCkuAfQTs4brRLvEIgGG8/BaBAQoW1zkIv8HMmpNM63J1qc/PoZO0STy8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNfjKWTcONSTI81gBPQqnlxcXx6QwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQaH44BLJsFMBV9jiyJlPb7xFK4qOFLT7HX rJ+OLcXP3Z8SXUk+IXt3E4hY2AZLG/syKEM0MIgcv1FQllpMBMbFu/8C0zNp6RZo aCDu3EYwqT0SqcY3rGdAn9H65kKUH5gbjWGyKup7dmJpvnvSPNdrtjMbrCmqDWRV Q9MikjjRMjhKHYJaftjLDZtS/SnHmFMlF8fTaHQa6JNtCYnvdO79pdh/MFLqY+di 8G6HXVhuX7PUcexXE+6GEz2Kcef5pcZF7VclXZHNKNzDnFpTR5Y5o4ILnYUVqvwq kKOvEd7qLHlI7xMgYcFAwmbR5qxj7Ftd+GnShC33LZvnj+2pv10= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:14 2025 by rpki-client