$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft File: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json) Hash identifier: oS1QcZUtj/p1oT+WHdCbCxlmfenyeraVMurd7bAmbHk= Subject key identifier: 3A:BC:45:4A:02:87:E8:88:85:FC:F3:A3:57:5A:E8:E7:BB:25:0B:51 Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 Certificate issuer: /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Certificate serial: 01BE3BAD2F5BD266D877E191B913B9AFDC63AE8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft Manifest number: 04C3 Signing time: Wed 16 Apr 2025 17:41:40 +0000 Manifest this update: Wed 16 Apr 2025 17:36:40 +0000 Manifest next update: Sat 19 Apr 2025 22:44:40 +0000 Files and hashes: 1: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: J9LMzNjTfq8117LmMgk4XK1mYRtXVZzkGAU9iFEulaM=) 2: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: ZDywncesSAjMu6O/tvcMI1s4FDR1nuIEwpOi5m0PtTE=) 3: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: RTIwq7shR7bXdamWXaTuuLysxlJ3zoLqtpVO/z6TjXA=) 4: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: f3iCk3LjLjEMoJPF3LFNtbgYp3UzsumaaaJ0MXf+xdI=) 5: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: ZwR9FjboZAZDVU/wKbYd21qYjHtnOrshCk3dUigmn3Y=) 6: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EK6IOQrf2rr4CozcXpyHn0lnKDzMTXzhLY1ojyQBefA=) 7: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: Ljte3plUxakf1AvmLvyn5ZBd+3DR/9Jpvk/gL8v2UXA=) 8: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: p56aDnFiB/sHhi4D9oPCP6BupyFFvyZDIPu2wfqqfRI=) 9: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: 5lHQNRH9ZyHtRlqVq3mhv2CF0AIKUXgULtiM3hQL6BM=) 10: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: 4fgr8pnAQyhzmUnk9mguo5zm84SrVO1dIjnC4wxY3dM=) 11: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: T+yapwp5QGXsxQhFVsHxlunfmKhkS4XZ6Y2fP7p1m/U=) 12: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: qkSNUdJkDxdqKObXFqJ7YGM+qaLs/AFZbanOaV69gsQ=) 13: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: DPT2KnFo+j/wGnEOe0FeHMRN87ddzlG5/+viaBnBaYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:be:3b:ad:2f:5b:d2:66:d8:77:e1:91:b9:13:b9:af:dc:63:ae:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Validity Not Before: Apr 16 17:36:40 2025 GMT Not After : Apr 19 22:44:40 2025 GMT Subject: CN=3ABC454A0287E88885FCF3A3575AE8E7BB250B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:35:78:31:22:fe:34:1a:76:7e:34:19:71:40: bc:f4:7d:cc:04:25:2b:94:6c:c5:15:bf:49:10:8b: c4:cd:87:db:71:9b:63:89:8b:3f:06:d2:12:2b:b5: 01:0f:6f:72:90:03:02:b5:4d:85:1b:f5:46:7a:55: 29:7d:2e:12:25:ab:a2:be:6c:4f:0b:8a:7e:9e:87: 20:69:de:ac:60:06:39:c3:0d:50:1d:2f:d0:a9:89: d5:33:d0:86:38:a8:34:88:b0:d1:da:3c:1b:08:89: 44:b7:0e:c2:ca:96:15:87:8c:77:33:da:f9:3e:52: 4f:7d:1c:9a:c0:40:4c:51:cc:7a:df:5d:0e:e4:0f: 