$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft File: C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json) Hash identifier: UnfZh8TEB58WANzjXkGVOKbUhs2MeGOVVk6xU3QLYW0= Subject key identifier: CB:09:80:9C:E7:18:71:42:91:7A:0F:A0:C6:0C:96:99:D9:BF:51:69 Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Certificate serial: 7B43DDE1AA487B2E6DF15D13F66F3D8C6CBA9E7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft Manifest number: 04C6 Signing time: Sat 05 Apr 2025 12:21:51 +0000 Manifest this update: Sat 05 Apr 2025 12:16:51 +0000 Manifest next update: Tue 08 Apr 2025 18:28:51 +0000 Files and hashes: 1: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: uTl9aVzwoRIRN4r9ODabclqpD8VAIQOXJEwFukw6AVk=) 2: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: LDaXAABLhtl1BhdSQL3gnZp6zYgGd8zbkZKuuXq6sDA=) 3: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: syMxoH32sVPHfiuDKx0dcV1rG21CMB4OxA/QueWQFVc=) 4: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: wBLBDUdh07LdzKcER+85VSGx4INaTSdnz0TV+aqjGcU=) 5: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: 6VZzX0YiESZnq7W/qDaDzksalt2wCYKocwsLQFdZXQo=) 6: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 1ZelHO4wnEg2RIDtCEX6KWbjWC9EYuJWPm9Br4vygmk=) 7: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: Q1Rz82jyF2iXcYlmpIevH3AD1CwKwNbTyROfkzhv/WA=) 8: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: oediRSUfrbiKHZ+4lfJc75ZOQTevxDBy4CNqy2qW3Ec=) 9: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: Cpr5xYTkNb6GEJUfrbLB6Ih2u86v1ZHFmVVPR6riK70=) 10: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: 3USXw8ez8RZNEenM7OuFZfO+Brt8ZY4gbUlk5ir/lCI=) 11: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: U4Kz+JMqmBXXJWJ51q9GFdWYnPA1z7UpadwESZtmyoA=) 12: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: XMNJSs8YxVT0ObeBW2zlBs+d9PvXSdg+/CKeDfPtZNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 18:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:43:dd:e1:aa:48:7b:2e:6d:f1:5d:13:f6:6f:3d:8c:6c:ba:9e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E Validity Not Before: Apr 5 12:16:51 2025 GMT Not After : Apr 8 18:28:51 2025 GMT Subject: CN=CB09809CE7187142917A0FA0C60C9699D9BF5169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:db:ad:b7:1f:f8:c7:2d:81:31:ef:d7:19: 29:50:03:13:0e:73:4d:3b:f2:a3:10:06:25:74:a9: 2d:d6:5b:d9:7d:fc:fd:38:2c:25:ea:8e:b3:9b:1b: d2:10:04:08:34:97:7e:ff:4f:dd:bb:1f:3f:30:96: b7:c2:72:0c:69:f1:a4:f8:11:b0:d1:33:0e:27:c9: d7:29:a4:ba:3c:1d:95:31:de:d2:59:35:66:35:ae: bf:95:4b:8b:5a:0a:4e:af:82:37:e2:9f:9b:04:fb: 53:f4:4d:ee:78:53:e4:43:9d:6b:ec:78:fe:81:74: 2c:0a:22:95:7c:3e:bb:65:e5:0c:65:3b:b3:ff:15: 3d:04:ed:15:49:65:e0:15:c2:f6:57:71:84:e2:03: 3f:19:51:38:38:8b:47:6a:cd:6a:f7:04:3e:19:af: 