$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft File: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json) Hash identifier: KOjagHj4iV6m8QhaGTYq1NOZ3D8G03p1QIYhKhVYCRM= Subject key identifier: 29:A2:11:71:4A:E2:F0:F0:AF:24:31:58:75:53:F0:9F:79:1F:D3:D2 Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 2C13F8877DE3847FD287F2C89D32E1807F22045C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft Manifest number: 0221 Signing time: Mon 02 Jun 2025 05:41:39 +0000 Manifest this update: Mon 02 Jun 2025 05:36:39 +0000 Manifest next update: Thu 05 Jun 2025 09:32:39 +0000 Files and hashes: 1: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: 7HCsscFWHwPhWZMbOcuZYtCZgWu1kaGruUGGQu1z3Bg=) 2: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: N4ska4jT8GyC3wJ6UeRa470yDVKPeDBNuPa3uDDzMig=) 3: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: Q3P+SORmjSYUFWgFOxdx+KlxGjY858iSOT5wN8UZTKY=) 4: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: DFRzEWprrOiMSjx8SdHUt/uuD1K0oSG6/Rb0USOR/B8=) 5: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: Aybn7R6DKZgLNsyzOnIC5OzvxsaaE/Jkwzj5+uIo0ZA=) 6: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: UK4y8U5FoaH31XYzSF1KACuxC0U7L5WzRWdPY69Zp1w=) 7: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: xtD4NorzIKyUJeEfNgVo0ESCO/9jj+bjHUWQd0PWTDA=) 8: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: GJY1uBn3hVszaq39dLLaSk2stRsKkoqme7WPjFA16js=) 9: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: TGXfQuq1RmcYG5/rcQ5+kCiPWG3n75g2FUN2iHTafgE=) 10: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: XDEGp8lWijrl4t6mUpWpRG/6LTKurJQjMuROjmEiZ6Q=) 11: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: Y7lmNtoprlRJly9WgGsWn6qQ0ew2imeiy62+KuKF1lw=) 12: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: 01GhR87m6uISdoaVmw5/Uom42dMtA6W3HSfDP759MWE=) 13: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: BLOc4k1k/6kYVTD4owYMmHx5OOK/8Y7LoDi9RBV5ZS8=) 14: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: Q22qi3xb98eBuj9sBQO9mzhs3I+LBBNAjjNyEh+bB/I=) 15: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: oldOLTzbZdnxuKb1GFFk/KT+RuyBaJzPj+vjKkTBhf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 09:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:13:f8:87:7d:e3:84:7f:d2:87:f2:c8:9d:32:e1:80:7f:22:04:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Jun 2 05:36:39 2025 GMT Not After : Jun 5 09:32:39 2025 GMT Subject: CN=29A211714AE2F0F0AF2431587553F09F791FD3D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:3f:3d:58:c4:9b:f5:26:19:a1:52:58:a8: 48:5f:db:1c:5f:01:aa:8f:06:42:f7:6a:ef:d0:c3: 8a:7e:42:04:98:33:9c:d7:81:6d:cd:5a:d1:39:2b: ee:20:9c:a4:2f:66:de:76:ff:7b:49:6e:40:5f:ac: cd:0c:5d:40:31:6e:50:a6:3e:6e:43:4b:da:cc:5d: 86:ce:d4:2b:e4:70:36:89:93:ab:45:c6:53:f9:cb: eb:86:5d:f3:58:77:dc:ec:46:7a:7d:a1:f8:7d:37: 45:89:8e:73:49:bb:76:bf:cf:23:60:49:4f:eb:3c: 58:0e:78:ff:07:fc:73:82:01:84:4f:fd:a7:ce:0e: f3:1e:2c:e6:8c:8d:fd:ec:e6:3a:97:86:61:71:16: 6b:ff:17:23:96:19:cd:cd:8f:57:76:0f:ae:7e:bb: 19:92:85:6a:1f:8f:82:1c:ed:13:2a:2d:db:46:c2: 2a:a4:f2:64:de:74:7a:b5:9b:72:5b:75:0f:46:d9: 7a:bf:ca:9a:1a:23:c8:c8:de:db:8d:d4:2e:be:12: cd:d1:0c:99:e3:27:7f:67:74:8c:ef:4c:bc:f6:08: 08:81:47:46:73:8b:af:2e:ac:f6:31:53:19:f8:aa: 71:58:3d:9a:a7:97:e5:e3:dd:2f:08:68:d3:2d:35: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A2:11:71:4A:E2:F0:F0:AF:24:31:58:75:53:F0:9F:79:1F:D3:D2 X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3e:44:13:b2:b0:53:ea:83:d2:fd:3e:f7:de:76:49:b5:ab: c4:bc:9c:a0:14:4f:6e:d3:89:7d:e5:9d:8f:23:9f:e8:7c:13: c9:99:cf:98:31:7e:18:fe:37:ac:a6:80:5c:7f:b5:77:45:eb: 01:b1:76:ef:b5:d8:e0:cf:f3:26:cd:da:f8:eb:9a:26:3b:15: 82:cc:ab:7e:65:11:91:bb:6c:d9:0a:f0:11:5e:f9:b8:2e:f0: 22:ff:ca:97:6f:f0:19:2f:d6:ec:6a:0a:7c:e3:e2:4d:6d:31: f1:5e:93:8d:e7:6c:a7:db:5d:79:16:cc:98:f1:61:46:19:a8: 47:61:c6:b4:b6:20:07:02:9e:ee:4a:c4:32:95:3b:d1:ac:d9: 00:ce:89:4e:fa:ac:9e:0e:16:e3:e2:ce:95:81:6f:2c:35:24: bc:ee:4a:4e:e3:e1:f7:b4:e9:16:1e:2c:28:5c:12:df:7a:ca: 05:52:c2:70:8d:7d:ad:44:ab:32:69:9b:0f:86:9e:c1:f5:9e: 1e:39:0e:ba:11:b4:f9:55:21:6e:a3:bd:1e:7d:70:e8:55:a7: 64:a2:14:43:48:2b:d3:df:e5:47:82:d9:ea:97:01:e8:1e:b9: 49:ea:37:c7:79:69:3f:39:af:12:8a:a2:70:c0:10:bb:90:27: 42:ff:b6:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBP4h33jhH/Sh/LInTLhgH8iBFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNTA2MDIwNTM2MzlaFw0yNTA2MDUwOTMyMzlaMDMxMTAvBgNV BAMTKDI5QTIxMTcxNEFFMkYwRjBBRjI0MzE1ODc1NTNGMDlGNzkxRkQzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLD89WMSb9SYZoVJYqEhf2xxf AaqPBkL3au/Qw4p+QgSYM5zXgW3NWtE5K+4gnKQvZt52/3tJbkBfrM0MXUAxblCm Pm5DS9rMXYbO1CvkcDaJk6tFxlP5y+uGXfNYd9zsRnp9ofh9N0WJjnNJu3a/zyNg SU/rPFgOeP8H/HOCAYRP/afODvMeLOaMjf3s5jqXhmFxFmv/FyOWGc3Nj1d2D65+ uxmShWofj4Ic7RMqLdtGwiqk8mTedHq1m3JbdQ9G2Xq/ypoaI8jI3tuN1C6+Es3R DJnjJ39ndIzvTLz2CAiBR0Zzi68urPYxUxn4qnFYPZqnl+Xj3S8IaNMtNe1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKaIRcUri8PCvJDFYdVPwn3kf09IwHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4NWM2YjktMzRmOS00YTg1LTlj ZWEtYzE2ZTk4YThiNWUwLzAvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVG QTY0NDRERjJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHk+RBOysFPqg9L9Pvfedkm1q8S8nKAUT27T iX3lnY8jn+h8E8mZz5gxfhj+N6ymgFx/tXdF6wGxdu+12ODP8ybN2vjrmiY7FYLM q35lEZG7bNkK8BFe+bgu8CL/ypdv8Bkv1uxqCnzj4k1tMfFek43nbKfbXXkWzJjx YUYZqEdhxrS2IAcCnu5KxDKVO9Gs2QDOiU76rJ4OFuPizpWBbyw1JLzuSk7j4fe0 6RYeLChcEt96ygVSwnCNfa1EqzJpmw+GnsH1nh45DroRtPlVIW6jvR59cOhVp2Si FENIK9Pf5UeC2eqXAegeuUnqN8d5aT85rxKKonDAELuQJ0L/tgM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:14 2025 by rpki-client