$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: JJBJrdDPDd91hj2WNNVeLOF8YLdueY2r/srYRde0eb0= Subject key identifier: E2:B1:C2:9A:D7:1B:0B:2C:AD:C8:B3:08:C4:DD:18:28:B9:8C:1F:58 Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 62AB8C05430DCB8113785D373F7EEA2725C7BD88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 04E2 Signing time: Fri 09 May 2025 21:01:35 +0000 Manifest this update: Fri 09 May 2025 20:56:35 +0000 Manifest next update: Tue 13 May 2025 02:08:35 +0000 Files and hashes: 1: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: C9m2x+cEuX4LnybGWj0tNFp4i23qnODAiSNUmH6kf/0=) 2: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: UFrAKKu5fsS6UWOb9wJlqSpemNBUmWPsRRBfie+o4XQ=) 3: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: w8KhQhAE9qtOeUsIYiL4lko66TpmJ+xch/XP9e9vq2Y=) 4: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: MQx/O8O2uQJVqHYOSxfo/Q2KG9J3bcLTiM4IdvIIF+I=) 5: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=) 6: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: dUXFtPIF61cMsxlijUdeGn+XAjJGBrV/EpzRTuOKE9M=) 7: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: VX2tVKkS7LzPxrLmOsssh+r2zJ3zeiGSJ2bMTYWz5Q8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ab:8c:05:43:0d:cb:81:13:78:5d:37:3f:7e:ea:27:25:c7:bd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: May 9 20:56:35 2025 GMT Not After : May 13 02:08:35 2025 GMT Subject: CN=E2B1C29AD71B0B2CADC8B308C4DD1828B98C1F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:cc:af:6a:53:47:bd:c1:c7:76:dd:9a:4d: 22:f5:c8:38:76:d1:2a:4a:e6:ad:ec:35:af:ac:31: c5:89:27:31:b2:cc:2d:ca:5b:00:72:30:e2:a1:b4: 7c:3b:91:8f:77:ce:da:df:8f:c7:7f:51:9b:61:ef: e5:7c:28:08:8f:db:bf:dc:f9:9c:6e:a7:73:b7:a2: 9b:66:eb:5a:c6:7f:3b:d3:f2:5b:b7:93:72:e5:ce: 5a:03:5f:fa:24:f8:c4:5d:ac:10:de:fe:db:ab:83: 7c:e2:f8:f8:23:27:df:ec:f1:c1:1a:18:4a:16:cf: 7c:1b:89:75:ce:18:8f:5f:43:30:d7:fc:61:c0:a0: a8:62:8e:ee:ee:06:b5:87:a0:b0:b7:67:af:92:e2: 86:ce:64:ad:dd:f3:65:25:6c:7f:3d:4a:60:76:7b: bd:00:a3:ae:51:8e:b6:73:2b:ad:0e:72:05:7a:a2: 42:bc:35:8f:62:f4:8f:43:ed:eb:5f:74:92:55:9a: 9c:6a:56:a1:d2:3d:e3:da:7d:7a:d8:02:da:1f:29: 08:b6:0d:b1:fc:87:b7:58:97:e6:51:b0:1a:77:ab: 4b:87:ae:ba:22:5b:79:9a:04:7d:8f:9c:63:7d:30: c0:68:87:a0:18:e2:cb:75:65:02:87:54:81:da:1e: 49:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B1:C2:9A:D7:1B:0B:2C:AD:C8:B3:08:C4:DD:18:28:B9:8C:1F:58 X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:bf:f5:3f:b6:9d:9d:c8:8c:26:ba:bc:ab:c2:71:65:d6:1c: 6e:79:d5:5a:14:a4:e5:ae:71:8d:0d:d5:50:7c:10:7d:9d:4f: 8c:b2:13:33:dc:bd:b6:ff:a2:7e:fc:ff:cb:1d:90:e5:2d:81: 9c:13:f5:a1:69:61:56:6d:00:e5:3d:20:85:f7:c7:f9:f0:18: 8a:eb:af:b5:22:d6:1a:67:56:bf:70:88:40:9c:57:32:1a:de: 1c:62:71:4e:75:4b:9c:54:a2:0c:58:b0:35:75:2f:70:fc:b7: 2f:af:dc:35:1f:2f:84:08:4c:48:69:d8:05:0d:88:a1:42:0e: 91:f6:95:ba:e3:0c:34:b6:05:90:38:0d:dc:2b:bc:0c:38:01: 99:bc:65:cc:21:24:87:33:5e:a2:d4:c9:8b:e6:14:f7:76:75: a1:96:38:60:69:a0:9a:02:87:3f:3f:28:e3:50:ef:e3:84:a0: e1:09:04:cf:0b:c7:18:44:b0:01:c0:d0:94:dc:1a:40:db:01: b8:64:1a:3f:d8:0e:9b:3b:81:34:66:b0:6d:2a:1e:d8:fa:08: 02:c1:ed:b5:ac:10:9c:90:d5:f9:59:d4:9f:29:aa:a2:56:00: 6f:fc:fa:ee:9a:cd:aa:c1:8e:74:bb:1e:f7:f9:bf:a5:a7:a0: 26:f0:be:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYquMBUMNy4ETeF03P37qJyXHvYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTA1MDkyMDU2MzVaFw0yNTA1MTMwMjA4MzVaMDMxMTAvBgNV BAMTKEUyQjFDMjlBRDcxQjBCMkNBREM4QjMwOEM0REQxODI4Qjk4QzFGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZ8yvalNHvcHHdt2aTSL1yDh2 0SpK5q3sNa+sMcWJJzGyzC3KWwByMOKhtHw7kY93ztrfj8d/UZth7+V8KAiP27/c +Zxup3O3optm61rGfzvT8lu3k3LlzloDX/ok+MRdrBDe/turg3zi+PgjJ9/s8cEa GEoWz3wbiXXOGI9fQzDX/GHAoKhiju7uBrWHoLC3Z6+S4obOZK3d82UlbH89SmB2 e70Ao65RjrZzK60OcgV6okK8NY9i9I9D7etfdJJVmpxqVqHSPePafXrYAtofKQi2 DbH8h7dYl+ZRsBp3q0uHrroiW3maBH2PnGN9MMBoh6AY4st1ZQKHVIHaHkmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4rHCmtcbCyytyLMIxN0YKLmMH1gwHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALm/9T+2nZ3IjCa6vKvCcWXWHG551VoUpOWu cY0N1VB8EH2dT4yyEzPcvbb/on78/8sdkOUtgZwT9aFpYVZtAOU9IIX3x/nwGIrr r7Ui1hpnVr9wiECcVzIa3hxicU51S5xUogxYsDV1L3D8ty+v3DUfL4QITEhp2AUN iKFCDpH2lbrjDDS2BZA4DdwrvAw4AZm8ZcwhJIczXqLUyYvmFPd2daGWOGBpoJoC hz8/KONQ7+OEoOEJBM8LxxhEsAHA0JTcGkDbAbhkGj/YDps7gTRmsG0qHtj6CALB 7bWsEJyQ1flZ1J8pqqJWAG/8+u6azarBjnS7Hvf5v6WnoCbwvkk= -----END CERTIFICATE-----Generated at Sat May 10 08:28:28 2025 by rpki-client