$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft File: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json) Hash identifier: CHTV9Ei/ewtyGGoykszzMNuBhbNhoP5oaKTMF/FZjJI= Subject key identifier: 5F:43:8E:39:B6:9F:18:12:59:10:B1:94:1D:35:A2:0B:C0:9B:39:CD Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Certificate serial: 58A9118BF68875B41FABE2265FEE23AB75AEF947 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft Manifest number: 0281 Signing time: Thu 03 Apr 2025 19:00:56 +0000 Manifest this update: Thu 03 Apr 2025 18:55:56 +0000 Manifest next update: Sun 06 Apr 2025 23:29:56 +0000 Files and hashes: 1: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: AwyhgoC9SnkiONSyyarxojN2GzihXUBvalkihTTc9zE=) 2: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: VZwDewAsxwwfePzp0qRdTXSl6r6rgS1qxxsBlVs1abM=) 3: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: LZiLGSJdIHDnXMLX3SUdSUGcn99p7H2DzXggJdnkwkE=) 4: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: LNeaS083UOlp4LUdDeQ2gGXYYeK9bcYJQvzUhUQt9Vs=) 5: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=) 6: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: bs0ZMOoWFJzZsSzRHXIPfE50E27zzOl01UAYg6gx044=) 7: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: bjLKcE6uyYPhJZ29YifTXHBYInxuCRJ71wvo0zdxJPg=) 8: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: vUtKxLKXTfruRLMlOvpg8rz9eUIDHFfVkTATVb94ii4=) 9: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=) 10: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: /nt77PAEWl7VykddnVbcJDci8AanpKq8RsOk21Gx/Ns=) 11: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=) 12: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: ZZpQllrHWfXo8o8D2sCJ3pB5jUWAf/wTgvoQBwbAr+E=) 13: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: f/PfUh13qwQbqBOuR7Y1xgR/xJQ98pR+42yK2Mrg59s=) 14: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: 50O5uNlbOkY1l/rUhqCb/dq0Q5p/vt2WkECQ0oSMMmU=) 15: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: jzjxJh+xfaBBPC/53XZ8Nk5TcaX7/S1TNWUZpjMRn2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 23:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a9:11:8b:f6:88:75:b4:1f:ab:e2:26:5f:ee:23:ab:75:ae:f9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Validity Not Before: Apr 3 18:55:56 2025 GMT Not After : Apr 6 23:29:56 2025 GMT Subject: CN=5F438E39B69F18125910B1941D35A20BC09B39CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:da:32:cb:2b:12:49:5c:e5:fb:97:be:76:30: fe:55:01:0e:ea:6c:e4:aa:36:d8:9f:ee:f9:01:a6: 2b:8b:91:10:14:a0:08:9d:f1:44:7c:fd:5e:ee:9b: 46:31:1e:f2:29:d6:22:1d:0a:99:dc:1d:8d:cb:0e: b6:1b:78:be:16:c9:12:04:32:b0:7b:41:94:99:4e: 6b:b2:61:dc:28:72:7f:2e:f3:d2:80:65:ad:af:27: 32:ed:db:ff:7f:49:dc:b6:8a:be:b0:ac:f9:d3:5e: a1:38:cb:87:d9:64:df:ae:ea:e3:95:20:f3:cf:eb: fa:7a:2b:8a:1a:ca:7c:a0:cb:32:0c:82:8d:4f:5b: 55:cf:81:3e:da:f4:41:b1:8a:94:0d:4f:95:6c:a3: 