$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft File: D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft (raw, json) Hash identifier: lZCQT2NmQaKj2QCnm9BtFGsUxmq8eCPnouTPXD+rN8U= Subject key identifier: 01:12:CF:2D:C9:62:67:4D:42:00:DF:35:1B:74:D6:B6:B1:BF:73:7A Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 2FC9F4A1C948F9FF8A4B124D9F6137BA424BF671 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft Manifest number: 04C7 Signing time: Fri 04 Apr 2025 17:50:55 +0000 Manifest this update: Fri 04 Apr 2025 17:45:55 +0000 Manifest next update: Mon 07 Apr 2025 19:59:55 +0000 Files and hashes: 1: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (hash: gxRlEy62IQ/+2n9SBFAzhaFlf7sBH8R2QUWIEbd9syU=) 2: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: iyW9TPmWhBYjJhG6ktuX+iOmAVfn32yusUoXn1u8AaY=) 3: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (hash: 9FTAGKiQmeFJOlFLN7erM3ySnha6qhZQ4aZ77M+n87k=) 4: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (hash: 5QhcoKJWtRFQEO//nIRJYfjUFo4UPKRIgqthd7tXGjM=) 5: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: 2YgnGuBgupXHigAy5cck+4iL3rI5YWUfJ3NIzrnjjHI=) 6: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: SE3H4B/meoJw/h1QWLI6uYkZTsm1TtEA1FVx9lAYQqc=) 7: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: lVEj7yVRgPAOnA7GTJazM1LkRb/e2JCSnpV+CcugS70=) 8: D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl (hash: qcq6k62NE6KH0WUSk3ElZisXyOwYuvUBcP6qfD9wwhg=) 9: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: SKYWW20Abnx/5lU9O9LX85BE1/cgHI8xjyGVtNWFFEk=) 10: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: RNFpYRHF4a3Y05xTroHkAwTvBAOVbEqea+i44/HVpfI=) 11: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (hash: 7K0G5vNv7Y3ljUrf0PTDHAFoQShBhNpCUNJdZCmXPYo=) 12: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: iwJPho2s6qq0KyeSOEQhEHDLd1n6Oem8LSKb+Ccq3l8=) 13: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: HOsHPo1xAIzrTXK6CcMOBAMoH+csp0pI+1JLcbIAAiw=) 14: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: Y1oCqWhI4ks8Qk8E0i8FSAtzpwHyZf/dJP9cfNluxfY=) 15: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: +b4h9S2+oVnKYs/dOK4BRoiJ0S7abrM3iZLut9+i2OM=) 16: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: To6XzRyJshESWUSKykRlBtNC8c2Bk+tQEeVtvyUvMDk=) 17: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (hash: KXDKmuqyOo6vK3hIz+8YQ8vXeK8vyv9j98U886bNxZU=) 18: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: Ypc7ujf7+ExmC4bhL/UwizErkNCeWCzICEE/pDtkxNQ=) 19: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: hpl84yrty/TkWgCR5tMpUtnm3W3TF/Fq687Q+Fh02NM=) 20: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: 49GaAONRTztAZUBI3terW3rMJ2d/tzm3bqYy1W0/6E4=) 21: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (hash: mE/fZ/xaqpqZ2vVVsQ6HShpSncnBCRhwC3MXSzjY5G0=) 22: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (hash: ApsYy3XjFlolZnpc/0DGW8loTu4knnHR7uGy5K34oVY=) 23: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: /zK7CEVP2D1oK60+Ri5gPSf/K/E0Nwq8cp5N8By1eaQ=) 24: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: L7+n4epUrFpGvSvBN74HBi8pkHEmUp3RzIqyrv/xLq0=) 25: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (hash: zjrcKrFr9aMGx/ZEMncl51qSmuAxDcxz6gkBdoAaiAc=) 26: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: IMkP74GPL2kGheZ8dQ08iPMcyITh63ZFDWK3TOOKRbU=) 27: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (hash: qlf861dkC0jBnJxRZZkWrrJmMKLad7lN/+nrPr773Js=) 28: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: ZGUgYTk8QiqAbfih+QUUlVLr0b++PfvjTFFtUd4YvL0=) 29: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (hash: FinrK90SRn8DqUDbf83eitRiJRJgDm84dXVKodf5qbw=) 30: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: 