$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: H7u3j4mKS/TdD21erqmCDsvmK0BLyL9xuZ2ybRG3f1M= Subject key identifier: 65:83:C3:F1:30:D3:04:73:86:DC:B1:90:5A:78:8C:8E:DE:45:9F:D9 Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 59E27C36FEEA8DE0B59C47BD700E1C823D99DF85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 03B1 Signing time: Mon 28 Apr 2025 12:40:58 +0000 Manifest this update: Mon 28 Apr 2025 12:35:58 +0000 Manifest next update: Thu 01 May 2025 21:17:58 +0000 Files and hashes: 1: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: vLvWlw3ZaCvPrXLgJPoOYVx98iEdgUYUquEz4jG9ugA=) 2: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: v3ySroBCN4sNfccDqvHcUatzXZPBnzr9Qki2+Ib+sWs=) 3: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 7Js1TyGNcS10xLqVcx42bTRAyDqI+vbwGTKy3EKX8TA=) 4: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: wBuDQDFXKY9G8FF8L1EDMdPf10b4t48te0hIV48CjDg=) 5: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: Obz+kIW4kZ8yIocJl2sLrn0k0oolS6gTe486AAuHOv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e2:7c:36:fe:ea:8d:e0:b5:9c:47:bd:70:0e:1c:82:3d:99:df:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: Apr 28 12:35:58 2025 GMT Not After : May 1 21:17:58 2025 GMT Subject: CN=6583C3F130D3047386DCB1905A788C8EDE459FD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:1f:33:72:45:2e:5b:61:d6:5e:39:1f:03: d0:75:3e:f2:7e:c6:77:8d:4b:25:a0:9a:94:45:be: 53:14:f3:c9:84:94:55:d0:80:1d:eb:97:f9:e9:53: 3c:75:eb:86:85:23:93:aa:37:98:49:12:ca:ac:fc: fd:4c:fc:40:8e:9c:3f:88:c5:70:b6:d4:21:6f:73: 73:5c:88:df:c3:ff:2e:9f:b9:e5:94:4f:7e:e7:41: 1a:d8:2c:ff:03:bc:70:a1:60:ce:85:98:8f:6c:18: 6c:8a:a6:31:96:c5:2d:23:5f:10:3e:49:f0:19:02: c0:32:8a:c1:2c:cc:c1:4f:5e:9e:86:c8:47:4c:f1: 16:1c:55:91:7e:26:b2:96:6d:1c:7b:87:cc:ff:5d: 4b:74:dd:7f:df:c9:b2:36:a7:e1:63:6a:f9:21:84: 38:13:4f:d9:d4:e2:00:41:35:d1:8f:77:b5:d1:33: 73:22:96:75:6a:5d:55:cf:d4:1c:9c:1f:a6:e2:8b: f5:79:c9:12:8a:3d:37:a9:e8:27:3e:23:a1:19:7c: 16:d2:7a:56:0c:96:6d:07:f6:80:e8:c6:da:e3:72: cf:ba:f4:4e:93:c6:c8:42:b7:3d:27:b8:08:7c:5b: d3:da:74:6a:c7:77:46:3d:9d:29:a7:c8:42:04:68: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:83:C3:F1:30:D3:04:73:86:DC:B1:90:5A:78:8C:8E:DE:45:9F:D9 X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:52:4c:47:86:af:1d:87:18:8a:f6:fb:27:a4:a7:96:44:aa: b8:84:e9:45:1c:14:7e:49:4e:d0:22:ce:72:cc:c4:47:db:1d: ba:78:84:10:6a:15:4d:aa:b8:ce:79:9c:80:8d:02:ef:0c:7e: 04:79:06:11:cb:fb:21:4f:f8:98:01:69:32:0b:c7:35:b4:bb: e5:0e:af:a0:30:34:44:d7:f2:28:05:92:b2:5c:f4:2e:46:2f: 33:80:a9:c0:ec:7e:6e:68:d8:30:0c:b5:ca:3c:a1:60:1d:91: 2b:7e:40:05:59:64:7b:31:3b:60:1c:11:f2:3c:42:ca:1b:94: 57:84:7d:8d:56:a7:fe:e4:3e:e0:6a:e1:e7:66:70:7a:34:51: c8:7c:54:ff:b4:5e:03:a5:cb:21:d5:8c:ce:12:a9:c4:61:5c: 7c:b3:c8:e6:8d:90:17:4f:06:6f:39:9a:c2:c2:21:c5:59:fd: f4:d0:e7:b9:68:49:51:b5:d2:f5:80:5b:9c:e3:f8:ab:96:9b: 7d:b4:58:a1:e0:50:3a:7e:0d:07:02:c1:81:ab:6e:af:05:f0: 9a:84:e6:50:79:b2:93:b1:62:1d:c3:22:a5:52:d4:c9:d7:cd: a2:0a:59:46:1a:05:5a:b0:5a:6b:cf:e8:16:3e:5b:91:bd:65: b7:9b:10:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWeJ8Nv7qjeC1nEe9cA4cgj2Z34UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNTA0MjgxMjM1NThaFw0yNTA1MDEyMTE3NThaMDMxMTAvBgNV BAMTKDY1ODNDM0YxMzBEMzA0NzM4NkRDQjE5MDVBNzg4QzhFREU0NTlGRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54h8zckUuW2HWXjkfA9B1PvJ+ xneNSyWgmpRFvlMU88mElFXQgB3rl/npUzx164aFI5OqN5hJEsqs/P1M/ECOnD+I xXC21CFvc3NciN/D/y6fueWUT37nQRrYLP8DvHChYM6FmI9sGGyKpjGWxS0jXxA+ SfAZAsAyisEszMFPXp6GyEdM8RYcVZF+JrKWbRx7h8z/XUt03X/fybI2p+Fjavkh hDgTT9nU4gBBNdGPd7XRM3MilnVqXVXP1BycH6bii/V5yRKKPTep6Cc+I6EZfBbS elYMlm0H9oDoxtrjcs+69E6TxshCtz0nuAh8W9PadGrHd0Y9nSmnyEIEaBUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZYPD8TDTBHOG3LGQWniMjt5Fn9kwHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpSTEeGrx2HGIr2+yekp5ZEqriE6UUcFH5J TtAiznLMxEfbHbp4hBBqFU2quM55nICNAu8MfgR5BhHL+yFP+JgBaTILxzW0u+UO r6AwNETX8igFkrJc9C5GLzOAqcDsfm5o2DAMtco8oWAdkSt+QAVZZHsxO2AcEfI8 QsoblFeEfY1Wp/7kPuBq4edmcHo0Uch8VP+0XgOlyyHVjM4SqcRhXHyzyOaNkBdP Bm85msLCIcVZ/fTQ57loSVG10vWAW5zj+KuWm320WKHgUDp+DQcCwYGrbq8F8JqE 5lB5spOxYh3DIqVS1MnXzaIKWUYaBVqwWmvP6BY+W5G9ZbebEEI= -----END CERTIFICATE-----Generated at Wed Apr 30 12:59:28 2025 by rpki-client