$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft File: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json) Hash identifier: KcIE8v7X/fMOC6Ov6KUl3G7zFbVn9iOOWlMnk/7/NbU= Subject key identifier: B1:CC:D7:A6:5D:50:66:DE:80:43:F0:8D:78:90:69:0F:9B:B0:17:6B Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 11634F2F89EE8FFCB1F13149BD1E25C5E2B10832 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft Manifest number: 04E0 Signing time: Sun 06 Apr 2025 01:10:49 +0000 Manifest this update: Sun 06 Apr 2025 01:05:49 +0000 Manifest next update: Wed 09 Apr 2025 07:17:49 +0000 Files and hashes: 1: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: ymwaUvhXT8JXSJrNzjbP7gt7yXJ53LxTJX8Voq/f/74=) 2: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=) 3: 3131302e37362e3134382e302f32332d3234203d3e20313333383330.roa (hash: hJMSnRVsi5t20DGIdOobYby7Tk1CLRDO/LphhBQDrQ8=) 4: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: xEFUme6BdJrCCky3XxVgHWoY8zWzoOs6BinidgdGR84=) 5: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: Jx6gu7CM37SUOvL42UESgBTOXc6oDUc/aIFJ06b8y3o=) 6: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: KoEPh6lpEMSvfnV/vjmbsJ0wLOTaFFj1PpSDlGO5Ls8=) 7: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: +6pVD67UjeVGjTszHXfeH5DOs+PMEo+OZcwkbcYuJKY=) 8: 3131302e37362e3134362e302f32332d3234203d3e20313333383330.roa (hash: doIbs8zz9lB7/vkO+u9W5RaBu7bEf1LnEdR5gQfSEj4=) 9: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 7oqjul+B96Fyx6/pagmyjP5QQVBBMq8zOtlvMQysbzI=) 10: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: jYKdHs/1nDVZ/+Ed/Vmdxf+QRP9rr+yNjg2t9L7K9P0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 07:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:63:4f:2f:89:ee:8f:fc:b1:f1:31:49:bd:1e:25:c5:e2:b1:08:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Apr 6 01:05:49 2025 GMT Not After : Apr 9 07:17:49 2025 GMT Subject: CN=B1CCD7A65D5066DE8043F08D7890690F9BB0176B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a2:5c:8c:4b:a1:3a:7f:cb:34:da:82:56:f2: 87:74:1e:a8:16:c1:c7:88:99:6e:77:32:2e:a6:33: 73:b2:18:ef:64:d2:d2:39:82:ef:0e:29:fc:ba:29: 10:a5:5a:35:19:48:7c:54:2f:fa:95:9f:0b:fd:85: e5:f1:4a:bb:2e:bd:fd:50:f1:cf:71:e9:c7:41:b0: 4d:65:6d:aa:c1:b7:c1:0a:79:d2:e6:f0:10:3d:73: 7a:67:b6:2a:4d:07:0c:17:ed:de:dc:8e:f8:7f:0c: 55:56:9e:59:a0:7f:cd:58:0b:30:5e:13:57:09:09: 72:66:14:38:41:fc:7c:37:60:7c:ab:69:d4:ba:3b: e2:18:06:4f:00:de:f9:43:5b:13:a6:ff:79:69:6b: 3b:97:2e:64:df:11:71:26:5f:43:5b:f8:f5:11:07: 