$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft File: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json) Hash identifier: aw/NMSWWFMm5KPnoHeGUnZ7LrqTmAGVfsIJYhzZnJ2k= Subject key identifier: 89:A1:4B:13:50:31:57:65:43:4F:15:15:54:0E:78:7E:11:80:01:5D Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 5778F20A1BE92F8CDD917284D6531A055FA53767 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft Manifest number: 0500 Signing time: Mon 02 Jun 2025 01:02:43 +0000 Manifest this update: Mon 02 Jun 2025 00:57:43 +0000 Manifest next update: Thu 05 Jun 2025 07:01:43 +0000 Files and hashes: 1: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: KoEPh6lpEMSvfnV/vjmbsJ0wLOTaFFj1PpSDlGO5Ls8=) 2: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: 9fAo1ZS4kQDBVBM3bTpYGNBnys4V1dCzSLFIKBS692g=) 3: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=) 4: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=) 5: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=) 6: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=) 7: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=) 8: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=) 9: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: ymwaUvhXT8JXSJrNzjbP7gt7yXJ53LxTJX8Voq/f/74=) 10: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=) 11: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: +6pVD67UjeVGjTszHXfeH5DOs+PMEo+OZcwkbcYuJKY=) 12: 3131302e37362e3134382e302f32332d3234203d3e20313333383330.roa (hash: hJMSnRVsi5t20DGIdOobYby7Tk1CLRDO/LphhBQDrQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 07:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:78:f2:0a:1b:e9:2f:8c:dd:91:72:84:d6:53:1a:05:5f:a5:37:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Jun 2 00:57:43 2025 GMT Not After : Jun 5 07:01:43 2025 GMT Subject: CN=89A14B1350315765434F1515540E787E1180015D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:d7:32:6f:1d:c9:9e:b7:a3:8f:f8:5b:3c: f7:c6:19:f0:04:30:fd:45:ed:8b:34:c3:4f:ef:01: 5e:5c:e1:0c:33:b1:72:9f:62:6f:cb:46:9e:2f:2d: fd:e6:8b:05:02:d2:35:03:77:c1:ae:f3:55:26:5b: 65:37:5c:0c:10:e9:c7:7c:0e:d0:e6:14:58:2e:f3: 3a:d0:fa:77:0b:a3:b0:1a:57:bb:4d:c9:57:03:e5: 09:58:e2:09:56:a9:f1:44:f7:68:0f:54:32:66:87: fe:26:5b:89:ce:2c:5a:7f:73:b4:30:16:0c:05:4b: 4d:14:ad:ac:a7:f6:cf:bb:7a:aa:26:5b:2f:77:62: 29:0f:ee:50:3c:f5:04:9b:cc:1d:ad:b7:ca:ac:3c: d2:53:c2:d6:c7:46:40:11:71:e4:f3:f5:ec:2a:84: a9:97:5b:99:e9:7b:96:6d:3b:86:b8:fc:9a:4c:26: db:7e:35:c1:fe:19:a3:52:78:76:4e:d2:4f:6a:98: 5a:1d:b0:86:27:57:22:da:fa:03:fc:a4:20:99:ca: 7f:b4:5c:90:34:d6:a9:91:92:6b:0d:92:c1:60:c8: 85:a4:25:3a:c8:83:3d:43:bd:86:10:c3:cb:42:60: 5a:58:8a:2d:03:01:3b:6d:8c:15:bf:3e:77:72:84: af:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A1:4B:13:50:31:57:65:43:4F:15:15:54:0E:78:7E:11:80:01:5D X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c6:55:73:81:7f:ae:57:ac:9c:6b:63:a7:af:dc:e6:74:b5: 36:e6:d3:b2:91:83:fe:26:20:e4:44:9c:a4:7e:b7:b5:00:2e: d0:77:02:5b:99:99:fe:67:40:44:fd:0f:01:6b:b9:ab:b7:d4: 15:9c:bd:0e:bf:46:12:93:54:4c:ce:05:32:1c:4d:4d:dc:e0: 85:a7:2f:d2:62:08:66:0e:96:d5:64:f2:a8:17:8f:9f:c6:fb: c7:93:33:14:56:ff:c6:7a:68:46:84:f0:a1:28:fb:eb:0d:88: 56:fa:b9:d1:5c:fb:79:f3:56:85:87:83:8a:79:c0:4a:55:2d: 36:d5:de:fb:40:4c:f1:7e:ea:52:a3:ec:7a:96:9f:08:38:e2: 9e:30:ff:af:84:2e:06:72:8a:27:2c:71:ac:54:3b:76:92:e3: 3c:c6:79:f8:48:c8:27:9d:a2:c7:14:90:11:91:0e:ac:ab:1d: 24:9d:10:e5:3f:5c:51:14:62:ad:cd:97:48:03:b9:6d:dd:e0: ce:20:b7:eb:12:72:06:6d:63:9f:78:6d:23:58:84:2f:2f:37: 94:0b:de:c9:7e:08:c8:07:89:01:e1:95:d4:0e:22:09:6b:d1: b7:53:b3:5b:7e:04:67:9f:ca:a3:e9:4c:ac:14:a7:69:37:ac: 72:19:c4:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3jyChvpL4zdkXKE1lMaBV+lN2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNTA2MDIwMDU3NDNaFw0yNTA2MDUwNzAxNDNaMDMxMTAvBgNV BAMTKDg5QTE0QjEzNTAzMTU3NjU0MzRGMTUxNTU0MEU3ODdFMTE4MDAxNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChy9cybx3Jnrejj/hbPPfGGfAE MP1F7Ys0w0/vAV5c4QwzsXKfYm/LRp4vLf3miwUC0jUDd8Gu81UmW2U3XAwQ6cd8 DtDmFFgu8zrQ+ncLo7AaV7tNyVcD5QlY4glWqfFE92gPVDJmh/4mW4nOLFp/c7Qw FgwFS00Urayn9s+7eqomWy93YikP7lA89QSbzB2tt8qsPNJTwtbHRkARceTz9ewq hKmXW5npe5ZtO4a4/JpMJtt+NcH+GaNSeHZO0k9qmFodsIYnVyLa+gP8pCCZyn+0 XJA01qmRkmsNksFgyIWkJTrIgz1DvYYQw8tCYFpYii0DATttjBW/PndyhK9rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiaFLE1AxV2VDTxUVVA54fhGAAV0wHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZC QzQ1MUJDMTdBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHGVXOBf65XrJxrY6ev3OZ0tTbm07KRg/4m IOREnKR+t7UALtB3AluZmf5nQET9DwFruau31BWcvQ6/RhKTVEzOBTIcTU3c4IWn L9JiCGYOltVk8qgXj5/G+8eTMxRW/8Z6aEaE8KEo++sNiFb6udFc+3nzVoWHg4p5 wEpVLTbV3vtATPF+6lKj7HqWnwg44p4w/6+ELgZyiicscaxUO3aS4zzGefhIyCed oscUkBGRDqyrHSSdEOU/XFEUYq3Nl0gDuW3d4M4gt+sScgZtY594bSNYhC8vN5QL 3sl+CMgHiQHhldQOIglr0bdTs1t+BGefyqPpTKwUp2k3rHIZxEE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:20 2025 by rpki-client