$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json) Hash identifier: 5nGP89k8mbZgG8UgkQ9+7YLa3uttjDfHhhuta0kXPPs= Subject key identifier: 81:6B:AA:B5:EA:C6:2B:75:31:B7:34:0E:30:41:3C:5B:FC:FC:6D:24 Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Certificate serial: 7B93D6D4C1A4E8B43DB4248D519775B6154C7DF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft Manifest number: 0334 Signing time: Tue 11 Mar 2025 14:40:55 +0000 Manifest this update: Tue 11 Mar 2025 14:35:55 +0000 Manifest next update: Sat 15 Mar 2025 00:49:55 +0000 Files and hashes: 1: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: D1oTnNhgCKhlyJ3cW8vY+L+pUIeYkyHgdFvyp1x9BkU=) 2: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: 8ilqzjcHVdpGIEi8ksDoWGpQNPw0J86sQw/n0qa9w88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 00:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:93:d6:d4:c1:a4:e8:b4:3d:b4:24:8d:51:97:75:b6:15:4c:7d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Validity Not Before: Mar 11 14:35:55 2025 GMT Not After : Mar 15 00:49:55 2025 GMT Subject: CN=816BAAB5EAC62B7531B7340E30413C5BFCFC6D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:c7:ae:6e:f5:60:b1:e1:2a:8b:c9:fd:7e: db:4d:98:16:8c:1b:86:16:06:ee:8b:0d:ad:da:90: d3:04:73:b8:bc:40:e1:dd:34:df:88:bf:8b:61:91: 9c:1c:62:3c:49:16:ee:c8:1f:75:57:06:9c:dd:ff: a9:67:fb:62:74:ec:81:07:ca:49:c1:1d:2d:24:31: 6b:99:b5:f1:3a:31:ab:9c:2d:ed:ea:97:c0:23:fc: 62:81:82:bb:b5:f1:44:ef:d9:cc:e5:94:4d:e2:27: b9:a8:01:35:c9:91:b3:fd:dc:a4:3c:29:00:d7:26: 91:b9:fc:ce:9e:90:0b:ee:d2:53:43:5a:65:38:29: 4c:fa:ea:9d:b9:eb:a8:96:a4:73:d9:b2:c9:48:97: 8d:c2:a1:d0:5d:11:10:b6:6d:11:a4:13:95:52:a2: 4c:e7:b4:ba:29:3e:ef:17:2c:b0:80:d6:50:99:bf: 68:1c:72:ae:63:72:6f:c7:b3:90:f5:33:78:5b:ef: 2e:80:9a:ee:71:ce:04:2d:b2:42:6f:13:5a:c1:e0: d9:4d:c7:00:86:c5:71:8e:a6:05:33:93:9a:65:4c: 5c:77:ba:3a:ce:82:7a:24:9e:68:a3:13:81:c5:52: 53:14:ef:19:f7:63:cd:26:aa:5b:c8:13:95:5c:88: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6B:AA:B5:EA:C6:2B:75:31:B7:34:0E:30:41:3C:5B:FC:FC:6D:24 X509v3 Authority Key Identifier: keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:40:66:11:d9:a3:90:e0:b8:07:4e:7e:14:f6:08:38:aa:68: ff:e4:8b:a4:94:51:a8:7c:f6:70:0e:ac:2e:ea:bf:15:cc:74: d3:6a:81:ba:28:02:96:38:67:35:6a:6a:66:1f:3e:92:28:6f: 45:78:79:04:cd:7a:b2:68:f6:b4:7e:5d:17:2f:07:35:73:fe: 88:06:da:72:30:4b:ee:5d:80:0c:ab:b7:8c:ab:19:e1:97:89: 74:d5:c9:cd:eb:bd:c5:70:1a:7e:be:35:62:af:ce:1f:bf:5b: 6e:96:c0:f3:40:71:f0:ca:f1:cd:a9:df:86:be:d8:2f:c4:6f: 4e:ed:b3:85:95:f2:d2:78:3b:c2:69:45:27:08:07:54:45:dd: 96:e0:51:d3:70:7e:07:d6:c5:94:1d:86:b6:d8:09:03:42:41: c6:d5:00:76:6a:42:f1:dc:f9:ac:63:91:5c:a5:c4:0b:f0:cd: 7f:dc:49:06:61:18:21:bb:81:a0:61:f4:8d:b5:77:40:0d:64: 1b:2f:d4:6b:0d:d9:48:a5:5b:d1:e3:78:5c:6f:3d:d5:ce:f0: 9c:b3:35:d1:b5:3e:9b:55:13:24:40:5f:13:0f:a0:66:cc:1f: c5:99:6f:ec:aa:d1:0b:34:68:69:72:20:2e:cf:b0:4b:2b:01: 70:58:bb:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5PW1MGk6LQ9tCSNUZd1thVMffgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5 NzE0MjZGRTAeFw0yNTAzMTExNDM1NTVaFw0yNTAzMTUwMDQ5NTVaMDMxMTAvBgNV BAMTKDgxNkJBQUI1RUFDNjJCNzUzMUI3MzQwRTMwNDEzQzVCRkNGQzZEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfsseubvVgseEqi8n9fttNmBaM G4YWBu6LDa3akNMEc7i8QOHdNN+Iv4thkZwcYjxJFu7IH3VXBpzd/6ln+2J07IEH yknBHS0kMWuZtfE6MaucLe3ql8Aj/GKBgru18UTv2czllE3iJ7moATXJkbP93KQ8 KQDXJpG5/M6ekAvu0lNDWmU4KUz66p2566iWpHPZsslIl43CodBdERC2bRGkE5VS okzntLopPu8XLLCA1lCZv2gccq5jcm/Hs5D1M3hb7y6Amu5xzgQtskJvE1rB4NlN xwCGxXGOpgUzk5plTFx3ujrOgnoknmijE4HFUlMU7xn3Y80mqlvIE5VciDRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgWuqterGK3UxtzQOMEE8W/z8bSQwHwYDVR0j BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1 REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0 MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJAZhHZo5DguAdOfhT2CDiqaP/ki6SUUah8 9nAOrC7qvxXMdNNqgbooApY4ZzVqamYfPpIob0V4eQTNerJo9rR+XRcvBzVz/ogG 2nIwS+5dgAyrt4yrGeGXiXTVyc3rvcVwGn6+NWKvzh+/W26WwPNAcfDK8c2p34a+ 2C/Eb07ts4WV8tJ4O8JpRScIB1RF3ZbgUdNwfgfWxZQdhrbYCQNCQcbVAHZqQvHc +axjkVylxAvwzX/cSQZhGCG7gaBh9I21d0ANZBsv1GsN2UilW9HjeFxvPdXO8Jyz NdG1PptVEyRAXxMPoGbMH8WZb+yq0Qs0aGlyIC7PsEsrAXBYu+I= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:29 2025 by rpki-client