$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: /vhEWvF22lVIIeZzX15sSC+UFsnfRfUERTO1duyeMbE= Subject key identifier: D5:CD:37:B9:A7:E2:39:4A:9C:04:AE:91:5D:B9:01:AC:D5:A5:8B:F2 Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 217D35EEE045DB2E08D53CD1E27A330584EE739D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 0527 Signing time: Tue 11 Nov 2025 15:32:11 +0000 Manifest this update: Tue 11 Nov 2025 15:27:11 +0000 Manifest next update: Sat 15 Nov 2025 01:36:11 +0000 Files and hashes: 1: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: oWtepmBqBvebT0Z+AytYxvJ+nwN7a/Aha+0+yrTyMss=) 2: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: 5LLoZQzy10/vWdM/Hc0xcStObqUlu0DJjOxnoCli9B4=) 3: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: cp44WBbEQPeVS1mAfPisCHMGvuQWDdPCMl7LdQCGp3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Nov 2025 01:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7d:35:ee:e0:45:db:2e:08:d5:3c:d1:e2:7a:33:05:84:ee:73:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Nov 11 15:27:11 2025 GMT Not After : Nov 15 01:36:11 2025 GMT Subject: CN=D5CD37B9A7E2394A9C04AE915DB901ACD5A58BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:7d:5b:47:13:3f:42:db:91:76:4d:88:67: b5:dd:c0:12:e7:27:92:d6:2e:3a:98:22:31:0a:4f: 83:d3:de:d7:24:d3:88:75:3d:88:b2:7d:fa:de:eb: 5f:0f:a3:0e:54:9f:c7:13:a0:12:ae:a4:5a:3d:75: cc:57:44:19:a1:59:84:da:81:f5:70:cc:e0:b2:82: 3b:a5:95:6d:fe:26:cd:99:1c:dd:a1:24:68:d8:1a: e3:4c:75:90:3a:5c:06:d0:e9:7e:c3:3b:88:46:c9: 34:ed:5e:e8:aa:4f:b2:e4:97:83:6d:ee:68:82:dc: f6:ca:65:51:a8:01:df:3f:0b:35:d1:a7:14:ba:57: 6c:4f:37:da:4f:a5:9c:49:2c:44:39:2e:92:96:a3: 04:3a:77:66:b9:3a:f8:6d:84:94:24:34:ec:f1:74: ec:9d:62:cc:7c:75:ba:4a:ca:58:97:b8:1d:d9:80: 97:bb:c7:a0:4f:24:6e:50:df:4e:00:26:da:e0:fc: 57:02:50:51:16:af:b4:04:08:8b:42:ea:9a:5b:02: 0e:2f:45:54:61:08:99:4d:40:2d:cd:ea:f0:0e:18: dc:a9:6c:5d:93:38:15:a7:83:6d:ab:9a:9e:bf:46: 23:f0:38:a0:9b:55:48:f8:e9:7d:95:c5:a6:2f:51: 9f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CD:37:B9:A7:E2:39:4A:9C:04:AE:91:5D:B9:01:AC:D5:A5:8B:F2 X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:24:e6:75:d4:f7:63:43:11:f2:7f:f6:05:a4:db:e4:c3:e4: 88:52:0e:d6:eb:a5:ea:dd:8d:ac:f8:7a:33:e5:ce:c3:d5:9e: 32:d4:b8:96:1a:b7:ba:e7:fb:35:2c:82:4e:7c:bc:73:eb:3f: 79:2f:0d:04:a7:48:10:43:76:9e:08:99:82:e8:0a:57:fc:31: 34:19:d3:e6:6d:2d:9d:4d:6d:fa:6b:60:08:84:c6:cd:19:af: 73:fe:1c:55:10:a8:45:ca:c2:07:6a:87:73:cc:fa:ae:f4:b1: 5e:86:e2:2e:2b:93:99:b6:55:8e:99:8c:1e:28:a0:e1:b6:89: 88:eb:67:38:25:e3:44:1d:93:ec:9b:a7:6a:e1:94:6e:e4:f6: 45:d7:cd:34:00:fa:9a:84:6d:d7:a0:c0:d9:7f:0e:21:ce:75: ec:72:28:89:0b:24:62:04:ba:a3:23:2c:95:4f:1e:44:c9:4b: 46:9d:ef:96:cf:ed:dd:85:5b:f8:cc:c8:7c:f4:aa:1d:14:91: e6:da:83:54:cf:1d:a6:88:1d:77:53:13:75:c7:63:e0:58:95: 3e:7b:37:5f:bc:1e:86:b6:97:ea:34:0f:0b:be:a5:e3:0d:06: d4:a2:58:08:26:6f:fb:35:c1:42:38:cd:ca:5b:17:4c:c1:29: 1d:ac:92:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIX017uBF2y4I1TzR4nozBYTuc50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNTExMTExNTI3MTFaFw0yNTExMTUwMTM2MTFaMDMxMTAvBgNV BAMTKEQ1Q0QzN0I5QTdFMjM5NEE5QzA0QUU5MTVEQjkwMUFDRDVBNThCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5H1bRxM/QtuRdk2IZ7XdwBLn J5LWLjqYIjEKT4PT3tck04h1PYiyffre618Pow5Un8cToBKupFo9dcxXRBmhWYTa gfVwzOCygjullW3+Js2ZHN2hJGjYGuNMdZA6XAbQ6X7DO4hGyTTtXuiqT7Lkl4Nt 7miC3PbKZVGoAd8/CzXRpxS6V2xPN9pPpZxJLEQ5LpKWowQ6d2a5OvhthJQkNOzx dOydYsx8dbpKyliXuB3ZgJe7x6BPJG5Q304AJtrg/FcCUFEWr7QECItC6ppbAg4v RVRhCJlNQC3N6vAOGNypbF2TOBWng22rmp6/RiPwOKCbVUj46X2VxaYvUZ9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1c03uafiOUqcBK6RXbkBrNWli/IwHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkk5nXU92NDEfJ/9gWk2+TD5IhSDtbrperd jaz4ejPlzsPVnjLUuJYat7rn+zUsgk58vHPrP3kvDQSnSBBDdp4ImYLoClf8MTQZ 0+ZtLZ1NbfprYAiExs0Zr3P+HFUQqEXKwgdqh3PM+q70sV6G4i4rk5m2VY6ZjB4o oOG2iYjrZzgl40Qdk+ybp2rhlG7k9kXXzTQA+pqEbdegwNl/DiHOdexyKIkLJGIE uqMjLJVPHkTJS0ad75bP7d2FW/jMyHz0qh0Ukebag1TPHaaIHXdTE3XHY+BYlT57 N1+8Hoa2l+o0Dwu+peMNBtSiWAgmb/s1wUI4zcpbF0zBKR2skmI= -----END CERTIFICATE-----Generated at Thu Nov 13 15:53:41 2025 by rpki-client