$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: 6iIa7/oCviKtqBk9Za3fukOxjHhb/M76u0Hvz+Gdz0I= Subject key identifier: 84:9A:72:CC:88:88:87:6F:39:EB:5E:45:12:44:A4:96:23:A7:B4:6A Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 4E33FB9A1FE9D56F3CFA58A96B245D9218A94B9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 0307 Signing time: Sat 28 Jun 2025 12:50:50 +0000 Manifest this update: Sat 28 Jun 2025 12:45:50 +0000 Manifest next update: Tue 01 Jul 2025 23:31:50 +0000 Files and hashes: 1: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=) 2: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: ZDBiQ7euv6Ya3o8dZuYLf2biflv/IP0wcrcqn5PTi5M=) 3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pokBZpL5hJ0olRQ6JHoy2AMfLYfeAfsOoOkW3DB0M7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:33:fb:9a:1f:e9:d5:6f:3c:fa:58:a9:6b:24:5d:92:18:a9:4b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Jun 28 12:45:50 2025 GMT Not After : Jul 1 23:31:50 2025 GMT Subject: CN=849A72CC8888876F39EB5E451244A49623A7B46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:26:d6:b6:ef:30:0f:7f:26:dc:88:0d:1e:0c: 0c:28:0c:b5:80:84:3e:f6:8a:d1:a0:79:32:6a:6c: 20:a4:71:55:18:0e:75:26:3c:28:b2:dd:96:00:e6: 10:87:37:ac:8d:e8:ca:df:39:f2:b0:58:2a:2b:3b: cd:7c:1e:8c:db:d9:0e:1a:58:cc:c0:35:2f:a7:4b: cb:7c:c2:8c:12:00:92:9c:37:06:ee:08:00:ae:fc: 13:ef:22:c4:c8:e8:79:4d:05:f3:02:0f:7a:62:cc: 9e:85:b6:75:a0:29:ec:2e:32:e6:5b:a9:9a:d2:2c: 2f:13:ca:12:19:44:37:d6:0b:e1:d8:d5:41:f0:ea: f2:b7:44:86:1c:73:f6:85:7d:88:c5:f1:48:53:6f: ab:e1:7c:c4:03:04:7a:da:c9:40:65:a3:31:df:45: f7:25:f1:f5:a2:6f:7a:5c:96:2a:ca:47:02:54:5e: 64:60:92:3a:c7:2b:dc:73:97:1b:5d:45:cc:c2:38: aa:46:f0:87:07:56:00:d4:e9:ee:c6:38:b0:7d:10: ed:03:ef:65:f9:72:54:54:5b:4b:e8:c5:10:42:65: a6:60:fa:63:e7:8d:a2:e2:db:20:e7:5e:c8:3f:00: b8:6d:fa:8a:ee:34:36:1a:82:e8:89:65:27:f9:56: 1d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9A:72:CC:88:88:87:6F:39:EB:5E:45:12:44:A4:96:23:A7:B4:6A X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:56:df:6c:c0:22:60:c2:65:78:d9:bd:7d:66:4e:02:c7:25: 64:a8:03:16:87:6d:6b:e2:04:fd:fc:5b:82:67:18:07:9d:a6: f0:2e:f6:12:48:87:13:14:0e:07:93:ad:0d:00:db:b7:bf:16: 31:c3:9e:7e:ac:68:1a:56:c5:3a:fa:87:10:bc:fb:d2:f2:35: b0:56:8a:6f:c1:e5:85:96:80:4a:c9:f6:a0:e4:79:f1:5c:53: 22:c1:57:88:61:43:3b:ab:1b:eb:8d:9f:07:20:d8:7d:ce:ad: d8:8e:49:ba:f6:fc:0d:e6:f6:f8:2f:2a:5a:37:b0:8c:58:2f: c1:70:3f:af:6c:03:53:25:dd:c6:2c:29:36:de:82:cc:86:2d: b3:13:73:24:f6:8c:1d:45:69:b7:e0:b5:d2:1e:27:52:19:2c: 6e:79:b7:e6:14:92:2b:a8:3d:b8:ba:06:05:98:2c:0f:f7:5e: bc:1c:4c:17:d8:61:64:22:76:a0:a1:db:b4:fd:da:b7:6d:06: 4a:af:68:00:89:00:3a:5a:51:fb:6f:03:62:a9:54:0d:2f:30: 22:4b:cd:ac:14:67:89:ab:36:da:4e:fc:14:4d:de:0b:e4:6a: 43:ab:4f:25:3d:88:f1:4c:4d:a7:fa:76:b9:18:76:c5:66:6c: b9:38:f3:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjP7mh/p1W88+lipayRdkhipS5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNTA2MjgxMjQ1NTBaFw0yNTA3MDEyMzMxNTBaMDMxMTAvBgNV BAMTKDg0OUE3MkNDODg4ODg3NkYzOUVCNUU0NTEyNDRBNDk2MjNBN0I0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJta27zAPfybciA0eDAwoDLWA hD72itGgeTJqbCCkcVUYDnUmPCiy3ZYA5hCHN6yN6MrfOfKwWCorO818Hozb2Q4a WMzANS+nS8t8wowSAJKcNwbuCACu/BPvIsTI6HlNBfMCD3pizJ6FtnWgKewuMuZb qZrSLC8TyhIZRDfWC+HY1UHw6vK3RIYcc/aFfYjF8UhTb6vhfMQDBHrayUBlozHf Rfcl8fWib3pclirKRwJUXmRgkjrHK9xzlxtdRczCOKpG8IcHVgDU6e7GOLB9EO0D 72X5clRUW0voxRBCZaZg+mPnjaLi2yDnXsg/ALht+oruNDYaguiJZSf5Vh0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJpyzIiIh285615FEkSkliOntGowHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVW32zAImDCZXjZvX1mTgLHJWSoAxaHbWvi BP38W4JnGAedpvAu9hJIhxMUDgeTrQ0A27e/FjHDnn6saBpWxTr6hxC8+9LyNbBW im/B5YWWgErJ9qDkefFcUyLBV4hhQzurG+uNnwcg2H3OrdiOSbr2/A3m9vgvKlo3 sIxYL8FwP69sA1Ml3cYsKTbegsyGLbMTcyT2jB1FabfgtdIeJ1IZLG55t+YUkiuo Pbi6BgWYLA/3XrwcTBfYYWQidqCh27T92rdtBkqvaACJADpaUftvA2KpVA0vMCJL zawUZ4mrNtpO/BRN3gvkakOrTyU9iPFMTaf6drkYdsVmbLk482s= -----END CERTIFICATE-----Generated at Mon Jun 30 16:33:49 2025 by rpki-client