$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: Q2XwK6vvmCqocEDOKFnOpnhBeOFQCjZDYLHd+8L9kv8= Subject key identifier: DB:A2:30:F0:0F:AF:E5:3A:21:09:98:E9:7C:F9:B1:3F:92:4A:08:25 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 62292347B6CB1B26A07DD373D5A87C1FE1AF157E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 04C6 Signing time: Fri 04 Apr 2025 23:11:30 +0000 Manifest this update: Fri 04 Apr 2025 23:06:30 +0000 Manifest next update: Tue 08 Apr 2025 06:29:30 +0000 Files and hashes: 1: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=) 2: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: Z4tZz6F9JY3ZUZu3Di7cGc13Z0UBUiFPLr0uINLgMaY=) 3: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: e4K70c+l6o1H0jUf9NfNvizUU4LNYZwwkZ1VlRNX2oM=) 4: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: W0H9HDrVApNe3HWG7kzRwsgZpewrgw+OQsIBd3Xl334=) 5: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: 7SJMGKYIqywZq1oxStI1Ck+o92Gvb6NwaNA8HcKMaAA=) 6: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 7: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: uvqfjeAuMsDgy2S+lqKfVA/VGjsHmAxmc+ppKnV8vvI=) 8: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=) 9: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: RiJN0l87aY48VKpm5kB/oKohwUhSNuwZ2dejTOYaeE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:29:23:47:b6:cb:1b:26:a0:7d:d3:73:d5:a8:7c:1f:e1:af:15:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Apr 4 23:06:30 2025 GMT Not After : Apr 8 06:29:30 2025 GMT Subject: CN=DBA230F00FAFE53A210998E97CF9B13F924A0825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:b4:3a:65:ad:5a:42:55:ff:4c:bb:1b:07: e1:64:ae:79:df:7e:a4:c2:85:9a:20:b4:70:dd:74: 13:7c:e8:96:fe:95:d4:dc:95:dd:e5:68:da:8a:fd: dc:06:34:19:fd:a1:7c:d5:d0:91:3b:5b:63:97:29: f8:b6:0d:b8:44:75:fa:97:e3:61:c2:e6:99:ba:28: 4a:b4:9f:10:95:22:a9:bf:6f:53:23:b4:5e:45:79: 9a:15:aa:51:8b:76:b1:f7:9e:77:b1:fe:fd:5a:24: bb:cc:fe:e4:f8:8d:1d:35:f6:61:4b:29:9b:45:f3: d5:a8:e4:81:9f:f7:df:45:f4:91:66:71:4c:58:c7: db:42:c1:ad:07:81:27:4e:62:6e:13:8d:03:8a:78: 99:45:88:2c:cb:42:5b:ed:27:c5:6f:36:82:08:be: ea:71:85:18:8f:46:60:78:b6:40:d4:53:a6:3c:d2: be:2c:73:5e:21:ae:12:66:fa:0c:35:5f:c1:0b:64: 7b:f4:4d:a6:73:41:29:c9:e7:1e:3a:f8:c3:8c:16: 0d:41:78:9c:72:82:bd:8f:2f:cd:94:22:b9:15:06: 2b:9c:df:7b:06:5d:08:8f:a0:8c:d0:ea:7c:97:a0: 7e:9e:d4:76:40:74:47:d7:43:d4:ad:6e:28:10:76: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A2:30:F0:0F:AF:E5:3A:21:09:98:E9:7C:F9:B1:3F:92:4A:08:25 X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a8:fe:e9:86:f9:f7:6d:ae:ca:13:04:a7:c5:50:b4:b6:98: 37:9f:ff:d1:0d:6f:5e:c0:3f:99:48:b7:4d:5f:55:33:d5:dd: 6b:9f:cd:15:2f:dd:6f:ac:fb:85:de:83:d0:7a:26:21:e6:73: d7:87:fe:66:03:61:33:59:a9:1b:84:9f:cf:a1:ed:e9:b0:63: ff:b3:a8:42:bb:4f:0f:86:7c:9d:9a:de:22:84:2a:a1:91:5d: b7:a9:3d:6c:6a:4f:b4:6a:46:75:6f:33:fc:31:0c:44:f5:1f: 16:a6:65:a6:3d:50:e0:e5:3b:d7:a6:fe:95:2c:28:71:ac:f7: 01:a7:2c:41:0a:04:ca:3b:be:92:c2:e5:3c:45:61:a9:3a:21: 0e:9b:b0:3c:cc:e3:03:47:0e:d7:3c:76:29:6e:61:ce:5b:f6: 1b:ba:4b:66:a2:ea:3f:92:de:9b:43:1a:5c:d0:c4:52:af:05: f2:ef:ef:74:84:92:ac:79:ac:d6:f2:c9:19:59:a8:bc:0d:21: e1:48:69:13:77:2e:91:7c:7f:ca:27:5b:f0:12:55:03:aa:be: 3d:97:7e:86:a1:17:b1:ee:cb:66:d5:b4:e9:45:81:f3:1d:9a: d6:21:22:a9:fd:47:c8:e8:70:15:47:98:98:95:82:78:c2:41: cd:f9:66:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYikjR7bLGyagfdNz1ah8H+GvFX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTA0MDQyMzA2MzBaFw0yNTA0MDgwNjI5MzBaMDMxMTAvBgNV BAMTKERCQTIzMEYwMEZBRkU1M0EyMTA5OThFOTdDRjlCMTNGOTI0QTA4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnrQ6Za1aQlX/TLsbB+Fkrnnf fqTChZogtHDddBN86Jb+ldTcld3laNqK/dwGNBn9oXzV0JE7W2OXKfi2DbhEdfqX 42HC5pm6KEq0nxCVIqm/b1MjtF5FeZoVqlGLdrH3nnex/v1aJLvM/uT4jR019mFL KZtF89Wo5IGf999F9JFmcUxYx9tCwa0HgSdOYm4TjQOKeJlFiCzLQlvtJ8VvNoII vupxhRiPRmB4tkDUU6Y80r4sc14hrhJm+gw1X8ELZHv0TaZzQSnJ5x46+MOMFg1B eJxygr2PL82UIrkVBiuc33sGXQiPoIzQ6nyXoH6e1HZAdEfXQ9StbigQdt+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU26Iw8A+v5TohCZjpfPmxP5JKCCUwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCo/umG+fdtrsoTBKfFULS2mDef/9ENb17A P5lIt01fVTPV3WufzRUv3W+s+4Xeg9B6JiHmc9eH/mYDYTNZqRuEn8+h7emwY/+z qEK7Tw+GfJ2a3iKEKqGRXbepPWxqT7RqRnVvM/wxDET1HxamZaY9UODlO9em/pUs KHGs9wGnLEEKBMo7vpLC5TxFYak6IQ6bsDzM4wNHDtc8diluYc5b9hu6S2ai6j+S 3ptDGlzQxFKvBfLv73SEkqx5rNbyyRlZqLwNIeFIaRN3LpF8f8onW/ASVQOqvj2X foahF7Huy2bVtOlFgfMdmtYhIqn9R8jocBVHmJiVgnjCQc35ZiM= -----END CERTIFICATE-----Generated at Sat Apr 5 15:56:59 2025 by rpki-client