$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft File: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft (raw, json) Hash identifier: LcDZQUg1nuQs8FdhaW2ZvHT5OInefHv5KjO6PVM/EPc= Subject key identifier: B9:68:7C:96:FD:39:FA:C4:95:9F:AE:53:E5:F1:A6:50:7C:F3:46:AF Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 24EE4F1A4F3ACD2F41B2440196D5C3372C872CBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft Manifest number: 04C7 Signing time: Thu 03 Apr 2025 18:21:04 +0000 Manifest this update: Thu 03 Apr 2025 18:16:04 +0000 Manifest next update: Mon 07 Apr 2025 03:22:04 +0000 Files and hashes: 1: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl (hash: guz9QaMDQ71/PnUoa7MuEd2lMxdE6u3jB9Mz5rm7epQ=) 2: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (hash: E3Ix9LCh0uoZASJHsryr0UOCFO0Y4eUcpygMjbixTxY=) 3: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (hash: gW10ROgt09o0IM/FgnaUDfTJF5ydZooB3pXvlmYpehM=) 4: 3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (hash: DlYUP/F+RIK8nZbMYNKyJFx66/fMZlATHS8Y5cVRmHA=) 5: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (hash: N2GLQMMA/qT2QiLPtJRjOfYhs4Npr6h5DA+qLf5C1dI=) 6: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (hash: U+DhKaCX+eMWoG0BK1JUCp92Kg/SlFMW4W18iDWDPk8=) 7: 3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (hash: xEdRuUJTSivUpNPIDnPWLGfAdZM7XwpAuLlbwL66BaU=) 8: 3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (hash: BpLGzUp7Xs7lG8N9IL3uXt34bHOuJAyWCtEer8epdos=) 9: 3131372e37342e3132342e302f32322d3232203d3e203338353135.roa (hash: cDY4Z9d9g+KrirZABQ3RMVXlQjWVTpJ4E7KqPsvflsA=) 10: 3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (hash: f1JmznDZXZsYmE+EOn6/ixZplBrsI4tfJgjAi4Te3YM=) 11: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (hash: r8ZqBwcrGdH8TEuK29OivEcKhqjzvIMTsJVTlTtuCYA=) 12: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (hash: /vW/TSbog9WsObuCC1lgKjgijK+Dod2mciJtHHUezKU=) 13: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (hash: spz6qG1bxXEvqZGHND0wn8N5S0VzxSUNZ62Ev/Uf0x0=) 14: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (hash: HxtYgWvcJ4FsLmv+kOwdTLFdl4GrY2+Ti5Vre+O+B7s=) 15: 323430323a3630303a3a2f33322d3438203d3e203338353135.roa (hash: ff8501ZPkr7KlYGUXPEp2Ubjto55pXXgmuYMIxAXR0I=) 16: 3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (hash: BjsgdP0bBBN6UnRaespbf8YwMMjiGp/LVHsWqYC0AnA=) 17: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (hash: 1DsSg30Xy7wVzu/nL8H8hRAnWhIsBpUqum19dGO3/mk=) 18: 3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (hash: EEaEZh5b8qX6GK9UvSPlgYe2sVCD2bNdjCbgrn86OIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 03:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ee:4f:1a:4f:3a:cd:2f:41:b2:44:01:96:d5:c3:37:2c:87:2c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Apr 3 18:16:04 2025 GMT Not After : Apr 7 03:22:04 2025 GMT Subject: CN=B9687C96FD39FAC4959FAE53E5F1A6507CF346AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:88:d4:2b:95:38:48:f0:19:7b:0d:08:1c:f3: