$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft File: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json) Hash identifier: D2fUc1g2QtwbKf9lE3MVtLjR+reKNQ6SJ80lc8LiXOQ= Subject key identifier: A4:76:1E:FA:20:F2:D4:93:58:49:4C:8D:E3:BE:04:A0:A6:3D:B3:73 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 5917717FE475A566E12DC2FDACE57288BF9FD16B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft Manifest number: A3 Signing time: Sat 05 Apr 2025 17:00:52 +0000 Manifest this update: Sat 05 Apr 2025 16:55:52 +0000 Manifest next update: Wed 09 Apr 2025 01:59:52 +0000 Files and hashes: 1: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=) 2: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: cxegF0OpuhIvg6pBwDCU3a0Ayprc8R4u92SW0ua5sZE=) 3: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=) 4: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=) 5: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=) 6: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=) 7: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=) 8: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=) 9: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=) 10: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=) 11: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=) 12: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:17:71:7f:e4:75:a5:66:e1:2d:c2:fd:ac:e5:72:88:bf:9f:d1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Apr 5 16:55:52 2025 GMT Not After : Apr 9 01:59:52 2025 GMT Subject: CN=A4761EFA20F2D49358494C8DE3BE04A0A63DB373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:e9:ee:48:63:d9:2f:fc:05:ad:0f:0e:4e: 6a:03:c8:29:5b:e3:9f:91:0c:c4:16:28:29:bf:61: 5d:1b:07:fa:73:7c:5d:5a:f6:99:17:94:5e:d3:01: a0:2d:46:f3:b0:20:74:63:f5:6d:23:2c:3a:9b:b9: 62:b3:87:29:d0:f8:ee:cc:7b:e0:43:56:ac:ef:53: 13:37:0d:7e:0f:75:b6:84:97:7b:72:73:9d:29:50: 10:b2:8b:ac:c6:1b:1e:82:2c:2e:5c:6e:3a:63:37: 5a:29:b4:c5:d6:66:ed:95:cd:98:29:b8:04:6a:b3: d8:a0:8a:0e:20:89:ea:77:be:39:cd:7c:09:8b:e3: d3:be:b2:97:8d:cc:9f:a6:b1:8e:ff:87:d9:1b:68: a1:e9:2c:45:f9:55:29:45:fe:48:e8:24:48:be:2b: 26:2a:fc:af:92:da:18:42:98:31:28:fe:3e:36:4d: 0b:e2:3b:f1:7d:28:b0:87:96:22:66:ac:40:87:ea: a7:67:35:49:fa:db:49:87:59:0d:30:95:c3:d2:a0: de:91:81:e4:3b:14:54:96:2b:99:1f:3b:56:ef:ec: 32:2a:d0:26:c3:7f:d5:d9:a0:94:1a:d5:b6:04:c7: 0c:da:36:5e:bc:f2:f5:be:d1:e0:e2:db:5c:c2:90: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:76:1E:FA:20:F2:D4:93:58:49:4C:8D:E3:BE:04:A0:A6:3D:B3:73 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:2f:c5:1b:33:11:36:20:cb:79:fa:6c:f3:54:e7:7f:57:bc: 0f:e6:08:4a:30:cf:ab:36:ef:fb:1e:39:b5:d6:fa:e9:b0:6e: 40:45:74:54:de:95:6f:e6:eb:40:a1:04:b1:9c:ab:91:c6:34: 88:27:fd:9d:d7:ec:83:48:82:49:64:1e:47:f4:e3:44:b4:92: 5c:09:74:db:55:e9:a7:3d:fd:26:82:6e:1e:b1:80:30:c4:c5: fe:07:07:ce:e5:b0:56:cc:5f:24:43:50:7b:62:d9:9e:c9:0f: d9:92:10:42:79:9b:c8:8a:d8:64:8a:86:1a:de:16:44:31:f7: 03:86:13:dc:53:51:91:df:23:2f:0c:d3:c1:76:f2:cb:a6:ba: 55:ff:68:17:5f:c5:4b:82:b9:a4:4f:bd:0e:c7:cd:b6:14:17: ce:b2:a4:37:df:a4:93:a4:14:c0:d4:fb:ff:e6:eb:48:e4:2b: bd:37:66:ea:ae:67:78:22:1f:fb:a4:a4:73:31:f9:3d:57:dc: 05:13:3d:58:f1:05:fe:e2:8d:43:ce:50:24:31:36:1e:7d:72: cd:74:2e:c7:b5:55:f6:ec:5a:de:27:71:6a:c9:f4:f3:66:47: 08:24:f9:a9:94:1f:9b:11:45:31:1f:4f:17:bf:86:8a:5e:c2: 41:93:09:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRdxf+R1pWbhLcL9rOVyiL+f0WswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNTA0MDUxNjU1NTJaFw0yNTA0MDkwMTU5NTJaMDMxMTAvBgNV BAMTKEE0NzYxRUZBMjBGMkQ0OTM1ODQ5NEM4REUzQkUwNEEwQTYzREIzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29+nuSGPZL/wFrQ8OTmoDyClb 45+RDMQWKCm/YV0bB/pzfF1a9pkXlF7TAaAtRvOwIHRj9W0jLDqbuWKzhynQ+O7M e+BDVqzvUxM3DX4PdbaEl3tyc50pUBCyi6zGGx6CLC5cbjpjN1optMXWZu2VzZgp uARqs9igig4giep3vjnNfAmL49O+speNzJ+msY7/h9kbaKHpLEX5VSlF/kjoJEi+ KyYq/K+S2hhCmDEo/j42TQviO/F9KLCHliJmrECH6qdnNUn620mHWQ0wlcPSoN6R geQ7FFSWK5kfO1bv7DIq0CbDf9XZoJQa1bYExwzaNl688vW+0eDi21zCkJhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHYe+iDy1JNYSUyN474EoKY9s3MwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I2M2Y3NzEtYTk1Zi00YjUzLTg3 YmMtOGJmZjUwNGRhMWY0LzAvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0 REZDMTIwMjg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANUvxRszETYgy3n6bPNU539XvA/mCEowz6s2 7/seObXW+umwbkBFdFTelW/m60ChBLGcq5HGNIgn/Z3X7INIgklkHkf040S0klwJ dNtV6ac9/SaCbh6xgDDExf4HB87lsFbMXyRDUHti2Z7JD9mSEEJ5m8iK2GSKhhre FkQx9wOGE9xTUZHfIy8M08F28sumulX/aBdfxUuCuaRPvQ7HzbYUF86ypDffpJOk FMDU+//m60jkK703ZuquZ3giH/ukpHMx+T1X3AUTPVjxBf7ijUPOUCQxNh59cs10 Lse1VfbsWt4ncWrJ9PNmRwgk+amUH5sRRTEfTxe/hopewkGTCZg= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:58 2025 by rpki-client