$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json) Hash identifier: 40bTHzjS6/HaP5PJoynWHoVvsyhpckNctPoXbv6rYe4= Subject key identifier: E3:75:8C:B8:B7:E5:24:85:88:2D:9B:18:2A:95:1C:EC:BA:37:B1:A8 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 53FC6B6064CCE34EEC2E36D21D599600BFFE5A3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft Manifest number: 0529 Signing time: Sun 11 May 2025 12:41:20 +0000 Manifest this update: Sun 11 May 2025 12:36:20 +0000 Manifest next update: Thu 15 May 2025 00:03:20 +0000 Files and hashes: 1: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: 8V+Zya7yK3fEGLmUtkhLrEpRvGEZWoHeCqz3YLbVbVU=) 2: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: armCdMsgrh9HBVd3tCBMp8GfztvN8GGDpG5VkguYG4U=) 3: 3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa (hash: 9tWn1tUw0lnAE7QTSe9gFD7FXQ8Wg/JsMqpIZEwXrcQ=) 4: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 27UeUaEQQTlGBzMMtig9mrxqvsFGGYiXFECx86HP9vw=) 5: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: BYrXc+PLZ/j21jMX4S/tR9RU/3h3VFerg2jw36ACe00=) 6: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: tsk8yK4KqvJi7ogL1Fgl2IoF/vS9e+lT+cqgt4OR0O0=) 7: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: zQbQBWWEi5D5FTstthFEurL4sFplPWdltQCq5iDGgW0=) 8: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=) 9: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: m0Qe62ytaZMKNB4gQCVhBMudXZyhLsB3FcV65dwOjuM=) 10: 3230332e38342e3134332e302f32342d3234203d3e20313530393732.roa (hash: TQogc+bIoAadk+dL2Cz1Noxh233Lv82bNDTeGntUavQ=) 11: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: uR6D5Vottqw3UGMrbavLqGe0RHF7yIauRiSRYUAqjK4=) 12: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: aq3iMOcZU4XVOFPAPd2Nh3J2J2xxy7ZZYh4S2cWkrJY=) 13: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: IKrLXgzTRMNUHQiY7lPxbY4RYs8/kWiZvIMH5tUTx6c=) 14: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: KnuT4VJ8iLWdqrErOu2FeJ8mmwI6wwnIx48WuNVZS4g=) 15: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: 1w88ZaASU+IezmbFAGItPt0iVYfj3PFgWl7YKMyNTuU=) 16: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (hash: NYon6seWVPGfj3szG9Lc+42jdaypbm8ZjYwi9OVBxlE=) 17: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: gQ15SQ+7CTm0lbNi34nU2xnDYGkiDVy2zZGBrQmJGtQ=) 18: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: yp0ymkkJErjARlfD4b/LvbiQmOT8YSbj7zix8YS5hGw=) 19: 3230332e38342e3133382e302f32342d3234203d3e20393834.roa (hash: OvL2f4eV/dIS/ISoFQJ5cS+0xjddfINmJd9dof7YWKE=) 20: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: 8l5eYrcFmWYoHIRslSOK/QjIOtGdM4ToITrA74vyIxo=) 21: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: gDE9/OhZHSWK8pSq7uGqk744ZfgEp48VY/AnfNVTHcA=) 22: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: +ioxMWbzQIk8162X0SpHMt662sECkzs897/VKWy1MDU=) 23: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: mYxf6C6pLjXmVFDLfOQlsOJY104hPXXJrDn5WUaMTOY=) 24: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: GoGa19lNKrAbt7T4vItYqkUzpmzuN/7X1lEptYsCA58=) 25: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: RTuZkJtHP4oO5BZBcfIYPQEhgHjC830z/8gqHwaq6eQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 19:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:fc:6b:60:64:cc:e3:4e:ec:2e:36:d2:1d:59:96:00:bf:fe:5a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: