$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft File: 03315D0E966A85B878EA9058B8CF03EAF2881889.mft (raw, json) Hash identifier: AiNcsJ1sf8AdNnYBI5Iy3xM5g/rJEObNCut80zVh59E= Subject key identifier: 34:99:0B:8E:56:48:82:DE:AF:F9:E2:80:C9:57:F4:0C:77:FA:80:7F Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 Certificate issuer: /CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Certificate serial: 04633DF3770958CA6A2565E56E40FFACF62EFF9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft Manifest number: 04FD Signing time: Sat 23 Aug 2025 01:41:59 +0000 Manifest this update: Sat 23 Aug 2025 01:36:59 +0000 Manifest next update: Tue 26 Aug 2025 04:06:59 +0000 Files and hashes: 1: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: DkpLk9wjtee+olEloYKtXa5HH1pKUw3+B87062+6qXc=) 2: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: hoLbivleHtt89cCReqbvfZYyTkoCRfwcqA081C1+9Gw=) 3: 03315D0E966A85B878EA9058B8CF03EAF2881889.crl (hash: sDnKWDNhZlMxIF2Sv7qj35ZAhLsiaXHnZ+2i5M5QDXI=) 4: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: /mrf9uGudGqcY2xOJDkK2ay/Dazo8lduBDgmiiL0FaY=) 5: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FiOfMQpB+2gj2/QXJXJKgiwN/buCJemHWYRysKfxPV0=) 6: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: QC8bpRsjoPax2VeFVISF7pou7WEj+SsbxVAbvHu+cPo=) 7: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 0xR4iUHdKDDCOxdGEjjw5dfszyruo+MDrchNeNEqs2w=) 8: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: FQaLrXQaTAavmrBmVo9QPPvdOGdpfu5PAx/qFXOh+QY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:63:3d:f3:77:09:58:ca:6a:25:65:e5:6e:40:ff:ac:f6:2e:ff:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Validity Not Before: Aug 23 01:36:59 2025 GMT Not After : Aug 26 04:06:59 2025 GMT Subject: CN=34990B8E564882DEAFF9E280C957F40C77FA807F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:4a:45:df:6b:b7:98:74:e6:97:97:6b:3c: 92:5a:ac:ae:71:6b:74:10:c9:ea:2c:b0:03:17:09: d1:df:47:71:50:b4:2b:00:7c:2f:7a:21:46:4c:87: 2d:1b:b4:39:60:69:34:ce:d5:c7:b1:7e:02:d4:d5: c9:c4:77:49:be:77:87:e6:72:76:d4:7c:49:c6:47: 01:5c:9d:02:9a:fe:ea:c8:3f:f6:0e:d2:fb:6f:64: 0a:04:c9:43:75:f4:63:14:0b:16:e8:65:33:5a:05: 92:cf:2e:af:4b:76:80:b6:ff:7d:80:df:94:1a:a7: 24:ad:1b:91:c6:1e:38:b4:db:6c:2d:eb:2c:33:d8: 01:b0:7a:33:1b:b3:48:41:aa:cb:7e:5f:b7:24:d9: c1:d9:1a:ee:e6:58:97:0c:36:cc:82:9b:aa:62:b1: ae:1f:0e:7b:dc:9c:5d:b3:77:cd:32:52:cc:b1:db: ed:9e:63:f1:fe:e2:6c:56:47:4e:78:10:e0:04:f7: 10:96:30:29:71:a1:d3:8d:f4:78:14:0c:b0:4a:82: 7a:9d:54:01:f5:6b:72:91:fa:94:da:6f:85:f3:f6: 5a:70:91:c6:7b:23:4b:c1:50:6a:c1:d9:9a:23:ba: 00:3d:1e:df:37:9e:5f:7b:d6:2f:cc:49:4d:cc:e1: