$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json) Hash identifier: k/knu0kfuEhtcl1LzlBNL1B/KSc5mcFiW81TNTHP+PQ= Subject key identifier: 2D:14:B5:52:08:D5:4E:AF:13:A6:93:F6:32:73:5A:9D:77:1B:B1:9E Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Certificate serial: 5D86ED7EB5298FBFD0A32A6263B81D01AFF4600B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft Manifest number: 033F Signing time: Sat 05 Apr 2025 09:00:56 +0000 Manifest this update: Sat 05 Apr 2025 08:55:56 +0000 Manifest next update: Tue 08 Apr 2025 18:14:56 +0000 Files and hashes: 1: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: kWwWDuMvSCe139ZZbLfpN0qY/Eah7eYVzhHzIOtVisA=) 2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: D1oTnNhgCKhlyJ3cW8vY+L+pUIeYkyHgdFvyp1x9BkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:86:ed:7e:b5:29:8f:bf:d0:a3:2a:62:63:b8:1d:01:af:f4:60:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Validity Not Before: Apr 5 08:55:56 2025 GMT Not After : Apr 8 18:14:56 2025 GMT Subject: CN=2D14B55208D54EAF13A693F632735A9D771BB19E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:c8:5e:02:47:6d:b4:48:6e:d4:85:a7:ce: 8f:67:9e:8f:32:1b:82:9c:56:e0:1b:de:6b:00:3e: 06:7a:10:c4:d5:6a:40:90:17:1c:6b:1d:fc:ba:af: cd:a1:ee:57:0e:53:26:bd:42:47:29:82:10:c8:c1: 29:79:7e:3a:2c:18:1a:b0:5f:15:dd:fc:68:7c:e9: 2b:08:c3:2c:11:da:72:a5:ae:31:a2:0f:c1:3c:75: b3:28:92:b1:4f:e6:a2:a3:f1:61:d5:87:08:fb:33: e2:8b:f3:b6:59:62:1e:8d:bb:4d:f1:1f:1b:3c:1e: c2:af:a1:88:f2:94:9a:19:bd:f0:47:7d:9b:d5:da: a3:00:54:bb:63:00:e8:16:88:36:8e:30:c3:2e:30: 8e:4f:0c:76:99:8b:4e:90:60:9a:74:01:03:51:bb: 20:df:cd:84:ba:f9:2d:4e:0e:5f:1f:9b:d8:21:b4: 32:2e:86:c0:c3:7c:ea:0d:11:b0:58:ef:b7:02:93: 87:19:15:b0:50:27:ea:39:f8:88:6d:ab:3a:6e:25: b3:b3:57:73:18:df:c5:4d:97:45:18:cf:1e:5c:4c: d3:03:4b:e2:dc:60:42:73:25:f8:02:8c:6b:dc:2b: 3f:c7:1d:da:ff:f2:22:4f:7c:da:84:d9:7d:13:b8: 49:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:14:B5:52:08:D5:4E:AF:13:A6:93:F6:32:73:5A:9D:77:1B:B1:9E X509v3 Authority Key Identifier: keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3b:da:09:53:3e:92:30:38:80:4d:3d:44:45:4e:95:6c:ca: 88:6c:51:7b:76:1f:5e:27:3c:7c:e9:ac:60:32:ad:1a:b4:97: cf:59:ac:0c:9d:52:35:c4:88:2e:b0:af:ff:ef:dc:10:ac:3f: f4:3f:4b:93:df:a2:4a:1c:c3:49:14:bb:10:3a:be:a2:45:61: 88:ff:68:b7:4e:10:d5:1e:6f:b0:00:35:4c:a2:34:95:27:06: 98:bb:62:ce:91:6e:54:a5:79:29:5f:f9:19:d4:5c:e6:8f:33: f0:f1:77:1d:cf:8f:d6:84:ae:17:57:ca:5f:fb:e2:63:a8:23: 3b:6d:9b:13:9a:c3:2b:23:8a:3c:cf:e5:93:10:28:37:4d:2d: 0e:4b:d1:75:10:4b:20:88:2c:32:e9:99:0e:3d:aa:6c:99:51: 90:c3:16:6f:f4:e3:17:12:46:26:42:4c:f6:1f:67:b3:79:a5: 92:fe:2e:bc:e3:6e:89:7c:04:c4:f5:38:de:eb:bf:e9:50:15: a8:b6:89:e8:62:32:73:3b:20:cc:ce:f4:b6:ba:21:b6:b1:39: 29:6b:e8:79:bd:ad:57:61:6a:ff:3d:01:09:88:ee:52:90:32: 17:2a:ee:e5:93:b1:e5:f1:16:39:e8:fc:ed:6f:64:90:3b:e1: 70:14:32:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYbtfrUpj7/QoypiY7gdAa/0YAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5 NzE0MjZGRTAeFw0yNTA0MDUwODU1NTZaFw0yNTA0MDgxODE0NTZaMDMxMTAvBgNV BAMTKDJEMTRCNTUyMDhENTRFQUYxM0E2OTNGNjMyNzM1QTlENzcxQkIxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUx8heAkdttEhu1IWnzo9nno8y G4KcVuAb3msAPgZ6EMTVakCQFxxrHfy6r82h7lcOUya9QkcpghDIwSl5fjosGBqw XxXd/Gh86SsIwywR2nKlrjGiD8E8dbMokrFP5qKj8WHVhwj7M+KL87ZZYh6Nu03x Hxs8HsKvoYjylJoZvfBHfZvV2qMAVLtjAOgWiDaOMMMuMI5PDHaZi06QYJp0AQNR uyDfzYS6+S1ODl8fm9ghtDIuhsDDfOoNEbBY77cCk4cZFbBQJ+o5+IhtqzpuJbOz V3MY38VNl0UYzx5cTNMDS+LcYEJzJfgCjGvcKz/HHdr/8iJPfNqE2X0TuEkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRS1UgjVTq8TppP2MnNanXcbsZ4wHwYDVR0j BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1 REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0 MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG872glTPpIwOIBNPURFTpVsyohsUXt2H14n PHzprGAyrRq0l89ZrAydUjXEiC6wr//v3BCsP/Q/S5Pfokocw0kUuxA6vqJFYYj/ aLdOENUeb7AANUyiNJUnBpi7Ys6RblSleSlf+RnUXOaPM/Dxdx3Pj9aErhdXyl/7 4mOoIzttmxOawysjijzP5ZMQKDdNLQ5L0XUQSyCILDLpmQ49qmyZUZDDFm/04xcS RiZCTPYfZ7N5pZL+Lrzjbol8BMT1ON7rv+lQFai2iehiMnM7IMzO9La6IbaxOSlr 6Hm9rVdhav89AQmI7lKQMhcq7uWTseXxFjno/O1vZJA74XAUMlM= -----END CERTIFICATE-----Generated at Sat Apr 5 22:27:25 2025 by rpki-client