79:19:11:a2:a6:6e:28:5e:d2:89:6d:f6:6b:23:92: 70:c8:16:22:09:ae:33:2d:63:02:08:f3:6d:14:5e: a5:ce:1d:4b:44:4f:84:e4:b9:1e:00:02:21:72:3b: 53:6d:58:75:5a:66:2e:2d:d7:91:c8:67:3a:94:c5: ee:7c:1e:85:5e:84:ef:e1:6b:c0:46:b1:40:f4:35: 5e:85:83:af:12:68:cf:24:d3:17:f3:b1:be:c8:84: e6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CC:D7:A6:5D:50:66:DE:80:43:F0:8D:78:90:69:0F:9B:B0:17:6B X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:51:d8:0d:31:49:6f:2b:cd:6d:03:9d:e5:5b:bb:ee:bc:d3: dc:1a:47:6a:6a:cf:36:ee:2d:f6:19:79:a2:98:67:9c:f4:c4: eb:99:98:86:22:f6:8b:c0:ef:64:b5:68:0f:0e:77:3a:cc:04: 94:d5:d2:c3:5d:dd:17:38:d0:3b:3c:ee:93:51:97:71:f6:ce: c6:43:20:5b:27:91:dd:e4:a4:b9:89:42:08:43:eb:61:2b:e5: 2e:10:2c:f7:4e:7f:3b:62:43:bc:dc:57:f1:01:89:39:be:6b: cb:7a:63:92:06:46:71:80:2c:28:75:a1:6b:f0:d2:dc:57:c5: 52:ca:63:de:a2:ae:7a:e4:af:6c:8c:4a:f5:94:de:5f:b6:ae: 5e:26:d5:bf:54:65:db:4e:00:e3:9b:f2:da:c2:5a:fb:06:78: 07:c0:9e:70:af:a6:0e:11:20:5d:a8:24:e1:28:10:be:8c:de: fd:20:da:c6:04:5d:18:a2:22:7e:7b:08:f6:96:88:60:7d:cb: 90:e0:1a:28:ff:38:7c:c8:8c:9c:ca:36:38:0a:45:3f:5d:9a: 63:76:6e:63:1d:a9:8c:d7:45:b9:d6:a6:7e:ee:97:23:20:f4: 1b:4b:00:1c:f7:3f:36:9f:b1:6f:b1:c8:9a:30:a4:02:ce:f6: c5:ab:b1:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWNPL4nuj/yx8TFJvR4lxeKxCDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNTA0MDYwMTA1NDlaFw0yNTA0MDkwNzE3NDlaMDMxMTAvBgNV BAMTKEIxQ0NEN0E2NUQ1MDY2REU4MDQzRjA4RDc4OTA2OTBGOUJCMDE3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgolyMS6E6f8s02oJW8od0HqgW wceImW53Mi6mM3OyGO9k0tI5gu8OKfy6KRClWjUZSHxUL/qVnwv9heXxSrsuvf1Q 8c9x6cdBsE1lbarBt8EKedLm8BA9c3pntipNBwwX7d7cjvh/DFVWnlmgf81YCzBe E1cJCXJmFDhB/Hw3YHyradS6O+IYBk8A3vlDWxOm/3lpazuXLmTfEXEmX0Nb+PUR B3kZEaKmbihe0olt9msjknDIFiIJrjMtYwII820UXqXOHUtET4TkuR4AAiFyO1Nt WHVaZi4t15HIZzqUxe58HoVehO/ha8BGsUD0NV6Fg68SaM8k0xfzsb7IhObzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsczXpl1QZt6AQ/CNeJBpD5uwF2swHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZC QzQ1MUJDMTdBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNR2A0xSW8rzW0DneVbu+6809waR2pqzzbu LfYZeaKYZ5z0xOuZmIYi9ovA72S1aA8OdzrMBJTV0sNd3Rc40Ds87pNRl3H2zsZD IFsnkd3kpLmJQghD62Er5S4QLPdOfztiQ7zcV/EBiTm+a8t6Y5IGRnGALCh1oWvw 0txXxVLKY96irnrkr2yMSvWU3l+2rl4m1b9UZdtOAOOb8trCWvsGeAfAnnCvpg4R IF2oJOEoEL6M3v0g2sYEXRiiIn57CPaWiGB9y5DgGij/OHzIjJzKNjgKRT9dmmN2 bmMdqYzXRbnWpn7ulyMg9BtLABz3PzafsW+xyJowpALO9sWrsV8= -----END CERTIFICATE-----Generated at Tue Apr 8 05:51:12 2025 by rpki-client