$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: izrLaarWU9bG6k+dvkh0TvbiniGNi4GwOzl/JBX9Ur0= Subject key identifier: 1E:DF:05:29:1B:27:50:32:9C:F9:FF:F6:01:A4:44:AD:45:39:72:B4 Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 52AB3E9881FACA2C8B009E16057A5ABFF7A278F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 0502 Signing time: Sat 23 Aug 2025 10:12:06 +0000 Manifest this update: Sat 23 Aug 2025 10:07:06 +0000 Manifest next update: Tue 26 Aug 2025 12:11:06 +0000 Files and hashes: 1: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: jW/FeiLRHj9zEMGdaZ3hdyBFqIqkEWU+iIX2PSB04CQ=) 2: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: bfDh6ZRJDvBPymHjC3pLTltfVhpAl5f2lYkL9hZt1pY=) 3: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: oWtepmBqBvebT0Z+AytYxvJ+nwN7a/Aha+0+yrTyMss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ab:3e:98:81:fa:ca:2c:8b:00:9e:16:05:7a:5a:bf:f7:a2:78:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Aug 23 10:07:06 2025 GMT Not After : Aug 26 12:11:06 2025 GMT Subject: CN=1EDF05291B2750329CF9FFF601A444AD453972B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:89:b8:e2:62:f5:e2:f8:a2:53:31:c7:0a: b0:29:30:e5:c6:39:2c:54:ab:4a:70:a1:6a:b6:37: 99:7b:42:4c:54:ee:d3:d5:38:d3:a5:26:5f:09:5b: ac:ca:90:0c:ef:79:c7:90:a4:ca:ac:83:ea:e1:9a: df:d9:b2:b7:f0:c4:1e:18:4d:44:57:21:72:d3:8a: 6a:95:24:96:f6:79:38:f9:35:9c:86:91:25:b0:2b: 5f:11:7c:8f:80:43:81:ca:49:fd:94:59:e4:ee:06: 37:08:d9:4c:36:43:23:86:af:27:66:a2:bb:1c:f0: 6e:d3:c2:d0:82:8a:e4:31:7c:6b:29:39:c7:b3:78: 3e:c5:54:fc:55:bc:dd:2b:f3:9a:40:0a:49:42:cc: 42:3e:bc:44:d5:b2:ee:3d:e8:f6:8d:aa:83:9e:86: 3c:73:4b:f1:80:65:6c:f7:22:87:e4:2e:2c:76:62: d1:93:31:02:80:ad:e0:65:a6:c4:83:35:76:96:19: 61:92:00:00:27:75:47:8f:2e:99:a8:a4:80:0d:81: 75:af:84:dd:80:b3:ff:c5:aa:fa:25:a1:f6:f4:0a: 08:7d:22:75:46:d4:46:ed:e3:65:21:02:47:3f:13: 0d:6b:e1:cb:8f:cd:43:14:ce:54:17:18:53:8d:3a: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DF:05:29:1B:27:50:32:9C:F9:FF:F6:01:A4:44:AD:45:39:72:B4 X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4c:b4:67:4f:34:14:a1:cf:a5:99:c3:ac:86:bb:09:15:b8: 1a:b9:0f:c6:46:07:93:14:f9:27:d4:b0:68:75:77:d8:d8:57: 6d:c5:0d:83:14:93:6e:1f:0d:59:8d:1a:ce:ae:92:55:05:43: bc:bf:19:2d:1f:0f:95:78:9e:5a:a9:40:64:9c:e5:a1:77:db: 2b:85:04:82:13:37:00:af:b7:2f:63:3e:fb:7e:aa:7c:4e:18: 1a:3d:c1:4a:c5:4c:ff:b5:d6:ea:9c:b9:2d:60:8b:03:53:1d: 68:46:8b:6f:00:39:4e:f1:5b:71:55:e9:d3:75:07:b0:89:5c: f3:94:bf:77:00:06:68:f7:19:61:6f:b4:c2:3a:df:55:df:b3: 54:bb:2c:0e:e0:61:2b:7d:02:d0:f4:76:8e:af:d4:0d:17:b8: 7c:8e:b2:7d:40:70:cf:67:88:36:30:4a:30:2b:73:80:fa:16: c0:9c:42:09:58:c9:5d:e0:8f:8e:76:6c:60:cf:2a:6e:3b:c8: 17:4b:55:3a:86:7e:c5:e5:ad:a7:ec:39:9a:0c:78:0c:81:61: 95:6c:10:be:1f:a9:f2:69:01:53:4b:dc:19:91:f7:1e:df:98: 49:38:b4:8c:da:b4:f2:9c:55:40:b0:dd:5a:2b:de:6c:0e:9b: 91:3d:84:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqs+mIH6yiyLAJ4WBXpav/eiePkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNTA4MjMxMDA3MDZaFw0yNTA4MjYxMjExMDZaMDMxMTAvBgNV BAMTKDFFREYwNTI5MUIyNzUwMzI5Q0Y5RkZGNjAxQTQ0NEFENDUzOTcyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUCYm44mL14viiUzHHCrApMOXG OSxUq0pwoWq2N5l7QkxU7tPVONOlJl8JW6zKkAzveceQpMqsg+rhmt/ZsrfwxB4Y TURXIXLTimqVJJb2eTj5NZyGkSWwK18RfI+AQ4HKSf2UWeTuBjcI2Uw2QyOGrydm orsc8G7TwtCCiuQxfGspOcezeD7FVPxVvN0r85pACklCzEI+vETVsu496PaNqoOe hjxzS/GAZWz3IofkLix2YtGTMQKAreBlpsSDNXaWGWGSAAAndUePLpmopIANgXWv hN2As//Fqvolofb0Cgh9InVG1Ebt42UhAkc/Ew1r4cuPzUMUzlQXGFONOpGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHt8FKRsnUDKc+f/2AaRErUU5crQwHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVMtGdPNBShz6WZw6yGuwkVuBq5D8ZGB5MU +SfUsGh1d9jYV23FDYMUk24fDVmNGs6uklUFQ7y/GS0fD5V4nlqpQGSc5aF32yuF BIITNwCvty9jPvt+qnxOGBo9wUrFTP+11uqcuS1giwNTHWhGi28AOU7xW3FV6dN1 B7CJXPOUv3cABmj3GWFvtMI631Xfs1S7LA7gYSt9AtD0do6v1A0XuHyOsn1AcM9n iDYwSjArc4D6FsCcQglYyV3gj452bGDPKm47yBdLVTqGfsXlrafsOZoMeAyBYZVs EL4fqfJpAVNL3BmR9x7fmEk4tIzatPKcVUCw3Vor3mwOm5E9hD0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:17:16 2025 by rpki-client