$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: W8Lc6GVBHCf6oaVYM0xHo4tz4fLML5N/EtaoAzKDe8A= Subject key identifier: EC:52:F0:C1:E0:34:48:49:C0:F9:91:04:C2:74:59:62:7D:66:3D:7A Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 69748797EDC1DDC012D890D0E1A55B4C7030DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 04CE Signing time: Sat 10 May 2025 19:12:19 +0000 Manifest this update: Sat 10 May 2025 19:07:19 +0000 Manifest next update: Wed 14 May 2025 01:48:19 +0000 Files and hashes: 1: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: 7d6L1YnpzkSH3cjd/bratlHXMkaO39mRUgOEKpnPFL4=) 2: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: CpzM+132Mdd3sT2ikka6T6ZIOzo9cPs9M0vsLY9AeJk=) 3: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 4: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 5: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 6: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 7: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: u1lfWy0MDbubQseV6f0yVaeg4S5wTkc4cbrHCMmY4Yw=) 8: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: F4/KJVXNTNm34izb7glpnGYFHc3KADsusKQ08aViHLM=) 9: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: Hs35c6RHToYi6qvTeTc31yFLqwStwmhd6QBjMnOffHI=) 10: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 11: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 12: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 13: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 14: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 15: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: e/yjVod/7lR4uj/RENV7JfH5TX+LSB9hPgqV7eSiKp4=) 16: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 17: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 18: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 19: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 20: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: tqudu2B36h+i6R24q/mQ5VbjgjbwwzOsgaoS/EjSumI=) 21: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 22: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 01:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:74:87:97:ed:c1:dd:c0:12:d8:90:d0:e1:a5:5b:4c:70:30:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: May 10 19:07:19 2025 GMT Not After : May 14 01:48:19 2025 GMT Subject: CN=EC52F0C1E0344849C0F99104C27459627D663D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:eb:0a:98:2d:04:fc:db:3b:b0:6a:0e:95: e9:8d:c3:19:0e:bc:ee:de:b6:18:9c:00:99:09:ee: 0d:11:eb:07:1e:c4:a6:64:37:42:ab:09:ed:86:7f: 78:86:e5:a0:b0:c0:17:de:40:a5:7e:73:79:ca:0c: 76:3b:22:7f:22:d5:ff:6a:5f:85:1c:13:ff:ef:91: 62:de:21:05:7b:9d:16:de:15:e2:56:37:fb:36:79: 35:38:49:c7:c2:0e:2c:2d:94:e6:c2:71:12:d5:f4: 9c:be:80:e9:91:1c:29:b6:49:b0:ba:29:83:27:f8: 33:20:ea:fb:38:24:88:17:e8:a8:75:1d:03:4d:1c: 18:b1:c4:b9:bb:cc:ae:b8:1e:1d:68:0a:80:da:eb: d1:7d:16:65:cc:4e:3a:8e:a0:73:79:e3:1f:13:6a: 1c:3d:64:63:44:92:13:a2:ea:73:c0:15:87:3d:a6: 