$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: 0FpGmA7atPZ+tzBXDAM7Tf4Z+NQaugA3GRpCDvgyIcI= Subject key identifier: 06:7B:5C:D4:7C:0A:DB:DC:F3:60:3B:19:E5:88:F5:E1:5A:18:79:B8 Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 73EE28C017F6016751251EF1F9E79B8BB68D2761 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 0283 Signing time: Sun 04 May 2025 01:20:55 +0000 Manifest this update: Sun 04 May 2025 01:15:55 +0000 Manifest next update: Wed 07 May 2025 06:21:55 +0000 Files and hashes: 1: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: ptSpa0yORFDFTGktJ23ziYaQuqfcwcD6+X4WfU20Bt4=) 2: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: vJN17h6zHlw8lhqv4ICIcSweY39vapLLmQqw71/RhS0=) 3: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: NhbEnUbS1RFVhQFgb/k13Oo2qyTOB30jh0qFTUkaAik=) 4: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: Cu2RdLHzB+A2EJBsuRCMa0mxP5/Kmd4TOJ7qAO2a+Js=) 5: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: 7LF1a7D5EDLG17ihfLxfwJXRWol/1ek+UfoMR7jTEuA=) 6: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: 567b+lotuC6i+y8KdqVmqnUFzb2SqHkzBu1SWPWLXAA=) 7: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: yBaA0+xOkr+iculo5l4/62QXBhceh7/LNqxDxugk/Cg=) 8: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: 4hTYB6oeBmhzrslyPSwrX3Ek6Lkwqv8RzR59ex14KTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 06:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ee:28:c0:17:f6:01:67:51:25:1e:f1:f9:e7:9b:8b:b6:8d:27:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: May 4 01:15:55 2025 GMT Not After : May 7 06:21:55 2025 GMT Subject: CN=067B5CD47C0ADBDCF3603B19E588F5E15A1879B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e7:bf:74:dc:95:da:85:23:97:0b:39:f7:b9: c5:25:26:ed:38:0b:ec:3f:2a:e1:4e:51:6a:30:4c: 46:59:d3:e1:1c:15:63:71:b7:0e:cc:56:3d:5f:95: 39:0a:d1:cd:28:7b:bb:e9:16:4a:31:f8:9b:69:c0: 92:ce:af:06:48:70:ae:03:e2:ed:09:a6:9d:fb:e3: c7:92:7b:2e:4e:79:88:ff:bc:21:9f:a2:fe:56:26: 87:c5:de:52:31:bf:a8:af:f7:32:ff:2f:43:3d:65: ce:ef:15:7b:95:4d:60:bf:d5:c7:b0:70:94:4c:61: 15:34:c7:35:6e:65:46:8b:53:66:f3:38:a5:33:42: f2:01:ae:5f:66:62:28:d6:71:75:8e:10:a0:22:bc: 30:36:5e:67:9c:55:23:bf:fc:c0:ef:54:d0:80:28: e8:09:a7:1a:d5:df:c5:a7:b9:0e:af:13:7e:9e:c6: 69:2f:23:9e:1a:40:ff:02:2f:16:71:8b:65:c8:b3: c5:12:87:f6:7b:f8:0f:14:09:0f:49:ec:5d:61:cc: 69:9a:f5:50:c7:95:53:b5:a2:a2:52:5c:30:cf:81: 7d:8e:c7:6e:c5:8f:10:a6:a9:95:95:24:19:b3:b9: 19:16:95:49:d0:c4:de:c8:61:2f:84:9f:87:53:1d: 6e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7B:5C:D4:7C:0A:DB:DC:F3:60:3B:19:E5:88:F5:E1:5A:18:79:B8 X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3f:3b:98:2d:bf:22:08:1a:fe:ab:35:4e:b0:22:3f:f3:d5: 72:39:fd:ed:17:c7:d6:00:02:0e:2d:c5:11:b5:92:c4:4a:b5: d3:8f:f1:0c:00:21:32:b6:fb:6e:27:65:d2:52:4c:81:94:fb: 99:0f:5f:16:60:4c:05:a7:41:9d:e4:c8:91:d8:68:26:0b:da: 84:12:3e:cd:98:54:ec:93:d7:b1:aa:2f:e5:2f:2e:01:83:80: a6:94:a5:5b:9b:7e:d6:15:95:2b:53:85:dd:98:2f:6e:81:f8: 9c:a7:e0:49:25:cb:be:76:7e:4c:81:55:f1:66:35:a9:ec:71: 79:2c:e4:2a:4b:eb:81:18:a7:6d:8a:6d:b3:00:70:b2:b1:bb: 47:94:c2:ba:3a:c1:51:d2:06:f0:60:dc:10:fd:7c:84:63:09: 7e:62:ef:b0:fb:ee:0b:04:79:c3:e6:aa:0b:55:58:76:6c:c0: eb:1d:ac:5a:a6:8e:a4:09:a6:f0:53:c8:6c:25:68:64:c3:cc: 14:c5:4b:fb:dc:0c:fe:8d:79:1c:7b:88:16:81:10:a6:d7:da: 1d:da:f8:70:97:72:49:ce:68:c2:8f:41:9d:48:8d:09:10:1a: 25:17:c3:0c:23:e5:30:c4:9e:52:b1:88:7c:f3:5c:54:5c:04: 48:84:eb:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+4owBf2AWdRJR7x+eebi7aNJ2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNTA1MDQwMTE1NTVaFw0yNTA1MDcwNjIxNTVaMDMxMTAvBgNV BAMTKDA2N0I1Q0Q0N0MwQURCRENGMzYwM0IxOUU1ODhGNUUxNUExODc5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe57903JXahSOXCzn3ucUlJu04 C+w/KuFOUWowTEZZ0+EcFWNxtw7MVj1flTkK0c0oe7vpFkox+JtpwJLOrwZIcK4D 4u0Jpp3748eSey5OeYj/vCGfov5WJofF3lIxv6iv9zL/L0M9Zc7vFXuVTWC/1cew cJRMYRU0xzVuZUaLU2bzOKUzQvIBrl9mYijWcXWOEKAivDA2XmecVSO//MDvVNCA KOgJpxrV38WnuQ6vE36exmkvI54aQP8CLxZxi2XIs8USh/Z7+A8UCQ9J7F1hzGma 9VDHlVO1oqJSXDDPgX2Ox27FjxCmqZWVJBmzuRkWlUnQxN7IYS+En4dTHW4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBntc1HwK29zzYDsZ5Yj14VoYebgwHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs/O5gtvyIIGv6rNU6wIj/z1XI5/e0Xx9YA Ag4txRG1ksRKtdOP8QwAITK2+24nZdJSTIGU+5kPXxZgTAWnQZ3kyJHYaCYL2oQS Ps2YVOyT17GqL+UvLgGDgKaUpVubftYVlStThd2YL26B+Jyn4Ekly752fkyBVfFm NanscXks5CpL64EYp22KbbMAcLKxu0eUwro6wVHSBvBg3BD9fIRjCX5i77D77gsE ecPmqgtVWHZswOsdrFqmjqQJpvBTyGwlaGTDzBTFS/vcDP6NeRx7iBaBEKbX2h3a +HCXcknOaMKPQZ1IjQkQGiUXwwwj5TDEnlKxiHzzXFRcBEiE6xw= -----END CERTIFICATE-----Generated at Wed May 7 00:41:59 2025 by rpki-client