$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: Eye6EHIxoT37symGndXk4vS3Q5C8s7xDlDn/KgtSlrI= Subject key identifier: E0:0F:FD:13:79:18:3B:56:90:8E:68:3D:5A:13:D7:64:54:DD:CB:13 Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 7D508CF4DBBE5C4462FC7F7B0534903CC0987038 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 03B6 Signing time: Sat 10 May 2025 09:51:00 +0000 Manifest this update: Sat 10 May 2025 09:46:00 +0000 Manifest next update: Tue 13 May 2025 15:43:00 +0000 Files and hashes: 1: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: v3ySroBCN4sNfccDqvHcUatzXZPBnzr9Qki2+Ib+sWs=) 2: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: kCdOJz3YPSSbXQJVwc7o0ZJHmxhU3vefeO9xfYNfnb8=) 3: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: Obz+kIW4kZ8yIocJl2sLrn0k0oolS6gTe486AAuHOv4=) 4: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 7Js1TyGNcS10xLqVcx42bTRAyDqI+vbwGTKy3EKX8TA=) 5: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: wBuDQDFXKY9G8FF8L1EDMdPf10b4t48te0hIV48CjDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 15:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:50:8c:f4:db:be:5c:44:62:fc:7f:7b:05:34:90:3c:c0:98:70:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: May 10 09:46:00 2025 GMT Not After : May 13 15:43:00 2025 GMT Subject: CN=E00FFD1379183B56908E683D5A13D76454DDCB13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:14:66:60:ae:c9:95:8b:3b:c9:75:3a:ef: 10:cf:f1:eb:81:e5:fb:14:10:f3:5f:46:29:40:b1: 33:0c:19:d7:bb:0f:0b:7a:65:1f:15:49:75:6c:77: f7:65:8f:57:a5:00:22:74:62:8b:f8:71:20:63:d9: ef:cf:94:a1:b0:c5:e6:81:01:39:62:b6:d0:89:b2: 7d:7e:7c:0b:4b:da:0e:91:44:aa:1b:de:a4:dd:da: 70:7d:4f:4a:cf:8e:e5:67:40:15:1d:e5:7e:da:aa: e5:10:98:00:0a:f2:82:2d:46:3e:5d:04:e6:73:a9: dc:3f:60:c9:04:35:db:f7:72:41:4d:08:f0:2d:e7: 88:5d:ed:8e:96:ce:2b:c0:04:64:44:0b:83:53:9b: fa:a4:fb:13:a2:a4:87:b7:18:14:86:d0:c5:df:76: ac:3d:cc:80:41:a2:49:14:63:e4:be:c8:ed:e3:df: 25:2a:8d:9a:cf:5e:21:19:f3:d9:6f:a9:71:3e:9c: 96:ed:e3:3b:ee:29:a9:16:fc:4e:02:ce:8c:e4:90: 20:12:aa:4e:4b:b6:71:e6:01:65:be:ac:97:57:9c: da:30:98:6d:14:e4:92:a3:26:57:0d:b2:3e:d9:ec: e1:89:99:9a:2b:77:5d:c5:d2:6b:18:80:b2:14:27: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0F:FD:13:79:18:3B:56:90:8E:68:3D:5A:13:D7:64:54:DD:CB:13 X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e7:c4:50:a9:53:01:7d:6b:28:d3:87:c1:3c:87:1d:0e:5c: fc:c0:f3:7a:75:8e:cc:37:cc:a5:fe:e0:8e:8f:76:f9:8d:13: 50:47:a3:f5:8f:5e:3a:e6:70:b7:4a:7b:91:8c:9d:b0:87:1a: cc:87:c7:be:a3:9d:40:4b:f8:16:23:dc:09:5d:46:f9:a1:8a: 37:51:05:83:c1:2c:34:62:f9:ac:78:75:90:89:dc:e9:df:d2: 02:47:ba:9b:b0:fc:60:5d:f6:42:55:31:63:1f:eb:89:7a:19: 96:88:ba:94:6e:cd:b4:53:ae:d6:d3:6a:96:c3:ff:ee:dd:3d: 73:2d:78:f9:e3:58:c7:a1:0b:38:cf:f6:04:81:f6:b6:00:33: 71:e3:4f:e9:8b:4e:b7:10:76:d1:b8:25:f4:e5:15:9a:6f:a4: d6:59:2c:62:df:66:12:f2:1e:fd:b4:ab:2d:16:bb:f2:10:59: ba:33:e0:4b:24:8b:de:9f:90:d3:82:16:b0:18:4f:35:80:d9: 78:de:82:c0:7f:0b:e6:8e:a7:54:05:a0:43:4f:88:03:a5:c6: c1:8a:c3:f3:72:51:07:95:6d:c2:73:05:a6:5e:73:33:55:09: e5:98:8b:12:db:99:25:55:e9:5d:71:05:b9:ce:ef:8d:b6:3d: 38:53:50:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVCM9Nu+XERi/H97BTSQPMCYcDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNTA1MTAwOTQ2MDBaFw0yNTA1MTMxNTQzMDBaMDMxMTAvBgNV BAMTKEUwMEZGRDEzNzkxODNCNTY5MDhFNjgzRDVBMTNENzY0NTRERENCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oBRmYK7JlYs7yXU67xDP8euB 5fsUEPNfRilAsTMMGde7Dwt6ZR8VSXVsd/dlj1elACJ0Yov4cSBj2e/PlKGwxeaB ATlittCJsn1+fAtL2g6RRKob3qTd2nB9T0rPjuVnQBUd5X7aquUQmAAK8oItRj5d BOZzqdw/YMkENdv3ckFNCPAt54hd7Y6WzivABGREC4NTm/qk+xOipIe3GBSG0MXf dqw9zIBBokkUY+S+yO3j3yUqjZrPXiEZ89lvqXE+nJbt4zvuKakW/E4CzozkkCAS qk5LtnHmAWW+rJdXnNowmG0U5JKjJlcNsj7Z7OGJmZord13F0msYgLIUJxFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4A/9E3kYO1aQjmg9WhPXZFTdyxMwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbnxFCpUwF9ayjTh8E8hx0OXPzA83p1jsw3 zKX+4I6PdvmNE1BHo/WPXjrmcLdKe5GMnbCHGsyHx76jnUBL+BYj3AldRvmhijdR BYPBLDRi+ax4dZCJ3Onf0gJHupuw/GBd9kJVMWMf64l6GZaIupRuzbRTrtbTapbD /+7dPXMtePnjWMehCzjP9gSB9rYAM3HjT+mLTrcQdtG4JfTlFZpvpNZZLGLfZhLy Hv20qy0Wu/IQWboz4Eski96fkNOCFrAYTzWA2XjegsB/C+aOp1QFoENPiAOlxsGK w/NyUQeVbcJzBaZeczNVCeWYixLbmSVV6V1xBbnO7422PThTUBk= -----END CERTIFICATE-----Generated at Sun May 11 04:09:38 2025 by rpki-client