$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: x+gjGm5QztQRC4Sck4SkGFugHcD2aQHN1E+oSIouS2s= Subject key identifier: 98:32:1A:3C:E1:B6:8C:E6:31:B9:85:80:C0:DA:A6:F8:EF:41:AE:D8 Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 2FB9B2F0DE46C78B69F73D16AD6E5C3BC9467334 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 019E Signing time: Fri 09 May 2025 05:51:44 +0000 Manifest this update: Fri 09 May 2025 05:46:44 +0000 Manifest next update: Mon 12 May 2025 17:34:44 +0000 Files and hashes: 1: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: IwYVvleYOXDE1KvxJlP/VyImH81zWBJgWu/EFn3XzgQ=) 2: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: Md2Gwc22wRKTc5mUc5ELs7bt6G77R7I0eKIAvlpl/5s=) 3: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: RMbXW+76AI85CIf0zxt+gYCad1k0qaIDWZz1vwQwZ2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 17:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b9:b2:f0:de:46:c7:8b:69:f7:3d:16:ad:6e:5c:3b:c9:46:73:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: May 9 05:46:44 2025 GMT Not After : May 12 17:34:44 2025 GMT Subject: CN=98321A3CE1B68CE631B98580C0DAA6F8EF41AED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:99:03:cc:4a:bb:40:61:52:87:99:e0:7b: ac:b6:17:81:cb:82:3e:72:9b:0e:25:09:9a:d3:57: 92:23:a4:a0:83:c5:00:60:59:64:96:26:a9:cb:90: b9:28:7d:76:64:07:27:57:4d:14:8c:f7:44:d8:a4: be:63:5b:8c:e9:58:bf:df:63:3a:5b:98:e0:8c:79: eb:6a:92:2f:7b:29:c1:77:9d:ba:95:f3:8c:88:79: 0c:d3:5e:5b:76:97:e2:96:c1:78:62:df:1a:2e:db: f6:fb:89:c0:ef:4f:96:cd:ac:40:7f:61:26:a4:f6: ba:c6:9a:62:95:b2:7c:3e:d8:86:7b:78:ba:86:00: f9:13:a5:b8:14:c9:f1:d6:f9:ab:3e:0c:3d:40:0f: 5a:2e:ad:94:43:e4:4b:7d:ca:42:9e:97:5a:ec:da: 6e:44:a9:98:a9:23:5f:4e:fe:46:ca:54:81:6a:85: 17:5a:9b:b8:fb:b7:b6:8d:2d:a4:9c:a6:06:3f:27: a5:3a:9b:4b:0b:9a:76:1b:ba:3c:77:10:2c:36:7c: 97:7e:66:82:ef:90:b6:ee:9f:89:2f:5b:fc:d6:8f: b9:86:d0:78:37:2f:bd:2e:98:48:5e:cf:c7:ea:02: fd:5e:47:33:32:11:92:c1:77:51:07:94:5f:70:86: 06:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:32:1A:3C:E1:B6:8C:E6:31:B9:85:80:C0:DA:A6:F8:EF:41:AE:D8 X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:31:5e:1f:35:71:23:d1:d9:3c:8a:db:55:78:2f:9f:53:80: c7:ef:ee:e5:cc:58:1d:e7:56:41:ee:ab:23:e7:f9:a5:e0:37: 8d:81:39:11:46:4d:3d:80:12:e0:4c:09:4a:c3:da:18:02:13: f7:25:d5:3d:2c:80:75:11:ee:5c:8a:f3:e9:4f:f4:94:a5:ae: 6c:7c:72:78:cc:2f:62:0d:32:c4:44:09:62:df:ad:80:35:5d: b0:50:c8:71:ef:26:39:f6:f2:8e:36:3c:23:fe:3d:52:6c:26: 78:2f:e9:47:d9:5b:00:dd:76:74:04:93:0e:5e:a4:65:b4:e9: 94:2c:57:48:84:da:e1:24:bc:a0:c6:e0:8e:97:44:7f:a3:51: 1a:a2:06:fa:04:42:50:0b:0c:9d:67:e0:52:1e:e7:f5:a7:77: bf:c0:2d:5c:c1:3c:bb:6f:18:a2:f5:24:21:91:63:27:60:81: 47:45:89:4e:62:c3:70:a8:e5:98:b2:0a:27:1a:c6:60:85:d9: 80:b2:d2:36:db:43:d2:2f:af:11:98:52:30:af:26:dc:ff:be: 8b:ee:47:98:49:a5:fa:94:01:a4:be:21:20:3f:79:96:07:74: 47:cf:77:2b:17:2d:f7:e1:99:e6:a8:ea:98:3f:ea:c4:44:c4: 3b:a1:76:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7my8N5Gx4tp9z0WrW5cO8lGczQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNTA1MDkwNTQ2NDRaFw0yNTA1MTIxNzM0NDRaMDMxMTAvBgNV BAMTKDk4MzIxQTNDRTFCNjhDRTYzMUI5ODU4MEMwREFBNkY4RUY0MUFFRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBR5kDzEq7QGFSh5nge6y2F4HL gj5ymw4lCZrTV5IjpKCDxQBgWWSWJqnLkLkofXZkBydXTRSM90TYpL5jW4zpWL/f YzpbmOCMeetqki97KcF3nbqV84yIeQzTXlt2l+KWwXhi3xou2/b7icDvT5bNrEB/ YSak9rrGmmKVsnw+2IZ7eLqGAPkTpbgUyfHW+as+DD1AD1ourZRD5Et9ykKel1rs 2m5EqZipI19O/kbKVIFqhRdam7j7t7aNLaScpgY/J6U6m0sLmnYbujx3ECw2fJd+ ZoLvkLbun4kvW/zWj7mG0Hg3L70umEhez8fqAv1eRzMyEZLBd1EHlF9whgaPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmDIaPOG2jOYxuYWAwNqm+O9BrtgwHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAxXh81cSPR2TyK21V4L59TgMfv7uXMWB3n VkHuqyPn+aXgN42BORFGTT2AEuBMCUrD2hgCE/cl1T0sgHUR7lyK8+lP9JSlrmx8 cnjML2INMsRECWLfrYA1XbBQyHHvJjn28o42PCP+PVJsJngv6UfZWwDddnQEkw5e pGW06ZQsV0iE2uEkvKDG4I6XRH+jURqiBvoEQlALDJ1n4FIe5/Wnd7/ALVzBPLtv GKL1JCGRYydggUdFiU5iw3Co5ZiyCicaxmCF2YCy0jbbQ9IvrxGYUjCvJtz/vovu R5hJpfqUAaS+ISA/eZYHdEfPdysXLffhmeao6pg/6sRExDuhdrs= -----END CERTIFICATE-----Generated at Sun May 11 11:46:26 2025 by rpki-client