$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json) Hash identifier: ttBfkMFcLVkCeVw6bMXL+vPnVHHXHO35/BvoXfrQH3I= Subject key identifier: 46:A7:5C:4F:D3:2B:12:A8:D1:0B:63:78:B3:52:5B:1B:DA:1C:DA:E2 Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Certificate serial: 49C2E830E14274BC550B79686D0D29F842646995 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft Manifest number: 0384 Signing time: Sat 06 Sep 2025 13:00:59 +0000 Manifest this update: Sat 06 Sep 2025 12:55:59 +0000 Manifest next update: Tue 09 Sep 2025 22:32:59 +0000 Files and hashes: 1: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: LeAX921PuFORgks79ePG8mv8iLwlKYZRHuQBuRA29no=) 2: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: HLZ+IH/bQ8msEgpq+ErqUKlLHV2SSMC3sy6n/C9xNrI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c2:e8:30:e1:42:74:bc:55:0b:79:68:6d:0d:29:f8:42:64:69:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Validity Not Before: Sep 6 12:55:59 2025 GMT Not After : Sep 9 22:32:59 2025 GMT Subject: CN=46A75C4FD32B12A8D10B6378B3525B1BDA1CDAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:cd:69:3c:9c:8f:db:2b:ae:c7:f5:bb:a6: 17:e2:2d:3f:55:ea:e5:2c:94:bc:25:4a:07:02:a6: 6b:37:1e:d6:64:37:7d:00:20:52:3e:71:fb:aa:84: 0f:09:16:85:00:76:fb:9a:c5:c0:ee:37:a0:43:be: 15:3a:08:2c:24:3f:f7:c5:ee:83:2b:a0:f0:bc:a6: b2:22:e1:bb:a3:35:c5:89:80:c6:65:ff:e1:14:43: b3:69:ff:4e:9d:c1:f3:08:fc:4c:f8:dc:f8:e3:46: 1b:79:8a:db:51:d8:43:fe:b6:96:61:ef:ba:80:a0: 71:a3:c3:6a:2c:e1:f4:a7:17:4e:60:de:e2:69:55: 28:e3:ce:f7:2c:85:b2:76:0e:ff:ab:dd:9f:95:dd: a5:58:a7:81:3a:79:e4:ec:e8:62:a1:ea:48:e6:a7: 22:46:22:f9:80:1d:86:a9:83:36:d8:d3:1d:be:b6: 20:0a:f1:e8:f9:99:74:28:d6:1f:6f:f9:3e:20:81: 77:00:60:66:92:c2:85:a9:42:e2:f5:6b:bf:d3:3c: a8:2a:47:b7:00:56:38:a5:2a:e9:23:e0:6d:a5:f6: 8d:ae:38:15:30:68:e2:94:2a:d5:38:4f:ee:29:0f: a9:60:2a:0c:1e:3b:02:9e:e0:de:73:90:80:62:8a: e1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A7:5C:4F:D3:2B:12:A8:D1:0B:63:78:B3:52:5B:1B:DA:1C:DA:E2 X509v3 Authority Key Identifier: keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:f9:fc:48:c4:f3:d8:95:7a:57:51:9b:38:5d:52:e0:25:aa: 8f:e8:9b:5e:ac:c2:1b:0d:69:1c:d6:72:a1:b2:85:3c:3a:68: 84:f4:b1:c0:b7:13:d3:67:bd:87:0d:9e:e1:b3:85:b9:0b:b2: fa:ea:f5:40:99:4d:98:ec:e7:e0:a2:12:cf:a5:44:36:3c:4d: 10:fb:8a:36:3a:f0:f3:73:0c:72:9a:4d:54:45:9f:b0:1f:c5: 71:29:e9:5e:42:1f:ad:1d:3b:db:0e:30:3d:ec:c1:05:9c:17: ef:15:d9:19:1d:93:dd:ef:da:75:ba:e1:b6:2a:a1:0d:78:7e: 11:84:64:90:d6:30:5e:7b:d8:de:0e:a7:22:c2:ac:97:cf:dc: c8:2f:02:bb:6d:94:f0:df:bc:48:a8:87:de:75:b4:19:a4:80: 9c:53:22:54:cc:46:66:94:3c:c4:82:66:dd:fd:22:b1:a7:4c: ca:ec:47:5e:ff:91:f1:b2:e9:da:79:d2:6e:bc:6f:bd:d7:1a: bb:d4:51:18:df:8e:de:a2:da:e8:2a:0d:4d:8e:47:00:8e:b1: fd:8b:11:0c:32:df:43:78:50:1a:d4:05:e4:88:20:b3:71:e3: ec:a1:05:5b:df:30:e7:0d:a2:49:53:84:78:8b:f8:af:dc:53: 86:a2:3e:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScLoMOFCdLxVC3lobQ0p+EJkaZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5 NzE0MjZGRTAeFw0yNTA5MDYxMjU1NTlaFw0yNTA5MDkyMjMyNTlaMDMxMTAvBgNV BAMTKDQ2QTc1QzRGRDMyQjEyQThEMTBCNjM3OEIzNTI1QjFCREExQ0RBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQi81pPJyP2yuux/W7phfiLT9V 6uUslLwlSgcCpms3HtZkN30AIFI+cfuqhA8JFoUAdvuaxcDuN6BDvhU6CCwkP/fF 7oMroPC8prIi4bujNcWJgMZl/+EUQ7Np/06dwfMI/Ez43PjjRht5ittR2EP+tpZh 77qAoHGjw2os4fSnF05g3uJpVSjjzvcshbJ2Dv+r3Z+V3aVYp4E6eeTs6GKh6kjm pyJGIvmAHYapgzbY0x2+tiAK8ej5mXQo1h9v+T4ggXcAYGaSwoWpQuL1a7/TPKgq R7cAVjilKukj4G2l9o2uOBUwaOKUKtU4T+4pD6lgKgweOwKe4N5zkIBiiuFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURqdcT9MrEqjRC2N4s1JbG9oc2uIwHwYDVR0j BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1 REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0 MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK35/EjE89iVeldRmzhdUuAlqo/om16swhsN aRzWcqGyhTw6aIT0scC3E9NnvYcNnuGzhbkLsvrq9UCZTZjs5+CiEs+lRDY8TRD7 ijY68PNzDHKaTVRFn7AfxXEp6V5CH60dO9sOMD3swQWcF+8V2Rkdk93v2nW64bYq oQ14fhGEZJDWMF572N4OpyLCrJfP3MgvArttlPDfvEioh951tBmkgJxTIlTMRmaU PMSCZt39IrGnTMrsR17/kfGy6dp50m68b73XGrvUURjfjt6i2ugqDU2ORwCOsf2L EQwy30N4UBrUBeSIILNx4+yhBVvfMOcNoklThHiL+K/cU4aiPtU= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:26 2025 by rpki-client