$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft File: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft (raw, json) Hash identifier: hV+J0WsPY1wxxooOT6dVJ/VZUSQdX38YIptjg7eSvQM= Subject key identifier: 89:59:A3:8C:1B:92:1E:50:B9:A3:C4:14:99:53:46:EF:CD:28:0B:4E Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B Certificate issuer: /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B Certificate serial: 422FD403AE7E57FF1AA8C4BF275D302C908F50A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft Manifest number: 0153 Signing time: Tue 08 Apr 2025 02:51:44 +0000 Manifest this update: Tue 08 Apr 2025 02:46:44 +0000 Manifest next update: Fri 11 Apr 2025 09:15:44 +0000 Files and hashes: 1: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: iA2jtRPunwvVs+oxAYcMwVPx60+n92IM12/OQGz8E7Y=) 2: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: kGo5Z0dQmddNogvMWcoI94YtEIKcIPX6FTz3PKH2TGQ=) 3: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: EBlmqDEWkMyCK1/XHbvpi2pPtqys0z6jD8DKxQ3Fr5M=) 4: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: /N5+2aMU3EMAmEX99W6RjuRb23GuWa2brckaj7T7NN4=) 5: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: yZ3S3VlEg8XhUnYFrYIEtsQAe3osggFJf6UwQXimraQ=) 6: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: nxP8W10E3LZDtZxP90veGMWm2rYEk3wENcKTTfAcq3U=) 7: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: AVCQCYheS5BSoSfK63mymGbndnc3O67DIxifLxMIMRQ=) 8: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: YKogFc3LCv2smSbI9VS3VlSDt3/kbrsDgP8adJABQHE=) 9: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: zfUtoWma6yrS91X836rvH56Roq4o4T2ksBJ5tvM84KA=) 10: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: LULC79bR5urCWK9LJ8T/IwclWUcY8RdpHGD/jOzeh8c=) 11: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl (hash: jGsgnJd6h9IQAgFOoid6ka9QcE04BYJt/HVdKZOQChs=) 12: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: f/arRfXAUGPd0PxBrTY92XVsLoDe3ia1QDQqr6ZPyiI=) 13: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: Yij8hR3THKb1LJQK8YbFbQB/18X0FAtAoVyRKdcSfao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 09:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2f:d4:03:ae:7e:57:ff:1a:a8:c4:bf:27:5d:30:2c:90:8f:50:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B Validity Not Before: Apr 8 02:46:44 2025 GMT Not After : Apr 11 09:15:44 2025 GMT Subject: CN=8959A38C1B921E50B9A3C414995346EFCD280B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:2a:c8:a9:bf:0f:77:16:7f:8d:2d:0f:d6: 6c:5f:9d:ae:13:1a:13:34:bc:2a:2e:3a:b0:b1:5b: 3f:fe:ac:d7:71:f7:01:97:18:51:7b:f1:85:9d:d2: 93:35:23:77:66:0f:fe:2d:14:e2:e8:c2:f2:49:67: 40:4d:33:9b:d9:d4:aa:bd:d1:49:35:9d:b6:a8:28: 0c:55:80:c3:91:bc:0e:9d:c9:72:ee:dd:9b:c5:be: c8:7f:34:38:c8:eb:f6:85:f4:3f:9b:a0:45:68:69: 74:d4:f2:1d:51:00:4f:f7:a5:a8:33:95:a9:b3:17: bb:cd:9c:ef:90:6d:f4:93:7c:5e:9d:f7:89:61:30: aa:8f:23:b7:20:bb:2d:6d:09:b4:0e:7b:c8:f7:76: 