$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: +TZ5BbQPVfKq01ZNqZXLvvUIaKvGjr08WBSmKIrx7tQ= Subject key identifier: CA:45:AF:B3:BD:E3:E7:0C:BA:DC:7D:D2:8B:E0:48:32:4F:DA:3A:F0 Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 4711208597AAEAF83E7D7A30F881D4D0FAEF5E52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 0169 Signing time: Thu 08 May 2025 17:11:54 +0000 Manifest this update: Thu 08 May 2025 17:06:54 +0000 Manifest next update: Mon 12 May 2025 04:43:54 +0000 Files and hashes: 1: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: glVksW6lrI1/cDzPTJqhUFM0CDdUsY6M6ambp5lL8nY=) 2: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: 2FbNCyBbTvgWS7aFYjsLlYd9SYY28PwsTt9mqOb3gc4=) 3: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: zq6FCBzDTt8AjXmbK9U4RXyugtl+khIAf1ju1PBBDs8=) 4: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk=) 5: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: Iki/ujAUR2r8jEic7uIoweO5tx+ZoKhjiMwDTjulvbo=) 6: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: YFqBunOn7BAxcRO9kxvgzIpLLgn70FZ5dEIXUOseJlA=) 7: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: gnmrbZ6phBcjgkNgTfRN5xt+ZC7Cm6KFgCfrhOm4VXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:11:20:85:97:aa:ea:f8:3e:7d:7a:30:f8:81:d4:d0:fa:ef:5e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: May 8 17:06:54 2025 GMT Not After : May 12 04:43:54 2025 GMT Subject: CN=CA45AFB3BDE3E70CBADC7DD28BE048324FDA3AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:93:da:60:66:c3:a4:70:ee:29:a9:02:f8: 44:ed:5a:f2:25:ed:b8:21:9b:dd:1b:e3:c7:44:89: 7d:69:1a:7c:d6:94:41:ef:73:a8:80:e6:3f:29:c9: 65:84:f5:67:e9:37:1d:11:5d:60:10:b9:fe:9b:9a: e0:99:19:ae:ec:e2:50:32:3d:62:7b:03:1e:37:cf: c8:32:1a:9b:68:9e:bd:28:ba:38:e0:a1:e2:64:e4: b0:ac:0f:7c:71:93:23:f5:5c:8f:47:d8:90:d8:3d: 15:d6:14:b7:42:37:e8:c8:50:0c:26:93:0c:ba:dc: b1:ee:88:dd:85:fb:db:09:b8:3f:0e:38:60:67:0a: 56:df:38:45:f9:c0:cc:60:35:91:a8:14:47:95:15: 56:8f:1e:cc:a4:80:0f:4e:73:eb:4f:ac:77:30:fd: 26:33:c4:2e:e6:d2:f8:08:5f:77:87:d3:3b:ee:76: f5:0a:cb:50:98:39:9e:38:cd:bd:e7:76:0f:7a:1e: 6e:88:e0:d2:0b:08:4e:cf:29:b7:b8:3e:de:0a:e3: b2:d6:7d:9a:30:ab:18:dc:34:31:75:a0:54:65:06: 72:6d:93:0c:f9:22:95:0b:da:bc:f6:fa:d1:13:f4: 8c:b9:99:64:e5:8e:74:e5:26:12:a2:72:de:da:eb: 0d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:45:AF:B3:BD:E3:E7:0C:BA:DC:7D:D2:8B:E0:48:32:4F:DA:3A:F0 X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c4:1a:2d:0b:7d:58:f2:ce:65:7a:4f:fd:32:da:2c:54:56: 13:df:6f:ef:c8:fb:0a:cc:b5:c7:db:f7:2c:a2:ed:d8:1d:b2: e4:9b:4a:c2:bf:03:ee:e3:c6:ee:11:6a:be:e1:94:a0:59:d7: d9:97:e3:b9:da:e0:0b:73:63:98:89:72:39:28:b9:82:96:4e: e4:06:32:13:3f:43:99:e3:f6:77:42:4b:ed:a1:b2:70:db:64: ef:4e:a1:40:06:2e:3f:cf:aa:53:64:16:3b:74:57:09:a4:d2: 56:6c:03:ef:3a:8a:c8:61:a0:b5:f2:b2:90:41:d8:2f:94:f5: f2:9e:9a:4f:64:b3:f7:a7:bd:09:ed:63:4b:b4:18:5a:08:3e: 6f:70:ad:aa:93:28:cd:d3:9e:f1:87:dc:c2:70:d6:82:bf:15: f6:6e:21:e6:f6:83:eb:6a:58:bc:7a:e7:0b:f8:c3:6e:28:c8: 11:e3:78:4b:0e:5c:25:a3:37:03:54:c2:5a:74:fc:84:12:3f: 5b:d4:24:b9:c4:85:b0:75:3d:89:9f:72:3f:49:2a:1a:78:c3: dd:f0:dd:24:b3:5c:3b:8f:33:08:c1:0f:c9:e0:27:7e:22:0f: eb:09:97:bc:a0:b9:92:89:a3:d5:35:76:7c:d1:f9:3c:38:2d: a7:6e:7d:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxEghZeq6vg+fXow+IHU0PrvXlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTA1MDgxNzA2NTRaFw0yNTA1MTIwNDQzNTRaMDMxMTAvBgNV BAMTKENBNDVBRkIzQkRFM0U3MENCQURDN0REMjhCRTA0ODMyNEZEQTNBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzpPaYGbDpHDuKakC+ETtWvIl 7bghm90b48dEiX1pGnzWlEHvc6iA5j8pyWWE9WfpNx0RXWAQuf6bmuCZGa7s4lAy PWJ7Ax43z8gyGptonr0oujjgoeJk5LCsD3xxkyP1XI9H2JDYPRXWFLdCN+jIUAwm kwy63LHuiN2F+9sJuD8OOGBnClbfOEX5wMxgNZGoFEeVFVaPHsykgA9Oc+tPrHcw /SYzxC7m0vgIX3eH0zvudvUKy1CYOZ44zb3ndg96Hm6I4NILCE7PKbe4Pt4K47LW fZowqxjcNDF1oFRlBnJtkwz5IpUL2rz2+tET9Iy5mWTljnTlJhKict7a6w0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUykWvs73j5wy63H3Si+BIMk/aOvAwHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPEGi0LfVjyzmV6T/0y2ixUVhPfb+/I+wrM tcfb9yyi7dgdsuSbSsK/A+7jxu4Rar7hlKBZ19mX47na4AtzY5iJcjkouYKWTuQG MhM/Q5nj9ndCS+2hsnDbZO9OoUAGLj/PqlNkFjt0Vwmk0lZsA+86ishhoLXyspBB 2C+U9fKemk9ks/envQntY0u0GFoIPm9wraqTKM3TnvGH3MJw1oK/FfZuIeb2g+tq WLx65wv4w24oyBHjeEsOXCWjNwNUwlp0/IQSP1vUJLnEhbB1PYmfcj9JKhp4w93w 3SSzXDuPMwjBD8ngJ34iD+sJl7yguZKJo9U1dnzR+Tw4LadufWg= -----END CERTIFICATE-----Generated at Sun May 11 03:54:28 2025 by rpki-client