$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json) Hash identifier: M0jOrcTeipDAGcCJH4qBk+Tk+Eb8Ua1Wl2TvpUeDA2Y= Subject key identifier: 04:92:E5:94:6C:4B:6B:48:73:A8:69:4F:4F:BC:50:3D:B2:50:D6:8E Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 4A8C54ED62D23A4AEAD867E8F9896C1505D30CCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft Manifest number: 01E9 Signing time: Sun 06 Apr 2025 23:12:02 +0000 Manifest this update: Sun 06 Apr 2025 23:07:02 +0000 Manifest next update: Thu 10 Apr 2025 06:15:02 +0000 Files and hashes: 1: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: A10fZ5oBGWm/ydsGNd4ClvdYu28lRcTQqL1+gfTVn6c=) 2: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: GUSl7LUTkCNLq3kjAIVktijnSt4hBS8Y9L517womeqQ=) 3: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: in1eOlYNKCk2lGbXKJTXvY33Xdz5YgM95JjqhRefg8I=) 4: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: oInZsMVgdwEvnpVcu4rctnbwGDY+GjcyJ5+JQSNMsAM=) 5: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: AlUWTxdz4XyVx/BJnp5RHH7Yu2FT507lFQbZMytd2ZM=) 6: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: y+koXC0SKC7czkSwcd2cG19vH0+o53OQtkOYra+BrVo=) 7: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 3xWXXks4UVNYkXH6dJVO0j8s1qvxiBuFe16NtmlEZXU=) 8: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: e2hZqRmumwwjihIOo4NSyIcflDvxaVJmQVJkA8KGCsQ=) 9: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: WsluVFkB4a+lP57xwnkZuJyPr6zcJ1fd0nejjcDmukA=) 10: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: CsvPbO1dTyPsmUs0Y51ZaJ0Q65Hxq5scKNV2P6WWsfo=) 11: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 318Q6731sMFPRMDMOoStaI6Bz5sS+OT9DxYXEQE+OOU=) 12: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: Vxu7OgcrZ32tVA4THVShJIrGxnq9jK2ER/olk1k8ato=) 13: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: vxJKLQSj6WfWdyuj9+acCPciOVk70erOJaaByFWqF1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8c:54:ed:62:d2:3a:4a:ea:d8:67:e8:f9:89:6c:15:05:d3:0c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Apr 6 23:07:02 2025 GMT Not After : Apr 10 06:15:02 2025 GMT Subject: CN=0492E5946C4B6B4873A8694F4FBC503DB250D68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:13:f4:59:81:45:c5:42:07:1e:15:a2:94: e9:f2:da:c2:e2:53:39:a5:cd:ae:3b:65:8d:2c:92: 3c:98:00:21:72:e5:f5:d7:91:ab:3d:33:22:7f:a4: a5:a5:a3:85:09:d8:14:1c:1a:30:9c:c4:05:b3:c4: 3c:42:71:9a:15:ca:06:15:22:61:24:e6:6b:0a:f3: d4:ea:66:97:a3:d8:35:04:c3:83:2a:5f:74:99:ca: 9d:4f:61:31:6b:58:d5:2f:4a:a1:9b:8e:01:b6:c4: c7:3b:a2:23:d1:f7:0e:00:72:14:b4:06:cf:5e:03: 