79:41:51:da:a4:7d:96:56:65:77:48:7d:aa:bb:5a: cf:af:cb:26:b5:d5:e1:7c:8a:80:6b:82:bd:1c:09: 3a:ef:65:fc:a0:c0:60:ce:d8:0f:07:37:3c:e0:32: 14:9d:e5:71:2f:46:45:d0:08:30:c0:72:9c:10:1e: d3:26:8c:de:47:77:0d:15:1b:91:7d:0e:3f:c1:4a: a4:1f:f6:a4:6f:dc:46:80:b3:ba:cf:02:52:de:38: f6:01:33:b4:75:dc:7c:eb:4c:1a:4f:4f:c1:72:93: 8b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:43:8E:39:B6:9F:18:12:59:10:B1:94:1D:35:A2:0B:C0:9B:39:CD X509v3 Authority Key Identifier: keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d8:43:f5:2b:98:ae:b8:e5:85:54:6b:2b:a8:d1:d9:72:5b: 16:95:e3:52:39:23:27:07:be:db:67:3d:da:d6:e2:a5:fa:1a: 10:96:f8:73:49:2c:40:84:ee:95:72:0c:e4:4c:4e:c8:85:18: d7:6d:d1:25:ac:0c:eb:8b:3d:0e:0a:f1:05:85:8b:97:26:ac: 22:6d:67:4c:4b:50:bf:d6:a1:23:ef:20:f7:b0:03:18:27:42: ee:1a:f2:a6:b1:4d:9e:94:fc:6d:70:8e:f0:6e:8a:a8:04:6b: b7:41:d6:56:65:00:29:dc:b6:cb:0c:b0:26:1a:e6:9d:7a:86: 24:26:63:ac:da:ea:58:a5:25:7e:1e:69:be:25:6a:f1:35:51: 68:82:95:10:6d:8a:50:de:8c:39:6c:e8:f4:c0:23:f8:b0:9c: b2:76:29:56:10:8b:f5:50:e8:df:ba:4f:5d:4a:9c:b5:6b:be: 85:cb:ea:49:6e:6a:ae:fe:0c:7e:ed:2a:fe:c6:89:d8:72:20: 4f:f0:35:74:6a:71:4b:80:e4:93:78:14:a7:9a:64:fa:a1:a5: eb:10:94:0c:2d:a1:f7:32:08:ad:5c:d6:52:ee:79:af:8c:52: 96:0a:81:bf:71:8f:f3:5b:62:21:ed:68:04:8d:69:39:e5:a2: 1d:0d:b1:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKkRi/aIdbQfq+ImX+4jq3Wu+UcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJF QjNCRkYzOTAeFw0yNTA0MDMxODU1NTZaFw0yNTA0MDYyMzI5NTZaMDMxMTAvBgNV BAMTKDVGNDM4RTM5QjY5RjE4MTI1OTEwQjE5NDFEMzVBMjBCQzA5QjM5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2jLLKxJJXOX7l752MP5VAQ7q bOSqNtif7vkBpiuLkRAUoAid8UR8/V7um0YxHvIp1iIdCpncHY3LDrYbeL4WyRIE MrB7QZSZTmuyYdwocn8u89KAZa2vJzLt2/9/Sdy2ir6wrPnTXqE4y4fZZN+u6uOV IPPP6/p6K4oaynygyzIMgo1PW1XPgT7a9EGxipQNT5Vso3lBUdqkfZZWZXdIfaq7 Ws+vyya11eF8ioBrgr0cCTrvZfygwGDO2A8HNzzgMhSd5XEvRkXQCDDAcpwQHtMm jN5Hdw0VG5F9Dj/BSqQf9qRv3EaAs7rPAlLeOPYBM7R13HzrTBpPT8Fyk4vfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX0OOObafGBJZELGUHTWiC8CbOc0wHwYDVR0j BBgwFoAU+lvKmE7rr/3O2EGQxwdW2+s7/zkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMC9GQTVCQ0E5ODRF RUJBRkZEQ0VEODQxOTBDNzA3NTZEQkVCM0JGRjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJFQjNC RkYzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVlNDdiYmYtYmE4NC00NDhmLTk2 MmItMmFhZjVjN2RkNjhkLzAvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2 REJFQjNCRkYzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTYQ/UrmK645YVUayuo0dlyWxaV41I5IycH vttnPdrW4qX6GhCW+HNJLECE7pVyDORMTsiFGNdt0SWsDOuLPQ4K8QWFi5cmrCJt Z0xLUL/WoSPvIPewAxgnQu4a8qaxTZ6U/G1wjvBuiqgEa7dB1lZlACnctssMsCYa 5p16hiQmY6za6lilJX4eab4lavE1UWiClRBtilDejDls6PTAI/iwnLJ2KVYQi/VQ 6N+6T11KnLVrvoXL6kluaq7+DH7tKv7GidhyIE/wNXRqcUuA5JN4FKeaZPqhpesQ lAwtofcyCK1c1lLuea+MUpYKgb9xj/NbYiHtaASNaTnloh0NsdI= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:09 2025 by rpki-client