$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: H0QoAFx98yhdUriVM6Nyq6ENeeRDQrRLlrv6BA7CG1Y= Subject key identifier: 76:34:19:89:82:2C:02:03:D5:D7:5E:DB:16:66:FF:0D:94:03:C3:E4 Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 695ED4EDC30E69CA4F5641D1D994EE4DDBF3EFC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 0523 Signing time: Mon 03 Nov 2025 03:22:06 +0000 Manifest this update: Mon 03 Nov 2025 03:17:06 +0000 Manifest next update: Thu 06 Nov 2025 03:36:06 +0000 Files and hashes: 1: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: oWtepmBqBvebT0Z+AytYxvJ+nwN7a/Aha+0+yrTyMss=) 2: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: cp44WBbEQPeVS1mAfPisCHMGvuQWDdPCMl7LdQCGp3k=) 3: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: 5SI6peOqSKLOAXJKP1sp38n/Ew+T9JBIImLCPaHnJvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5e:d4:ed:c3:0e:69:ca:4f:56:41:d1:d9:94:ee:4d:db:f3:ef:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Nov 3 03:17:06 2025 GMT Not After : Nov 6 03:36:06 2025 GMT Subject: CN=76341989822C0203D5D75EDB1666FF0D9403C3E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:73:54:92:e3:14:a1:18:d8:c3:cb:f7:c2: 1d:94:b1:02:b4:10:d2:63:3f:9a:e2:fb:af:2b:7c: e3:d3:a1:a1:d0:28:ec:dd:2c:f0:2e:3c:94:b1:5b: f8:26:73:ff:f8:69:b0:82:de:6d:e9:9d:1f:11:76: d4:53:9f:2f:17:c6:12:1e:dc:be:f6:3c:f5:c0:52: 67:db:82:7b:69:14:2d:e6:0f:01:6f:96:bc:11:87: c1:32:99:8e:2b:5a:42:b9:af:13:79:55:70:1e:c9: 7e:89:af:af:83:72:58:3d:13:c3:2d:a9:03:16:f5: 80:01:a7:ea:bc:5a:79:2e:b4:ed:c5:c2:74:cc:82: 6b:a2:88:72:fb:f2:b5:30:e8:26:db:fb:2d:9d:03: 29:b1:21:4b:0c:08:16:92:fa:48:a4:80:f1:90:e7: e2:84:31:28:8d:fd:43:72:36:04:73:2d:a7:42:cb: 5e:9e:36:c8:b4:14:af:0b:b7:b8:24:13:83:7c:05: f2:05:57:7e:4c:22:7b:be:24:b5:8c:0b:04:83:77: 5e:76:2f:bd:f9:9c:fb:47:40:e4:dc:80:ff:e6:57: af:2d:88:4b:70:ba:8f:8a:0b:7d:93:82:a0:35:ab: 41:76:c5:d8:5a:30:24:44:1c:bc:86:c2:0d:91:37: 57:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:34:19:89:82:2C:02:03:D5:D7:5E:DB:16:66:FF:0D:94:03:C3:E4 X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:89:cf:a1:5e:12:a0:3e:ff:a0:6b:31:d1:c7:da:cb:dc:84: 4e:21:7b:f2:e1:53:ce:d2:4b:1f:ba:12:a1:cb:9a:b3:74:0c: c2:39:97:a3:f2:16:9b:34:c4:33:25:22:7d:ce:bb:54:34:65: 63:80:d3:38:05:42:e0:fe:cb:79:57:76:31:21:fd:e9:c0:7b: 89:57:f8:89:41:e3:19:62:ce:46:93:69:a3:10:de:04:c5:6b: 43:86:89:36:9b:3d:ff:b4:c6:b0:c2:35:83:06:c6:0d:ed:e4: d4:cf:ca:2c:f9:63:98:b3:3b:62:a9:e0:8a:4e:ff:e3:25:2e: 3b:69:26:82:d7:d7:18:75:56:d0:74:b4:a1:86:68:e6:79:1e: e5:24:dd:c7:4c:09:52:e8:77:c7:e4:de:37:ec:83:e6:49:0f: 0e:2c:78:57:ea:55:9b:25:ef:54:21:0a:d9:ea:b7:09:e9:f2: 97:66:a9:cf:d1:d8:b6:ec:f0:1e:c9:02:aa:52:83:c4:be:53: 23:4f:dd:28:d5:fb:e9:a7:c6:1e:0d:fa:97:19:7f:15:ab:60: a3:31:66:fa:da:8d:f6:cf:69:2b:75:cb:43:ca:b5:09:f8:d6: 0a:34:9d:97:99:06:b5:04:63:bf:50:24:9e:41:40:2e:aa:4f: b4:0f:64:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaV7U7cMOacpPVkHR2ZTuTdvz78UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNTExMDMwMzE3MDZaFw0yNTExMDYwMzM2MDZaMDMxMTAvBgNV BAMTKDc2MzQxOTg5ODIyQzAyMDNENUQ3NUVEQjE2NjZGRjBEOTQwM0MzRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHXNUkuMUoRjYw8v3wh2UsQK0 ENJjP5ri+68rfOPToaHQKOzdLPAuPJSxW/gmc//4abCC3m3pnR8RdtRTny8XxhIe 3L72PPXAUmfbgntpFC3mDwFvlrwRh8EymY4rWkK5rxN5VXAeyX6Jr6+Dclg9E8Mt qQMW9YABp+q8WnkutO3FwnTMgmuiiHL78rUw6Cbb+y2dAymxIUsMCBaS+kikgPGQ 5+KEMSiN/UNyNgRzLadCy16eNsi0FK8Lt7gkE4N8BfIFV35MInu+JLWMCwSDd152 L735nPtHQOTcgP/mV68tiEtwuo+KC32TgqA1q0F2xdhaMCREHLyGwg2RN1exAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdjQZiYIsAgPV117bFmb/DZQDw+QwHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANmJz6FeEqA+/6BrMdHH2svchE4he/LhU87S Sx+6EqHLmrN0DMI5l6PyFps0xDMlIn3Ou1Q0ZWOA0zgFQuD+y3lXdjEh/enAe4lX +IlB4xlizkaTaaMQ3gTFa0OGiTabPf+0xrDCNYMGxg3t5NTPyiz5Y5izO2Kp4IpO /+MlLjtpJoLX1xh1VtB0tKGGaOZ5HuUk3cdMCVLod8fk3jfsg+ZJDw4seFfqVZsl 71QhCtnqtwnp8pdmqc/R2Lbs8B7JAqpSg8S+UyNP3SjV++mnxh4N+pcZfxWrYKMx ZvrajfbPaSt1y0PKtQn41go0nZeZBrUEY79QJJ5BQC6qT7QPZNk= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:25 2025 by rpki-client