00nMGyOZAW/UjpW5/cc1SmmuqHhs6+8tZyhfFG9WetQ=) 31: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: JwqZWB7hxl3s6TlCT78fazas+3WWGPuii4mnGmIngWY=) 32: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: utI8KJuWv8xv+Z8SnL92hh4vRbeETxlFf5LVsdJh+rA=) 33: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: sjGKVbmqhkwUBYIG9EW3ESTYbDKUVnyKhN/xWfNMfpE=) 34: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: lEo4rhbdu+7IvYqGcxMrBvgcrxGUdBW821pk/dWFkU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c9:f4:a1:c9:48:f9:ff:8a:4b:12:4d:9f:61:37:ba:42:4b:f6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Apr 4 17:45:55 2025 GMT Not After : Apr 7 19:59:55 2025 GMT Subject: CN=0112CF2DC962674D4200DF351B74D6B6B1BF737A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ef:6b:3b:0c:6b:b5:50:af:73:90:6c:00:7f: 6c:0e:2d:d4:0b:81:28:68:15:da:80:f7:56:53:b2: 94:11:7f:fa:be:d1:b2:cb:58:83:fe:ba:93:15:51: 63:f0:79:fc:ee:fc:03:e2:22:8b:f1:50:a0:13:1b: ef:67:38:e2:c2:0d:ef:56:14:c3:a8:39:00:e9:4d: c6:59:43:37:ca:8d:8e:e7:33:49:d1:49:3d:29:91: fc:dd:ed:5d:99:e9:fe:03:5b:84:d3:64:6a:d3:c3: 96:d3:0b:4f:a0:a0:e1:5a:ef:14:b9:3d:fb:d2:8a: c6:d3:03:f0:43:b5:2a:a6:66:2a:14:b5:5a:56:f6: 07:d7:83:26:4e:c9:3b:3b:65:46:a3:04:ad:46:10: 9d:bc:36:04:9a:44:fe:4f:a7:4d:1c:bc:51:dd:c8: 8f:cd:c4:4a:4a:a1:51:d2:c0:ff:c3:cf:71:8e:19: 18:7b:07:4b:23:48:09:cb:41:09:9f:ad:b4:26:b7: 5d:3a:25:8d:82:27:f3:d4:8b:94:1d:6c:68:8e:0e: 12:0d:71:ed:83:a6:b0:09:ca:5b:8e:f9:54:66:16: 26:55:6f:35:05:51:a1:cf:fe:ba:8c:36:cf:37:47: 9c:45:5e:01:f4:00:2d:32:fe:8e:96:ee:cd:62:78: 0f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:12:CF:2D:C9:62:67:4D:42:00:DF:35:1B:74:D6:B6:B1:BF:73:7A X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c7:85:dc:7c:a9:ef:e0:72:13:94:18:61:87:0b:64:21:19: 1c:b6:35:dd:f9:a6:17:f6:91:84:ed:43:88:d8:83:ae:81:9d: d4:f3:1a:a1:b4:56:59:b2:51:a0:b1:15:66:a5:3c:ec:74:49: 2e:5e:e4:f5:0a:df:95:ab:39:24:c8:a9:dc:77:70:34:e2:73: d0:44:53:1c:c1:84:bd:9e:78:ce:e1:92:fc:4a:00:c3:bc:6e: 92:69:eb:5c:77:8b:1e:bf:90:c7:cd:ba:16:d4:a9:1b:c4:f8: 4f:3d:ca:6b:1d:16:58:93:c5:92:2e:6a:eb:a5:dd:fb:8c:28: bc:40:2f:57:ea:02:97:fa:bf:5b:3c:71:92:8e:79:cc:30:fa: 8f:fb:dc:06:5c:3f:94:1c:86:e7:c2:1d:61:d1:19:84:c4:bb: 35:6a:0d:e1:9f:9c:06:a0:7d:3e:89:bb:22:ed:54:65:8c:bb: 77:44:37:a8:0c:1f:05:46:80:c7:2a:56:d7:50:e8:40:c1:4d: 77:51:4f:ce:87:26:47:4e:f8:19:28:07:73:26:a5:8b:7c:8c: 0e:77:59:92:07:71:5b:4d:48:07:19:e7:d8:fa:09:d1:1f:b9: fd:50:1a:ad:53:ea:5e:58:56:61:f8:1d:29:d5:56:3f:1c:59: 3b:75:22:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8n0oclI+f+KSxJNn2E3ukJL9nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNTA0MDQxNzQ1NTVaFw0yNTA0MDcxOTU5NTVaMDMxMTAvBgNV BAMTKDAxMTJDRjJEQzk2MjY3NEQ0MjAwREYzNTFCNzRENkI2QjFCRjczN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU72s7DGu1UK9zkGwAf2wOLdQL gShoFdqA91ZTspQRf/q+0bLLWIP+upMVUWPwefzu/APiIovxUKATG+9nOOLCDe9W FMOoOQDpTcZZQzfKjY7nM0nRST0pkfzd7V2Z6f4DW4TTZGrTw5bTC0+goOFa7xS5 PfvSisbTA/BDtSqmZioUtVpW9gfXgyZOyTs7ZUajBK1GEJ28NgSaRP5Pp00cvFHd yI/NxEpKoVHSwP/Dz3GOGRh7B0sjSAnLQQmfrbQmt106JY2CJ/PUi5QdbGiODhIN ce2DprAJyluO+VRmFiZVbzUFUaHP/rqMNs83R5xFXgH0AC0y/o6W7s1ieA8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUARLPLcliZ01CAN81G3TWtrG/c3owHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZC RDhEMEJFOTIzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnHhdx8qe/gchOUGGGHC2QhGRy2Nd35phf2 kYTtQ4jYg66BndTzGqG0VlmyUaCxFWalPOx0SS5e5PUK35WrOSTIqdx3cDTic9BE UxzBhL2eeM7hkvxKAMO8bpJp61x3ix6/kMfNuhbUqRvE+E89ymsdFliTxZIuauul 3fuMKLxAL1fqApf6v1s8cZKOecww+o/73AZcP5QchufCHWHRGYTEuzVqDeGfnAag fT6JuyLtVGWMu3dEN6gMHwVGgMcqVtdQ6EDBTXdRT86HJkdO+BkoB3MmpYt8jA53 WZIHcVtNSAcZ59j6CdEfuf1QGq1T6l5YVmH4HSnVVj8cWTt1Iv0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:46 2025 by rpki-client