$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: aFV8hSqnUHdR/hLulhSFY+CiicH7b9zxu3jjxhdl24c= Subject key identifier: 6D:6B:E2:A7:66:EB:F8:78:DA:DF:F6:9C:C3:C5:F0:AB:0D:73:28:CF Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 4B50A967380121023905133637834B0D186C758D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 04D0 Signing time: Sun 04 May 2025 20:32:03 +0000 Manifest this update: Sun 04 May 2025 20:27:03 +0000 Manifest next update: Thu 08 May 2025 05:49:03 +0000 Files and hashes: 1: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: p0JfMBkDBDXri+ZQuRD9kBeMlUKe00SR0b1ExblH4Zw=) 2: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: bfDh6ZRJDvBPymHjC3pLTltfVhpAl5f2lYkL9hZt1pY=) 3: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: wpqAylZ/2JLIsixzqjZbQUW1PLTzI+fqS0UU/awB9+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 05:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:50:a9:67:38:01:21:02:39:05:13:36:37:83:4b:0d:18:6c:75:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: May 4 20:27:03 2025 GMT Not After : May 8 05:49:03 2025 GMT Subject: CN=6D6BE2A766EBF878DADFF69CC3C5F0AB0D7328CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:f3:91:eb:ff:a8:57:00:89:e1:0d:08:17: 5a:89:4c:90:ef:3d:ab:65:52:e9:bf:f4:88:30:03: 5e:35:67:11:d7:10:01:4d:5f:64:19:1d:a6:7a:d4: d9:45:a8:41:bf:aa:8e:6d:1a:c9:48:9f:6b:fc:09: 93:78:50:d4:d7:5f:4c:53:9a:7c:cc:ce:17:eb:f0: fe:9a:a6:b4:fc:aa:79:08:30:46:36:0e:71:40:13: b4:e8:b5:4e:fe:8d:80:b0:c8:fa:64:6a:5d:23:98: 20:86:3a:57:5c:91:09:30:20:4b:09:99:bd:a8:ac: e1:b8:93:d1:12:fa:90:10:fb:5d:07:b0:fd:5d:46: c2:27:93:89:14:2b:d4:54:95:14:1a:1b:8f:39:ef: 65:2e:ea:fe:dc:38:ac:8f:44:25:cb:7b:77:f4:88: e5:24:2a:9b:5c:43:69:5d:73:7a:43:31:9b:f3:02: 43:d6:e8:f5:75:74:15:da:dc:95:6c:54:f4:97:fa: a0:e0:db:93:c3:ed:94:7e:19:4f:cb:4d:08:cb:87: dc:b2:66:6d:aa:fb:d3:bd:1e:d5:48:e5:9e:08:1e: 49:2a:fa:14:84:b7:d7:63:5b:e4:b6:d6:6b:59:9c: 30:fc:98:83:33:f6:6e:26:a3:3a:4f:7b:5a:62:75: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6B:E2:A7:66:EB:F8:78:DA:DF:F6:9C:C3:C5:F0:AB:0D:73:28:CF X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8a:d3:de:7f:ef:7c:90:d9:d8:aa:1d:0d:05:4b:b3:06:ea: db:a6:0a:b8:c5:ec:7a:e3:de:02:c6:bd:63:85:e8:09:92:cd: 0e:73:8b:fa:ee:57:04:3a:b9:7d:c5:ea:d2:ac:81:ce:ad:18: 8b:81:b2:51:fe:70:28:91:17:e9:c1:e9:fd:6d:73:05:ee:3d: f1:bf:4f:1f:57:84:86:ca:e9:59:4d:9d:78:a5:4e:fa:07:0e: 16:9b:9e:70:f1:bf:40:66:8a:75:a8:ce:3a:da:d2:d2:5e:f1: 33:f9:cb:3b:8d:1a:9a:0c:67:a1:94:0c:35:1d:ca:55:48:50: 5b:9a:7b:89:eb:23:8c:18:14:7f:46:6c:4f:a5:49:2e:96:54: de:74:c2:bb:61:a3:01:7d:ee:19:68:ac:1f:47:4d:82:df:ed: c4:2b:a8:61:56:5f:6e:ac:72:9b:32:4a:e6:de:b2:8f:18:df: d6:51:57:e6:4c:aa:6d:22:2e:dc:99:4e:62:b5:18:dc:93:33: 4e:8d:bb:38:2e:fb:ea:79:c5:ae:30:79:75:bc:f4:2d:ee:77: 1e:5c:bf:15:fc:a6:24:9d:07:ab:7e:cb:62:aa:67:a7:f6:9f: cb:ba:ba:5e:01:01:83:ba:9f:2b:72:d3:d6:68:9d:65:ac:95: 73:0d:38:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1CpZzgBIQI5BRM2N4NLDRhsdY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNTA1MDQyMDI3MDNaFw0yNTA1MDgwNTQ5MDNaMDMxMTAvBgNV BAMTKDZENkJFMkE3NjZFQkY4NzhEQURGRjY5Q0MzQzVGMEFCMEQ3MzI4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcPOR6/+oVwCJ4Q0IF1qJTJDv PatlUum/9IgwA141ZxHXEAFNX2QZHaZ61NlFqEG/qo5tGslIn2v8CZN4UNTXX0xT mnzMzhfr8P6aprT8qnkIMEY2DnFAE7TotU7+jYCwyPpkal0jmCCGOldckQkwIEsJ mb2orOG4k9ES+pAQ+10HsP1dRsInk4kUK9RUlRQaG48572Uu6v7cOKyPRCXLe3f0 iOUkKptcQ2ldc3pDMZvzAkPW6PV1dBXa3JVsVPSX+qDg25PD7ZR+GU/LTQjLh9yy Zm2q+9O9HtVI5Z4IHkkq+hSEt9djW+S21mtZnDD8mIMz9m4mozpPe1pidWJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbWvip2br+Hja3/acw8Xwqw1zKM8wHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSK095/73yQ2diqHQ0FS7MG6tumCrjF7Hrj 3gLGvWOF6AmSzQ5zi/ruVwQ6uX3F6tKsgc6tGIuBslH+cCiRF+nB6f1tcwXuPfG/ Tx9XhIbK6VlNnXilTvoHDhabnnDxv0BminWozjra0tJe8TP5yzuNGpoMZ6GUDDUd ylVIUFuae4nrI4wYFH9GbE+lSS6WVN50wrthowF97hlorB9HTYLf7cQrqGFWX26s cpsySubeso8Y39ZRV+ZMqm0iLtyZTmK1GNyTM06Nuzgu++p5xa4weXW89C3udx5c vxX8piSdB6t+y2KqZ6f2n8u6ul4BAYO6nyty09ZonWWslXMNOHE= -----END CERTIFICATE-----Generated at Tue May 6 07:09:40 2025 by rpki-client