$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: MGH+Pd0/vYJJYYsOP2m2Qyi2fBfvLrAgbzBgKpJofsM= Subject key identifier: F3:57:E6:1C:99:59:4C:63:B7:74:2E:14:D4:65:D6:1F:E1:27:26:08 Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 5DD94235FC050146A3EBB6EDE6E3D672C3EBBBE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 04E9 Signing time: Sun 29 Jun 2025 08:12:04 +0000 Manifest this update: Sun 29 Jun 2025 08:07:04 +0000 Manifest next update: Wed 02 Jul 2025 15:47:04 +0000 Files and hashes: 1: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: bfDh6ZRJDvBPymHjC3pLTltfVhpAl5f2lYkL9hZt1pY=) 2: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: wpqAylZ/2JLIsixzqjZbQUW1PLTzI+fqS0UU/awB9+g=) 3: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: nXJxC9+2nK7OBBmI4jnj+vAgTYNN9EMyO+nze+1zeu8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d9:42:35:fc:05:01:46:a3:eb:b6:ed:e6:e3:d6:72:c3:eb:bb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Jun 29 08:07:04 2025 GMT Not After : Jul 2 15:47:04 2025 GMT Subject: CN=F357E61C99594C63B7742E14D465D61FE1272608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:20:19:bf:59:42:64:d5:50:ea:a9:8e:53: 9b:bb:43:02:84:22:c5:55:69:fa:c5:a8:9b:f4:e9: 3f:0b:18:7b:17:0f:2a:dd:d2:eb:e3:a0:57:4e:f2: 07:c9:ce:2f:fd:8f:24:62:11:da:af:b8:8f:95:02: 32:14:8f:ac:0c:3e:04:02:f4:4e:4d:68:d2:e5:55: 67:99:f8:10:2b:2c:aa:f9:7a:02:f2:f0:e9:e7:78: 5c:34:8f:07:e0:05:1f:1c:74:dc:ba:5f:fd:b2:d9: be:36:00:eb:37:fe:d3:3c:03:d4:09:03:9d:5a:70: ac:dc:0e:01:18:94:8b:d9:07:54:fd:fd:01:db:7f: 9c:42:05:38:98:68:5c:43:09:c0:2f:36:9a:e2:e6: 7d:1c:8e:be:10:de:48:4b:34:d9:86:58:e3:b3:ba: 3e:14:cd:b9:a2:d4:39:ff:2b:27:42:7d:60:9c:c4: 1e:86:3b:46:f0:1f:18:81:cc:f6:42:c9:99:ab:f9: 2a:76:2d:61:be:68:b8:89:f2:43:5c:b4:a4:24:bc: 97:b9:e5:7b:03:11:56:8c:fd:01:1f:b2:97:e9:d9: eb:de:ae:18:d6:3a:00:12:3d:d9:46:8a:fd:6e:c4: 87:32:89:22:21:51:19:5d:20:08:bf:7c:56:1a:45: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:57:E6:1C:99:59:4C:63:B7:74:2E:14:D4:65:D6:1F:E1:27:26:08 X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f2:c1:36:7f:73:8e:25:fc:81:57:73:52:86:ba:49:d4:45: 94:1c:5b:2b:40:b9:62:50:5f:03:e7:78:df:d5:1d:8c:82:01: 4f:52:1e:ba:48:0e:1d:a0:1b:2e:39:2b:64:d8:f9:3f:e5:9c: 25:f6:1c:7b:2c:77:3b:79:d9:7d:f0:2d:13:70:66:e5:28:5e: ef:61:74:ca:c2:57:f5:4a:4c:be:58:3f:32:c7:b6:6d:10:82: c2:32:60:6f:6e:ee:cc:fd:54:5d:8f:60:e8:5f:c7:0e:ea:ae: ed:9d:67:ae:9f:bb:fa:bb:3a:6f:ed:ed:99:ac:16:21:d3:3c: 13:c7:e7:f6:70:4e:2e:97:55:ef:fc:b0:69:05:1b:fc:a7:7f: 3b:26:4f:72:13:0a:2f:2c:82:4d:a5:b1:b3:dd:b1:55:c3:f3: 39:32:56:d3:46:36:93:a1:1d:88:82:1c:87:b8:8a:55:fa:e6: 77:54:d6:47:ea:c9:b7:34:de:b5:78:4e:a9:a8:8f:fa:79:b0: f8:06:e2:20:d6:da:ff:ec:d6:c5:e7:86:58:4e:74:7f:b5:7a: 29:78:8d:fb:4e:47:e6:cf:a2:6b:b5:99:dd:9e:4a:be:00:bb: 80:53:b9:a9:bf:8d:cf:bc:27:a7:72:e5:e0:b5:55:94:1d:a0: b8:60:cb:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdlCNfwFAUaj67bt5uPWcsPru+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNTA2MjkwODA3MDRaFw0yNTA3MDIxNTQ3MDRaMDMxMTAvBgNV BAMTKEYzNTdFNjFDOTk1OTRDNjNCNzc0MkUxNEQ0NjVENjFGRTEyNzI2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79iAZv1lCZNVQ6qmOU5u7QwKE IsVVafrFqJv06T8LGHsXDyrd0uvjoFdO8gfJzi/9jyRiEdqvuI+VAjIUj6wMPgQC 9E5NaNLlVWeZ+BArLKr5egLy8OnneFw0jwfgBR8cdNy6X/2y2b42AOs3/tM8A9QJ A51acKzcDgEYlIvZB1T9/QHbf5xCBTiYaFxDCcAvNpri5n0cjr4Q3khLNNmGWOOz uj4Uzbmi1Dn/KydCfWCcxB6GO0bwHxiBzPZCyZmr+Sp2LWG+aLiJ8kNctKQkvJe5 5XsDEVaM/QEfspfp2everhjWOgASPdlGiv1uxIcyiSIhURldIAi/fFYaRZGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU81fmHJlZTGO3dC4U1GXWH+EnJggwHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzywTZ/c44l/IFXc1KGuknURZQcWytAuWJQ XwPneN/VHYyCAU9SHrpIDh2gGy45K2TY+T/lnCX2HHssdzt52X3wLRNwZuUoXu9h dMrCV/VKTL5YPzLHtm0QgsIyYG9u7sz9VF2PYOhfxw7qru2dZ66fu/q7Om/t7Zms FiHTPBPH5/ZwTi6XVe/8sGkFG/ynfzsmT3ITCi8sgk2lsbPdsVXD8zkyVtNGNpOh HYiCHIe4ilX65ndU1kfqybc03rV4Tqmoj/p5sPgG4iDW2v/s1sXnhlhOdH+1eil4 jftOR+bPomu1md2eSr4Au4BTuam/jc+8J6dy5eC1VZQdoLhgy50= -----END CERTIFICATE-----Generated at Sun Jun 29 18:19:52 2025 by rpki-client