9b:78:53:11:9c:4b:d1:00:e2:7c:df:6c:87:1c:bb: ac:75:41:91:89:73:6c:65:fe:e2:f0:a0:91:d5:bc: 9e:64:33:fd:11:bb:c5:c3:46:be:39:86:f3:1b:c8: 6b:3b:9a:09:6f:76:9a:1d:cc:6f:df:f5:a4:ff:fd: 0c:8f:44:fe:7b:a7:1b:44:14:27:5b:00:5b:90:c4: ea:15:01:87:cd:92:53:43:2e:5c:07:95:86:63:84: da:56:b8:83:34:af:7c:9f:07:62:1b:83:15:d7:bc: ea:69:83:c7:f4:e7:fd:1b:5b:bc:0b:ea:ec:d0:35: b8:98:be:fd:25:73:3c:20:86:5f:8e:1f:6a:f0:c1: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:92:E5:94:6C:4B:6B:48:73:A8:69:4F:4F:BC:50:3D:B2:50:D6:8E X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7b:e7:0e:46:1f:be:6f:43:44:82:52:58:4d:9b:bb:e2:a9: 50:c0:33:b5:8f:b1:87:53:3e:d2:8b:29:9c:2f:2f:24:33:17: 45:11:9f:57:9d:f4:f1:7f:38:e6:d1:eb:30:a4:ec:fe:2d:dd: 21:57:69:f5:cf:e4:6d:aa:a2:dd:65:07:52:6d:f3:34:d7:85: 99:76:73:c8:e4:8a:6f:8c:2c:39:c7:fd:23:cb:a2:e7:7d:a0: 3a:74:cc:5a:0c:48:ed:d3:16:33:22:7f:65:3d:44:e5:8c:ed: b4:30:3e:fd:6d:ec:8b:56:18:d2:92:af:2a:fc:02:e8:f0:59: bc:56:82:79:9c:d2:f7:88:6e:bf:c1:f8:85:7c:67:ad:8a:fa: a8:b2:4f:70:52:a1:f4:9b:dd:20:9d:5b:71:2f:52:99:65:44: 83:a5:7b:7c:16:c1:37:d9:fc:fc:8c:05:c1:16:c6:6e:7e:e4: bc:ee:0a:e5:97:93:d3:74:e4:c7:51:f9:c6:15:18:3a:cc:f1: 50:73:8c:05:6a:31:06:39:12:cc:3f:20:21:62:9a:b5:30:f2: 47:14:fc:8b:fe:54:be:5b:13:3a:3c:a2:6c:2d:a6:ed:43:15: 7e:cb:e0:80:39:28:33:05:20:8a:40:2e:d5:15:f3:75:ad:97: 36:9b:6b:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSoxU7WLSOkrq2Gfo+YlsFQXTDM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNTA0MDYyMzA3MDJaFw0yNTA0MTAwNjE1MDJaMDMxMTAvBgNV BAMTKDA0OTJFNTk0NkM0QjZCNDg3M0E4Njk0RjRGQkM1MDNEQjI1MEQ2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rhP0WYFFxUIHHhWilOny2sLi Uzmlza47ZY0skjyYACFy5fXXkas9MyJ/pKWlo4UJ2BQcGjCcxAWzxDxCcZoVygYV ImEk5msK89TqZpej2DUEw4MqX3SZyp1PYTFrWNUvSqGbjgG2xMc7oiPR9w4AchS0 Bs9eA5t4UxGcS9EA4nzfbIccu6x1QZGJc2xl/uLwoJHVvJ5kM/0Ru8XDRr45hvMb yGs7mglvdpodzG/f9aT//QyPRP57pxtEFCdbAFuQxOoVAYfNklNDLlwHlYZjhNpW uIM0r3yfB2IbgxXXvOppg8f05/0bW7wL6uzQNbiYvv0lczwghl+OH2rwwY5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJLllGxLa0hzqGlPT7xQPbJQ1o4wHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC975w5GH75vQ0SCUlhNm7viqVDAM7WPsYdT PtKLKZwvLyQzF0URn1ed9PF/OObR6zCk7P4t3SFXafXP5G2qot1lB1Jt8zTXhZl2 c8jkim+MLDnH/SPLoud9oDp0zFoMSO3TFjMif2U9ROWM7bQwPv1t7ItWGNKSryr8 AujwWbxWgnmc0veIbr/B+IV8Z62K+qiyT3BSofSb3SCdW3EvUpllRIOle3wWwTfZ /PyMBcEWxm5+5LzuCuWXk9N05MdR+cYVGDrM8VBzjAVqMQY5Esw/ICFimrUw8kcU /Iv+VL5bEzo8omwtpu1DFX7L4IA5KDMFIIpALtUV83Wtlzaba2o= -----END CERTIFICATE-----Generated at Tue Apr 8 17:50:40 2025 by rpki-client