9f:1b:4e:bf:97:ee:e1:73:c6:5c:0d:da:1e:40:b1: 96:1a:5f:c1:16:29:79:76:18:9b:eb:9f:fb:35:74: 70:38:37:aa:cf:38:8d:f1:15:f1:36:72:93:f2:69: b9:0f:e2:9b:82:8a:a3:51:9d:cd:3f:fa:f4:2e:99: 1c:2c:93:4b:2f:7e:ea:d8:15:6d:df:ed:1f:8a:f2: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:52:F0:C1:E0:34:48:49:C0:F9:91:04:C2:74:59:62:7D:66:3D:7A X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:19:cb:4e:80:15:87:39:31:c2:f1:a2:98:d2:d5:02:55:7f: 0b:da:e2:da:fe:2d:ff:37:72:73:96:5b:26:69:22:56:fd:f5: fb:38:a5:21:0a:98:91:b3:e6:d1:28:f3:b2:26:56:a9:21:4b: e8:9f:9a:17:bd:52:c8:d1:77:7a:72:d3:ca:39:72:42:cd:f6: 7d:57:ce:32:f4:7c:48:e6:7f:72:b6:8e:ef:b3:da:09:79:3a: 3d:4c:de:5f:5a:b2:e5:94:33:92:6c:7f:2e:03:0c:d8:40:16: 36:da:22:8a:ad:b7:f1:84:e8:f9:34:f2:a5:ae:72:6e:ef:b8: cf:70:b0:14:41:92:51:de:09:fa:29:ee:51:83:36:5c:81:d5: 38:28:8e:e5:60:94:fe:b2:2a:e0:d7:e7:fe:0d:d5:c8:d0:57: 48:a0:a8:cb:a5:6f:7e:31:fe:c0:51:d7:0b:b1:52:85:6f:f1: 50:c7:9c:1c:e3:57:3e:03:96:a2:90:24:5e:26:8c:19:54:ca: 9a:9e:3d:98:15:89:b1:5f:14:d2:af:3d:89:b7:75:2f:54:1e: 87:b7:07:f3:30:69:19:45:e9:20:7f:0f:47:45:1f:6d:79:8d: 44:da:9e:2a:c8:7d:8f:a2:fd:15:93:1e:1f:fb:2a:6e:85:a7: 3b:6b:da:40 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITaXSHl+3B3cAS2JDQ4aVbTHAw3TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5MjNENEExMEUxREJCRjY5MjcxODNCRjM0MTlGNTEyRkU0 QzFEMDAzMB4XDTI1MDUxMDE5MDcxOVoXDTI1MDUxNDAxNDgxOVowMzExMC8GA1UE AxMoRUM1MkYwQzFFMDM0NDg0OUMwRjk5MTA0QzI3NDU5NjI3RDY2M0Q3QTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALE/6wqYLQT82zuwag6V6Y3DGQ68 7t62GJwAmQnuDRHrBx7EpmQ3QqsJ7YZ/eIbloLDAF95ApX5zecoMdjsifyLV/2pf hRwT/++RYt4hBXudFt4V4lY3+zZ5NThJx8IOLC2U5sJxEtX0nL6A6ZEcKbZJsLop gyf4MyDq+zgkiBfoqHUdA00cGLHEubvMrrgeHWgKgNrr0X0WZcxOOo6gc3njHxNq HD1kY0SSE6Lqc8AVhz2mnxtOv5fu4XPGXA3aHkCxlhpfwRYpeXYYm+uf+zV0cDg3 qs84jfEV8TZyk/JpuQ/im4KKo1GdzT/69C6ZHCyTSy9+6tgVbd/tH4ry6LsCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTsUvDB4DRIScD5kQTCdFlifWY9ejAfBgNVHSME GDAWgBSSPUoQ4du/aScYO/NBn1Ev5MHQAzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBj MzRmZjA4LWQyMWYtNDIwYi04N2RmLTUzMTAzYjZkYzI1My8wLzkyM0Q0QTEwRTFE QkJGNjkyNzE4M0JGMzQxOUY1MTJGRTRDMUQwMDMuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi85MjNENEExMEUxREJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFE MDAzLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8wYzM0ZmYwOC1kMjFmLTQyMGItODdk Zi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUxREJCRjY5MjcxODNCRjM0MTlGNTEy RkU0QzFEMDAzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAQxnLToAVhzkxwvGimNLVAlV/C9ri2v4t/zdy c5ZbJmkiVv31+zilIQqYkbPm0SjzsiZWqSFL6J+aF71SyNF3enLTyjlyQs32fVfO MvR8SOZ/craO77PaCXk6PUzeX1qy5ZQzkmx/LgMM2EAWNtoiiq238YTo+TTypa5y bu+4z3CwFEGSUd4J+inuUYM2XIHVOCiO5WCU/rIq4Nfn/g3VyNBXSKCoy6VvfjH+ wFHXC7FShW/xUMecHONXPgOWopAkXiaMGVTKmp49mBWJsV8U0q89ibd1L1Qeh7cH 8zBpGUXpIH8PR0UfbXmNRNqeKsh9j6L9FZMeH/sqboWnO2vaQA== -----END CERTIFICATE-----Generated at Mon May 12 11:08:48 2025 by rpki-client