$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: Oz99VwyiJ3cN074/lxhFnARlPYCd26m4hvDOKYk3qgs= Subject key identifier: 75:3E:EE:94:52:A5:1F:C3:45:DF:E8:9C:4D:26:3F:B7:EE:D5:45:13 Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 22F110A11E9B72623C7BEE985107E485D366DB84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 04CD Signing time: Sun 11 May 2025 06:52:20 +0000 Manifest this update: Sun 11 May 2025 06:47:20 +0000 Manifest next update: Wed 14 May 2025 16:07:20 +0000 Files and hashes: 1: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: yVe8GXVmi9K8cMh9902KjJLW/Ty04NeW25WlVS+N6VM=) 2: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: 9ipYwbYVli+uCGpe56TqktlcDRaDpAnKpw7UjY0KBCE=) 3: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: 7wk2FS1q0MY6UUysFgAzRf+hpYiSaDcdE1K4QdpVo+4=) 4: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: Zb3AnlfbFhVJYgt+3s/L7gam23czVP4/MNsn6mEPSpA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 16:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f1:10:a1:1e:9b:72:62:3c:7b:ee:98:51:07:e4:85:d3:66:db:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: May 11 06:47:20 2025 GMT Not After : May 14 16:07:20 2025 GMT Subject: CN=753EEE9452A51FC345DFE89C4D263FB7EED54513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:f1:34:de:9a:35:e4:91:a4:08:eb:36:60: 97:fd:5c:4d:69:dc:af:d6:0e:1e:a1:af:2b:8d:d4: e1:db:7c:79:61:c6:5f:34:b7:e9:80:bc:ed:88:c9: 98:dc:ff:f9:a6:7e:95:a2:25:66:fa:67:32:56:d8: c4:6a:32:02:1e:4f:9b:b6:8c:bb:73:ca:0b:91:fa: ca:fd:fe:d5:06:64:fc:1c:37:d1:24:2e:d7:cb:0b: 8e:4f:1f:a4:38:eb:a6:0a:90:ec:fd:8a:7e:cd:7f: 55:3d:6b:94:66:25:3f:8d:3f:7a:b9:da:41:fd:32: ff:f1:f3:81:24:08:b1:2d:38:db:8e:9d:75:fd:02: 32:6b:46:b6:90:82:01:ca:28:0c:95:9b:1a:7b:f9: a9:a0:57:f1:f8:12:7d:22:62:9a:ec:a8:5b:87:e2: 63:f4:b6:9f:57:b6:b9:79:06:70:fd:e1:02:56:d5: c5:06:7a:8c:99:40:37:1f:24:62:0a:54:fc:eb:23: 41:e6:7a:a7:a7:4b:2b:e7:42:73:d8:76:ac:18:ca: 6b:ff:64:d3:8f:6d:39:78:3c:bf:64:5f:8e:af:67: 32:d3:a2:da:53:9a:db:15:3b:96:cb:1b:62:95:47: 92:c6:ba:08:75:a8:e1:5c:3c:0b:d5:7a:39:17:7e: 30:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3E:EE:94:52:A5:1F:C3:45:DF:E8:9C:4D:26:3F:B7:EE:D5:45:13 X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:64:8d:f7:49:33:5e:22:5b:92:18:3e:f3:94:ef:87:de:97: e7:3e:7e:46:42:8e:66:35:60:f4:d2:c6:a8:64:6d:31:97:a9: 24:11:f6:cc:2f:b2:08:6d:00:da:2b:8c:d8:b2:ef:9c:a8:cf: 68:56:be:ba:04:f4:8d:65:a0:77:db:50:1f:69:6e:76:43:c0: 86:ff:98:c9:5b:5a:9c:51:62:fc:c9:70:1c:a5:ef:e3:88:34: 2f:f0:0a:d4:f5:3c:2d:66:8f:bd:94:57:3f:b9:6d:f2:5e:a8: 60:b9:a9:5c:3c:b0:cd:da:f0:24:07:45:5a:fd:be:2e:0e:31: 53:33:7e:d9:8d:26:12:62:cc:20:c2:c9:f4:86:25:3e:88:a0: 47:47:67:b2:01:e7:15:ab:85:56:73:1b:12:c3:6d:05:94:7b: 0a:56:e3:88:6d:b1:e1:cf:c0:e8:2a:8f:02:f0:da:d3:fc:70: 90:07:2a:12:b2:9b:49:78:29:1b:38:98:d0:8a:c2:fd:80:fc: 57:5f:85:03:85:ab:4a:a1:1b:23:ee:7e:7e:a7:ad:d2:8b:c3: 2a:d2:a8:86:1d:b1:ca:c3:41:6d:c2:61:58:00:7c:0d:d5:a5: 8f:75:d4:fb:f9:7a:61:71:be:1d:b5:06:c3:fb:90:f8:26:d4: 16:be:62:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvEQoR6bcmI8e+6YUQfkhdNm24QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTA1MTEwNjQ3MjBaFw0yNTA1MTQxNjA3MjBaMDMxMTAvBgNV BAMTKDc1M0VFRTk0NTJBNTFGQzM0NURGRTg5QzREMjYzRkI3RUVENTQ1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3PE03po15JGkCOs2YJf9XE1p 3K/WDh6hryuN1OHbfHlhxl80t+mAvO2IyZjc//mmfpWiJWb6ZzJW2MRqMgIeT5u2 jLtzyguR+sr9/tUGZPwcN9EkLtfLC45PH6Q466YKkOz9in7Nf1U9a5RmJT+NP3q5 2kH9Mv/x84EkCLEtONuOnXX9AjJrRraQggHKKAyVmxp7+amgV/H4En0iYprsqFuH 4mP0tp9Xtrl5BnD94QJW1cUGeoyZQDcfJGIKVPzrI0HmeqenSyvnQnPYdqwYymv/ ZNOPbTl4PL9kX46vZzLTotpTmtsVO5bLG2KVR5LGugh1qOFcPAvVejkXfjDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdT7ulFKlH8NF3+icTSY/t+7VRRMwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBkjfdJM14iW5IYPvOU74fel+c+fkZCjmY1 YPTSxqhkbTGXqSQR9swvsghtANorjNiy75yoz2hWvroE9I1loHfbUB9pbnZDwIb/ mMlbWpxRYvzJcByl7+OINC/wCtT1PC1mj72UVz+5bfJeqGC5qVw8sM3a8CQHRVr9 vi4OMVMzftmNJhJizCDCyfSGJT6IoEdHZ7IB5xWrhVZzGxLDbQWUewpW44htseHP wOgqjwLw2tP8cJAHKhKym0l4KRs4mNCKwv2A/FdfhQOFq0qhGyPufn6nrdKLwyrS qIYdscrDQW3CYVgAfA3VpY911Pv5emFxvh21BsP7kPgm1Ba+YkY= -----END CERTIFICATE-----Generated at Mon May 12 15:54:22 2025 by rpki-client