$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: cunrOLJPIu6+fySwXjITJkxSHchyaXxKPrghyX2+dFQ= Subject key identifier: 8A:EE:7F:91:CA:64:51:DC:E2:78:18:2C:53:73:0A:56:F6:20:F8:50 Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 3C9F0B6EC6DBA920DE184D8DC2F9EE95E5F02F93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 02F1 Signing time: Sat 10 May 2025 15:10:49 +0000 Manifest this update: Sat 10 May 2025 15:05:49 +0000 Manifest next update: Wed 14 May 2025 02:26:49 +0000 Files and hashes: 1: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pokBZpL5hJ0olRQ6JHoy2AMfLYfeAfsOoOkW3DB0M7g=) 2: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: +VjISuzrCflBQeXOPTQ7TW9aYgwgLlrrHDIsl9E+4xM=) 3: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: ROwlnpqCyaXK8jtPlJ5Ky0HyxksYlACHiUQekhnZN0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9f:0b:6e:c6:db:a9:20:de:18:4d:8d:c2:f9:ee:95:e5:f0:2f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: May 10 15:05:49 2025 GMT Not After : May 14 02:26:49 2025 GMT Subject: CN=8AEE7F91CA6451DCE278182C53730A56F620F850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b9:d3:c2:ae:87:e5:5a:4b:2c:e3:56:1b:59: d6:c2:2f:d3:99:30:15:3a:64:1b:ac:39:55:28:a3: 6b:e9:77:ea:f8:5f:a2:fa:73:42:d2:81:59:fe:cc: 88:8c:5a:eb:dd:03:7c:f0:d2:17:93:45:8a:da:1c: f4:9a:22:39:1a:76:c2:6e:34:0a:4a:6f:ca:45:f5: a6:6c:4a:d6:cd:53:c7:3d:a8:6f:33:08:53:f9:2e: 6c:d0:46:44:5b:be:2f:7b:26:dc:84:23:59:2a:a6: 77:c5:64:50:45:0b:9e:ea:96:64:fb:16:f4:a2:fc: d9:b7:72:c8:2a:d3:6e:7d:85:e6:44:bf:31:b1:27: 7f:06:94:56:56:c2:39:37:83:0a:f8:34:25:ff:45: 71:96:ed:97:6f:fd:d0:b7:fa:43:93:a7:87:8b:a9: 6a:e1:2e:ca:e4:14:04:2b:8b:d9:ed:40:8f:cb:5d: df:74:54:f1:fe:bd:0f:a2:8f:f1:ca:6a:7c:db:68: ab:1c:82:ef:76:00:07:1b:cf:35:26:93:9e:ae:d1: 6c:37:62:40:18:6a:ed:09:62:2e:49:b4:18:db:91: 87:57:65:84:f9:9d:20:cd:f6:7d:83:4c:9f:61:6d: 97:c9:3d:01:34:ff:e3:43:c9:8a:94:46:7b:3c:17: 31:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EE:7F:91:CA:64:51:DC:E2:78:18:2C:53:73:0A:56:F6:20:F8:50 X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9c:50:07:50:f1:d1:97:b8:ee:6b:82:80:23:c1:ef:96:eb: 41:57:76:e7:f4:1a:1a:18:25:64:ef:5b:3e:6e:7d:59:97:5f: 5f:a0:d8:b8:9f:d8:e3:95:bb:5c:1f:0d:0f:bf:a4:fe:b9:3f: 0d:ae:5d:d8:a1:18:23:8f:11:54:07:f9:ff:2c:be:c4:9e:e2: 5c:d0:e8:ca:8f:bb:2a:13:25:7f:4b:fc:08:e5:67:36:1c:cc: f3:04:25:1f:db:f0:57:cc:fd:a6:f0:52:40:f3:51:e1:0b:b3: 5b:84:77:7b:78:95:f6:9b:cd:ed:4a:b5:5a:04:33:6c:a9:9b: cc:46:74:bc:85:26:51:f7:ca:6c:8b:82:09:e1:94:83:95:7d: 2c:2a:22:e1:31:19:d1:cd:fe:5b:55:72:67:b6:aa:fc:c7:a0: b0:6c:32:05:7c:f2:c7:e8:0d:b0:ae:d8:5d:9d:7f:2b:e5:90: 37:63:e4:76:b0:7a:bd:f0:90:7c:96:94:47:95:c3:83:8a:03: f6:93:73:cd:93:f7:78:e7:02:cf:a9:0e:21:fb:49:9c:23:fc: 3a:3a:b0:1c:af:52:8f:be:c5:32:d9:14:38:05:86:45:25:db: eb:83:e5:64:c1:dc:df:22:62:1b:24:32:f1:23:24:1b:7e:1d: 06:d7:ec:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJ8LbsbbqSDeGE2NwvnuleXwL5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNTA1MTAxNTA1NDlaFw0yNTA1MTQwMjI2NDlaMDMxMTAvBgNV BAMTKDhBRUU3RjkxQ0E2NDUxRENFMjc4MTgyQzUzNzMwQTU2RjYyMEY4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpudPCroflWkss41YbWdbCL9OZ MBU6ZBusOVUoo2vpd+r4X6L6c0LSgVn+zIiMWuvdA3zw0heTRYraHPSaIjkadsJu NApKb8pF9aZsStbNU8c9qG8zCFP5LmzQRkRbvi97JtyEI1kqpnfFZFBFC57qlmT7 FvSi/Nm3csgq0259heZEvzGxJ38GlFZWwjk3gwr4NCX/RXGW7Zdv/dC3+kOTp4eL qWrhLsrkFAQri9ntQI/LXd90VPH+vQ+ij/HKanzbaKscgu92AAcbzzUmk56u0Ww3 YkAYau0JYi5JtBjbkYdXZYT5nSDN9n2DTJ9hbZfJPQE0/+NDyYqURns8FzERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiu5/kcpkUdzieBgsU3MKVvYg+FAwHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADecUAdQ8dGXuO5rgoAjwe+W60FXduf0GhoY JWTvWz5ufVmXX1+g2Lif2OOVu1wfDQ+/pP65Pw2uXdihGCOPEVQH+f8svsSe4lzQ 6MqPuyoTJX9L/AjlZzYczPMEJR/b8FfM/abwUkDzUeELs1uEd3t4lfabze1KtVoE M2ypm8xGdLyFJlH3ymyLggnhlIOVfSwqIuExGdHN/ltVcme2qvzHoLBsMgV88sfo DbCu2F2dfyvlkDdj5Hawer3wkHyWlEeVw4OKA/aTc82T93jnAs+pDiH7SZwj/Do6 sByvUo++xTLZFDgFhkUl2+uD5WTB3N8iYhskMvEjJBt+HQbX7Dw= -----END CERTIFICATE-----Generated at Mon May 12 10:49:30 2025 by rpki-client