$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json) Hash identifier: sO0ucbHspq3uJtYroaIZEB+eFMq3+q/sBk8yEOWIGPY= Subject key identifier: 26:BC:95:F8:5E:51:05:D2:F5:B3:D2:A5:4E:F0:E7:6B:E3:BC:2C:19 Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Certificate serial: 3F7E8A5DA2BE27DEAD13157A88B2C783EC0880F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft Manifest number: 0364 Signing time: Sat 28 Jun 2025 06:30:56 +0000 Manifest this update: Sat 28 Jun 2025 06:25:56 +0000 Manifest next update: Tue 01 Jul 2025 14:06:56 +0000 Files and hashes: 1: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: cEKVxZ4e2MFBCzDCmDd1TGrCr6Cuk4bRCNz0E9SbPIo=) 2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: D1oTnNhgCKhlyJ3cW8vY+L+pUIeYkyHgdFvyp1x9BkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:7e:8a:5d:a2:be:27:de:ad:13:15:7a:88:b2:c7:83:ec:08:80:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Validity Not Before: Jun 28 06:25:56 2025 GMT Not After : Jul 1 14:06:56 2025 GMT Subject: CN=26BC95F85E5105D2F5B3D2A54EF0E76BE3BC2C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:71:99:3c:fe:a4:72:dc:30:93:d7:6b:1c: f2:1c:b5:52:b0:63:e4:8a:c2:34:d0:c4:2c:cc:66: 14:3c:3b:c5:4b:ad:ca:d3:90:d9:7e:9c:0a:22:a8: ba:1f:55:06:d8:8b:a5:bf:67:9c:90:58:d0:9d:59: 53:96:48:ac:04:20:da:0c:4b:8d:ca:09:2b:fb:7a: 76:59:fc:6a:c4:a9:02:1c:3c:96:01:8a:92:c5:e2: 2d:05:67:b6:2a:b2:d8:be:58:f7:99:7b:8d:12:00: 71:d4:24:74:8b:cb:ec:25:38:af:43:07:29:c7:d3: 74:0c:d9:bb:33:d4:01:f8:56:53:fd:5c:29:4d:91: e3:3a:aa:49:e9:49:12:99:25:ae:f9:7c:95:df:5e: 65:1b:c9:51:88:3d:38:79:2f:56:3f:18:a6:f3:57: 30:2a:ef:59:fd:30:47:aa:50:d8:e3:59:23:8a:0a: 57:32:88:9a:2a:04:d7:7c:42:9c:45:65:27:2f:60: d2:d8:02:85:dc:b7:2a:7c:1a:23:46:de:ef:46:4a: 89:8f:e5:a6:e7:d5:bf:ec:5a:9f:39:36:f8:56:e5: f2:af:69:68:07:e3:f5:af:28:bc:15:f4:bb:9f:08: c4:f8:3f:34:43:cf:2e:67:51:c8:1f:42:13:87:3b: 36:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BC:95:F8:5E:51:05:D2:F5:B3:D2:A5:4E:F0:E7:6B:E3:BC:2C:19 X509v3 Authority Key Identifier: keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6e:e1:69:2f:37:fd:d8:81:07:b7:8b:5b:2b:3c:e6:01:d0: 1f:9f:09:3c:aa:e0:c1:f4:c6:13:6e:07:48:5c:d1:3e:38:8c: 80:8c:f3:5e:9e:d4:a1:56:e9:6e:ad:e9:76:db:45:01:c4:7f: e8:ef:66:16:2b:0d:4e:5e:bf:aa:e0:0b:9e:14:13:88:e8:00: 6a:76:e3:01:80:a9:41:bc:93:0f:c8:42:63:e4:b9:01:90:74: 58:45:f8:38:1c:7a:63:a4:cf:38:15:ee:eb:47:de:95:1f:8a: 2c:24:3b:e8:16:ae:e2:d8:1e:98:88:13:69:d4:9a:39:f7:2b: 13:6a:07:7c:85:44:f3:4e:dc:ab:be:4c:6a:b1:f1:da:a9:d4: b0:39:77:ca:60:62:14:a9:65:86:f8:41:2d:44:fa:97:cb:d6: 79:04:68:4d:bf:51:aa:cc:43:f1:04:d0:d0:d2:ca:0e:9c:33: d5:dc:fb:19:43:de:60:86:dc:8a:9a:2f:f0:31:f8:9f:67:8a: 45:7d:e3:7b:a5:f2:10:a6:bb:82:25:1e:c4:f3:1a:7e:72:32: 4d:2a:2f:bb:ac:4f:72:a5:cf:74:ca:89:5b:3e:59:86:c7:de: cc:c8:58:82:e8:27:98:be:f3:c3:66:c0:dc:c1:fa:24:fd:c1: 42:38:ee:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP36KXaK+J96tExV6iLLHg+wIgPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5 NzE0MjZGRTAeFw0yNTA2MjgwNjI1NTZaFw0yNTA3MDExNDA2NTZaMDMxMTAvBgNV BAMTKDI2QkM5NUY4NUU1MTA1RDJGNUIzRDJBNTRFRjBFNzZCRTNCQzJDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtXGZPP6kctwwk9drHPIctVKw Y+SKwjTQxCzMZhQ8O8VLrcrTkNl+nAoiqLofVQbYi6W/Z5yQWNCdWVOWSKwEINoM S43KCSv7enZZ/GrEqQIcPJYBipLF4i0FZ7Yqsti+WPeZe40SAHHUJHSLy+wlOK9D BynH03QM2bsz1AH4VlP9XClNkeM6qknpSRKZJa75fJXfXmUbyVGIPTh5L1Y/GKbz VzAq71n9MEeqUNjjWSOKClcyiJoqBNd8QpxFZScvYNLYAoXctyp8GiNG3u9GSomP 5abn1b/sWp85NvhW5fKvaWgH4/WvKLwV9LufCMT4PzRDzy5nUcgfQhOHOzZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJryV+F5RBdL1s9KlTvDna+O8LBkwHwYDVR0j BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1 REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0 MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJu4WkvN/3YgQe3i1srPOYB0B+fCTyq4MH0 xhNuB0hc0T44jICM816e1KFW6W6t6XbbRQHEf+jvZhYrDU5ev6rgC54UE4joAGp2 4wGAqUG8kw/IQmPkuQGQdFhF+DgcemOkzzgV7utH3pUfiiwkO+gWruLYHpiIE2nU mjn3KxNqB3yFRPNO3Ku+TGqx8dqp1LA5d8pgYhSpZYb4QS1E+pfL1nkEaE2/UarM Q/EE0NDSyg6cM9Xc+xlD3mCG3IqaL/Ax+J9nikV943ul8hCmu4IlHsTzGn5yMk0q L7usT3Klz3TKiVs+WYbH3szIWILoJ5i+88NmwNzB+iT9wUI47gI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:36:33 2025 by rpki-client