53:d3:16:77:84:1d:07:bf:9b:49:51:12:0c:c0:1b: 60:82:2b:ac:c3:cb:b1:fc:aa:76:d3:44:93:ff:3f: e7:ae:a9:06:fa:ba:c7:e6:ec:36:1c:23:49:07:0c: 26:c4:3b:bc:eb:b5:ce:3b:34:21:76:f7:92:24:cf: c5:2a:49:f2:29:b1:64:43:ee:83:a2:c0:ff:7d:06: 2a:5f:a8:e0:12:52:4c:0b:eb:4a:1a:7e:b6:9a:e0: 5a:f9:0b:12:de:f1:42:0b:b5:b4:ea:7f:0a:97:e1: d5:ca:e6:de:50:7b:c8:00:67:d3:bf:5c:4f:fb:06: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BC:45:4A:02:87:E8:88:85:FC:F3:A3:57:5A:E8:E7:BB:25:0B:51 X509v3 Authority Key Identifier: keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:5d:3f:1d:a5:43:1f:1c:67:6a:26:cc:c9:6c:11:36:e7:63: 3f:0b:62:b3:a5:79:1d:52:30:67:1a:f2:42:4f:8c:33:6c:df: 3c:ad:45:65:a5:83:07:16:ef:46:01:68:d4:cc:13:0f:14:01: 94:ec:7c:a6:29:7e:fb:3d:43:e9:aa:53:78:57:01:fd:79:47: 33:29:ec:b0:5f:9a:ba:27:f4:52:46:ff:40:00:93:39:67:bc: 59:75:91:45:1f:2f:a0:b8:37:af:2d:fd:65:8d:b3:94:76:bc: 81:2c:4e:66:f6:86:bc:e1:d7:a7:0e:43:3f:8b:91:28:44:23: 77:47:2a:ef:f6:e4:d2:07:bc:b5:6a:43:52:d4:23:3b:bb:a2: a0:93:3d:c2:05:00:89:30:12:7c:5a:45:2d:16:c4:8a:00:ca: 1c:5e:20:63:8a:88:64:cb:b0:3e:2d:b2:85:74:2b:7b:8c:fb: d4:8a:3e:3c:ee:6d:d7:95:c1:e1:87:bf:d0:50:b2:73:de:05: b2:fc:37:bb:ac:d7:5c:9f:a5:5f:66:f5:e4:74:fc:98:39:4d: 11:82:99:d2:bd:b7:8c:58:3d:4d:bd:9a:a8:b5:1b:1d:47:2c: 68:fc:67:9e:00:43:83:ba:10:1e:a9:23:de:1c:df:85:97:e8: d8:af:f4:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAb47rS9b0mbYd+GRuRO5r9xjro0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1 NTQ5ODZGNDAeFw0yNTA0MTYxNzM2NDBaFw0yNTA0MTkyMjQ0NDBaMDMxMTAvBgNV BAMTKDNBQkM0NTRBMDI4N0U4ODg4NUZDRjNBMzU3NUFFOEU3QkIyNTBCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdNXgxIv40GnZ+NBlxQLz0fcwE JSuUbMUVv0kQi8TNh9txm2OJiz8G0hIrtQEPb3KQAwK1TYUb9UZ6VSl9LhIlq6K+ bE8Lin6ehyBp3qxgBjnDDVAdL9CpidUz0IY4qDSIsNHaPBsIiUS3DsLKlhWHjHcz 2vk+Uk99HJrAQExRzHrfXQ7kD1PTFneEHQe/m0lREgzAG2CCK6zDy7H8qnbTRJP/ P+euqQb6usfm7DYcI0kHDCbEO7zrtc47NCF295Ikz8UqSfIpsWRD7oOiwP99Bipf qOASUkwL60oafraa4Fr5CxLe8UILtbTqfwqX4dXK5t5Qe8gAZ9O/XE/7BvCLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOrxFSgKH6IiF/POjV1ro57slC1EwHwYDVR0j BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5 ODZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI0ZTE5NWUtMTJkZS00YzNjLTkz ZTUtNTIyZWU1NDAxOGQ2LzAvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2 NEQ1NTQ5ODZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANhdPx2lQx8cZ2omzMlsETbnYz8LYrOleR1S MGca8kJPjDNs3zytRWWlgwcW70YBaNTMEw8UAZTsfKYpfvs9Q+mqU3hXAf15RzMp 7LBfmron9FJG/0AAkzlnvFl1kUUfL6C4N68t/WWNs5R2vIEsTmb2hrzh16cOQz+L kShEI3dHKu/25NIHvLVqQ1LUIzu7oqCTPcIFAIkwEnxaRS0WxIoAyhxeIGOKiGTL sD4tsoV0K3uM+9SKPjzubdeVweGHv9BQsnPeBbL8N7us11yfpV9m9eR0/Jg5TRGC mdK9t4xYPU29mqi1Gx1HLGj8Z54AQ4O6EB6pI94c34WX6Niv9KQ= -----END CERTIFICATE-----Generated at Thu Apr 17 05:31:54 2025 by rpki-client