$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft File: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft (raw, json) Hash identifier: R/3q06H6eCRXPkydcgJ0TT5K2/3SKkmMQd2MMYPJ2jc= Subject key identifier: 70:E0:11:6A:01:78:7E:0F:52:83:7A:AC:CE:6D:25:89:17:63:B2:07 Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 71A0D88BEF6895E580C9C012B8CEB300E8E99E11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft Manifest number: 04D4 Signing time: Thu 03 Apr 2025 09:20:47 +0000 Manifest this update: Thu 03 Apr 2025 09:15:47 +0000 Manifest next update: Sun 06 Apr 2025 18:19:47 +0000 Files and hashes: 1: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: WDUUBVToiU1iccjikjgrMyjUMVvcr2yL6nTb6EMxpMs=) 2: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: JqPwBzOb9IGp/J3IK4HU+cGl2mSkMSYQ3owKhX9duIs=) 3: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: TyftOcvbZs91N5rxusfIjMZ5akc+NP+roH91JhFQg20=) 4: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl (hash: F0KP7lgRHmpaSLGmGp3RxNVTqJajh1xmUEX9kRfRH7s=) 5: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: pR7u7IsW9E5zx/4Gewaf11qIOvq1r/xgCkMTQFAUEcc=) 6: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: /vst8lOP9Na9sgAVJ1wD7o5HJMQFWxGn08eczXMCCA0=) 7: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: JxgdhcTrs6B/jpG5QUO9aLWXUNbAlaSX869U6y/nYjo=) 8: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: JnLquCgIroielTjx4ROKisgjaiP3OgaMmkhANFXPFCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 18:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a0:d8:8b:ef:68:95:e5:80:c9:c0:12:b8:ce:b3:00:e8:e9:9e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Apr 3 09:15:47 2025 GMT Not After : Apr 6 18:19:47 2025 GMT Subject: CN=70E0116A01787E0F52837AACCE6D25891763B207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:e3:32:32:ee:26:43:b4:dd:0b:0e:e0:f1: da:64:b7:f8:ca:1c:f3:e6:9d:48:ef:f8:9f:f5:07: c6:ed:ff:f6:30:4a:b2:80:bd:af:da:4b:b0:04:e7: e9:1b:62:e4:15:bc:dc:fa:03:de:cc:a5:79:18:74: 8c:31:ae:db:bc:bc:15:08:5d:2c:0d:d7:bc:2e:42: f3:d4:c7:b0:c8:f7:40:fd:78:be:55:87:0a:5c:71: 2f:37:45:54:cc:01:ad:c7:93:f6:28:20:8c:4a:32: f1:c3:ef:36:ff:a3:17:2a:32:36:15:b7:12:04:4e: a8:97:aa:5f:f7:9f:ad:04:08:df:1b:43:77:e9:a0: 4f:cf:76:02:cf:84:85:e7:a7:56:55:a7:2f:8f:1a: 5d:7b:4e:a2:15:b4:c9:ab:bb:a8:73:9f:5d:36:0e: 27:03:44:43:ab:f3:14:c3:d4:b9:d8:dd:ba:3b:1f: 9e:96:05:8f:22:3e:81:2a:cb:c2:63:bf:a3:ef:ab: 15:50:66:af:39:13:8c:c7:e9:35:34:be:68:11:28: 40:e0:72:c4:da:62:80:fb:c6:2a:62:4a:c6:5e:a7: df:8e:0d:98:6a:e7:09:dc:0f:df:66:02:0c:fc:85: a5:43:bc:17:66:0f:28:35:0c:d9:f3:36:e2:a0:b4: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E0:11:6A:01:78:7E:0F:52:83:7A:AC:CE:6D:25:89:17:63:B2:07 X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d4:0b:08:73:d3:19:40:36:99:a7:c0:da:57:fe:83:a0:f2: 33:d9:46:54:a1:56:a4:ce:5c:d8:e5:8f:ba:e6:61:28:39:25: 45:06:6a:6e:f8:4f:2f:ba:27:f2:c1:21:8e:f6:8f:4d:c2:36: 4f:ed:5c:f2:cc:eb:d4:99:63:2d:80:86:29:93:29:fe:fa:ab: 8d:49:17:15:83:c4:55:9d:0c:5e:84:dd:0a:b4:e7:8e:97:2e: f2:07:ba:ff:73:9d:ba:5e:1d:eb:21:cd:88:dd:5f:a2:a6:29: 62:bd:52:f8:0d:d1:99:b8:92:74:5c:a2:23:2a:6a:78:49:13: 07:7f:80:d1:c9:61:34:c6:d3:73:21:18:f4:32:db:90:9a:68: e7:43:cc:e6:bd:43:ae:6e:b3:d5:a3:32:97:f0:af:62:bc:14: 2a:3e:5a:ac:64:66:b1:0a:a2:be:92:2f:62:74:84:16:21:9c: b7:b2:63:9e:b8:8c:53:3a:c8:8a:30:28:87:e6:53:f2:6f:38: f2:73:fc:95:d5:7f:96:24:fb:f5:1a:f7:c9:c4:6a:79:1a:c3: 2c:93:67:91:14:55:f3:b5:9c:f7:68:e7:83:78:ba:68:d5:34: 2f:e3:62:68:fb:e0:38:1b:a0:10:19:f2:68:81:51:02:67:7c: ce:bf:02:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaDYi+9oleWAycASuM6zAOjpnhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNTA0MDMwOTE1NDdaFw0yNTA0MDYxODE5NDdaMDMxMTAvBgNV BAMTKDcwRTAxMTZBMDE3ODdFMEY1MjgzN0FBQ0NFNkQyNTg5MTc2M0IyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJ+MyMu4mQ7TdCw7g8dpkt/jK HPPmnUjv+J/1B8bt//YwSrKAva/aS7AE5+kbYuQVvNz6A97MpXkYdIwxrtu8vBUI XSwN17wuQvPUx7DI90D9eL5VhwpccS83RVTMAa3Hk/YoIIxKMvHD7zb/oxcqMjYV txIETqiXql/3n60ECN8bQ3fpoE/PdgLPhIXnp1ZVpy+PGl17TqIVtMmru6hzn102 DicDREOr8xTD1LnY3bo7H56WBY8iPoEqy8Jjv6PvqxVQZq85E4zH6TU0vmgRKEDg csTaYoD7xipiSsZep9+ODZhq5wncD99mAgz8haVDvBdmDyg1DNnzNuKgtPN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcOARagF4fg9Sg3qszm0liRdjsgcwHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiY2MwMGQtY2U3OS00MjE2LWE2 MmItZTNkNTBjYzc5NDQyLzAvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0 RjUxMkU0RkQ2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfUCwhz0xlANpmnwNpX/oOg8jPZRlShVqTO XNjlj7rmYSg5JUUGam74Ty+6J/LBIY72j03CNk/tXPLM69SZYy2AhimTKf76q41J FxWDxFWdDF6E3Qq0546XLvIHuv9znbpeHeshzYjdX6KmKWK9UvgN0Zm4knRcoiMq anhJEwd/gNHJYTTG03MhGPQy25CaaOdDzOa9Q65us9WjMpfwr2K8FCo+WqxkZrEK or6SL2J0hBYhnLeyY564jFM6yIowKIfmU/JvOPJz/JXVf5Yk+/Ua98nEankawyyT Z5EUVfO1nPdo54N4umjVNC/jYmj74DgboBAZ8miBUQJnfM6/Asg= -----END CERTIFICATE-----Generated at Sat Apr 5 17:52:23 2025 by rpki-client