$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft File: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft (raw, json) Hash identifier: iONyoWu51CoGOiCqRAdGgxCiVA0jNj3gT3Xr+jm1kcQ= Subject key identifier: 59:95:C7:87:58:D4:50:42:52:1F:FC:46:6F:A1:F1:B8:76:AD:FB:7D Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Certificate serial: 5E26ED0A9F1739A56E03F1D34FDD0A74CC45AD17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft Manifest number: 01B0 Signing time: Mon 02 Jun 2025 09:11:14 +0000 Manifest this update: Mon 02 Jun 2025 09:06:14 +0000 Manifest next update: Thu 05 Jun 2025 18:02:14 +0000 Files and hashes: 1: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl (hash: d8Rq59XFtVpczikfGtYr8iZ/M2Nd9Ry3fOMq5aqgkeI=) 2: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: MboJ9bNDWss1vJJcwVtBuaH8mT9pUZJ9JaBkaATFQrs=) 3: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: g0Pf3ARHuUC7zmADQSDxhgj8ifkJ9K0BINMIl06Upvw=) 4: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: yhslnPw/0kdUwo4Upa6wZ3S1y6iGaMJ+XsyQRvnqnpw=) 5: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: 2kz4UnYhTEUhN29lc95KLdxE2aM+/O4QDh3Ih8iCdB4=) 6: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: XIUZRQaq6Ar2nV3ZFHLpoCHXyLAUe42akQ2OknBSU7A=) 7: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: Q86wnmZUd6Eh9prZNbHvOVX1KEczkIcKucRRsZzGyfQ=) 8: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: Xofen3Xcki3BFd0kBACnOhqZPk/1Iy4IfI/PQ+72xB8=) 9: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: OPw2qIoiwwy7ASYHOGCX10NAN40v1tPJ0GZbmeP5o0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 18:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:26:ed:0a:9f:17:39:a5:6e:03:f1:d3:4f:dd:0a:74:cc:45:ad:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Validity Not Before: Jun 2 09:06:14 2025 GMT Not After : Jun 5 18:02:14 2025 GMT Subject: CN=5995C78758D45042521FFC466FA1F1B876ADFB7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:a2:ef:08:bd:e0:83:04:7f:16:a2:38:6e: d6:25:be:f8:3b:fa:f0:19:72:a5:ab:d5:27:13:18: 37:84:c9:19:38:65:ef:33:ca:58:ec:60:b3:41:99: da:e2:cd:3f:b8:37:fc:ec:eb:18:f2:5b:93:4b:c3: ce:b0:66:65:d7:a1:0a:73:e0:13:c6:57:27:40:ab: 56:62:89:6f:d8:d1:5a:53:3a:26:20:4b:b2:2e:e2: c1:fb:99:80:d6:c2:d9:1d:81:db:f8:27:1a:0f:1d: d2:a5:da:79:1f:c3:c7:3e:98:2a:f3:52:7c:fe:df: 4e:4d:63:19:8b:cc:bb:f3:f9:af:6f:c5:b8:f3:b6: b1:dd:5e:2c:79:31:e3:4d:96:ec:cc:e6:fd:29:46: ff:99:34:96:f7:91:11:a1:1c:50:9e:9e:43:62:f4: 16:7c:67:3d:a1:3f:61:c4:83:18:f1:02:76:71:66: d0:3d:68:45:30:a1:f3:d5:e1:ac:d2:de:27:5e:22: 04:e4:1f:87:fd:f0:bc:ce:56:f6:74:b9:71:a8:9c: 39:e2:1a:97:6d:2c:9c:ae:e8:c2:d0:6a:c7:2a:6d: 