$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: 1uHz0LROuuRfhrlLjVr4YSmFfxGhNzLvmUPmznHYnFY= Subject key identifier: E0:CC:07:07:00:BA:90:85:20:38:64:A2:C2:4F:BE:C6:B1:9C:AC:F2 Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 0476B5336286AB8D9DEFA8A657CB442214821A8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 04CE Signing time: Tue 29 Apr 2025 22:02:02 +0000 Manifest this update: Tue 29 Apr 2025 21:57:02 +0000 Manifest next update: Sat 03 May 2025 08:30:02 +0000 Files and hashes: 1: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: wpqAylZ/2JLIsixzqjZbQUW1PLTzI+fqS0UU/awB9+g=) 2: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: bfDh6ZRJDvBPymHjC3pLTltfVhpAl5f2lYkL9hZt1pY=) 3: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: LvCmIGtHK1GlqnL4p80WNY+QUuiC3KuwLeLaDBKH1xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:76:b5:33:62:86:ab:8d:9d:ef:a8:a6:57:cb:44:22:14:82:1a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Apr 29 21:57:02 2025 GMT Not After : May 3 08:30:02 2025 GMT Subject: CN=E0CC070700BA9085203864A2C24FBEC6B19CACF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:45:18:2e:23:ea:d2:75:4e:d4:65:db:99: a5:82:80:d6:af:cc:79:f5:0f:44:cf:f3:f9:b9:dc: 09:19:20:b4:aa:14:b7:77:94:d4:a5:97:37:e0:28: 58:e2:52:8f:08:9f:9b:7e:15:fe:65:87:50:6f:21: 56:70:53:90:f6:ec:0b:e0:51:b6:76:c5:2b:65:f6: 04:8f:df:7a:8f:3b:b8:8e:2b:93:2e:0a:01:84:4d: 59:1c:fa:3b:3a:ce:ca:b2:cb:27:d0:84:9f:18:a4: 44:f6:b1:9e:c8:be:65:ed:a3:5a:04:32:78:2e:16: 90:f7:68:73:5c:4d:6d:0e:a1:d3:1b:14:7a:10:ba: c5:39:40:aa:bb:47:12:1a:b4:6d:22:5d:e0:00:64: c6:4f:2b:94:e4:64:ba:4b:0e:e0:fd:16:b2:5b:9a: 22:6f:81:b3:11:95:d7:9b:8b:7b:46:cf:ac:34:b5: e7:26:48:8c:b8:f4:d1:43:01:53:fc:77:5c:96:d1: 55:15:d4:2a:35:9d:93:36:76:ed:8f:86:ed:c4:06: 48:56:84:b1:66:53:7a:b1:f9:71:04:4c:d4:73:b2: ae:90:2d:dc:94:b8:0f:07:80:02:fa:3d:e2:fa:6b: 65:cc:a8:86:ac:c7:45:58:68:68:e7:36:d9:0f:6f: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CC:07:07:00:BA:90:85:20:38:64:A2:C2:4F:BE:C6:B1:9C:AC:F2 X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dd:10:f0:bd:95:60:51:ee:6f:c3:40:71:53:5d:31:31:31: 28:36:71:ad:96:bb:15:aa:1d:c4:5d:e3:a2:a4:df:e6:ba:38: c2:ed:cf:25:73:40:ac:15:25:76:b1:e1:39:65:aa:1a:35:ff: f8:27:67:ee:23:c5:dc:27:ea:4b:f6:6d:1b:d3:ba:ef:e7:0c: fe:b0:f7:06:13:31:19:a4:76:a9:38:6b:ab:66:11:5b:19:65: 8a:6c:87:19:5e:7e:93:f9:5f:9c:ac:7d:c4:62:b1:36:cb:c4: de:99:b2:bf:54:84:61:f4:89:36:59:9e:13:1d:d4:01:cd:e9: e3:67:37:57:58:b1:fb:6f:db:f6:6f:92:01:e8:96:96:9e:54: 22:51:c7:71:33:2b:1a:a3:5e:31:db:1a:3d:33:3c:bc:cf:4b: cd:ad:94:64:e4:78:8c:59:3d:93:45:6a:cb:d7:5b:f9:70:5f: 64:18:18:ed:d9:1b:ee:2b:8b:cd:c8:f6:ac:66:d0:50:52:c7: 68:c3:4d:65:27:b8:65:6c:a0:7f:90:97:f2:37:fa:55:7e:87: dd:2e:7d:e1:f3:76:19:c4:ff:ce:d9:72:05:a3:8e:9c:d5:e0: b8:8a:ca:b0:89:98:02:01:a3:ad:b4:4f:93:cf:39:ab:34:64: bb:61:5b:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHa1M2KGq42d76imV8tEIhSCGo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNTA0MjkyMTU3MDJaFw0yNTA1MDMwODMwMDJaMDMxMTAvBgNV BAMTKEUwQ0MwNzA3MDBCQTkwODUyMDM4NjRBMkMyNEZCRUM2QjE5Q0FDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XUUYLiPq0nVO1GXbmaWCgNav zHn1D0TP8/m53AkZILSqFLd3lNSllzfgKFjiUo8In5t+Ff5lh1BvIVZwU5D27Avg UbZ2xStl9gSP33qPO7iOK5MuCgGETVkc+js6zsqyyyfQhJ8YpET2sZ7IvmXto1oE MnguFpD3aHNcTW0OodMbFHoQusU5QKq7RxIatG0iXeAAZMZPK5TkZLpLDuD9FrJb miJvgbMRldebi3tGz6w0tecmSIy49NFDAVP8d1yW0VUV1Co1nZM2du2Phu3EBkhW hLFmU3qx+XEETNRzsq6QLdyUuA8HgAL6PeL6a2XMqIasx0VYaGjnNtkPb2f9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4MwHBwC6kIUgOGSiwk++xrGcrPIwHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrdEPC9lWBR7m/DQHFTXTExMSg2ca2WuxWq HcRd46Kk3+a6OMLtzyVzQKwVJXax4Tllqho1//gnZ+4jxdwn6kv2bRvTuu/nDP6w 9wYTMRmkdqk4a6tmEVsZZYpshxlefpP5X5ysfcRisTbLxN6Zsr9UhGH0iTZZnhMd 1AHN6eNnN1dYsftv2/ZvkgHolpaeVCJRx3EzKxqjXjHbGj0zPLzPS82tlGTkeIxZ PZNFasvXW/lwX2QYGO3ZG+4ri83I9qxm0FBSx2jDTWUnuGVsoH+Ql/I3+lV+h90u feHzdhnE/87ZcgWjjpzV4LiKyrCJmAIBo620T5PPOas0ZLthW4U= -----END CERTIFICATE-----Generated at Wed Apr 30 00:09:40 2025 by rpki-client