a6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:99:0B:8E:56:48:82:DE:AF:F9:E2:80:C9:57:F4:0C:77:FA:80:7F X509v3 Authority Key Identifier: keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:86:ea:3d:5c:af:5e:7e:f0:c3:3e:04:0b:fb:f3:21:1e:4a: d4:f9:7c:17:02:d2:eb:75:27:cf:f3:4d:56:93:99:85:1b:3c: fe:45:64:f5:95:25:5c:ea:b5:3f:5e:bb:7b:df:83:5c:b9:23: 25:08:58:41:18:ac:7d:bd:b3:b6:61:c6:a1:c8:3a:c9:fd:91: 21:1e:7d:75:f8:ea:38:3f:c0:c8:30:61:bc:77:7a:4a:5a:d0: 75:4c:2e:de:c8:2c:34:66:f9:3e:62:a3:0f:31:67:81:8c:74: a2:23:51:50:a0:f2:32:15:a4:a0:dc:ae:49:63:b5:7f:87:5a: 56:b2:0c:88:97:d6:b5:b4:46:41:5a:41:f2:6a:1f:83:6e:8f: 34:f3:8e:45:00:60:9a:c9:4c:e6:66:a0:ca:ac:03:8f:17:5f: e3:ed:64:56:81:42:92:b7:dd:9f:ea:19:dd:78:2d:87:84:28: 72:13:f0:d8:e6:bb:23:69:47:bc:94:c3:77:46:df:99:40:13: cb:c1:3d:ae:f0:8a:59:d8:eb:7a:61:5b:24:4f:b1:ce:d8:19: 92:15:df:06:73:a9:be:91:82:8c:2b:a7:51:da:49:82:a0:b3: ef:f6:ab:ed:31:69:cd:51:cc:f9:05:0c:e5:31:d8:db:fc:22: 9c:a9:13:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBGM983cJWMpqJWXlbkD/rPYu/50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFG Mjg4MTg4OTAeFw0yNTA4MjMwMTM2NTlaFw0yNTA4MjYwNDA2NTlaMDMxMTAvBgNV BAMTKDM0OTkwQjhFNTY0ODgyREVBRkY5RTI4MEM5NTdGNDBDNzdGQTgwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41UpF32u3mHTml5drPJJarK5x a3QQyeossAMXCdHfR3FQtCsAfC96IUZMhy0btDlgaTTO1cexfgLU1cnEd0m+d4fm cnbUfEnGRwFcnQKa/urIP/YO0vtvZAoEyUN19GMUCxboZTNaBZLPLq9LdoC2/32A 35QapyStG5HGHji022wt6ywz2AGwejMbs0hBqst+X7ck2cHZGu7mWJcMNsyCm6pi sa4fDnvcnF2zd80yUsyx2+2eY/H+4mxWR054EOAE9xCWMClxodON9HgUDLBKgnqd VAH1a3KR+pTab4Xz9lpwkcZ7I0vBUGrB2ZojugA9Ht83nl971i/MSU3M4aaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNJkLjlZIgt6v+eKAyVf0DHf6gH8wHwYDVR0j BBgwFoAUAzFdDpZqhbh46pBYuM8D6vKIGIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTlhY2I5Ny02ZTg3LTRlMzEtYTU2OS1hMjY2MGRmNGYyYjgvMC8wMzMxNUQwRTk2 NkE4NUI4NzhFQTkwNThCOENGMDNFQUYyODgxODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFGMjg4 MTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1 NjktYTI2NjBkZjRmMmI4LzAvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAz RUFGMjg4MTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyG6j1cr15+8MM+BAv78yEeStT5fBcC0ut1 J8/zTVaTmYUbPP5FZPWVJVzqtT9eu3vfg1y5IyUIWEEYrH29s7ZhxqHIOsn9kSEe fXX46jg/wMgwYbx3ekpa0HVMLt7ILDRm+T5iow8xZ4GMdKIjUVCg8jIVpKDcrklj tX+HWlayDIiX1rW0RkFaQfJqH4NujzTzjkUAYJrJTOZmoMqsA48XX+PtZFaBQpK3 3Z/qGd14LYeEKHIT8NjmuyNpR7yUw3dG35lAE8vBPa7wilnY63phWyRPsc7YGZIV 3wZzqb6Rgowrp1HaSYKgs+/2q+0xac1RzPkFDOUx2Nv8IpypE4U= -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:29 2025 by rpki-client