$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft File: C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json) Hash identifier: /g7x1KIg4fFhrbpQKmJPkjYJsjgUXgOQ7uYt0kiIP6w= Subject key identifier: E6:E1:A1:D0:3E:39:D4:3D:94:21:82:02:39:23:11:18:75:5B:B6:CD Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 4E2499524C9D245C903538E6915CF78742D4B15D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft Manifest number: 04E2 Signing time: Fri 06 Jun 2025 13:51:53 +0000 Manifest this update: Fri 06 Jun 2025 13:46:53 +0000 Manifest next update: Mon 09 Jun 2025 21:55:53 +0000 Files and hashes: 1: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: okeDaf7d0Xuvp8xnTxJzUWPegOkeMCYHPs8G9yAmQ6Y=) 2: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: v8Ura1+eBq+2OqG8/kTwBerHJ8k6hD6+M++lTSstoyQ=) 3: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: oediRSUfrbiKHZ+4lfJc75ZOQTevxDBy4CNqy2qW3Ec=) 4: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: Cpr5xYTkNb6GEJUfrbLB6Ih2u86v1ZHFmVVPR6riK70=) 5: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: UQj5o2r9jrF7gwD6zEDeivAaIC1EoryECU1Z4pufDeg=) 6: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: 25bjKMZwqQbYi5jKvGEGUrT2NIQ4GwrYcOU6Y3FnIcI=) 7: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 6LyyJJeV4MUKQUmSmy0p8Z51yI1Vj4eAExDWuf2DxM8=) 8: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: trFC+pX4oMn7rw9va8+zapompho+fZFvfIyOd+ou6p0=) 9: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: /NJYIz5c5OxCtCzAI9eMSZnnK2DRsoEPFpGekXPN3/Y=) 10: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: U4Kz+JMqmBXXJWJ51q9GFdWYnPA1z7UpadwESZtmyoA=) 11: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: B9qLkdqrOWwVF5tA2jsrqX21V3LrtEAcPvXr3jC/ETM=) 12: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:24:99:52:4c:9d:24:5c:90:35:38:e6:91:5c:f7:87:42:d4:b1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Jun 6 13:46:53 2025 GMT Not After : Jun 9 21:55:53 2025 GMT Subject: CN=E6E1A1D03E39D43D9421820239231118755BB6CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:c5:33:9f:a3:e0:5c:4a:3a:e6:e7:59:b4: ac:c8:94:81:94:5a:4c:17:b5:1d:76:bc:a6:59:ea: 83:a3:89:d3:a3:51:0b:25:56:30:bb:19:5e:6e:63: 82:80:34:81:9a:07:62:e1:55:02:b7:0c:06:34:c6: e4:d4:b1:cf:04:e4:bb:74:ca:1b:1b:e8:b8:d2:df: d4:f3:24:e5:d4:97:e5:dc:d4:20:f5:69:2a:a4:5c: 4a:ae:13:01:df:fe:ad:b7:2f:5a:56:e4:22:70:f1: 48:6f:fb:04:c9:09:95:88:66:f8:7d:29:77:f7:e6: ec:0b:f3:7c:ed:27:43:ad:97:62:7e:c2:1b:03:70: e7:41:f9:a4:3a:ee:42:0d:f5:32:1f:b4:5d:e8:82: 