3c:54:07:27:02:aa:6b:65:cb:39:30:57:67:58:bf: 86:d8:00:29:5d:ad:17:a1:20:5b:6f:ff:cd:fa:dc: f2:35:e7:63:5a:90:d5:2b:04:d5:84:97:88:59:f1: 42:12:44:6b:fd:83:07:8d:b9:6b:8a:d8:2f:7a:3d: 75:d7:eb:3b:31:65:f6:22:f0:86:5c:19:9b:27:fc: 31:9e:c0:4c:3a:56:0b:6d:56:48:f7:87:85:5b:0a: 9f:3c:08:26:d0:6e:8f:e4:f4:2a:55:00:e5:3a:98: 0b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:59:A3:8C:1B:92:1E:50:B9:A3:C4:14:99:53:46:EF:CD:28:0B:4E X509v3 Authority Key Identifier: keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e1:ba:b5:24:22:55:4c:0f:9c:97:8e:df:c9:77:44:86:40: 20:bd:fc:bb:9b:29:c6:fb:b5:1e:b1:61:55:29:90:64:8e:0e: 83:ae:bc:dc:d2:19:f2:4d:fb:26:f5:c4:40:14:7f:26:9a:39: 04:bc:15:b0:39:5f:bc:78:ba:30:00:8d:c2:9c:47:1c:a5:ec: 3b:1f:25:ca:fa:a8:13:6a:95:b2:67:a7:74:c5:fe:5b:e9:11: 52:a9:5c:6a:59:7e:e1:1d:c7:e8:ba:0d:1e:df:71:a5:d2:3a: 9f:e2:8c:fd:61:41:e2:94:89:88:67:f9:ab:2a:15:1a:a2:a5: 51:c3:b1:bd:bd:a9:cc:62:fa:d4:ab:74:e1:bd:45:b9:a3:a0: 63:23:e6:3d:fd:1f:23:92:e5:6c:bf:16:90:f9:65:c2:94:bb: 77:c7:16:e7:53:dc:5f:dc:cd:9d:b5:aa:69:b3:5e:6e:99:6b: 85:c9:a9:bf:26:a7:76:39:6a:be:b2:ef:0b:26:fb:12:c7:12: 63:c4:07:bd:e7:e4:91:d8:65:fe:e3:a3:5e:dd:b6:cf:d8:99: 03:32:73:df:99:57:8e:61:9a:4e:d9:a2:82:98:b9:40:e3:69: 87:35:0e:d1:14:e3:7a:92:03:43:7f:4d:78:bf:df:3c:b1:59: 94:c5:90:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQi/UA65+V/8aqMS/J10wLJCPUKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5RUU5 REUzMjAxQjAeFw0yNTA0MDgwMjQ2NDRaFw0yNTA0MTEwOTE1NDRaMDMxMTAvBgNV BAMTKDg5NTlBMzhDMUI5MjFFNTBCOUEzQzQxNDk5NTM0NkVGQ0QyODBCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwCrIqb8PdxZ/jS0P1mxfna4T GhM0vCouOrCxWz/+rNdx9wGXGFF78YWd0pM1I3dmD/4tFOLowvJJZ0BNM5vZ1Kq9 0Uk1nbaoKAxVgMORvA6dyXLu3ZvFvsh/NDjI6/aF9D+boEVoaXTU8h1RAE/3pagz lamzF7vNnO+QbfSTfF6d94lhMKqPI7cguy1tCbQOe8j3djxUBycCqmtlyzkwV2dY v4bYACldrRehIFtv/8363PI152NakNUrBNWEl4hZ8UISRGv9gweNuWuK2C96PXXX 6zsxZfYi8IZcGZsn/DGewEw6VgttVkj3h4VbCp88CCbQbo/k9CpVAOU6mAtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiVmjjBuSHlC5o8QUmVNG780oC04wHwYDVR0j BBgwFoAU1VvoIXoiIS+Xe9lbQffJ7p3jIBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGY1Y2ZkYi03OTg3LTQzNTEtYmMyZS02NmMyNGY0OWY0NDAvMC9ENTVCRTgyMTdB MjIyMTJGOTc3QkQ5NUI0MUY3QzlFRTlERTMyMDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5RUU5REUz MjAxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBmNWNmZGItNzk4Ny00MzUxLWJj MmUtNjZjMjRmNDlmNDQwLzAvRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5 RUU5REUzMjAxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnhurUkIlVMD5yXjt/Jd0SGQCC9/LubKcb7 tR6xYVUpkGSODoOuvNzSGfJN+yb1xEAUfyaaOQS8FbA5X7x4ujAAjcKcRxyl7Dsf Jcr6qBNqlbJnp3TF/lvpEVKpXGpZfuEdx+i6DR7fcaXSOp/ijP1hQeKUiYhn+asq FRqipVHDsb29qcxi+tSrdOG9RbmjoGMj5j39HyOS5Wy/FpD5ZcKUu3fHFudT3F/c zZ21qmmzXm6Za4XJqb8mp3Y5ar6y7wsm+xLHEmPEB73n5JHYZf7jo17dts/YmQMy c9+ZV45hmk7ZooKYuUDjaYc1DtEU43qSA0N/TXi/3zyxWZTFkNI= -----END CERTIFICATE-----Generated at Tue Apr 8 12:31:28 2025 by rpki-client