b3:55:80:35:50:fd:69:fa:f3:37:7d:dc:e0:62:28: 79:89:fc:9d:04:bf:a7:47:fe:f8:5d:df:c9:b9:cf: 3b:fa:9c:c9:65:2b:0d:93:22:29:95:09:f5:13:93: 51:9a:19:52:26:cd:e9:44:67:ff:41:3a:20:46:4d: 6d:7c:cb:15:62:e8:4c:a4:43:f8:ea:24:b6:75:6b: 09:82:82:43:da:d7:1e:d0:e1:b6:83:46:63:1e:12: 8d:f1:57:fc:4e:e3:91:cc:9e:3e:e7:6e:b8:ff:6a: 2c:d2:94:6e:90:9b:2b:c8:41:47:66:18:c5:b0:98: bf:d4:4c:74:b2:95:c1:a7:ff:30:4d:e4:ed:e9:27: 8d:7b:7e:af:b3:8d:77:cc:65:87:94:47:4f:1b:48: a5:2b:c2:6e:38:23:b0:92:73:e7:af:36:02:f9:d0: 0e:ee:2d:47:88:91:dd:0c:48:31:4f:ca:46:23:58: 01:89:e2:60:d1:c0:89:ef:91:8e:79:0b:6d:67:66: f5:52:3e:8d:48:ca:20:96:05:08:57:35:2a:3b:ba: a7:c8:ba:e1:6a:dc:df:0e:cd:d7:54:15:83:76:b0: d2:7d:05:8f:b1:d6:71:d5:c8:86:40:53:de:42:42: 4d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:68:7C:96:FD:39:FA:C4:95:9F:AE:53:E5:F1:A6:50:7C:F3:46:AF X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a0:0f:33:6f:04:5d:b0:07:d8:2f:ca:44:2a:24:16:cb:11: 1f:af:5d:78:5a:fb:3d:de:2c:8c:58:1a:74:df:96:48:a9:07: 9b:d3:ad:c4:db:3b:44:54:e9:da:09:00:13:bf:97:46:55:b0: dc:0e:d2:39:2c:92:fc:b7:18:89:33:cc:07:d9:81:4c:bc:88: c1:a4:19:f2:a1:7a:f9:05:f8:72:71:c2:e7:46:81:cb:fc:3b: 9c:2f:4c:14:4a:5b:0e:0a:69:d6:b0:a8:f9:a5:1f:f0:c2:96: 1d:b2:36:a3:b2:c3:3a:a4:14:11:c4:90:b4:ff:2f:48:e5:36: c7:05:98:73:b0:b1:9c:ac:d9:92:49:21:e0:ed:e0:d5:c8:54: ae:1e:a2:1a:af:d1:cf:06:fa:00:75:62:73:53:54:e1:fd:85: 7c:54:25:6a:33:84:66:20:de:3c:fb:41:ea:4f:aa:d1:cc:07: 09:6b:00:42:31:5b:08:d2:27:c0:f1:4b:e9:f8:59:89:62:42: e0:03:9a:11:84:c7:90:2b:9d:9b:1d:ca:95:7e:ae:52:b2:2e: 43:cc:85:c0:73:1c:ab:fe:6c:bc:dd:b1:38:f3:dd:a1:2b:dd: 58:fd:77:9a:2e:e9:b8:a7:fb:fc:0b:18:03:d5:8b:97:6f:62: 3b:e5:5c:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJO5PGk86zS9BskQBltXDNyyHLLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yNTA0MDMxODE2MDRaFw0yNTA0MDcwMzIyMDRaMDMxMTAvBgNV BAMTKEI5Njg3Qzk2RkQzOUZBQzQ5NTlGQUU1M0U1RjFBNjUwN0NGMzQ2QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8iNQrlThI8Bl7DQgc87NVgDVQ /Wn68zd93OBiKHmJ/J0Ev6dH/vhd38m5zzv6nMllKw2TIimVCfUTk1GaGVImzelE Z/9BOiBGTW18yxVi6EykQ/jqJLZ1awmCgkPa1x7Q4baDRmMeEo3xV/xO45HMnj7n brj/aizSlG6QmyvIQUdmGMWwmL/UTHSylcGn/zBN5O3pJ417fq+zjXfMZYeUR08b SKUrwm44I7CSc+evNgL50A7uLUeIkd0MSDFPykYjWAGJ4mDRwInvkY55C21nZvVS Po1IyiCWBQhXNSo7uqfIuuFq3N8OzddUFYN2sNJ9BY+x1nHVyIZAU95CQk0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWh8lv05+sSVn65T5fGmUHzzRq8wHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0YzY0YTktMzUzNy00YmM3LTg2 MTMtOGU5ODE2MjllNGNhLzAvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4 MkEyRERGRDhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6gDzNvBF2wB9gvykQqJBbLER+vXXha+z3e LIxYGnTflkipB5vTrcTbO0RU6doJABO/l0ZVsNwO0jkskvy3GIkzzAfZgUy8iMGk GfKhevkF+HJxwudGgcv8O5wvTBRKWw4KadawqPmlH/DClh2yNqOywzqkFBHEkLT/ L0jlNscFmHOwsZys2ZJJIeDt4NXIVK4eohqv0c8G+gB1YnNTVOH9hXxUJWozhGYg 3jz7QepPqtHMBwlrAEIxWwjSJ8DxS+n4WYliQuADmhGEx5ArnZsdypV+rlKyLkPM hcBzHKv+bLzdsTjz3aEr3Vj9d5ou6bin+/wLGAPVi5dvYjvlXBI= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:53 2025 by rpki-client