$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: 6cDYGPpeD9t3esy34gyAvJTfw3q2a8/659KXrtkv/dw= Subject key identifier: 40:94:08:D5:44:BE:FA:68:1D:A0:12:06:9C:EB:7B:A7:99:33:0A:DB Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 7EA1FA8DE5CCE417BC969E896A44421CD664F473 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 0174 Signing time: Tue 03 Jun 2025 10:42:45 +0000 Manifest this update: Tue 03 Jun 2025 10:37:45 +0000 Manifest next update: Fri 06 Jun 2025 12:22:45 +0000 Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: YFqBunOn7BAxcRO9kxvgzIpLLgn70FZ5dEIXUOseJlA=) 2: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: gnmrbZ6phBcjgkNgTfRN5xt+ZC7Cm6KFgCfrhOm4VXQ=) 3: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: 2FbNCyBbTvgWS7aFYjsLlYd9SYY28PwsTt9mqOb3gc4=) 4: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: zq6FCBzDTt8AjXmbK9U4RXyugtl+khIAf1ju1PBBDs8=) 5: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: sYIup+Ei22Gs5UGjTU3Z1VGkX0WQ6lROxh+Id86N1xw=) 6: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: Iki/ujAUR2r8jEic7uIoweO5tx+ZoKhjiMwDTjulvbo=) 7: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 12:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a1:fa:8d:e5:cc:e4:17:bc:96:9e:89:6a:44:42:1c:d6:64:f4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Jun 3 10:37:45 2025 GMT Not After : Jun 6 12:22:45 2025 GMT Subject: CN=409408D544BEFA681DA012069CEB7BA799330ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fc:38:5d:84:c3:aa:5d:75:37:21:c5:a4:53: cf:89:a9:b6:68:07:76:58:3e:b0:d5:1b:86:a0:f0: e7:21:64:3f:dd:f5:6f:fa:e0:e7:a7:ab:2b:bc:1d: c7:c7:4c:bc:77:46:4d:bd:35:f5:0a:d2:2c:f2:37: 07:c6:b9:7b:67:99:3b:fe:ee:03:d8:64:10:63:92: 56:f9:9f:bb:a1:41:78:1d:a1:93:84:7f:90:87:84: 2d:40:a0:b6:b9:02:52:47:3e:92:2b:c1:4e:27:9c: 93:0c:81:72:08:bb:93:28:bf:b3:92:db:db:dc:ed: 43:fd:3b:dd:54:27:7a:5a:fa:c4:77:f4:7b:8a:91: 5f:7c:96:91:a9:87:c1:94:31:e0:01:05:2b:94:5c: 6f:48:cf:bb:60:bb:53:c3:88:f2:a2:47:c2:91:a8: f4:2e:6f:64:48:99:be:a0:eb:9f:af:5d:33:ad:f1: 73:4f:55:8f:7c:25:df:3f:f8:6f:12:11:d6:9a:9e: 30:77:72:b3:86:e7:0c:c7:52:1a:e8:df:1b:c7:65: 39:68:9f:b4:ac:f1:61:e0:3c:29:ff:f3:71:86:b3: 6d:30:a8:9f:69:9a:74:53:d8:39:3c:81:b6:32:9a: cb:5d:40:9d:aa:f9:f5:d0:d3:03:a5:51:60:f4:35: ff:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:94:08:D5:44:BE:FA:68:1D:A0:12:06:9C:EB:7B:A7:99:33:0A:DB X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:89:9e:b4:fc:90:12:78:16:e0:0c:2e:ae:8f:7a:4d:a8:62: f2:ed:fc:c0:f9:d5:16:32:30:d4:9a:5a:1b:49:06:34:fb:ff: 03:f4:eb:fe:b5:b3:37:8b:11:0e:e7:33:ed:2d:ff:fd:5e:ea: 92:b9:49:b7:04:77:b9:06:6e:5b:4e:08:27:86:ba:84:1a:1f: 37:e6:a3:5a:c7:91:3f:3d:a4:54:b2:3a:a3:ca:5a:2e:f6:17: 65:8a:69:a8:d6:9f:72:71:65:eb:0b:6f:96:d4:85:9d:e8:2b: 27:53:2b:8f:69:23:3f:76:6c:10:b3:95:ea:56:11:2c:74:05: 9f:de:0e:58:18:93:38:a2:43:96:cc:75:13:dd:1c:5a:a7:d2: ec:30:48:29:52:e9:ef:3e:4e:73:7a:9b:25:3f:e3:b8:e7:1c: 2b:48:f4:80:a4:cf:55:fb:a3:6c:11:b8:a2:07:cd:05:0d:df: 6e:ce:60:14:8d:e5:d2:fa:44:a9:dc:6f:11:7a:a3:6d:73:b4: 6d:a8:9b:c5:a4:07:db:ef:4a:f5:01:3c:0c:9b:bb:94:f9:f9: cb:d0:7e:b5:40:b8:ee:1c:c8:a3:ed:68:e3:06:5a:57:3f:bb: d6:33:60:7e:b7:9f:c4:ce:9b:98:ad:70:76:fb:98:57:23:ca: 82:fe:61:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqH6jeXM5Be8lp6JakRCHNZk9HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTA2MDMxMDM3NDVaFw0yNTA2MDYxMjIyNDVaMDMxMTAvBgNV BAMTKDQwOTQwOEQ1NDRCRUZBNjgxREEwMTIwNjlDRUI3QkE3OTkzMzBBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/DhdhMOqXXU3IcWkU8+JqbZo B3ZYPrDVG4ag8OchZD/d9W/64Oenqyu8HcfHTLx3Rk29NfUK0izyNwfGuXtnmTv+ 7gPYZBBjklb5n7uhQXgdoZOEf5CHhC1AoLa5AlJHPpIrwU4nnJMMgXIIu5Mov7OS 29vc7UP9O91UJ3pa+sR39HuKkV98lpGph8GUMeABBSuUXG9Iz7tgu1PDiPKiR8KR qPQub2RImb6g65+vXTOt8XNPVY98Jd8/+G8SEdaanjB3crOG5wzHUhro3xvHZTlo n7Ss8WHgPCn/83GGs20wqJ9pmnRT2Dk8gbYymstdQJ2q+fXQ0wOlUWD0Nf8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJQI1US++mgdoBIGnOt7p5kzCtswHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWJnrT8kBJ4FuAMLq6Pek2oYvLt/MD51RYy MNSaWhtJBjT7/wP06/61szeLEQ7nM+0t//1e6pK5SbcEd7kGbltOCCeGuoQaHzfm o1rHkT89pFSyOqPKWi72F2WKaajWn3JxZesLb5bUhZ3oKydTK49pIz92bBCzlepW ESx0BZ/eDlgYkziiQ5bMdRPdHFqn0uwwSClS6e8+TnN6myU/47jnHCtI9ICkz1X7 o2wRuKIHzQUN327OYBSN5dL6RKncbxF6o21ztG2om8WkB9vvSvUBPAybu5T5+cvQ frVAuO4cyKPtaOMGWlc/u9YzYH63n8TOm5itcHb7mFcjyoL+YRs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:48 2025 by rpki-client