3d:1a:0c:60:88:ae:ad:0c:77:82:0c:b6:52:14:65: 5a:1c:b6:09:2e:b3:fb:20:18:37:84:df:8e:8b:ca: 4c:e5:de:d5:15:12:b1:df:1c:c8:05:10:14:68:b7: a6:c2:6e:8d:46:dd:a1:c2:10:2e:97:1b:80:b5:69: 8e:99:25:e0:d0:b1:bf:a1:dc:90:86:ee:ff:1d:e8: 93:fb:21:c1:8b:44:46:d3:21:44:56:48:bd:0f:88: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:09:80:9C:E7:18:71:42:91:7A:0F:A0:C6:0C:96:99:D9:BF:51:69 X509v3 Authority Key Identifier: keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:29:a1:50:e0:c4:73:76:5c:3b:60:6a:ea:5f:4a:40:b3:fd: 5b:0a:f9:0c:48:d2:23:73:42:44:fe:f4:ad:97:97:70:9f:bd: 08:4f:92:5b:bf:0d:f0:45:4c:09:bb:26:a0:4a:93:d0:72:16: c8:28:7a:f4:1f:e0:2b:04:14:53:f7:89:ab:df:7a:5a:5c:32: a8:fe:42:3d:1e:3a:ee:a7:f7:f9:da:55:d9:fe:6b:1e:30:7b: aa:29:1d:6c:a3:7c:f8:a9:a6:a1:a7:d4:0e:d9:eb:aa:34:aa: 58:15:b8:db:6a:1d:cb:7d:09:3c:ae:a7:01:16:63:c6:66:a4: 68:2e:20:39:0a:d7:ea:21:95:16:be:18:ff:3c:10:f5:39:87: b0:27:15:8a:ff:9e:ef:f6:01:a3:f5:0b:d2:72:e9:b2:8b:6e: bc:82:35:16:17:59:d9:fb:d7:b0:8d:6a:9c:ef:3d:ef:19:bb: 36:17:14:bb:6a:ed:a4:ab:0a:6c:02:03:99:ae:c0:4b:7d:4d: 71:06:fc:c1:e4:f9:d0:1c:23:a2:4c:c0:b5:b4:55:bb:3f:d0: 52:e5:65:8d:c1:3d:a0:3b:1b:02:d0:c8:c0:24:3e:ac:14:f4: 96:68:43:36:fc:30:c6:f7:e3:c9:95:43:91:9a:09:f6:4d:3b: 2a:e4:a4:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0Pd4apIey5t8V0T9m89jGy6nnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz QjI3MUUzRTAeFw0yNTA0MDUxMjE2NTFaFw0yNTA0MDgxODI4NTFaMDMxMTAvBgNV BAMTKENCMDk4MDlDRTcxODcxNDI5MTdBMEZBMEM2MEM5Njk5RDlCRjUxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uNuttx/4xy2BMe/XGSlQAxMO c0078qMQBiV0qS3WW9l9/P04LCXqjrObG9IQBAg0l37/T927Hz8wlrfCcgxp8aT4 EbDRMw4nydcppLo8HZUx3tJZNWY1rr+VS4taCk6vgjfin5sE+1P0Te54U+RDnWvs eP6BdCwKIpV8Prtl5QxlO7P/FT0E7RVJZeAVwvZXcYTiAz8ZUTg4i0dqzWr3BD4Z rz0aDGCIrq0Md4IMtlIUZVoctgkus/sgGDeE346Lykzl3tUVErHfHMgFEBRot6bC bo1G3aHCEC6XG4C1aY6ZJeDQsb+h3JCG7v8d6JP7IcGLREbTIURWSL0PiKlTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywmAnOcYcUKReg+gxgyWmdm/UWkwHwYDVR0j BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3 RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3 MUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi OTQtNWM1ZTc0ODgyNTQ3LzAvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgw MDgzQjI3MUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADopoVDgxHN2XDtgaupfSkCz/VsK+QxI0iNz QkT+9K2Xl3CfvQhPklu/DfBFTAm7JqBKk9ByFsgoevQf4CsEFFP3iavfelpcMqj+ Qj0eOu6n9/naVdn+ax4we6opHWyjfPippqGn1A7Z66o0qlgVuNtqHct9CTyupwEW Y8ZmpGguIDkK1+ohlRa+GP88EPU5h7AnFYr/nu/2AaP1C9Jy6bKLbryCNRYXWdn7 17CNapzvPe8ZuzYXFLtq7aSrCmwCA5muwEt9TXEG/MHk+dAcI6JMwLW0Vbs/0FLl ZY3BPaA7GwLQyMAkPqwU9JZoQzb8MMb348mVQ5GaCfZNOyrkpBQ= -----END CERTIFICATE-----Generated at Sun Apr 6 14:59:23 2025 by rpki-client