$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: GoCXpObusZvUrJQUBA/hZaJqByCOGufLSkhiNP9s6uM= Subject key identifier: 96:14:7A:FF:53:63:E6:35:6E:5F:4B:18:71:CE:F8:63:CF:CE:1A:66 Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 34441261C5E7AD7D19F17EB7E59960093EABD3C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 03E4 Signing time: Fri 22 Aug 2025 15:21:00 +0000 Manifest this update: Fri 22 Aug 2025 15:16:00 +0000 Manifest next update: Mon 25 Aug 2025 23:48:00 +0000 Files and hashes: 1: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 7Js1TyGNcS10xLqVcx42bTRAyDqI+vbwGTKy3EKX8TA=) 2: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: Obz+kIW4kZ8yIocJl2sLrn0k0oolS6gTe486AAuHOv4=) 3: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: srGGTRIk/A3yBmrDK14yDJXXjwsPFIRWSBhreMbe9UE=) 4: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: wBuDQDFXKY9G8FF8L1EDMdPf10b4t48te0hIV48CjDg=) 5: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: v3ySroBCN4sNfccDqvHcUatzXZPBnzr9Qki2+Ib+sWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:44:12:61:c5:e7:ad:7d:19:f1:7e:b7:e5:99:60:09:3e:ab:d3:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: Aug 22 15:16:00 2025 GMT Not After : Aug 25 23:48:00 2025 GMT Subject: CN=96147AFF5363E6356E5F4B1871CEF863CFCE1A66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2d:b4:0c:8e:d7:7d:16:01:0a:a7:fa:a7:39: 15:a9:ea:90:d6:08:8a:ee:c7:71:a5:20:d1:62:86: f4:db:db:52:5d:a2:f3:ec:1b:6f:a3:86:00:28:15: 11:57:b1:22:72:1a:9d:16:65:1e:91:44:72:36:d6: 12:f8:ab:5c:a1:80:61:fd:4d:f8:14:3c:ca:f2:23: e2:ea:1f:ef:71:0a:2b:12:d2:c5:9e:3e:a4:18:9f: 44:ca:84:f7:69:84:fd:34:92:75:23:fc:f7:58:42: 57:68:96:66:68:c2:f0:0b:91:ac:e5:ca:8f:0f:4e: d1:7a:7b:6c:af:51:20:48:6a:67:eb:02:43:ca:44: 95:00:4a:0a:e8:06:2c:23:ec:8f:92:ed:0b:f3:f0: f5:a7:e3:94:5f:70:7b:9a:22:cd:86:04:74:f2:2f: 2c:48:91:85:58:44:20:b9:c6:18:ca:e4:f3:e2:2d: bc:61:6a:f2:53:54:af:2f:c3:21:2e:fe:cf:db:61: ad:e4:07:17:38:91:63:06:15:32:1c:95:64:8c:7b: 9c:a3:eb:fe:41:ed:3e:d9:58:f9:2f:53:17:b6:e1: d2:78:c4:22:0d:de:e9:97:1e:eb:70:b3:d3:36:b0: 26:46:74:0b:6a:1d:b9:f3:b1:bf:37:f7:1b:49:0d: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:14:7A:FF:53:63:E6:35:6E:5F:4B:18:71:CE:F8:63:CF:CE:1A:66 X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d5:8d:61:ba:fb:7c:d0:dd:2e:ce:da:45:7a:36:4d:79:a0: 9f:68:8b:5a:42:55:0b:c7:23:08:4b:29:fb:96:46:07:d3:95: e5:79:e0:7e:72:48:ac:7a:49:85:c4:c9:39:7b:13:38:fc:97: 81:0b:e5:d6:94:8d:e1:4e:e7:80:a7:1c:28:87:a2:f8:c9:af: 2a:b9:07:9a:d4:0e:fe:1c:0b:5d:23:cc:d5:6b:a3:32:9f:d3: 71:8e:89:e7:ab:ba:a6:4e:cb:e8:41:98:46:15:b8:cf:82:ba: 18:fd:b7:73:00:4a:46:43:f8:77:a9:02:7e:b0:f6:20:87:b7: 85:ce:c6:19:56:86:a2:b2:61:0f:5a:4c:5d:8c:77:d1:9e:8c: 2b:c8:14:b0:5a:32:e1:27:b4:0b:b0:37:41:21:88:42:50:ff: 56:c9:d1:0b:d7:61:e2:f7:ea:4a:cb:d9:27:02:86:08:a2:b8: b2:67:1e:52:96:60:6c:e6:ab:51:fe:65:ac:95:6c:a5:7d:84: c8:a1:ad:f3:ae:1d:05:ba:10:1c:70:ac:a4:09:31:e6:2b:4e: 92:5c:2a:b5:5c:61:99:c6:b9:b8:21:6a:a3:dc:1e:ab:be:04: c5:d5:e7:e3:12:c5:03:c9:7d:30:4d:8b:e4:7c:2b:93:26:91: bb:97:63:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEQSYcXnrX0Z8X635ZlgCT6r08UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNTA4MjIxNTE2MDBaFw0yNTA4MjUyMzQ4MDBaMDMxMTAvBgNV BAMTKDk2MTQ3QUZGNTM2M0U2MzU2RTVGNEIxODcxQ0VGODYzQ0ZDRTFBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsLbQMjtd9FgEKp/qnORWp6pDW CIrux3GlINFihvTb21JdovPsG2+jhgAoFRFXsSJyGp0WZR6RRHI21hL4q1yhgGH9 TfgUPMryI+LqH+9xCisS0sWePqQYn0TKhPdphP00knUj/PdYQldolmZowvALkazl yo8PTtF6e2yvUSBIamfrAkPKRJUASgroBiwj7I+S7Qvz8PWn45RfcHuaIs2GBHTy LyxIkYVYRCC5xhjK5PPiLbxhavJTVK8vwyEu/s/bYa3kBxc4kWMGFTIclWSMe5yj 6/5B7T7ZWPkvUxe24dJ4xCIN3umXHutws9M2sCZGdAtqHbnzsb839xtJDSEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlhR6/1Nj5jVuX0sYcc74Y8/OGmYwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArVjWG6+3zQ3S7O2kV6Nk15oJ9oi1pCVQvH IwhLKfuWRgfTleV54H5ySKx6SYXEyTl7Ezj8l4EL5daUjeFO54CnHCiHovjJryq5 B5rUDv4cC10jzNVrozKf03GOieeruqZOy+hBmEYVuM+Cuhj9t3MASkZD+HepAn6w 9iCHt4XOxhlWhqKyYQ9aTF2Md9GejCvIFLBaMuEntAuwN0EhiEJQ/1bJ0QvXYeL3 6krL2ScChgiiuLJnHlKWYGzmq1H+ZayVbKV9hMihrfOuHQW6EBxwrKQJMeYrTpJc KrVcYZnGubghaqPcHqu+BMXV5+MSxQPJfTBNi+R8K5MmkbuXY3o= -----END CERTIFICATE-----Generated at Sat Aug 23 18:17:01 2025 by rpki-client