$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json) Hash identifier: f62lgJr5SLTBgqIYoV8db7SrNGKFMwlHmNvSBRYqHI8= Subject key identifier: 50:6C:EE:C7:45:DD:88:32:2B:2B:4B:CB:35:EE:26:61:BE:97:43:DB Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 0654A50105E67192B9AE3910052FD19B01DEFA26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft Manifest number: 01F9 Signing time: Mon 12 May 2025 04:12:05 +0000 Manifest this update: Mon 12 May 2025 04:07:05 +0000 Manifest next update: Thu 15 May 2025 06:44:05 +0000 Files and hashes: 1: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: GUSl7LUTkCNLq3kjAIVktijnSt4hBS8Y9L517womeqQ=) 2: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: A10fZ5oBGWm/ydsGNd4ClvdYu28lRcTQqL1+gfTVn6c=) 3: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: 6EWdfj6mQREg19pNLTyQ9avXO+NEAVI1IrsDMjVhml0=) 4: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: e2hZqRmumwwjihIOo4NSyIcflDvxaVJmQVJkA8KGCsQ=) 5: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: Vxu7OgcrZ32tVA4THVShJIrGxnq9jK2ER/olk1k8ato=) 6: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: WsluVFkB4a+lP57xwnkZuJyPr6zcJ1fd0nejjcDmukA=) 7: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 3xWXXks4UVNYkXH6dJVO0j8s1qvxiBuFe16NtmlEZXU=) 8: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: AlUWTxdz4XyVx/BJnp5RHH7Yu2FT507lFQbZMytd2ZM=) 9: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: CsvPbO1dTyPsmUs0Y51ZaJ0Q65Hxq5scKNV2P6WWsfo=) 10: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: y+koXC0SKC7czkSwcd2cG19vH0+o53OQtkOYra+BrVo=) 11: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 318Q6731sMFPRMDMOoStaI6Bz5sS+OT9DxYXEQE+OOU=) 12: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: in1eOlYNKCk2lGbXKJTXvY33Xdz5YgM95JjqhRefg8I=) 13: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: oInZsMVgdwEvnpVcu4rctnbwGDY+GjcyJ5+JQSNMsAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 06:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:54:a5:01:05:e6:71:92:b9:ae:39:10:05:2f:d1:9b:01:de:fa:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: May 12 04:07:05 2025 GMT Not After : May 15 06:44:05 2025 GMT Subject: CN=506CEEC745DD88322B2B4BCB35EE2661BE9743DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:ca:ce:84:c1:57:4c:3c:3c:e7:6e:10:05: ee:1c:1a:4c:cb:12:e5:89:84:55:57:2c:28:63:4d: 60:47:fc:4b:92:9a:59:aa:46:cb:bf:39:a1:ba:61: 47:aa:02:79:90:bb:f8:d8:a6:45:ec:0f:12:45:3d: 7d:fb:53:28:7a:73:df:82:f3:28:ec:4c:8d:23:20: 8c:02:4c:8a:86:5d:1e:cc:ed:c6:4e:6c:c2:f0:fe: ce:55:df:b0:b4:53:b3:49:af:78:e6:46:20:17:94: 