$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: HZKNUd4AayGjRyRTI7wwBM9NNo/1JEySx5NGFwfMLFI= Subject key identifier: B5:98:C5:A0:0D:0A:F7:41:AF:18:EC:94:FE:0E:57:BE:16:EA:21:14 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 157494910714687819745251AD92D34B1ED6BBBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 04D2 Signing time: Wed 12 Mar 2025 04:00:44 +0000 Manifest this update: Wed 12 Mar 2025 03:55:44 +0000 Manifest next update: Sat 15 Mar 2025 04:15:44 +0000 Files and hashes: 1: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=) 2: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU=) 3: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 7667q65z5ALRHOPz7ZlyjDc7iiTkR7i4e2iT+KR7k3I=) 4: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ketrz/J8f8AAk0/U1Pdx/6YBxlFbuGP5tM7vrclBTuI=) 5: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: 23+gG2DOC+ur5eVWAZvoHWGDnxOhWjXAjjErKhmGrS4=) 6: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: hd2StT+jTnjUGpfUQ62nAy49x8ecNllIMBX9uxJvBO8=) 7: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=) 8: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=) 9: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=) 10: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=) 11: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: yOFSHNJ7/tBSXur8DRCWTGrdUQ9S5IWN+tn279DD4tU=) 12: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4=) 13: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: jyHfiZ6i7aZCFxYleJN7o61t2gr/9pVuDKWy33Zgxrk=) 14: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=) 15: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM=) 16: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=) 17: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: gN2Jjbi+Ej908OVQGOZ0dUAEHVcokN3FQ2wzz/c2bTI=) 18: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: aohofdwoZ8V2DYWYq04YHP8ho4bOl8RtAWFILXi+kN4=) 19: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=) 20: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: Q22OsVQGNiQHv7rsWq7HdXb5YFdsKjAZXlHpHoKvOag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 04:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:74:94:91:07:14:68:78:19:74:52:51:ad:92:d3:4b:1e:d6:bb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Mar 12 03:55:44 2025 GMT Not After : Mar 15 04:15:44 2025 GMT Subject: CN=B598C5A00D0AF741AF18EC94FE0E57BE16EA2114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:d3:56:63:cf:bf:9a:f5:70:21:53:56:db: 9f:66:59:35:53:6b:fa:9f:34:03:21:7a:c7:e4:35: 95:2d:a1:1a:be:dd:eb:5d:7c:71:01:c4:11:9e:62: d7:cd:9d:9a:cc:55:bb:93:ea:18:d1:52:21:4d:d0: 34:da:34:e3:82:a5:30:11:eb:af:c8:1d:e7:ae:d0: a8:7c:23:96:b9:70:ad:85:5d:91:69:15:a4:c4:8d: 12:54:ec:a0:c8:f2:a5:b1:19:74:27:ad:84:f6:87: e7:d8:f1:30:1e:f0:6e:e5:80:b0:1f:66:fa:d3:36: 0a:32:8d:cd:41:87:12:35:b2:d3:02:d3:17:2e:93: 84:f7:2c:4d:ae:f4:65:fc:ed:5a:33:9a:0c:32:eb: 40:8e:5f:ad:75:d0:b3:bf:c9:aa:f5:a8:6f:27:f6: 9c:67:9f:43:f6:79:1c:f3:49:74:aa:02:bc:2a:20: 81:8d:26:79:e5:02:85:3b:f5:57:75:01:e8:8f:24: 80:51:bd:1d:7d:2d:9f:e4:70:3d:f1:48:62:be:b6: 44:85:a3:39:b1:3d:aa:47:a2:44:2c:f3:94:13:da: fc:55:03:cf:53:69:88:07:95:6a:45:1f:06:61:6e: 2c:fa:37:63:ba:6f:2c:5a:fb:8c:79:40:1f:8d:6a: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:98:C5:A0:0D:0A:F7:41:AF:18:EC:94:FE:0E:57:BE:16:EA:21:14 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:48:ed:4a:51:93:8f:9f:73:07:0b:eb:5d:32:0a:6b:f4:9c: 7b:58:f7:76:2d:1a:4f:ab:72:e1:c2:f2:04:12:cf:59:3e:d2: 5b:b9:52:08:61:43:f9:77:fe:71:f3:b2:08:8f:1d:09:61:da: 4a:fa:7c:49:b4:db:c4:d4:ac:89:5e:1a:7c:8b:db:6b:5d:74: 05:d9:9d:13:09:be:1c:69:b7:b0:b0:ed:49:67:cb:a9:68:ad: 94:e5:a6:37:82:3c:a3:ed:1b:bc:61:ed:ad:bf:64:d7:4b:3a: ee:9b:3d:a9:37:a6:bf:66:74:ad:97:45:c4:dd:31:37:05:34: 83:70:43:1c:97:da:95:73:38:8f:a3:a2:a2:82:09:cf:70:e4: a2:b4:4f:58:17:d4:40:63:f2:e5:b9:09:bc:10:ed:5a:cd:6a: 0a:e5:aa:7b:84:2f:fb:1b:ec:8b:c4:c2:15:29:81:ee:9b:82: ac:82:f5:29:cd:3f:ee:fa:80:2e:ca:85:f1:63:fd:9f:84:0a: d4:81:cd:7c:49:1b:63:76:c0:e4:44:b2:13:b5:8b:6f:36:3d: c3:4f:91:7e:18:be:fc:a5:6c:52:b6:98:b9:5b:0d:91:0f:5e: c1:25:d6:44:80:13:62:14:b5:9b:2b:81:f1:94:3b:25:7f:bc: 71:75:e5:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXSUkQcUaHgZdFJRrZLTSx7Wu74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTAzMTIwMzU1NDRaFw0yNTAzMTUwNDE1NDRaMDMxMTAvBgNV BAMTKEI1OThDNUEwMEQwQUY3NDFBRjE4RUM5NEZFMEU1N0JFMTZFQTIxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JtNWY8+/mvVwIVNW259mWTVT a/qfNAMhesfkNZUtoRq+3etdfHEBxBGeYtfNnZrMVbuT6hjRUiFN0DTaNOOCpTAR 66/IHeeu0Kh8I5a5cK2FXZFpFaTEjRJU7KDI8qWxGXQnrYT2h+fY8TAe8G7lgLAf ZvrTNgoyjc1BhxI1stMC0xcuk4T3LE2u9GX87Vozmgwy60COX6110LO/yar1qG8n 9pxnn0P2eRzzSXSqArwqIIGNJnnlAoU79Vd1AeiPJIBRvR19LZ/kcD3xSGK+tkSF ozmxPapHokQs85QT2vxVA89TaYgHlWpFHwZhbiz6N2O6byxa+4x5QB+NamihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZjFoA0K90GvGOyU/g5XvhbqIRQwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBI7UpRk4+fcwcL610yCmv0nHtY93YtGk+r cuHC8gQSz1k+0lu5UghhQ/l3/nHzsgiPHQlh2kr6fEm028TUrIleGnyL22tddAXZ nRMJvhxpt7Cw7Ulny6lorZTlpjeCPKPtG7xh7a2/ZNdLOu6bPak3pr9mdK2XRcTd MTcFNINwQxyX2pVzOI+joqKCCc9w5KK0T1gX1EBj8uW5CbwQ7VrNagrlqnuEL/sb 7IvEwhUpge6bgqyC9SnNP+76gC7KhfFj/Z+ECtSBzXxJG2N2wOREshO1i282PcNP kX4YvvylbFK2mLlbDZEPXsEl1kSAE2IUtZsrgfGUOyV/vHF15V4= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:28 2025 by rpki-client