36:35:1f:5d:c5:79:c4:05:ec:3a:25:a2:07:a1:93: a2:f9:25:8c:e2:9e:64:f6:78:bf:19:28:2e:b9:0c: 37:e2:cd:e6:2a:92:70:f6:8c:9d:4a:a1:40:88:92: e1:77:7b:f0:d9:81:62:f4:e8:6f:40:33:69:dc:4c: 4d:c7:ba:e0:16:dd:77:ca:92:76:19:3c:b9:62:08: 16:08:c1:99:a8:ce:3f:3f:c9:91:b8:c2:c4:69:5d: 40:f0:96:ca:21:ea:2c:0f:73:da:72:4f:50:6c:69: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E1:A1:D0:3E:39:D4:3D:94:21:82:02:39:23:11:18:75:5B:B6:CD X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:42:79:16:c2:64:f9:99:8a:2c:21:41:90:1e:f5:a5:90:ac: 61:e4:28:86:8c:d2:7e:a3:01:75:d5:06:e6:48:8f:e3:1e:fb: 46:1f:bf:12:d3:35:55:87:73:96:56:eb:bc:6f:48:d3:41:6f: 42:21:e4:f3:6f:66:57:d0:b4:cf:df:40:fb:0b:a1:4e:dc:45: 7b:f2:43:27:d3:82:a0:9a:45:c9:7d:af:85:1b:65:87:09:62: 4a:65:f0:e3:3c:89:bb:e2:95:ee:f1:58:dd:70:26:1d:b5:2c: 8d:82:bb:ed:17:01:60:07:56:f2:27:82:c6:11:b8:ad:ed:56: 91:24:e2:61:b5:85:f4:a3:e2:1c:f0:2b:bd:17:52:5b:06:84: 1e:d5:8f:2d:31:47:0e:bd:dd:2f:f0:d6:df:0c:9c:a8:84:59: b0:3b:16:3f:83:aa:b7:da:b7:9b:59:1b:8e:85:a9:d2:6b:c5: 9a:cd:8e:3d:00:55:19:17:e3:dd:83:12:93:f8:ec:f1:66:7e: e6:77:9d:08:03:80:d1:6d:ea:b7:7b:40:bc:e8:6a:72:91:c0: 8f:b0:35:1a:e1:e8:77:63:82:55:1a:ea:03:55:18:9c:43:5a: be:89:e4:e7:6a:82:3f:66:38:3f:6c:c3:c6:f7:66:ed:61:91: 87:81:53:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTiSZUkydJFyQNTjmkVz3h0LUsV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yNTA2MDYxMzQ2NTNaFw0yNTA2MDkyMTU1NTNaMDMxMTAvBgNV BAMTKEU2RTFBMUQwM0UzOUQ0M0Q5NDIxODIwMjM5MjMxMTE4NzU1QkI2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6n8Uzn6PgXEo65udZtKzIlIGU WkwXtR12vKZZ6oOjidOjUQslVjC7GV5uY4KANIGaB2LhVQK3DAY0xuTUsc8E5Lt0 yhsb6LjS39TzJOXUl+Xc1CD1aSqkXEquEwHf/q23L1pW5CJw8Uhv+wTJCZWIZvh9 KXf35uwL83ztJ0Otl2J+whsDcOdB+aQ67kIN9TIftF3ogjY1H13FecQF7Dologeh k6L5JYzinmT2eL8ZKC65DDfizeYqknD2jJ1KoUCIkuF3e/DZgWL06G9AM2ncTE3H uuAW3XfKknYZPLliCBYIwZmozj8/yZG4wsRpXUDwlsoh6iwPc9pyT1BsaS+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5uGh0D451D2UIYICOSMRGHVbts0wHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgw MDgzQjI3MUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpCeRbCZPmZiiwhQZAe9aWQrGHkKIaM0n6j AXXVBuZIj+Me+0YfvxLTNVWHc5ZW67xvSNNBb0Ih5PNvZlfQtM/fQPsLoU7cRXvy QyfTgqCaRcl9r4UbZYcJYkpl8OM8ibvile7xWN1wJh21LI2Cu+0XAWAHVvIngsYR uK3tVpEk4mG1hfSj4hzwK70XUlsGhB7Vjy0xRw693S/w1t8MnKiEWbA7Fj+Dqrfa t5tZG46FqdJrxZrNjj0AVRkX492DEpP47PFmfuZ3nQgDgNFt6rd7QLzoanKRwI+w NRrh6HdjglUa6gNVGJxDWr6J5Odqgj9mOD9sw8b3Zu1hkYeBU98= -----END CERTIFICATE-----Generated at Sun Jun 8 23:26:58 2025 by rpki-client