$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: 3zS4iZ7BpE+fNa89V46G0DA+CovErlN43kiqICOusZc= Subject key identifier: 0A:70:04:D4:6B:4A:EC:D4:CB:F5:E5:0F:0E:11:68:D5:24:59:36:37 Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 0C1C2CEBFD68ECA682F7A00ADDA72714A5F329F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 03CC Signing time: Sun 29 Jun 2025 09:21:00 +0000 Manifest this update: Sun 29 Jun 2025 09:16:00 +0000 Manifest next update: Wed 02 Jul 2025 20:40:00 +0000 Files and hashes: 1: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: Obz+kIW4kZ8yIocJl2sLrn0k0oolS6gTe486AAuHOv4=) 2: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: v3ySroBCN4sNfccDqvHcUatzXZPBnzr9Qki2+Ib+sWs=) 3: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: CTCbNTuDadLVGbfx2HPqB8j7BJlpY12geRBoUKNqDIs=) 4: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 7Js1TyGNcS10xLqVcx42bTRAyDqI+vbwGTKy3EKX8TA=) 5: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: wBuDQDFXKY9G8FF8L1EDMdPf10b4t48te0hIV48CjDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1c:2c:eb:fd:68:ec:a6:82:f7:a0:0a:dd:a7:27:14:a5:f3:29:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: Jun 29 09:16:00 2025 GMT Not After : Jul 2 20:40:00 2025 GMT Subject: CN=0A7004D46B4AECD4CBF5E50F0E1168D524593637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:3c:d1:32:ba:5e:06:a8:da:33:b8:0c:67: f7:fe:dd:3b:d6:cf:4c:77:66:04:d9:d4:b4:89:f3: 5f:4f:c2:73:ec:08:83:52:a6:d9:f0:58:d5:44:30: d6:f1:51:d8:63:c5:4d:6a:c2:3c:dd:d9:d9:85:c7: 9d:ca:05:d7:26:42:b9:fa:68:6a:d4:72:03:8e:72: 57:3e:b7:97:8a:1f:cc:ff:fe:11:22:0c:bd:5a:61: b0:8d:c9:2e:42:59:b9:d9:0b:b7:e1:d6:23:ca:62: ab:0f:40:0b:1e:35:18:95:d8:fe:65:0b:13:d1:35: 4d:6f:a6:f9:59:e6:d4:e3:2d:d6:3b:34:75:c3:86: 5c:a5:15:18:49:21:cc:f5:53:63:83:53:5d:45:1d: 3c:91:8a:bf:d8:fb:cb:ce:b3:a0:57:34:04:b8:d0: a7:9f:59:1e:a8:56:e0:5f:a6:00:1c:f6:63:87:76: 5c:24:09:84:67:fc:2c:88:9b:af:aa:94:84:26:2a: 79:71:83:be:41:b0:ca:bf:99:2e:a9:a7:c2:21:83: 6a:ff:19:dc:d0:1a:dc:e0:da:d4:52:1e:8d:3f:18: 16:14:65:39:cc:72:d3:1d:b1:ad:2e:b4:97:ee:78: b0:47:34:ad:eb:d6:f2:dc:dc:a0:a6:3b:e1:f0:5f: 78:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:70:04:D4:6B:4A:EC:D4:CB:F5:E5:0F:0E:11:68:D5:24:59:36:37 X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:94:a9:1d:ca:00:b6:81:50:9f:dd:b5:9d:83:7f:16:89:1b: 95:c8:87:50:39:ca:ed:b4:bf:11:d2:87:b6:7d:ec:a4:30:10: df:30:a8:0f:e0:82:a1:2f:22:81:e5:f7:b6:8a:76:73:31:b0: ae:dc:32:20:8b:a4:d0:12:43:86:2d:7c:3b:0f:75:12:f8:ca: 04:7b:46:1c:57:d5:d5:58:64:56:e7:0f:45:f0:88:db:a2:57: 6c:c0:ef:4c:85:23:c1:b7:a5:9b:1c:d8:c1:04:e0:8a:72:75: ae:70:39:6b:c8:35:84:1b:ef:1b:da:75:ea:28:08:07:3f:23: 75:f6:79:44:d3:0d:b3:97:d7:6d:d6:71:4e:ff:23:36:84:af: 83:be:a8:50:ce:fc:47:0e:98:84:92:c6:3b:fc:cb:2b:fc:74: 2e:ac:87:27:ea:3e:b0:bc:a6:2b:8f:0d:88:b4:8b:3d:73:08: a5:ea:30:14:3b:43:ee:35:c0:35:da:2e:26:85:31:c3:12:a1: 81:8d:30:f9:9c:78:f0:ce:3b:0b:66:eb:08:94:16:65:72:8e: 83:41:44:1b:bb:42:48:7d:6f:d2:c3:ac:0c:56:53:bb:77:33: b2:a9:45:80:d6:6d:fe:cb:ab:53:1a:06:c7:0e:f9:c6:f7:27: 67:c7:18:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBws6/1o7KaC96AK3acnFKXzKfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNTA2MjkwOTE2MDBaFw0yNTA3MDIyMDQwMDBaMDMxMTAvBgNV BAMTKDBBNzAwNEQ0NkI0QUVDRDRDQkY1RTUwRjBFMTE2OEQ1MjQ1OTM2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/DzRMrpeBqjaM7gMZ/f+3TvW z0x3ZgTZ1LSJ819PwnPsCINSptnwWNVEMNbxUdhjxU1qwjzd2dmFx53KBdcmQrn6 aGrUcgOOclc+t5eKH8z//hEiDL1aYbCNyS5CWbnZC7fh1iPKYqsPQAseNRiV2P5l CxPRNU1vpvlZ5tTjLdY7NHXDhlylFRhJIcz1U2ODU11FHTyRir/Y+8vOs6BXNAS4 0KefWR6oVuBfpgAc9mOHdlwkCYRn/CyIm6+qlIQmKnlxg75BsMq/mS6pp8Ihg2r/ GdzQGtzg2tRSHo0/GBYUZTnMctMdsa0utJfueLBHNK3r1vLc3KCmO+HwX3gNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCnAE1GtK7NTL9eUPDhFo1SRZNjcwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGUqR3KALaBUJ/dtZ2DfxaJG5XIh1A5yu20 vxHSh7Z97KQwEN8wqA/ggqEvIoHl97aKdnMxsK7cMiCLpNASQ4YtfDsPdRL4ygR7 RhxX1dVYZFbnD0XwiNuiV2zA70yFI8G3pZsc2MEE4Ipyda5wOWvINYQb7xvadeoo CAc/I3X2eUTTDbOX123WcU7/IzaEr4O+qFDO/EcOmISSxjv8yyv8dC6shyfqPrC8 piuPDYi0iz1zCKXqMBQ7Q+41wDXaLiaFMcMSoYGNMPmcePDOOwtm6wiUFmVyjoNB RBu7Qkh9b9LDrAxWU7t3M7KpRYDWbf7Lq1MaBscO+cb3J2fHGMU= -----END CERTIFICATE-----Generated at Tue Jul 1 06:49:51 2025 by rpki-client