$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json) Hash identifier: PVkcr9fOKOsTaCARMyRMt5SrNk54CHYEqaNgFnJ+VFA= Subject key identifier: 68:FC:3E:AE:52:C5:3A:0F:DD:EA:18:B1:43:7E:36:76:5F:01:75:3F Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Certificate serial: 7FC15A4AC30F154F5603620D5FB06F367EA07A06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft Manifest number: 0376 Signing time: Tue 05 Aug 2025 23:50:59 +0000 Manifest this update: Tue 05 Aug 2025 23:45:59 +0000 Manifest next update: Sat 09 Aug 2025 07:39:59 +0000 Files and hashes: 1: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: LeAX921PuFORgks79ePG8mv8iLwlKYZRHuQBuRA29no=) 2: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: 1fzbZytYgjM3iPln0vgylsCu/w6rnlFhuHd1ATG6CeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c1:5a:4a:c3:0f:15:4f:56:03:62:0d:5f:b0:6f:36:7e:a0:7a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Validity Not Before: Aug 5 23:45:59 2025 GMT Not After : Aug 9 07:39:59 2025 GMT Subject: CN=68FC3EAE52C53A0FDDEA18B1437E36765F01753F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:1b:0a:bf:2a:8f:01:79:5a:60:dc:83:5c: 9e:05:05:ad:08:70:93:a2:6b:a5:dd:16:52:0b:03: 8c:e2:ac:6f:a1:b4:7a:50:d2:4e:32:11:74:88:c4: d6:2c:e9:ea:22:69:14:c2:17:fd:31:70:88:cf:5e: 0a:2a:c8:2e:50:d7:9d:5c:5d:06:df:27:5b:59:14: 25:22:1d:df:cc:77:23:2a:77:d7:69:3c:5f:99:85: 2f:81:a9:13:45:5b:b6:fe:cf:1b:3a:5b:8f:9d:2d: bb:76:7c:52:fd:67:e9:e4:4d:14:f0:4c:3f:8c:55: 79:5c:4d:ea:53:4d:47:53:64:d2:a6:a6:e0:a5:f5: 17:c4:1b:d3:a5:1e:f1:19:26:d6:b9:72:e4:31:34: d9:e4:25:b9:3d:54:04:fa:77:3b:82:65:da:fe:91: ed:7f:d2:48:cf:1a:00:93:63:8b:e6:c0:64:d0:70: 50:29:84:0b:6f:48:d4:f9:88:41:2b:5a:56:89:05: 7c:8b:31:b9:7d:4f:f3:d9:91:ee:63:25:6b:f9:69: 3b:1e:ce:66:0f:25:2b:e8:9f:65:b5:fe:64:e7:bb: 9b:1e:bf:7b:74:4c:df:91:32:18:b6:78:60:2c:b5: 43:c5:68:36:7e:99:d4:bc:59:b2:a6:4b:ca:6a:98: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FC:3E:AE:52:C5:3A:0F:DD:EA:18:B1:43:7E:36:76:5F:01:75:3F X509v3 Authority Key Identifier: keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:28:1c:5b:96:5a:35:81:73:8a:15:c2:e7:52:c8:0d:2a:f1: 71:99:61:98:a7:fb:1f:f9:46:5e:41:aa:5a:ec:a4:46:6a:97: f6:ab:5d:35:e7:28:a0:3f:7b:6d:08:7e:33:09:21:c6:bb:d7: 36:25:e9:e4:12:a0:9b:a8:02:76:1d:59:6c:47:b1:f6:6b:05: ee:16:d9:98:fc:35:dd:b3:38:21:39:74:82:c1:53:05:b9:ce: e0:ab:16:49:f8:d6:a5:8e:0b:9e:a6:70:00:d8:b6:f5:c3:71: f6:8b:63:b0:f3:8b:4f:3b:36:bb:90:47:b1:e1:ef:3d:e5:57: 87:e6:9d:3e:48:ac:5e:b1:c8:69:fa:bf:61:3f:dd:ce:7a:f2: c1:94:e1:3e:29:4a:63:31:06:1c:1a:fe:06:13:f8:bb:9d:c4: db:bd:d5:dc:f1:ec:10:74:10:46:2c:e9:3c:8e:9a:96:f6:de: 12:f5:50:95:82:ef:58:64:2a:c2:0b:04:a7:7b:3f:d4:73:20: 47:8e:6e:db:6f:76:c3:33:1d:65:2d:d9:ee:7d:87:d7:96:f9: b7:2a:d1:1f:8e:c8:a5:7e:1f:b2:10:6c:76:1e:c6:49:ec:6a: e7:5f:1e:fe:35:44:65:92:4f:7e:52:54:de:ad:57:74:ec:4f: 0e:6d:a6:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8FaSsMPFU9WA2INX7BvNn6gegYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5 NzE0MjZGRTAeFw0yNTA4MDUyMzQ1NTlaFw0yNTA4MDkwNzM5NTlaMDMxMTAvBgNV BAMTKDY4RkMzRUFFNTJDNTNBMEZEREVBMThCMTQzN0UzNjc2NUYwMTc1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKRsKvyqPAXlaYNyDXJ4FBa0I cJOia6XdFlILA4zirG+htHpQ0k4yEXSIxNYs6eoiaRTCF/0xcIjPXgoqyC5Q151c XQbfJ1tZFCUiHd/MdyMqd9dpPF+ZhS+BqRNFW7b+zxs6W4+dLbt2fFL9Z+nkTRTw TD+MVXlcTepTTUdTZNKmpuCl9RfEG9OlHvEZJta5cuQxNNnkJbk9VAT6dzuCZdr+ ke1/0kjPGgCTY4vmwGTQcFAphAtvSNT5iEErWlaJBXyLMbl9T/PZke5jJWv5aTse zmYPJSvon2W1/mTnu5sev3t0TN+RMhi2eGAstUPFaDZ+mdS8WbKmS8pqmCHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPw+rlLFOg/d6hixQ342dl8BdT8wHwYDVR0j BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1 REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0 MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkoHFuWWjWBc4oVwudSyA0q8XGZYZin+x/5 Rl5BqlrspEZql/arXTXnKKA/e20IfjMJIca71zYl6eQSoJuoAnYdWWxHsfZrBe4W 2Zj8Nd2zOCE5dILBUwW5zuCrFkn41qWOC56mcADYtvXDcfaLY7Dzi087NruQR7Hh 7z3lV4fmnT5IrF6xyGn6v2E/3c568sGU4T4pSmMxBhwa/gYT+LudxNu91dzx7BB0 EEYs6TyOmpb23hL1UJWC71hkKsILBKd7P9RzIEeObttvdsMzHWUt2e59h9eW+bcq 0R+OyKV+H7IQbHYexknsaudfHv41RGWST35SVN6tV3TsTw5tpio= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:54 2025 by rpki-client