$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: 3SHTo9Efi4C8RxgQsC9tUexzuOXZFC0ekWFmX62rFmM= Subject key identifier: 16:76:26:B6:ED:01:FB:95:63:8E:48:26:DD:54:61:0E:EB:EB:41:1F Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 37D098FCB7AB8FB442BE583B3D859FCF7A3D59ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 0508 Signing time: Fri 05 Sep 2025 04:52:04 +0000 Manifest this update: Fri 05 Sep 2025 04:47:04 +0000 Manifest next update: Mon 08 Sep 2025 14:48:04 +0000 Files and hashes: 1: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: oWtepmBqBvebT0Z+AytYxvJ+nwN7a/Aha+0+yrTyMss=) 2: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: bfDh6ZRJDvBPymHjC3pLTltfVhpAl5f2lYkL9hZt1pY=) 3: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: 3KlBft5GMCM4uwdgNQUJe21Mrc9CDKhtzin7iFRXCgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d0:98:fc:b7:ab:8f:b4:42:be:58:3b:3d:85:9f:cf:7a:3d:59:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Sep 5 04:47:04 2025 GMT Not After : Sep 8 14:48:04 2025 GMT Subject: CN=167626B6ED01FB95638E4826DD54610EEBEB411F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:3d:c5:c9:3d:a4:5c:52:ef:c7:9f:b9:73: 1b:75:04:fa:ab:35:98:98:45:5b:00:65:12:2a:92: d3:31:5f:a4:91:d3:f2:70:c7:16:51:05:f3:30:1c: 5d:83:c7:4e:10:a6:1a:23:6f:82:19:1d:8d:b9:55: 89:be:0c:9b:49:05:ce:f1:9b:9c:79:26:fb:29:f8: 17:84:f6:cb:f3:ad:8a:ea:e2:2c:65:53:65:17:19: 26:f5:a9:60:f1:be:a9:43:7e:d8:75:27:fc:7e:e0: 93:b8:b0:91:17:f2:31:c2:24:db:56:b6:40:19:f8: 79:e3:be:07:3a:e5:e4:5a:86:b6:e9:f0:a9:f7:fa: e6:c4:38:86:2c:57:4b:e6:f4:f6:d0:ec:03:17:20: 48:1e:83:c7:9f:0e:29:0e:fe:d6:06:18:d6:43:f7: 57:0b:3c:29:d1:45:53:af:7f:cf:34:0e:c4:c8:cc: b1:96:f5:37:54:9f:b2:af:a8:8f:e4:53:6e:b2:b0: 7d:2a:2f:2d:6f:ed:94:c4:e7:ea:25:78:7d:69:62: 6c:d9:0a:94:bc:3b:6b:ba:ea:d0:76:e6:3c:df:11: f9:45:5b:33:3c:9f:c0:14:2b:43:76:af:9e:10:02: fb:fe:cd:0f:ab:21:09:70:13:aa:32:38:9e:ce:3a: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:76:26:B6:ED:01:FB:95:63:8E:48:26:DD:54:61:0E:EB:EB:41:1F X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4a:88:8d:52:1e:f9:f8:c2:76:cf:8c:bd:1b:ca:44:cb:51: e9:8d:26:e7:07:e1:a2:7b:b8:68:01:70:96:72:f6:0d:ff:73: d0:d2:b4:ed:c5:6a:9b:cf:44:ee:5a:5a:b2:c3:2e:ff:43:3c: c8:0a:d3:db:b8:b7:4a:dd:fb:4d:19:3c:94:c8:e4:3a:e9:84: cb:98:6b:4f:86:b9:e1:46:ea:ec:6d:b5:c8:53:10:f0:89:3a: 9c:fb:71:0c:f7:c3:ea:54:14:12:89:8e:ec:a7:e9:21:b1:4e: c3:a4:59:b8:87:fa:80:24:c0:f6:ba:14:3b:09:11:8c:dc:0b: bf:58:ed:36:50:5e:2f:22:ea:e1:84:9b:72:01:56:b9:15:b5: e6:82:f2:65:ee:b4:82:d9:17:ae:1a:8b:16:c1:ea:91:5e:bb: be:8e:70:37:98:44:5f:b4:64:cc:68:5a:34:d6:ad:1e:4e:d9: 87:c3:ba:22:5d:48:3f:f5:b4:57:e1:0c:01:18:14:27:a8:d6: db:72:d3:29:71:d8:d5:ab:9c:94:57:8f:19:ae:0d:b6:9e:c2: 7e:f4:71:bc:31:bf:b7:58:f3:50:34:38:fc:c3:7f:d7:fd:e5: 24:07:ec:17:e6:f8:df:1c:51:c4:df:2f:78:db:fd:57:e9:a4: 4a:67:84:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9CY/Lerj7RCvlg7PYWfz3o9We0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNTA5MDUwNDQ3MDRaFw0yNTA5MDgxNDQ4MDRaMDMxMTAvBgNV BAMTKDE2NzYyNkI2RUQwMUZCOTU2MzhFNDgyNkRENTQ2MTBFRUJFQjQxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Oz3FyT2kXFLvx5+5cxt1BPqr NZiYRVsAZRIqktMxX6SR0/JwxxZRBfMwHF2Dx04Qphojb4IZHY25VYm+DJtJBc7x m5x5Jvsp+BeE9svzrYrq4ixlU2UXGSb1qWDxvqlDfth1J/x+4JO4sJEX8jHCJNtW tkAZ+Hnjvgc65eRahrbp8Kn3+ubEOIYsV0vm9PbQ7AMXIEgeg8efDikO/tYGGNZD 91cLPCnRRVOvf880DsTIzLGW9TdUn7KvqI/kU26ysH0qLy1v7ZTE5+oleH1pYmzZ CpS8O2u66tB25jzfEflFWzM8n8AUK0N2r54QAvv+zQ+rIQlwE6oyOJ7OOqG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFnYmtu0B+5Vjjkgm3VRhDuvrQR8wHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJKiI1SHvn4wnbPjL0bykTLUemNJucH4aJ7 uGgBcJZy9g3/c9DStO3FapvPRO5aWrLDLv9DPMgK09u4t0rd+00ZPJTI5DrphMuY a0+GueFG6uxttchTEPCJOpz7cQz3w+pUFBKJjuyn6SGxTsOkWbiH+oAkwPa6FDsJ EYzcC79Y7TZQXi8i6uGEm3IBVrkVteaC8mXutILZF64aixbB6pFeu76OcDeYRF+0 ZMxoWjTWrR5O2YfDuiJdSD/1tFfhDAEYFCeo1tty0ylx2NWrnJRXjxmuDbaewn70 cbwxv7dY81A0OPzDf9f95SQH7Bfm+N8cUcTfL3jb/VfppEpnhMg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:48 2025 by rpki-client