$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: i7/Z9qAJjSLSLm706Wpqug4VLZUm3SrWHNZalkSp60I= Subject key identifier: FF:8D:15:FC:19:CB:F7:36:5D:BD:84:14:25:BD:7B:7A:2C:1A:D5:C2 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 0EEEC41C2AEB1163AAC743FB2A705B5E17092D5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 0214 Signing time: Sat 10 May 2025 02:40:50 +0000 Manifest this update: Sat 10 May 2025 02:35:50 +0000 Manifest next update: Tue 13 May 2025 11:42:50 +0000 Files and hashes: 1: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 09EcthFcc0U294qSUk1qjMUpfEmQzlaHp9ePt/3ow3Q=) 2: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: fW5qne1R9fTa45nGDciUROmSkAV8mbUeGR9m/oXMOAw=) 3: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: ouXIX9GF2bsN7u33KTbYLbJVbRNSQKEsMqHEdl/mkaw=) 4: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: dqH/h3KP8VbL1imk1+sCwLW1Fbde9SEkgS3WsJD6a4Q=) 5: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: VNXiSw/mkVU/eaep8UiaH3pF3+R/bpIMEPNGotq1Wno=) 6: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: ebXS+Tyb8iuyOHa8yQE2FE8hZAgaawDNcd7a/TUN4jY=) 7: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: +AMBcTRDOItbHkoJjd3Z20zd7vvhBKXQR154gJmvfP8=) 8: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: hcTOiIFkR1X13MoZEJwfTqSdE6i9iYtN7usbVoxtQoM=) 9: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: G7BNKn0aQeDATXJ1JamzPIxZOqsRSSDm9xJMQAbHt5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ee:c4:1c:2a:eb:11:63:aa:c7:43:fb:2a:70:5b:5e:17:09:2d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: May 10 02:35:50 2025 GMT Not After : May 13 11:42:50 2025 GMT Subject: CN=FF8D15FC19CBF7365DBD841425BD7B7A2C1AD5C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:6e:b3:c0:70:a4:75:b1:e3:ad:1e:60:f0: 11:8a:cb:3a:3c:c8:7f:23:ee:e1:f3:08:17:47:a9: d4:43:9e:d1:07:e1:ee:13:a9:a0:bd:84:e6:42:1a: 91:46:86:12:5c:79:4e:b0:43:a9:26:b6:06:6e:c8: 1c:67:06:3d:3e:fa:ee:fa:3b:10:d6:9b:25:7b:85: 42:34:2c:8b:e8:db:4b:cd:0f:4a:8b:9d:74:22:5b: 21:05:1c:25:9a:26:44:da:e2:44:de:4e:10:ba:da: da:c2:d1:0b:e0:f6:55:f6:87:fc:f9:af:f1:56:8d: 59:4c:18:a9:10:54:73:23:cc:35:02:22:c3:7b:63: ed:d1:42:98:10:88:32:3e:fe:61:ca:84:5e:0b:d1: 19:a1:83:52:35:33:80:e6:6c:67:95:d6:ea:76:03: 1e:f7:7a:30:e9:e0:a5:45:66:c5:3b:9a:8c:17:9e: fb:e4:4f:8f:93:88:cc:5e:b5:c6:63:ba:8d:40:5f: 17:89:e4:4f:52:2a:01:a4:90:60:35:04:9e:bf:27: 30:27:17:63:15:27:72:6f:69:52:ff:65:74:b2:53: 23:d3:c4:6a:0b:d5:b4:bf:1a:2b:f5:c9:1b:61:1e: bf:a4:d0:73:22:2f:5b:06:53:a4:bf:2f:fe:aa:c6: c0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8D:15:FC:19:CB:F7:36:5D:BD:84:14:25:BD:7B:7A:2C:1A:D5:C2 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:24:15:5b:06:4d:bf:66:a1:90:6d:4f:3d:11:34:ec:47:3b: 9b:fa:94:9d:3b:af:90:d5:20:d6:2d:05:af:ea:54:03:87:60: a3:d2:89:4f:e0:5f:cc:85:7b:3f:fc:a1:76:18:72:cd:6a:ea: f7:4e:03:4f:3f:dd:87:97:d5:96:5f:06:cf:9b:ef:8f:20:77: 32:37:15:0a:9b:73:ce:04:82:16:1c:6b:88:33:aa:81:d7:75: 61:c1:9e:f7:58:cf:60:e8:d0:0d:36:f7:02:5f:b4:44:ab:9e: 5a:76:b0:45:59:98:dc:32:87:82:47:5e:61:0a:35:bc:60:d8: ff:59:ac:a7:0a:31:5c:f5:f7:e0:78:1d:57:75:ca:1d:06:20: 33:83:a3:45:ef:ad:b8:69:57:b8:6e:b0:b7:21:dc:a3:df:b2: 13:ea:6b:fd:a8:51:08:47:e9:25:f5:4c:1f:a7:b7:06:4d:be: a3:a7:ca:70:18:d2:22:0a:57:74:60:b5:cf:22:fb:be:f9:7c: e7:35:69:8e:6c:c1:bc:8d:a0:05:c3:e1:72:c4:77:0e:94:bd: d2:38:2a:f3:fb:ad:56:c5:9b:75:b6:47:9e:b1:c6:67:8a:0c: 29:03:e3:d5:28:ad:df:22:07:d9:83:31:03:43:a8:c4:51:fd: 1f:21:68:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDu7EHCrrEWOqx0P7KnBbXhcJLVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTA1MTAwMjM1NTBaFw0yNTA1MTMxMTQyNTBaMDMxMTAvBgNV BAMTKEZGOEQxNUZDMTlDQkY3MzY1REJEODQxNDI1QkQ3QjdBMkMxQUQ1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4YW6zwHCkdbHjrR5g8BGKyzo8 yH8j7uHzCBdHqdRDntEH4e4TqaC9hOZCGpFGhhJceU6wQ6kmtgZuyBxnBj0++u76 OxDWmyV7hUI0LIvo20vND0qLnXQiWyEFHCWaJkTa4kTeThC62trC0Qvg9lX2h/z5 r/FWjVlMGKkQVHMjzDUCIsN7Y+3RQpgQiDI+/mHKhF4L0Rmhg1I1M4DmbGeV1up2 Ax73ejDp4KVFZsU7mowXnvvkT4+TiMxetcZjuo1AXxeJ5E9SKgGkkGA1BJ6/JzAn F2MVJ3JvaVL/ZXSyUyPTxGoL1bS/Giv1yRthHr+k0HMiL1sGU6S/L/6qxsAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/40V/BnL9zZdvYQUJb17eiwa1cIwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUkFVsGTb9moZBtTz0RNOxHO5v6lJ07r5DV INYtBa/qVAOHYKPSiU/gX8yFez/8oXYYcs1q6vdOA08/3YeX1ZZfBs+b748gdzI3 FQqbc84EghYca4gzqoHXdWHBnvdYz2Do0A029wJftESrnlp2sEVZmNwyh4JHXmEK Nbxg2P9ZrKcKMVz19+B4HVd1yh0GIDODo0XvrbhpV7husLch3KPfshPqa/2oUQhH 6SX1TB+ntwZNvqOnynAY0iIKV3Rgtc8i+775fOc1aY5swbyNoAXD4XLEdw6UvdI4 KvP7rVbFm3W2R56xxmeKDCkD49Uord8iB9mDMQNDqMRR/R8haDY= -----END CERTIFICATE-----Generated at Sat May 10 06:34:44 2025 by rpki-client