$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: mmyIi3VJYfgc8CfcFPLScqrhO7DdZ/Jo1zZNGydZjvw= Subject key identifier: 6F:85:E9:BF:02:E5:4A:9D:BE:6B:68:44:64:5B:F8:ED:E5:26:65:51 Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 157EE13E778DE19AC94942B0EBE4EB9CB6EE11BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 03C2 Signing time: Sat 07 Jun 2025 06:11:00 +0000 Manifest this update: Sat 07 Jun 2025 06:06:00 +0000 Manifest next update: Tue 10 Jun 2025 17:00:00 +0000 Files and hashes: 1: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: v3ySroBCN4sNfccDqvHcUatzXZPBnzr9Qki2+Ib+sWs=) 2: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: Obz+kIW4kZ8yIocJl2sLrn0k0oolS6gTe486AAuHOv4=) 3: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 7Js1TyGNcS10xLqVcx42bTRAyDqI+vbwGTKy3EKX8TA=) 4: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: wBuDQDFXKY9G8FF8L1EDMdPf10b4t48te0hIV48CjDg=) 5: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: /64lOMESRaQrzkvMjdDaVIJl9RCmfN5EQSQP/+WGK4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7e:e1:3e:77:8d:e1:9a:c9:49:42:b0:eb:e4:eb:9c:b6:ee:11:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: Jun 7 06:06:00 2025 GMT Not After : Jun 10 17:00:00 2025 GMT Subject: CN=6F85E9BF02E54A9DBE6B6844645BF8EDE5266551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:f2:10:be:e9:7d:9a:9f:a0:7f:b2:1a:9c: b3:00:66:b7:62:bc:b4:81:07:18:23:fd:aa:3d:90: 68:13:39:df:f8:88:fc:6b:3f:1f:92:2d:6f:4a:0c: 5f:47:c4:31:7c:36:15:ae:f8:17:73:d7:e7:63:c5: 48:8c:2c:35:b9:83:d5:49:31:e7:1f:2f:33:87:2c: f7:62:e0:34:a9:6f:b5:2f:c3:30:1e:86:44:c2:d1: c2:47:da:75:5d:0a:4c:31:dd:f0:b7:06:4a:a4:ec: 2f:35:75:dc:61:b4:09:91:68:9c:80:08:47:7e:72: 39:b7:13:f1:fa:a2:25:7b:6b:79:70:be:da:12:f6: b2:08:3a:8b:85:78:ff:5c:db:e5:97:f6:2e:60:5a: 13:d5:5a:f6:cc:3b:4a:03:83:9a:3a:da:b7:3f:34: d3:8e:51:ac:9b:0a:27:3c:b9:e5:6f:0d:d5:ae:ff: 44:39:16:d0:76:77:65:04:28:1f:0a:a4:c2:87:1e: fe:61:f8:1a:ee:48:14:19:f8:4c:76:e3:48:b7:2f: 9f:94:3a:40:47:32:b6:9b:68:7e:6d:66:99:8e:6c: 43:34:4a:be:07:7c:d1:dd:f7:07:1d:17:56:ba:10: 20:36:e6:34:6b:e2:d1:0b:ba:73:de:94:c6:57:6c: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:85:E9:BF:02:E5:4A:9D:BE:6B:68:44:64:5B:F8:ED:E5:26:65:51 X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:39:0f:c3:8a:1e:40:17:a5:5b:3a:20:65:dc:16:55:20:6e: 88:fb:74:3f:98:eb:9a:6e:38:f8:2a:0c:29:ab:78:71:44:d2: ee:bd:01:6b:e3:a1:b3:f0:4b:b5:2f:77:71:0e:2a:06:04:13: 7c:8e:c1:b4:2f:78:e2:2a:1f:f1:0c:85:48:8c:1a:fc:7e:22: 48:4c:8a:a5:75:c4:de:4f:07:9d:74:7b:27:35:b7:88:10:f7: 6e:1b:0f:2a:13:b7:7d:59:3d:29:36:19:c9:74:98:da:54:8e: 14:4e:1d:44:68:6c:4b:cf:5c:dc:97:45:38:72:84:f4:9c:88: 30:05:f3:de:89:68:8e:57:8d:13:b5:b7:5a:a5:36:13:a7:01: b4:7f:eb:d1:6f:04:10:44:85:1e:d2:2f:bb:5d:46:cd:8e:3e: 43:cb:79:90:6a:a4:fb:ed:b3:c2:5d:9f:8a:4c:6a:82:5c:97: 62:49:b0:a7:ce:ee:89:4d:5c:7a:e3:9f:2d:17:14:45:2b:89: 6a:e2:26:b5:c8:4d:28:8d:d4:ea:75:f8:29:01:dd:15:2a:b3: cd:d4:bc:22:a8:97:03:c1:81:cc:6f:bf:4c:9d:5e:7c:8b:4d: 35:c7:42:e0:a8:01:54:bc:c5:e5:92:82:9c:ce:66:3b:49:02: 0d:0b:45:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFX7hPneN4ZrJSUKw6+TrnLbuEb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNTA2MDcwNjA2MDBaFw0yNTA2MTAxNzAwMDBaMDMxMTAvBgNV BAMTKDZGODVFOUJGMDJFNTRBOURCRTZCNjg0NDY0NUJGOEVERTUyNjY1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0/IQvul9mp+gf7IanLMAZrdi vLSBBxgj/ao9kGgTOd/4iPxrPx+SLW9KDF9HxDF8NhWu+Bdz1+djxUiMLDW5g9VJ MecfLzOHLPdi4DSpb7UvwzAehkTC0cJH2nVdCkwx3fC3Bkqk7C81ddxhtAmRaJyA CEd+cjm3E/H6oiV7a3lwvtoS9rIIOouFeP9c2+WX9i5gWhPVWvbMO0oDg5o62rc/ NNOOUaybCic8ueVvDdWu/0Q5FtB2d2UEKB8KpMKHHv5h+BruSBQZ+Ex240i3L5+U OkBHMrabaH5tZpmObEM0Sr4HfNHd9wcdF1a6ECA25jRr4tELunPelMZXbEhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb4XpvwLlSp2+a2hEZFv47eUmZVEwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY5D8OKHkAXpVs6IGXcFlUgboj7dD+Y65pu OPgqDCmreHFE0u69AWvjobPwS7Uvd3EOKgYEE3yOwbQveOIqH/EMhUiMGvx+IkhM iqV1xN5PB510eyc1t4gQ924bDyoTt31ZPSk2Gcl0mNpUjhROHURobEvPXNyXRThy hPSciDAF896JaI5XjRO1t1qlNhOnAbR/69FvBBBEhR7SL7tdRs2OPkPLeZBqpPvt s8Jdn4pMaoJcl2JJsKfO7olNXHrjny0XFEUriWriJrXITSiN1Op1+CkB3RUqs83U vCKolwPBgcxvv0ydXnyLTTXHQuCoAVS8xeWSgpzOZjtJAg0LRcQ= -----END CERTIFICATE-----Generated at Sun Jun 8 13:36:33 2025 by rpki-client