$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft File: 2985976A4B3081770748882703E16497964D05A6.mft (raw, json) Hash identifier: p2VDzxzGpuxbNKWgfdfA6w80SwMjAqcXlLPZPBpu8S0= Subject key identifier: 7C:2A:0F:98:F9:8D:FF:E3:D3:5D:41:8A:D1:7E:61:34:21:24:6E:4F Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6 Certificate serial: 4C213497FEDC5DDC882D97C6DA9630D4BBDBD81E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft Manifest number: 01BD Signing time: Thu 08 May 2025 20:51:51 +0000 Manifest this update: Thu 08 May 2025 20:46:51 +0000 Manifest next update: Mon 12 May 2025 00:34:51 +0000 Files and hashes: 1: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: ERxIPVPynr8Zqyd/erBxd/JSZglWN0mqL6sn5XfEVLc=) 2: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: BerVZ23TVRI4dwt9lyBc2AUhwZ05yfxMPrju4y+LAeE=) 3: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: rqdaT3dhU4vRh0lUQmFU0b1pAjqoq7sorljrl78YDwk=) 4: 2985976A4B3081770748882703E16497964D05A6.crl (hash: XIaw+D+kXowYpY4VwwjT3tx0eSMGPmhDk/j4uGsNncE=) 5: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: To2RtUGQFhlqilx+fqPMxzWWGUOkUvTK0ofRYTXx5FY=) 6: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: FPt98Jlb07JrGQGNjE2/vKY/2MGs525PrXsgLkmv66M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:21:34:97:fe:dc:5d:dc:88:2d:97:c6:da:96:30:d4:bb:db:d8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2985976A4B3081770748882703E16497964D05A6 Validity Not Before: May 8 20:46:51 2025 GMT Not After : May 12 00:34:51 2025 GMT Subject: CN=7C2A0F98F98DFFE3D35D418AD17E613421246E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:4c:b2:29:a5:82:18:f5:19:a4:4f:2a:03: 13:aa:fe:44:d1:2d:e9:0c:43:f4:bc:b6:16:c2:da: de:62:c6:53:24:2b:89:b6:f3:91:49:38:53:4a:b6: ab:8d:19:3f:68:77:c4:81:7c:72:16:e6:2e:bf:44: 1a:65:fe:e7:0e:13:5e:c0:7e:1b:90:a4:71:9f:95: c8:e8:54:37:d4:95:24:2b:ad:19:cc:26:2f:28:68: 43:8c:44:7e:c8:73:16:0c:fd:b0:dc:96:ee:91:1a: 50:75:60:ea:24:75:93:c3:fa:97:6e:7e:12:0b:97: 9c:49:3b:a4:2b:44:64:74:69:6d:17:d2:16:9c:17: 52:a5:cb:46:9d:e1:60:3a:82:ea:eb:7b:dc:f9:ef: 31:25:0a:a7:e8:76:4e:93:5c:8a:e8:5f:83:ee:85: 06:4e:f0:6b:9c:e6:24:0f:b0:7c:35:29:af:06:bc: f4:9c:7d:86:63:70:32:4e:3f:86:12:9f:09:d0:7f: df:1d:48:d7:4b:13:3c:c4:1e:ac:01:6c:94:05:ce: d4:d7:92:42:c1:c3:71:5c:3c:33:f5:c5:e4:fc:20: 86:c7:64:67:46:69:15:a5:65:70:f4:c9:04:b8:95: be:df:55:29:4a:e9:9a:1a:ac:3a:3a:1f:41:70:c4: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2A:0F:98:F9:8D:FF:E3:D3:5D:41:8A:D1:7E:61:34:21:24:6E:4F X509v3 Authority Key Identifier: keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c6:a8:6b:32:2e:9d:2a:60:d6:41:bf:28:d0:2d:86:90:bb: f1:9c:bb:ae:13:5d:c4:90:29:55:c5:62:97:83:e9:ed:c9:1f: 2c:0e:23:4e:ba:5f:12:4e:0b:95:33:bf:7d:39:7a:c8:78:2e: 7c:15:ce:5f:e9:22:50:33:40:8d:55:48:70:6b:37:89:bb:93: 0b:d1:0b:37:5c:8b:49:2e:7c:a4:2c:23:cc:63:42:fa:80:03: 1f:3b:64:11:55:79:60:d6:48:73:2d:71:52:e9:7c:10:f9:ea: d5:7f:41:b0:88:a3:c6:4c:cd:b2:11:7b:0d:d5:09:86:4a:a7: 48:92:ee:9b:92:0c:38:36:b2:09:d4:d2:d3:92:cf:2b:53:73: cd:b4:ae:2f:df:3f:93:6f:b1:40:a0:48:3e:bf:02:32:7f:95: 68:c3:99:8d:d0:9c:6a:b9:f2:ad:3e:7b:a9:86:33:f9:db:e8: 9e:de:f1:28:9e:fe:69:89:99:60:6d:fe:c6:50:54:ad:ec:22: cc:3c:78:cb:7c:d0:05:b7:95:83:ea:bb:8c:a6:f7:7e:2f:b3: 29:81:63:ab:fd:db:52:04:9e:90:d8:86:10:f3:e3:43:12:a2: 30:5e:b5:a9:5b:b2:5e:30:48:dc:48:c3:93:a2:34:f4:ca:4b: 05:a0:29:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTCE0l/7cXdyILZfG2pYw1Lvb2B4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5 NjREMDVBNjAeFw0yNTA1MDgyMDQ2NTFaFw0yNTA1MTIwMDM0NTFaMDMxMTAvBgNV BAMTKDdDMkEwRjk4Rjk4REZGRTNEMzVENDE4QUQxN0U2MTM0MjEyNDZFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTkyyKaWCGPUZpE8qAxOq/kTR LekMQ/S8thbC2t5ixlMkK4m285FJOFNKtquNGT9od8SBfHIW5i6/RBpl/ucOE17A fhuQpHGflcjoVDfUlSQrrRnMJi8oaEOMRH7IcxYM/bDclu6RGlB1YOokdZPD+pdu fhILl5xJO6QrRGR0aW0X0hacF1Kly0ad4WA6gurre9z57zElCqfodk6TXIroX4Pu hQZO8Guc5iQPsHw1Ka8GvPScfYZjcDJOP4YSnwnQf98dSNdLEzzEHqwBbJQFztTX kkLBw3FcPDP1xeT8IIbHZGdGaRWlZXD0yQS4lb7fVSlK6ZoarDo6H0FwxGNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfCoPmPmN/+PTXUGK0X5hNCEkbk8wHwYDVR0j BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0 OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjGqGsyLp0qYNZBvyjQLYaQu/Gcu64TXcSQ KVXFYpeD6e3JHywOI066XxJOC5Uzv305esh4LnwVzl/pIlAzQI1VSHBrN4m7kwvR Czdci0kufKQsI8xjQvqAAx87ZBFVeWDWSHMtcVLpfBD56tV/QbCIo8ZMzbIRew3V CYZKp0iS7puSDDg2sgnU0tOSzytTc820ri/fP5NvsUCgSD6/AjJ/lWjDmY3QnGq5 8q0+e6mGM/nb6J7e8Sie/mmJmWBt/sZQVK3sIsw8eMt80AW3lYPqu4ym934vsymB Y6v921IEnpDYhhDz40MSojBetalbsl4wSNxIw5OiNPTKSwWgKfk= -----END CERTIFICATE-----Generated at Sun May 11 00:51:43 2025 by rpki-client