$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft File: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft (raw, json) Hash identifier: Aa26iOw0Zh1JiGOcNPo9bRua0Ppg2xOXIYoTZw5PRl8= Subject key identifier: 2B:2F:21:E7:B9:DC:18:20:22:15:4C:87:8D:84:7F:84:13:0E:E3:2F Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 Certificate issuer: /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Certificate serial: 750BADAEC3DE43A6607C9BBCB08D0C77C1DC8968 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft Manifest number: 04CF Signing time: Mon 12 May 2025 08:22:20 +0000 Manifest this update: Mon 12 May 2025 08:17:20 +0000 Manifest next update: Thu 15 May 2025 14:18:20 +0000 Files and hashes: 1: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: FlL58DoPU3fhZmB25RnznETwRsG3qy3bVA/OCDGHw+8=) 2: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: e9IH2pZ9uAA1LvF3x0PsRWxNU3xU/oUXz6yWuTN6x2Y=) 3: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: y/bDPrK/vJcW1JxMX0uYyADWqFYEbR36UfmZG19GCSI=) 4: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: u64yXBIs0ModkICN72Kb3+oe1Z5jkUzC+/YwOwxAsWs=) 5: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: 3BR+2r0/90FmZ7pFdR9xLYyxejfEcnOHDPsLPNVN5JY=) 6: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl (hash: Fq47AQ1GYhfQZLcjylcnZWBrziBiUJSjshoW5TognY4=) 7: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: yG8djwmjU5wWL3w72DbpQnRcPYEEUhpkWqpJyWDMSjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 14:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0b:ad:ae:c3:de:43:a6:60:7c:9b:bc:b0:8d:0c:77:c1:dc:89:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Validity Not Before: May 12 08:17:20 2025 GMT Not After : May 15 14:18:20 2025 GMT Subject: CN=2B2F21E7B9DC182022154C878D847F84130EE32F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:33:8f:0e:3f:8c:91:a8:e8:4b:c8:cf:57:21: 54:13:5f:1a:8f:fc:58:67:51:81:17:5a:dc:13:15: a9:0e:bc:7b:48:ef:af:55:d5:c9:92:b7:72:8d:7e: e4:90:e3:e2:b4:8c:88:aa:ec:2d:5d:c3:90:fc:54: 57:4f:76:92:64:1e:a7:6b:f9:92:e8:f0:73:6c:48: ba:4b:f2:9b:5c:c3:22:b2:b2:86:7d:d9:0b:e6:1c: 8c:c8:a1:02:aa:37:95:d0:9d:19:45:4d:c8:c5:70: 6a:22:dd:87:0f:6a:33:ff:87:eb:94:ef:48:3a:0b: 2a:38:fd:2f:a6:8c:78:a1:77:79:33:60:c6:a3:94: 77:cf:b2:5b:89:f7:9f:1a:74:b6:50:31:46:61:0f: 6a:80:25:bb:9b:85:7d:88:23:32:d7:ef:68:b0:41: 2c:b5:99:36:14:55:67:50:46:e2:64:f2:44:d7:ca: 49:1b:a6:e6:aa:9f:f3:ec:64:18:94:5a:8c:5e:0d: 5c:43:66:04:b7:1c:8b:a7:57:a9:2f:24:be:e1:37: ba:c3:c3:20:16:f2:a7:cf:4f:4d:55:53:6e:51:fd: 10:bf:dc:ad:fd:50:81:04:82:47:d4:16:38:5a:b2: 