$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: tr5HxYkvTHTdNJiBVrqpifr2fk7ySJCedEJagD9YcwM= Subject key identifier: 9E:D9:25:92:FC:41:32:24:C0:77:C9:24:C9:4A:E3:C4:D6:9B:85:A7 Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 1804DE6A5C98C6D1FA4E041755A0766DA3D55BE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 04DF Signing time: Fri 06 Jun 2025 22:42:06 +0000 Manifest this update: Fri 06 Jun 2025 22:37:06 +0000 Manifest next update: Tue 10 Jun 2025 08:21:06 +0000 Files and hashes: 1: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: DG3bBePnynOV75eZaL7nPAtokLhs1A6r7Zls8s7jvF8=) 2: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: bfDh6ZRJDvBPymHjC3pLTltfVhpAl5f2lYkL9hZt1pY=) 3: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: wpqAylZ/2JLIsixzqjZbQUW1PLTzI+fqS0UU/awB9+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:04:de:6a:5c:98:c6:d1:fa:4e:04:17:55:a0:76:6d:a3:d5:5b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Jun 6 22:37:06 2025 GMT Not After : Jun 10 08:21:06 2025 GMT Subject: CN=9ED92592FC413224C077C924C94AE3C4D69B85A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:a2:89:8a:3d:ec:72:3a:f4:d8:c8:b5:52: ba:60:7e:ba:0f:fe:e6:b3:28:d7:ae:4f:9f:44:0c: f2:d1:a1:51:8c:36:f8:c5:a1:ee:d0:cd:1f:76:76: 8a:b9:97:50:a6:bf:16:c8:bb:3d:b5:53:2c:b7:fb: 8a:1b:1f:df:67:82:8f:67:ae:05:de:ff:96:99:1a: a5:99:f7:7b:8f:5b:69:52:81:7d:81:22:b1:b8:0e: e5:3f:64:f9:31:12:91:57:ab:eb:9c:45:b4:8b:77: 49:05:86:a1:5b:09:b4:42:44:fc:9b:30:89:67:54: 0e:ad:f2:05:e6:cb:42:5f:56:79:65:ca:ef:f0:c5: e7:d0:f2:a4:c0:ad:c2:c1:12:d9:ae:81:a1:1b:7e: e7:85:cf:22:d0:40:86:4e:ab:82:19:75:80:13:59: 13:cd:ba:fc:d8:d9:b7:15:29:a9:68:4e:f8:62:05: 76:df:0c:57:45:70:f0:09:a7:5b:41:cb:43:39:b9: de:17:38:41:3b:b8:d7:5d:23:1b:60:79:d2:22:56: 31:3b:e8:b0:66:39:11:8c:b4:45:89:2b:89:43:23: c9:13:76:cb:84:81:90:6a:55:61:cf:fa:16:67:13: 5a:4a:8a:e8:77:a4:39:3c:d5:25:d6:22:7f:b3:33: dd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D9:25:92:FC:41:32:24:C0:77:C9:24:C9:4A:E3:C4:D6:9B:85:A7 X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9a:d8:ed:6d:39:1c:a4:65:a4:2d:de:52:30:e2:c5:99:f7: f5:87:7a:c5:6b:69:38:b7:7a:e9:b1:11:85:aa:83:df:a7:96: 4a:31:b8:1d:0b:65:e4:3f:c0:ca:6a:b3:6a:22:f7:56:de:06: a1:36:9f:65:86:1b:b8:3e:bf:40:e9:d2:8b:c1:0f:61:22:dd: 80:41:02:75:e2:7f:6d:26:57:8a:92:f5:2a:be:4f:f4:98:dd: 0e:e7:f4:ee:10:38:f8:a8:49:e5:1f:03:d5:e6:58:a5:3f:07: 09:8d:db:e6:0c:8f:3a:ca:41:3d:91:05:b6:a8:68:aa:79:b2: 25:0f:63:83:31:bf:43:71:d5:35:6d:da:ef:ee:2b:4a:53:92: 73:d8:65:22:51:ea:34:8f:52:30:62:34:6d:38:dd:1d:bd:b7: 17:4e:7b:b6:e5:4b:fb:31:e2:17:f7:f0:26:c3:1b:f2:e5:d2: ca:60:74:01:d7:cf:47:e5:12:58:2a:26:e0:7b:70:e4:8c:cc: 85:ec:66:97:b0:3f:74:35:ee:9c:1d:07:ec:1d:b3:b9:61:e8: f5:8e:4d:65:9a:5d:a3:d5:76:e0:90:0b:74:f4:7a:df:dc:dd: 7a:c2:87:59:94:4e:c4:38:c0:3e:a6:a4:48:9e:50:9e:5a:36: be:e8:21:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGATealyYxtH6TgQXVaB2baPVW+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNTA2MDYyMjM3MDZaFw0yNTA2MTAwODIxMDZaMDMxMTAvBgNV BAMTKDlFRDkyNTkyRkM0MTMyMjRDMDc3QzkyNEM5NEFFM0M0RDY5Qjg1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9aKJij3scjr02Mi1UrpgfroP /uazKNeuT59EDPLRoVGMNvjFoe7QzR92doq5l1CmvxbIuz21Uyy3+4obH99ngo9n rgXe/5aZGqWZ93uPW2lSgX2BIrG4DuU/ZPkxEpFXq+ucRbSLd0kFhqFbCbRCRPyb MIlnVA6t8gXmy0JfVnllyu/wxefQ8qTArcLBEtmugaEbfueFzyLQQIZOq4IZdYAT WRPNuvzY2bcVKaloTvhiBXbfDFdFcPAJp1tBy0M5ud4XOEE7uNddIxtgedIiVjE7 6LBmORGMtEWJK4lDI8kTdsuEgZBqVWHP+hZnE1pKiuh3pDk81SXWIn+zM90RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUntklkvxBMiTAd8kkyUrjxNabhacwHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICa2O1tORykZaQt3lIw4sWZ9/WHesVraTi3 eumxEYWqg9+nlkoxuB0LZeQ/wMpqs2oi91beBqE2n2WGG7g+v0Dp0ovBD2Ei3YBB AnXif20mV4qS9Sq+T/SY3Q7n9O4QOPioSeUfA9XmWKU/BwmN2+YMjzrKQT2RBbao aKp5siUPY4Mxv0Nx1TVt2u/uK0pTknPYZSJR6jSPUjBiNG043R29txdOe7blS/sx 4hf38CbDG/Ll0spgdAHXz0flElgqJuB7cOSMzIXsZpewP3Q17pwdB+wds7lh6PWO TWWaXaPVduCQC3T0et/c3XrCh1mUTsQ4wD6mpEieUJ5aNr7oISs= -----END CERTIFICATE-----Generated at Sat Jun 7 03:58:20 2025 by rpki-client