$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft File: C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json) Hash identifier: GrViPasj1VnutB+qUYrwuoWzfs/qzVztOUiBrFGQdzU= Subject key identifier: A6:AE:76:E4:66:FE:7B:B1:4C:9E:54:55:61:4A:90:44:95:DC:52:26 Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB Certificate issuer: /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Certificate serial: 05A3AFAFB5E19422DA828E304EB5279E061ECA5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft Manifest number: 04DE Signing time: Sun 04 May 2025 17:11:04 +0000 Manifest this update: Sun 04 May 2025 17:06:04 +0000 Manifest next update: Thu 08 May 2025 01:23:04 +0000 Files and hashes: 1: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: u55o5Y0EBsQxGyO0cPFviOtKeRLNkOzfXmW+DUAAlws=) 2: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: 8RrRORobg42yyo6LFcje0JxeCKUFuSga1jy/CkFuTm4=) 3: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: 5rg1EeqRUgeSLgMy7lGVLTMSo/SW/vkwy5TwRaBl/j8=) 4: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: EGI9o7CM4WRok9jPW02rkd7C68LQY6lwOHLdbhuimwI=) 5: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: LnfQWSkhBeT+G4FyLtKt+mDAFcmNfarKzOkWL9aGALQ=) 6: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: b8zDNPy2xqVlrDOAlQUUDIWMMOfRTaQ0mid2lPIB3KA=) 7: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: mSUh/L4o3WxZWaFk4Syf4IAQb9zhHbALhTc1/MotUbk=) 8: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: 1il+bYXQjl2Z5M2afvU115zEzq23jQfoWNPWBzr6QnM=) 9: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: YQVR8UOeiYmY2kyG9i2CqFsAi/62Mch9mbYUm4aJz9o=) 10: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: C3I03bKwqahoZs1vLJC2P0W/gVIIwRIvwhkzt1QShKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a3:af:af:b5:e1:94:22:da:82:8e:30:4e:b5:27:9e:06:1e:ca:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Validity Not Before: May 4 17:06:04 2025 GMT Not After : May 8 01:23:04 2025 GMT Subject: CN=A6AE76E466FE7BB14C9E5455614A904495DC5226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:93:c2:0e:b2:8b:83:2b:d8:ee:69:bf:63: 48:ab:34:c0:a1:5f:29:41:fb:41:14:c9:1e:b1:74: ac:10:d1:69:ee:0b:78:eb:1a:d0:5d:5c:8a:b7:b1: 27:a3:74:11:ea:8b:d4:23:d2:ab:43:48:12:6e:b3: 57:34:e5:6a:1a:59:3f:02:6c:9c:da:bf:41:bc:0a: 58:4a:33:c3:94:d4:d4:c5:e6:43:c9:b0:2e:38:97: fa:88:92:a2:40:dd:13:99:01:c5:fe:b6:73:40:67: 4d:0e:2f:a5:ec:79:2f:a4:39:53:99:50:64:7c:a6: 06:d8:34:b6:43:fc:ff:21:7c:e3:4e:ca:83:50:a3: e8:d4:d4:25:3e:24:f4:36:06:12:fe:63:a1:81:16: 7a:d8:29:f4:b7:bb:f6:4c:90:21:86:9a:05:57:6a: bd:48:e9:92:b1:52:2f:1e:43:9a:e1:f7:f0:eb:d0: 30:f4:f6:ce:00:e7:a2:29:88:be:a3:9d:15:f6:be: 0e:68:41:bc:a2:1b:c2:eb:ff:1f:26:bc:9a:9a:7a: c8:05:81:3e:a7:96:7c:e5:21:42:40:41:d6:da:42: 6b:c6:fe:c2:63:a6:7d:0e:53:02:89:51:39:0a:2b: b9:c1:88:2a:7c:78:41:ff:8c:6e:9a:f2:21:a9:ff: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AE:76:E4:66:FE:7B:B1:4C:9E:54:55:61:4A:90:44:95:DC:52:26 X509v3 Authority Key Identifier: keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:84:48:e4:c7:45:47:1a:b2:02:01:b5:8f:03:31:94:e2:95: 68:e2:c4:bf:b9:b9:bf:a1:f0:da:f7:74:73:0a:0a:65:17:9e: 47:92:18:90:e9:76:dc:80:8a:37:9a:b6:a6:5f:1c:00:23:50: f8:ce:25:08:13:e4:a5:19:17:34:ee:2f:58:e9:b5:e2:45:8a: 55:95:b9:14:9a:2d:d3:24:c9:83:e7:ac:3e:1b:be:99:f0:a4: 48:c2:fc:2d:b7:fb:d8:52:9e:82:e7:e8:5f:b0:e2:28:ed:6f: e6:fd:be:ed:59:fe:26:29:30:76:22:67:55:99:c1:19:a3:47: a2:06:a5:07:b9:fc:77:ae:fb:ad:6b:2a:7c:c8:40:ca:79:24: 42:9f:28:94:7d:61:83:0c:5c:7b:79:45:21:3d:0d:7a:18:76: c1:45:0c:7c:c7:17:6c:6b:02:9f:98:4f:a6:8e:24:7b:bb:1c: e5:9b:57:29:03:e4:47:10:50:dd:32:df:53:84:14:26:7e:0f: 44:e1:8f:cd:49:e6:73:db:da:b5:c8:9b:99:a0:a3:57:19:cf: ac:d8:29:79:f4:2b:89:8e:0c:53:2e:9e:f7:7f:8c:86:c3:b9: 0a:b7:aa:4e:c9:c3:1b:89:e3:b5:4f:7a:28:a2:dc:2a:68:28: a3:14:4b:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaOvr7XhlCLago4wTrUnngYeyl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZC RUZCM0FCQjAeFw0yNTA1MDQxNzA2MDRaFw0yNTA1MDgwMTIzMDRaMDMxMTAvBgNV BAMTKEE2QUU3NkU0NjZGRTdCQjE0QzlFNTQ1NTYxNEE5MDQ0OTVEQzUyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvZPCDrKLgyvY7mm/Y0irNMCh XylB+0EUyR6xdKwQ0WnuC3jrGtBdXIq3sSejdBHqi9Qj0qtDSBJus1c05WoaWT8C bJzav0G8ClhKM8OU1NTF5kPJsC44l/qIkqJA3ROZAcX+tnNAZ00OL6XseS+kOVOZ UGR8pgbYNLZD/P8hfONOyoNQo+jU1CU+JPQ2BhL+Y6GBFnrYKfS3u/ZMkCGGmgVX ar1I6ZKxUi8eQ5rh9/Dr0DD09s4A56IpiL6jnRX2vg5oQbyiG8Lr/x8mvJqaesgF gT6nlnzlIUJAQdbaQmvG/sJjpn0OUwKJUTkKK7nBiCp8eEH/jG6a8iGp/9UNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpq525Gb+e7FMnlRVYUqQRJXcUiYwHwYDVR0j BBgwFoAUyOwY4CdjmwW8WKIijRJkhr77OrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzI4OTcwNi1hNGY0LTRlMWYtOWE2ZS0wMWM5YzUzY2Q4ZjkvMC9DOEVDMThFMDI3 NjM5QjA1QkM1OEEyMjI4RDEyNjQ4NkJFRkIzQUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZCRUZC M0FCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMyODk3MDYtYTRmNC00ZTFmLTlh NmUtMDFjOWM1M2NkOGY5LzAvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0 ODZCRUZCM0FCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKESOTHRUcasgIBtY8DMZTilWjixL+5ub+h 8Nr3dHMKCmUXnkeSGJDpdtyAijeatqZfHAAjUPjOJQgT5KUZFzTuL1jpteJFilWV uRSaLdMkyYPnrD4bvpnwpEjC/C23+9hSnoLn6F+w4ijtb+b9vu1Z/iYpMHYiZ1WZ wRmjR6IGpQe5/Heu+61rKnzIQMp5JEKfKJR9YYMMXHt5RSE9DXoYdsFFDHzHF2xr Ap+YT6aOJHu7HOWbVykD5EcQUN0y31OEFCZ+D0Thj81J5nPb2rXIm5mgo1cZz6zY KXn0K4mODFMunvd/jIbDuQq3qk7JwxuJ47VPeiii3CpoKKMUS/0= -----END CERTIFICATE-----Generated at Wed May 7 14:50:43 2025 by rpki-client