71:8d:0c:de:c7:d4:36:cb:73:0e:3c:d2:d7:9a:27: 61:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2F:21:E7:B9:DC:18:20:22:15:4C:87:8D:84:7F:84:13:0E:E3:2F X509v3 Authority Key Identifier: keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:82:68:57:2c:47:ba:fe:28:88:6a:55:86:5e:27:87:d1:c9: 2f:84:8a:ff:d7:92:c4:e8:88:02:e9:07:42:99:23:b7:5c:6f: da:92:e0:bb:dc:f8:ee:15:b0:9e:2f:5a:dd:cf:60:1b:58:73: d4:e2:73:ca:a6:c0:f4:3d:b5:8e:47:83:51:d1:7f:49:45:28: a3:7a:e0:2e:09:ce:af:df:19:69:00:ce:aa:16:1e:e9:8f:49: d6:09:8a:dd:94:da:e6:91:b8:2d:ed:76:21:7b:78:a3:e0:6b: fd:75:0d:da:b4:5d:f9:59:a8:45:e8:7a:d4:75:5a:34:7b:f5: 2e:cc:35:a5:16:bc:e8:be:5e:0f:a8:8c:c6:c4:65:48:73:e9: 26:04:4c:59:0b:bd:e1:5a:bd:6b:62:a1:9b:95:89:53:ee:fc: bf:35:b8:ae:5a:c8:3e:27:dc:1b:c4:c4:a9:26:4e:4f:27:e8: f8:4d:34:50:ae:ec:13:25:ee:74:9e:46:8a:a0:5f:85:4a:98: 37:e1:c7:a4:11:17:47:44:9d:e7:d5:c9:d4:46:fd:2a:8b:b5: 8a:de:89:96:c2:f4:ff:16:d2:c0:31:96:b7:2a:e0:9e:6c:19: 2c:5c:b8:63:d9:48:28:a8:44:af:9c:bb:bf:84:7b:6e:0a:aa: fe:2d:67:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQutrsPeQ6ZgfJu8sI0Md8HciWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0 MzdDQThFOTAeFw0yNTA1MTIwODE3MjBaFw0yNTA1MTUxNDE4MjBaMDMxMTAvBgNV BAMTKDJCMkYyMUU3QjlEQzE4MjAyMjE1NEM4NzhEODQ3Rjg0MTMwRUUzMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqM48OP4yRqOhLyM9XIVQTXxqP /FhnUYEXWtwTFakOvHtI769V1cmSt3KNfuSQ4+K0jIiq7C1dw5D8VFdPdpJkHqdr +ZLo8HNsSLpL8ptcwyKysoZ92QvmHIzIoQKqN5XQnRlFTcjFcGoi3YcPajP/h+uU 70g6Cyo4/S+mjHihd3kzYMajlHfPsluJ958adLZQMUZhD2qAJbubhX2IIzLX72iw QSy1mTYUVWdQRuJk8kTXykkbpuaqn/PsZBiUWoxeDVxDZgS3HIunV6kvJL7hN7rD wyAW8qfPT01VU25R/RC/3K39UIEEgkfUFjhasnGNDN7H1DbLcw480teaJ2EZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKy8h57ncGCAiFUyHjYR/hBMO4y8wHwYDVR0j BBgwFoAUgYgjtQ+NY+nZU8S3UvBNsEN8qOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGM3NzNjOC1mYjU2LTQ0OWYtODY0OS0xMTJkNmUxNjg2YjMvMC84MTg4MjNCNTBG OEQ2M0U5RDk1M0M0Qjc1MkYwNERCMDQzN0NBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0MzdD QThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDRE QjA0MzdDQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2CaFcsR7r+KIhqVYZeJ4fRyS+Eiv/XksTo iALpB0KZI7dcb9qS4Lvc+O4VsJ4vWt3PYBtYc9Tic8qmwPQ9tY5Hg1HRf0lFKKN6 4C4Jzq/fGWkAzqoWHumPSdYJit2U2uaRuC3tdiF7eKPga/11Ddq0XflZqEXoetR1 WjR79S7MNaUWvOi+Xg+ojMbEZUhz6SYETFkLveFavWtioZuViVPu/L81uK5ayD4n 3BvExKkmTk8n6PhNNFCu7BMl7nSeRoqgX4VKmDfhx6QRF0dEnefVydRG/SqLtYre iZbC9P8W0sAxlrcq4J5sGSxcuGPZSCioRK+cu7+Ee24Kqv4tZxg= -----END CERTIFICATE-----Generated at Tue May 13 11:44:56 2025 by rpki-client