$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: cvGOHv4/jnidnqHP9xfO2TZgGnP/1vsEERpG8RVVWRs= Subject key identifier: 52:EE:F3:B4:5F:D4:ED:38:F7:ED:49:B8:28:D8:0E:12:E6:7D:83:5D Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 4AD8045413CC1606C50C444B321298D57F4C490D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 04BC Signing time: Fri 04 Apr 2025 10:02:12 +0000 Manifest this update: Fri 04 Apr 2025 09:57:12 +0000 Manifest next update: Mon 07 Apr 2025 19:21:12 +0000 Files and hashes: 1: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: CpzM+132Mdd3sT2ikka6T6ZIOzo9cPs9M0vsLY9AeJk=) 2: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: UxQCsgWlY3QpFq1pdcLc7mTlzysN0vxqNs3EwVx5g7Q=) 3: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: QxyQgV8yqz3LxaWii/QxxyGdg0KqjSEAWOUCITDyK+M=) 4: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: fZNdjy6FWwzUM+HjWW74emrC0elfOnysiClW8aiKmPg=) 5: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: 4wQzrm+i1v5qUyVKJjkO7HH+MEjS5+U+8152BYfrVKI=) 6: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: 9NG/Yjd4ns/fe6kRQ2zXrC2LwE2Hn3M1Mq9GCX6ZS/M=) 7: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: n4/mD+LWp/R6YRXcqrg7JkDRjfGUVfKc3IbAGoqD0ik=) 8: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: g5FKXh+RNZYScR1iwqZYdSxRJgAVq9w8f1edizZYibI=) 9: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: p2LmSRom1+ALbzIyY6UMyaBCsRycEfpY+T5lbdUMTIY=) 10: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: u1lfWy0MDbubQseV6f0yVaeg4S5wTkc4cbrHCMmY4Yw=) 11: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: BP0AeJlnMA+XRGEXxT99QFoW9Wzi6NF/eulYtYsPBdM=) 12: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: Hs35c6RHToYi6qvTeTc31yFLqwStwmhd6QBjMnOffHI=) 13: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: eXs+87LW5capRr4Eu/VfiLH0QanrLfFdJwQsIClY1h8=) 14: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: bi9uA3JKqeELOUi1PoLxXB/NKB06leF/UebSioChmVE=) 15: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: 61cygP0rj8IkPbdSH8JyllzFRqUqP5ARgAki2TQCxmc=) 16: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: F4/KJVXNTNm34izb7glpnGYFHc3KADsusKQ08aViHLM=) 17: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: IeWFMtaqBJBeKUmZ02yFo5+6S+FKc1ivLw4CgOr9f/Y=) 18: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: fZbow80lbl1tUzdeRLpipyro+0U3YnVmm12lQWkFbpg=) 19: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: RJTWv9SLXQPTYC3rzNVUwhTDGWcwVd5YntQvTlNXrzU=) 20: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: 7d6L1YnpzkSH3cjd/bratlHXMkaO39mRUgOEKpnPFL4=) 21: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: BVHhLw4FPK1vqQDyfVN+1KiFI7Lyj5alPUEWE2nPcvk=) 22: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: e/yjVod/7lR4uj/RENV7JfH5TX+LSB9hPgqV7eSiKp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d8:04:54:13:cc:16:06:c5:0c:44:4b:32:12:98:d5:7f:4c:49:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Apr 4 09:57:12 2025 GMT Not After : Apr 7 19:21:12 2025 GMT Subject: CN=52EEF3B45FD4ED38F7ED49B828D80E12E67D835D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:72:a4:94:8d:3e:75:e7:ff:98:ac:6f:c7: 50:9b:a7:7a:06:d3:f1:16:5a:d9:5c:58:fc:ab:d7: e7:ed:6a:f9:15:48:28:09:3b:ac:1f:8b:b4:aa:b3: c7:5a:f2:88:d4:98:c5:a0:9c:7d:a9:a1:ad:38:35: 08:d4:96:70:db:67:59:a1:8d:05:8a:c6:9b:aa:a8: ce:85:49:55:d8:57:4f:4b:b5:65:13:4d:9c:c3:48: ac:89:2b:65:c9:96:4f:ca:e4:f3:a3:4f:f2:eb:04: cf:ce:95:e6:63:c4:34:8e:99:6c:11:ab:99:07:dd: f4:c9:b5:9e:04:66:72:b0:d6:00:a0:f7:65:17:69: 2f:5d:06:7f:9a:c8:3c:57:2b:ed:4f:fc:ab:94:cd: f3:e8:19:e6:1f:a4:63:11:05:30:59:77:80:23:f1: 42:e1:2c:5e:27:f4:f1:0b:8f:ce:c7:5a:c1:e9:53: 85:f8:1d:d3:95:41:80:7d:80:d8:76:ed:26:e7:48: b5:1e:a4:60:7b:30:dd:8d:14:95:86:97:3a:ae:80: b2:e6:3a:b5:de:6a:ea:bc:e6:41:aa:5e:ca:2c:87: 98:19:5b:58:98:a0:08:5b:42:1d:62:06:d1:64:47: bc:02:71:a1:be:a3:38:11:a2:d8:06:67:05:4c:ac: ec:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EE:F3:B4:5F:D4:ED:38:F7:ED:49:B8:28:D8:0E:12:E6:7D:83:5D X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:be:cd:43:54:98:07:85:65:2b:74:8f:fa:08:d8:fa:15:4e: 25:03:d5:30:17:8e:56:40:b7:27:9c:9a:20:f3:ce:40:3b:9e: 52:d3:1c:fd:bd:96:93:df:c6:e7:43:8b:04:27:40:bb:f7:14: 47:13:f2:1e:f6:6b:f9:c3:6b:d6:62:70:12:7f:d8:b5:07:8c: 8d:fe:50:48:84:62:15:bc:70:b3:94:51:37:e0:15:15:b5:63: 66:37:bc:90:0a:d5:e4:ae:f8:c6:f1:6e:57:41:37:d4:eb:eb: 30:d3:73:c7:60:4f:3a:83:54:25:57:92:f3:b8:72:d0:d6:bf: a0:17:c1:e3:07:f1:45:18:07:83:99:9e:85:be:d1:ce:a7:87: 54:92:f7:d8:0f:2c:a7:8c:22:dd:8a:dc:d4:c0:2c:28:ad:37: 5a:f7:3f:4e:b0:7c:cb:66:54:de:ea:ac:07:bc:29:8e:37:35: 21:1c:df:12:2b:a1:5f:18:01:a6:cf:59:df:5c:ac:01:f8:34: a1:68:ad:b1:fd:cf:3c:44:a2:e4:97:bd:fa:f7:30:04:37:22: cc:7f:00:e8:df:b6:ca:81:03:ad:8b:2c:49:1e:13:4a:7c:80: 75:73:fd:d6:27:23:e0:88:7e:99:94:a1:ee:47:54:c1:d9:b6: 01:28:98:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStgEVBPMFgbFDERLMhKY1X9MSQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA0MDQwOTU3MTJaFw0yNTA0MDcxOTIxMTJaMDMxMTAvBgNV BAMTKDUyRUVGM0I0NUZENEVEMzhGN0VENDlCODI4RDgwRTEyRTY3RDgzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIoXKklI0+def/mKxvx1Cbp3oG 0/EWWtlcWPyr1+ftavkVSCgJO6wfi7Sqs8da8ojUmMWgnH2poa04NQjUlnDbZ1mh jQWKxpuqqM6FSVXYV09LtWUTTZzDSKyJK2XJlk/K5POjT/LrBM/OleZjxDSOmWwR q5kH3fTJtZ4EZnKw1gCg92UXaS9dBn+ayDxXK+1P/KuUzfPoGeYfpGMRBTBZd4Aj 8ULhLF4n9PELj87HWsHpU4X4HdOVQYB9gNh27SbnSLUepGB7MN2NFJWGlzqugLLm OrXeauq85kGqXsosh5gZW1iYoAhbQh1iBtFkR7wCcaG+ozgRotgGZwVMrOwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUu7ztF/U7Tj37Um4KNgOEuZ9g10wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIy+zUNUmAeFZSt0j/oI2PoVTiUD1TAXjlZA tyecmiDzzkA7nlLTHP29lpPfxudDiwQnQLv3FEcT8h72a/nDa9ZicBJ/2LUHjI3+ UEiEYhW8cLOUUTfgFRW1Y2Y3vJAK1eSu+MbxbldBN9Tr6zDTc8dgTzqDVCVXkvO4 ctDWv6AXweMH8UUYB4OZnoW+0c6nh1SS99gPLKeMIt2K3NTALCitN1r3P06wfMtm VN7qrAe8KY43NSEc3xIroV8YAabPWd9crAH4NKForbH9zzxEouSXvfr3MAQ3Isx/ AOjftsqBA62LLEkeE0p8gHVz/dYnI+CIfpmUoe5HVMHZtgEomDM= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:53 2025 by rpki-client