20:01:e1:44:10:da:3f:24:a4:0d:41:57:50:45:02: 27:94:8a:a4:ff:4a:48:ee:b4:fb:c2:2b:dc:4a:81: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:95:C7:87:58:D4:50:42:52:1F:FC:46:6F:A1:F1:B8:76:AD:FB:7D X509v3 Authority Key Identifier: keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:49:5e:60:0a:89:94:8a:47:06:c1:ba:32:36:b0:1a:eb:8e: 24:09:7c:dd:71:90:89:2d:e6:64:8c:2f:90:9d:95:00:31:f0: aa:ec:1e:07:08:57:a4:6e:a4:73:8b:b5:5c:d5:c4:72:a3:c5: 1f:88:80:fc:06:fc:0a:43:91:a5:9d:01:e4:7e:70:92:d1:81: ff:bf:a5:7c:e3:d5:93:a9:20:c7:33:36:88:54:82:1c:6e:67: 9d:bc:e4:4b:49:09:2f:79:25:0d:9f:8b:93:4c:45:df:b9:b3: f8:5a:51:d4:6d:5a:b6:92:a9:5a:eb:3d:29:97:0a:a0:db:d7: 07:a1:07:01:e3:bd:cb:0d:de:61:8f:b9:6c:c3:ed:9d:8a:f7: eb:6b:9d:71:45:ce:4e:3e:1a:a1:cf:d2:88:67:33:93:6a:66: bf:ec:50:19:95:c9:03:ea:0d:68:13:a3:2e:2e:1d:79:bb:03: e0:5d:76:b2:5c:9e:74:48:42:94:ca:f1:4f:96:5a:77:49:25: 22:cb:0d:dd:e6:e1:77:83:8e:02:bd:1c:4f:41:4e:70:55:db: 6c:7d:c2:4c:af:01:61:cc:5a:1e:a6:ec:59:af:fd:6d:e2:65: bc:bc:60:a7:87:1b:36:6c:40:1d:f4:88:47:53:e0:53:4b:20: 83:14:3f:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXibtCp8XOaVuA/HTT90KdMxFrRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4 MEIzOEE0NjAeFw0yNTA2MDIwOTA2MTRaFw0yNTA2MDUxODAyMTRaMDMxMTAvBgNV BAMTKDU5OTVDNzg3NThENDUwNDI1MjFGRkM0NjZGQTFGMUI4NzZBREZCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DKLvCL3ggwR/FqI4btYlvvg7 +vAZcqWr1ScTGDeEyRk4Ze8zyljsYLNBmdrizT+4N/zs6xjyW5NLw86wZmXXoQpz 4BPGVydAq1ZiiW/Y0VpTOiYgS7Iu4sH7mYDWwtkdgdv4JxoPHdKl2nkfw8c+mCrz Unz+305NYxmLzLvz+a9vxbjztrHdXix5MeNNluzM5v0pRv+ZNJb3kRGhHFCenkNi 9BZ8Zz2hP2HEgxjxAnZxZtA9aEUwofPV4azS3ideIgTkH4f98LzOVvZ0uXGonDni GpdtLJyu6MLQascqbSAB4UQQ2j8kpA1BV1BFAieUiqT/SkjutPvCK9xKgYdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZXHh1jUUEJSH/xGb6HxuHat+30wHwYDVR0j BBgwFoAUkwpO0rhaqf537ZD6hQRKnICzikYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC85MzBBNEVEMkI4 NUFBOUZFNzdFRDkwRkE4NTA0NEE5QzgwQjM4QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4MEIz OEE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2MjgwOWMtYmZiNi00ZmU3LThk ZDYtY2E2MDIyY2RkNTQwLzAvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRB OUM4MEIzOEE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxJXmAKiZSKRwbBujI2sBrrjiQJfN1xkIkt 5mSML5CdlQAx8KrsHgcIV6RupHOLtVzVxHKjxR+IgPwG/ApDkaWdAeR+cJLRgf+/ pXzj1ZOpIMczNohUghxuZ5285EtJCS95JQ2fi5NMRd+5s/haUdRtWraSqVrrPSmX CqDb1wehBwHjvcsN3mGPuWzD7Z2K9+trnXFFzk4+GqHP0ohnM5NqZr/sUBmVyQPq DWgToy4uHXm7A+BddrJcnnRIQpTK8U+WWndJJSLLDd3m4XeDjgK9HE9BTnBV22x9 wkyvAWHMWh6m7Fmv/W3iZby8YKeHGzZsQB30iEdT4FNLIIMUP/0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:43 2025 by rpki-client