May 11 12:36:20 2025 GMT Not After : May 15 00:03:20 2025 GMT Subject: CN=E3758CB8B7E52485882D9B182A951CECBA37B1A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:81:de:a1:f9:cd:30:aa:f9:69:d0:47:23:e7: 19:2f:4c:39:26:ec:47:20:0e:c3:07:90:ed:73:a4: 7c:e1:37:7c:87:7f:7f:06:21:23:e7:fa:70:8f:53: 16:3c:21:01:fb:34:41:e3:b8:37:80:9c:43:63:5a: 87:33:13:30:7c:56:1f:67:e1:73:1b:9e:0f:32:5c: 60:a0:0d:1c:d8:97:44:95:60:11:3a:a4:a6:3f:d7: bc:c9:9e:8d:9f:3e:e6:06:d9:b6:fc:a1:90:d8:52: 49:ce:30:c5:e9:c2:8c:06:cb:f8:3a:73:13:94:6c: 7f:60:29:75:f3:22:12:2a:02:52:39:17:df:38:0b: 5e:c9:56:5d:b0:e9:6e:69:3e:cf:02:27:45:b8:c6: 8f:3b:08:91:71:3a:62:46:46:16:18:bd:82:15:32: c8:3d:e5:10:77:23:bd:de:14:0a:e2:f5:25:a0:44: 8b:ea:bf:a6:cf:bf:25:62:cc:ec:ca:a8:6b:39:c5: 2d:55:9f:3f:a8:e3:0f:cb:33:07:f6:4e:fa:22:16: 80:01:77:a0:b9:e8:ba:3f:55:3f:37:9e:94:ee:67: ca:b7:56:02:f1:b0:52:9b:96:03:2f:17:56:27:4e: 0b:13:ba:40:11:3e:6b:6a:3f:15:2d:4c:60:77:c5: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:75:8C:B8:B7:E5:24:85:88:2D:9B:18:2A:95:1C:EC:BA:37:B1:A8 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bc:c9:e7:b3:00:17:e5:ed:f2:5a:69:b3:f1:54:08:4f:07: 9e:5a:51:a1:cb:c1:bb:03:23:f8:a3:c7:be:21:9d:19:c1:a5: 38:0c:34:3c:21:b0:bd:60:0d:fc:49:e0:d9:74:6f:07:fe:ab: 6e:ea:c0:2a:22:11:c5:bb:47:e6:ef:37:ba:9f:14:20:d0:5b: 62:69:4b:bf:3a:de:7a:81:3e:f0:30:ea:8d:cb:b9:a8:87:b7: 39:db:51:0b:6b:15:f7:1a:2d:42:d3:29:97:ae:17:97:a1:fc: 05:f4:b7:ab:18:29:1a:10:9e:b6:4d:ca:e2:41:e3:ce:33:b3: 5b:90:dc:92:b0:b5:c6:cd:85:56:e2:3d:67:70:21:03:0d:9e: 0a:b9:1f:2f:b6:fe:08:e3:90:a6:80:93:fc:51:96:4d:26:64: 3d:6e:7f:ec:31:46:5b:e7:5b:bd:ef:ef:33:62:6b:a3:85:d0: 2a:71:9f:8a:e0:91:b6:31:d7:f0:09:a4:7c:2e:68:76:da:a0: 97:99:6d:b9:06:68:f1:9c:80:1d:4e:8f:a5:ff:4d:f0:13:1e: 81:e3:c5:ab:ff:64:84:3d:2e:8f:62:3e:6d:5c:f8:0b:78:73: 83:85:66:a7:81:ac:9a:2f:9a:c3:5d:bf:86:b6:02:f6:8e:7b: b5:ad:11:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/xrYGTM407sLjbSHVmWAL/+WjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA1MTExMjM2MjBaFw0yNTA1MTUwMDAzMjBaMDMxMTAvBgNV BAMTKEUzNzU4Q0I4QjdFNTI0ODU4ODJEOUIxODJBOTUxQ0VDQkEzN0IxQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgd6h+c0wqvlp0Ecj5xkvTDkm 7EcgDsMHkO1zpHzhN3yHf38GISPn+nCPUxY8IQH7NEHjuDeAnENjWoczEzB8Vh9n 4XMbng8yXGCgDRzYl0SVYBE6pKY/17zJno2fPuYG2bb8oZDYUknOMMXpwowGy/g6 cxOUbH9gKXXzIhIqAlI5F984C17JVl2w6W5pPs8CJ0W4xo87CJFxOmJGRhYYvYIV Msg95RB3I73eFAri9SWgRIvqv6bPvyVizOzKqGs5xS1Vnz+o4w/LMwf2TvoiFoAB d6C56Lo/VT83npTuZ8q3VgLxsFKblgMvF1YnTgsTukARPmtqPxUtTGB3xSbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU43WMuLflJIWILZsYKpUc7Lo3sagwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc5MjJmODktM2U5Yi00YjIxLTkx ODYtYTY0OGMyZGEzZjdiLzAvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlF N0NCMEMxMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA28yeezABfl7fJaabPxVAhPB55aUaHLwbsD I/ijx74hnRnBpTgMNDwhsL1gDfxJ4Nl0bwf+q27qwCoiEcW7R+bvN7qfFCDQW2Jp S7863nqBPvAw6o3LuaiHtznbUQtrFfcaLULTKZeuF5eh/AX0t6sYKRoQnrZNyuJB 484zs1uQ3JKwtcbNhVbiPWdwIQMNngq5Hy+2/gjjkKaAk/xRlk0mZD1uf+wxRlvn W73v7zNia6OF0Cpxn4rgkbYx1/AJpHwuaHbaoJeZbbkGaPGcgB1Oj6X/TfATHoHj xav/ZIQ9Lo9iPm1c+At4c4OFZqeBrJovmsNdv4a2AvaOe7WtEVI= -----END CERTIFICATE-----Generated at Sun May 11 15:10:53 2025 by rpki-client