3a:ac:f5:62:89:b9:73:33:49:82:dd:6b:4f:c2:e3: 51:62:b7:11:62:01:ba:02:39:10:be:19:64:1f:7d: dd:ce:b9:6b:60:fa:51:6a:8d:8e:e0:4f:7e:6b:4e: d2:96:71:92:e3:c0:d7:42:26:26:32:19:35:51:a0: 99:33:02:d4:28:83:38:9c:b7:80:c5:2b:17:82:c0: 44:d3:75:0e:32:c2:7c:16:16:03:19:02:e8:a5:c2: 79:59:e0:a1:c3:5b:af:ed:29:02:9a:4a:e8:49:b9: 93:d3:1a:91:1d:1c:af:b5:12:c2:b1:62:38:4e:92: c7:40:81:4a:fb:14:67:64:b8:af:07:40:f3:6e:72: 59:77:a3:4a:5d:ee:fa:73:87:dd:04:e9:f0:90:e1: fb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6C:EE:C7:45:DD:88:32:2B:2B:4B:CB:35:EE:26:61:BE:97:43:DB X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:52:1e:19:b3:f0:c2:57:7d:63:fc:28:84:b4:26:93:ec:a3: 09:8f:05:89:28:e9:61:56:be:1f:53:69:dc:f2:b9:a7:d0:45: 38:57:9f:c4:75:86:b8:82:4a:1b:41:96:e8:f5:69:be:19:de: 84:4a:d8:da:d6:9d:7e:dc:74:e0:1a:49:21:2f:7d:65:86:58: c3:86:ac:a4:64:1b:a7:01:0e:ef:ff:66:ed:b9:8c:eb:2b:b7: c1:c9:fe:71:1f:37:9e:2a:12:1f:d0:58:0f:a3:f2:1d:4d:3d: 0d:ff:b6:ab:df:c0:4b:c1:f1:8c:ca:e5:cd:7e:b6:63:b3:64: e0:4e:6a:a4:33:be:ff:00:38:1b:90:a2:d8:6e:78:a2:48:58: aa:c5:d3:06:f6:6f:f6:97:90:a0:52:b9:6d:64:b2:cf:7e:9e: 18:a9:ce:b2:5e:5e:a9:91:76:ea:1a:b0:0e:e9:8e:3d:ab:7f: d8:ae:41:5f:84:3d:2c:6c:da:35:84:cb:2f:2b:4b:d8:89:7c: 16:e1:f8:45:4a:da:d7:77:d7:b2:c5:af:2d:bc:5d:dd:d2:fb: 53:6e:cc:51:42:f5:60:a9:96:44:f9:58:aa:7a:6a:b0:60:8a: 35:b7:aa:01:10:f1:e0:59:19:b5:4a:18:f5:d2:f2:46:14:d4: 88:e8:bf:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBlSlAQXmcZK5rjkQBS/RmwHe+iYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNTA1MTIwNDA3MDVaFw0yNTA1MTUwNjQ0MDVaMDMxMTAvBgNV BAMTKDUwNkNFRUM3NDVERDg4MzIyQjJCNEJDQjM1RUUyNjYxQkU5NzQzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0crOhMFXTDw8524QBe4cGkzL EuWJhFVXLChjTWBH/EuSmlmqRsu/OaG6YUeqAnmQu/jYpkXsDxJFPX37Uyh6c9+C 8yjsTI0jIIwCTIqGXR7M7cZObMLw/s5V37C0U7NJr3jmRiAXlDqs9WKJuXMzSYLd a0/C41FitxFiAboCORC+GWQffd3OuWtg+lFqjY7gT35rTtKWcZLjwNdCJiYyGTVR oJkzAtQogzict4DFKxeCwETTdQ4ywnwWFgMZAuilwnlZ4KHDW6/tKQKaSuhJuZPT GpEdHK+1EsKxYjhOksdAgUr7FGdkuK8HQPNucll3o0pd7vpzh90E6fCQ4fvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUGzux0XdiDIrK0vLNe4mYb6XQ9swHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtSHhmz8MJXfWP8KIS0JpPsowmPBYko6WFW vh9TadzyuafQRThXn8R1hriCShtBluj1ab4Z3oRK2NrWnX7cdOAaSSEvfWWGWMOG rKRkG6cBDu//Zu25jOsrt8HJ/nEfN54qEh/QWA+j8h1NPQ3/tqvfwEvB8YzK5c1+ tmOzZOBOaqQzvv8AOBuQothueKJIWKrF0wb2b/aXkKBSuW1kss9+nhipzrJeXqmR duoasA7pjj2rf9iuQV+EPSxs2jWEyy8rS9iJfBbh+EVK2td317LFry28Xd3S+1Nu zFFC9WCplkT5WKp6arBgijW3qgEQ8eBZGbVKGPXS8kYU1Ijov0M= -----END CERTIFICATE-----Generated at Mon May 12 12:23:43 2025 by rpki-client