$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: wBtiAop3v82lW2RwCZBM2YMHmq0yL5nAIJo8LEHjWRs= Subject key identifier: 8A:C8:44:59:31:98:50:62:F9:05:66:79:0F:B1:94:FA:2D:E7:C9:85 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 13991A24F102E0E08BA9D9489D015331EBFFB5D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 04CD Signing time: Fri 18 Apr 2025 21:11:11 +0000 Manifest this update: Fri 18 Apr 2025 21:06:11 +0000 Manifest next update: Tue 22 Apr 2025 02:37:11 +0000 Files and hashes: 1: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: 8kPPHzXghQqLFdKgJ7XYByHPMXkLSq/gvTSF/ClNz60=) 2: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: 0Z1hyixVKIjnj8ECdxc9rChwhaKXmIXyShCAYj8xZLI=) 3: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: 8zAQ86fhc8OVdskGyzWu9yQ7r5OHZaWOc1iXuXRtqpY=) 4: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: c0lEeym7RdSsZ9PVuI0xHhhN0iADI7UVsii/DrQAQBY=) 5: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: m+smJFgQDts16c5oEQ+5mQQd2jCWdjsIJsNUoSqe8t0=) 6: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: a3koD8kubhlteEQdzyU9f2bDi45SMPjkuecGzZC/ZNM=) 7: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: gwCL3bf8ZYDEakqa3g/8jLVhUBUPIyS/P9TiFjOt9l8=) 8: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 6TEL2dsBRYwHl7j9Gt3Q8OuHg9rXDaEOjIkwVxguswU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 02:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:99:1a:24:f1:02:e0:e0:8b:a9:d9:48:9d:01:53:31:eb:ff:b5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Apr 18 21:06:11 2025 GMT Not After : Apr 22 02:37:11 2025 GMT Subject: CN=8AC8445931985062F90566790FB194FA2DE7C985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:cb:70:7a:1a:69:ba:7c:eb:e3:8f:b4:1c: b5:70:ce:4c:d8:1e:68:d5:75:4d:7a:17:9a:fb:e5: 41:4b:62:8a:77:82:6d:00:d7:83:f2:cb:43:8a:0d: 45:23:f6:b8:db:42:2f:d0:5e:af:5b:cc:d8:fc:02: b0:10:64:8a:0b:3c:15:23:e8:ca:b8:7b:bc:6b:50: ec:dd:d3:70:fb:c3:87:ae:50:75:5b:d0:46:12:bc: 37:15:18:1e:11:9d:47:7d:79:a7:26:f1:7c:5e:4f: 4b:a6:6a:02:8b:dc:f7:0a:dc:59:67:b3:bf:24:e3: 12:88:b9:7a:d4:da:f2:33:19:71:45:1f:df:ae:8a: 45:2f:54:cd:7d:ad:d6:d1:d4:e5:16:bc:26:f0:96: 32:f3:f3:e8:d2:c2:cf:f8:37:71:48:82:3c:16:34: 4f:57:1b:97:4e:f4:9b:1b:6a:d2:7a:b9:32:ba:3a: 19:62:5c:f8:20:14:4e:0e:60:c4:fd:7f:0a:00:d4: 85:46:d8:e3:0f:b0:8f:3a:0c:5d:55:a0:7b:ea:7a: 0b:f4:d1:ad:bd:be:78:d1:b0:98:5b:62:37:4d:3a: de:05:a1:cb:24:f2:a8:8d:1b:71:37:39:22:e8:33: d0:10:9c:d4:a1:ab:60:e4:38:0a:b9:98:28:c5:f1: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C8:44:59:31:98:50:62:F9:05:66:79:0F:B1:94:FA:2D:E7:C9:85 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6a:e5:3c:bf:62:99:e7:88:4c:b8:1b:9c:40:c5:fd:62:83: ac:53:5c:0d:96:c3:e3:d8:df:85:59:11:6a:26:6f:ac:78:69: ca:2f:5e:e0:71:89:d9:0b:2f:8f:ec:c4:78:7a:cc:02:d9:bb: c4:53:5a:af:57:08:70:83:db:d4:f2:38:42:16:bc:cb:46:62: be:d8:ff:c9:27:5a:1a:01:92:73:a4:52:2c:27:36:75:71:db: 46:bc:39:35:e5:23:d7:36:5d:73:56:d3:dd:4a:dc:fa:f3:2d: 60:f5:79:28:62:82:06:d3:1a:c4:bb:b2:8a:da:c3:aa:4a:a5: d8:1c:70:f6:90:f0:59:b6:22:c1:70:bc:33:05:aa:73:63:00: 59:34:99:24:60:27:87:78:d3:a1:b3:a9:99:a0:10:64:97:b2: e4:e9:d2:3d:fb:81:41:2d:47:1a:21:79:ec:4d:c2:59:6f:3f: 84:8b:c4:fb:b4:48:7e:dc:ad:e0:96:8a:98:97:d0:9b:91:10: ea:a5:87:2e:9c:fa:77:52:eb:bc:c2:0f:10:ec:16:9b:16:15: a5:ca:56:0d:ba:41:4d:14:d4:76:2b:a3:ef:17:d0:68:84:88: 6a:52:37:39:08:fe:13:37:13:6b:8a:9e:2d:5f:67:40:b6:39: fc:04:d4:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5kaJPEC4OCLqdlInQFTMev/tdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTA0MTgyMTA2MTFaFw0yNTA0MjIwMjM3MTFaMDMxMTAvBgNV BAMTKDhBQzg0NDU5MzE5ODUwNjJGOTA1NjY3OTBGQjE5NEZBMkRFN0M5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6ctwehppunzr44+0HLVwzkzY HmjVdU16F5r75UFLYop3gm0A14Pyy0OKDUUj9rjbQi/QXq9bzNj8ArAQZIoLPBUj 6Mq4e7xrUOzd03D7w4euUHVb0EYSvDcVGB4RnUd9eacm8XxeT0umagKL3PcK3Fln s78k4xKIuXrU2vIzGXFFH9+uikUvVM19rdbR1OUWvCbwljLz8+jSws/4N3FIgjwW NE9XG5dO9JsbatJ6uTK6OhliXPggFE4OYMT9fwoA1IVG2OMPsI86DF1VoHvqegv0 0a29vnjRsJhbYjdNOt4Focsk8qiNG3E3OSLoM9AQnNShq2DkOAq5mCjF8VwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUishEWTGYUGL5BWZ5D7GU+i3nyYUwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9q5Ty/YpnniEy4G5xAxf1ig6xTXA2Ww+PY 34VZEWomb6x4acovXuBxidkLL4/sxHh6zALZu8RTWq9XCHCD29TyOEIWvMtGYr7Y /8knWhoBknOkUiwnNnVx20a8OTXlI9c2XXNW091K3PrzLWD1eShiggbTGsS7sora w6pKpdgccPaQ8Fm2IsFwvDMFqnNjAFk0mSRgJ4d406GzqZmgEGSXsuTp0j37gUEt RxoheexNwllvP4SLxPu0SH7creCWipiX0JuREOqlhy6c+ndS67zCDxDsFpsWFaXK Vg26QU0U1HYro+8X0GiEiGpSNzkI/hM3E2uKni1fZ0C2OfwE1B8= -----END CERTIFICATE-----Generated at Sun Apr 20 04:17:01 2025 by rpki-client