$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft File: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json) Hash identifier: He5kkRdr1J6jEeRgGcM/IsPdgwcWtkoJZHfDVsBiEbw= Subject key identifier: E8:5F:A9:7A:A4:28:E9:80:7E:BA:C8:24:CE:F0:13:76:A6:DB:25:68 Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 0B22A34FD8C227384C753F6187C71B1F6B0D5210 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft Manifest number: 030B Signing time: Sun 06 Apr 2025 00:01:54 +0000 Manifest this update: Sat 05 Apr 2025 23:56:54 +0000 Manifest next update: Wed 09 Apr 2025 05:58:54 +0000 Files and hashes: 1: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: C89Nj2SgtW/Dq6dpcLjR/Ja0X+mRfhCiSEVzBdp+lWk=) 2: 3230322e39312e33312e302f32342d3234203d3e203234353238.roa (hash: y95B3NY3RXZzYL13rMMgNhTE08tIkXfckcaTOzD7GLs=) 3: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: /tGos7w3O3Cc2rEeSWTt2hXixFy8jLbVfKIMCGGSlCU=) 4: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6LTj/EfLo04qgpysgaD80PV6eg40XKfgvN9M6Cg9Ecc=) 5: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: 286KYuIyb4bfw/6gsV2UX49JI0TQ4UjnfosBxVwHmEU=) 6: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: cnBSWq1WLG6w1aYMzM7AP79gan6sEM7gvU+1j7GxjsI=) 7: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: v5KX1icvJWNCbLzmbitXFe0DuvImFbQ1kbd/fQM4aLI=) 8: 3230322e39312e33302e302f32342d3234203d3e203234353238.roa (hash: XOJX4KCkQu5IrooRwgxTDccEtscZEDwf39FMK440o4I=) 9: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: f1VfutGWK+MmJIOFReGmSZ7CZFeUlYEkRNGpDfRCgtg=) 10: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: C8dctSs9ua8uygdNw54CTl6seaRyDI1YDoNtVxe6Zo0=) 11: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: 5dD8EGyHNmiFesdS/SYN09R1SP4j1b0qW/Ps1YwTmj0=) 12: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: hMpLLtpO0oKLTbRKOkSHJXF1x8epTWtVi5DYgjm9EB0=) 13: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: aSmELMjbVbrJYcy5WtWo7WJdkIRQbL5hFTNoqcM9u0M=) 14: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: dwbWFoPjhBYm0ICnwf9B5oheJbD6wcLhrl82urARAfs=) 15: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: 0kVf8GpXZpL1PMSPUzRz/oXDktaONvVx68WdNeLShWA=) 16: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: JOYeyaEFOhJ64FjhlHl91Nb9dqegO9BUrkdFkwuvAtI=) 17: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: cniuIY1LCT7CAFaIMPVwi1Spcg4vtQerVs1WPUcxU2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 05:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:22:a3:4f:d8:c2:27:38:4c:75:3f:61:87:c7:1b:1f:6b:0d:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: Apr 5 23:56:54 2025 GMT Not After : Apr 9 05:58:54 2025 GMT Subject: CN=E85FA97AA428E9807EBAC824CEF01376A6DB2568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:de:d2:6f:32:87:c9:4f:4b:9f:78:13:1f:2d: 6d:ac:f3:52:45:7f:32:99:19:0f:21:50:89:d4:bf: 94:5f:00:5d:50:72:8b:3b:ab:bd:31:2b:33:9c:42: c8:fd:5b:37:e4:49:97:e5:2d:8e:16:d8:74:c4:41: da:7c:19:de:1b:21:5f:77:59:70:ba:d3:35:52:c6: 7d:39:ee:2c:a3:cc:f2:a0:0d:ac:6f:c2:71:09:89: da:ff:b2:5f:da:de:0c:dc:c7:6b:cd:3e:89:1e:f9: 3c:9d:ed:0c:c4:3b:c0:cf:e1:98:98:20:37:18:13: e4:6d:2b:20:2c:1a:c8:af:ca:22:d8:5c:f7:06:d5: ea:26:fc:ee:71:13:9e:90:2b:18:79:7d:35:01:80: f0:9a:a6:fe:ea:ae:62:a8:86:68:20:f2:fc:9d:06: 84:6e:02:0d:3b:56:39:95:ab:42:be:a3:79:b8:38: af:1e:c1:af:31:fb:aa:b1:a8:26:78:0f:f5:b0:a4: 40:c0:c6:45:79:53:d6:e3:40:1f:d5:c4:71:1c:96: 43:b3:5c:f8:b5:41:35:84:d2:b2:3f:5d:7e:f1:05: 48:0b:6c:b2:53:47:08:f9:a7:03:81:94:b4:eb:4b: 22:81:33:2c:ac:99:3d:5f:4a:29:a1:1d:cd:07:29: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5F:A9:7A:A4:28:E9:80:7E:BA:C8:24:CE:F0:13:76:A6:DB:25:68 X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:dc:74:1d:94:48:c0:9d:e0:66:ce:4e:ef:26:90:94:7d:ce: e3:ce:2a:28:cb:14:9d:f8:f9:ac:5e:0a:c7:e8:ae:c4:ff:16: 37:8b:c6:b1:42:ba:75:fb:b4:d3:64:a2:16:e1:18:4c:91:a2: 85:9c:c0:ef:13:7e:3a:c8:50:e1:9a:e1:2f:3f:89:7d:55:cc: d4:d2:a8:82:59:90:da:86:d5:9b:cd:d7:35:5d:44:0c:32:15: 41:21:42:5c:e0:a4:b7:e8:a2:54:55:ac:c6:74:3e:78:36:b1: 05:ba:69:34:d3:d6:b9:a9:d1:b6:33:3e:d3:96:7c:ee:b2:82: e5:29:e7:8e:96:65:4f:53:2d:15:c8:12:5e:bb:d4:00:18:e3: 6d:dc:a0:d7:df:00:a4:ad:ac:1e:a4:fe:06:f1:06:59:43:db: 79:8a:5d:e3:06:ee:61:70:83:7c:5e:fe:eb:74:01:f7:e5:20: 8e:3f:2b:2b:c9:2d:f5:27:e5:95:9c:0f:94:a6:d2:f3:e5:d9: 04:91:4c:a3:da:df:ff:80:37:84:d4:1a:35:c4:55:95:df:47: 4e:84:bb:16:d0:93:4a:2a:4d:ad:4a:00:fe:94:61:60:6c:19: e8:b6:22:0c:39:bc:b3:be:08:66:d1:7a:29:56:ee:9a:70:ac: c3:8e:88:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCyKjT9jCJzhMdT9hh8cbH2sNUhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNTA0MDUyMzU2NTRaFw0yNTA0MDkwNTU4NTRaMDMxMTAvBgNV BAMTKEU4NUZBOTdBQTQyOEU5ODA3RUJBQzgyNENFRjAxMzc2QTZEQjI1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3tJvMofJT0ufeBMfLW2s81JF fzKZGQ8hUInUv5RfAF1Qcos7q70xKzOcQsj9WzfkSZflLY4W2HTEQdp8Gd4bIV93 WXC60zVSxn057iyjzPKgDaxvwnEJidr/sl/a3gzcx2vNPoke+Tyd7QzEO8DP4ZiY IDcYE+RtKyAsGsivyiLYXPcG1eom/O5xE56QKxh5fTUBgPCapv7qrmKohmgg8vyd BoRuAg07VjmVq0K+o3m4OK8ewa8x+6qxqCZ4D/WwpEDAxkV5U9bjQB/VxHEclkOz XPi1QTWE0rI/XX7xBUgLbLJTRwj5pwOBlLTrSyKBMyysmT1fSimhHc0HKTbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6F+peqQo6YB+usgkzvATdqbbJWgwHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlhYjYwYjEtYTI0NC00YTc4LWIz MWItZmVjYTNkMTRlZDlmLzAvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3 OTZERDNDNjcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELcdB2USMCd4GbOTu8mkJR9zuPOKijLFJ34 +axeCsforsT/FjeLxrFCunX7tNNkohbhGEyRooWcwO8TfjrIUOGa4S8/iX1VzNTS qIJZkNqG1ZvN1zVdRAwyFUEhQlzgpLfoolRVrMZ0Png2sQW6aTTT1rmp0bYzPtOW fO6yguUp546WZU9TLRXIEl671AAY423coNffAKStrB6k/gbxBllD23mKXeMG7mFw g3xe/ut0AfflII4/KyvJLfUn5ZWcD5Sm0vPl2QSRTKPa3/+AN4TUGjXEVZXfR06E uxbQk0oqTa1KAP6UYWBsGei2Igw5vLO+CGbReilW7ppwrMOOiOU= -----END CERTIFICATE-----Generated at Mon Apr 7 11:43:22 2025 by rpki-client