$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft File: F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json) Hash identifier: qGzCco27X278nE5M/SUPGTHHAYqf9biFsj/B9OOoNv4= Subject key identifier: 07:12:49:1C:3E:46:B1:88:C5:40:A2:38:0C:AC:DC:37:BF:2C:48:69 Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Certificate serial: 4BC52553686CE935617E72684CF00E6382C30F58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft Manifest number: 04EB Signing time: Fri 09 May 2025 12:21:09 +0000 Manifest this update: Fri 09 May 2025 12:16:09 +0000 Manifest next update: Mon 12 May 2025 22:37:09 +0000 Files and hashes: 1: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: ReHGyi3wPol8w+dXN58JQZ3jKDZy41EdBUQ9KqgqxNE=) 2: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: 1XpGe+qbE1OOWK8DTNkeP+L7ndY3082zjqj/g6hwuD8=) 3: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: cvXp0ryiRslGKbI04u3NZ/8isAZXiXHmgeBpSrGft3g=) 4: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: 3ZwNr+4/mltdU4Fa2+p5I/jT8k6+RBpELOtoerv5PXc=) 5: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: DdfVx1Y4zhGVI0wY6FDIqnJ7U45MXqnwWFPD5ypl2Cc=) 6: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: wWiP9md+rg4jkV6o4vvI8Sn+AClqa4kF5AOzHWEDjoU=) 7: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: iL4PMKbvrqXhDgoAoAWusZEJsxlC06RfPP/P+d5o2nI=) 8: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 0D0mLk+Xng2R+/IUUM+8XhOsNRalYtt+3M4upuYxRoc=) 9: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: LwcbD+sHZALJzN975SZcrEx7OkI4wSuCBSFEZ0s2LcA=) 10: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: ctLBkJdn5QnPjKLcq9nVyPuWBDgr1w513Qyi8PIDRPM=) 11: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 4lUl/bGr3LsLR/vnV3xMIVxucYqdv89T4oDlo5SwVJ0=) 12: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: kuZS7DLLlgmMTpJidQpDkrlhCk8WMeXuEnGoo6NlY4A=) 13: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: gYdBbEHqi/8GEIbwa19GzLrLlojYDwF4Guaq4yqtU1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 22:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c5:25:53:68:6c:e9:35:61:7e:72:68:4c:f0:0e:63:82:c3:0f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Validity Not Before: May 9 12:16:09 2025 GMT Not After : May 12 22:37:09 2025 GMT Subject: CN=0712491C3E46B188C540A2380CACDC37BF2C4869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:70:0b:9e:a2:61:66:25:d1:14:35:91:7f: 70:5e:e3:7d:61:22:47:8f:e4:50:55:b5:58:21:31: 2a:36:3d:1d:99:57:c8:f2:82:b2:d4:3b:64:c5:87: 50:a9:2c:80:dd:40:50:c0:ff:a2:da:42:ad:c4:82: 57:21:71:32:fc:bf:e5:5d:48:f5:ac:f2:a3:87:1e: b2:f7:81:f2:82:ba:15:85:a4:9a:2d:45:18:e2:3f: 92:5f:c6:8f:af:40:84:82:d2:9a:cf:f5:b9:1f:c4: 21:16:c8:70:21:05:36:e5:cb:db:97:a5:2e:12:46: fb:4c:a2:f1:65:03:3d:02:3b:e4:34:52:e0:88:b4: c1:fc:de:7c:3d:cc:d9:58:35:77:2a:30:ce:66:60: 49:20:e1:c1:70:0e:3a:a9:86:fe:44:f4:d2:da:77: 2f:56:3f:d5:45:b2:7f:2c:59:90:3c:7a:4d:28:9d: fd:ce:ab:f4:e5:d2:b1:71:cb:57:fb:ee:a8:ab:4a: 40:42:10:49:94:20:73:42:ec:2f:43:81:27:62:a4: 26:bc:18:d0:a5:b0:65:49:66:05:fe:0d:a0:0f:a4: f7:4a:64:4e:bc:b0:c1:01:4b:d8:9b:af:66:c0:3b: a2:45:5b:3e:97:08:1d:33:49:fa:0d:0f:f6:61:77: 2e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:12:49:1C:3E:46:B1:88:C5:40:A2:38:0C:AC:DC:37:BF:2C:48:69 X509v3 Authority Key Identifier: keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a2:70:47:c5:47:bf:bf:4d:f2:c9:f1:ec:d4:66:79:01:e3: 6f:04:2c:43:60:0a:2a:73:c3:ed:b4:f9:d7:b2:69:92:cc:c7: c0:1a:35:83:1c:b2:a2:8c:b6:dc:95:0b:3c:4f:fd:2f:9f:d4: c2:ef:c1:8d:ec:81:bd:32:f5:85:f5:f6:b1:3f:3b:80:1b:a9: 21:11:54:27:61:dc:c6:9b:9a:27:68:b6:e8:8b:aa:14:19:0c: 2a:54:2e:e6:7e:09:54:d7:ac:90:fb:93:f5:bf:0a:24:26:f7: de:b9:fc:4b:da:48:92:ab:e8:19:e1:dc:a5:23:4b:a3:04:d4: cd:b9:0b:67:e0:6b:13:ca:e2:cc:b9:c8:6d:a8:f6:f1:bf:26: a8:43:21:be:55:61:ef:7e:a1:f1:b2:4b:46:a3:02:ce:9c:f0: e0:8f:56:06:bf:87:bb:1f:99:dd:7b:eb:89:ae:14:32:c5:b1: a5:12:50:6a:fb:38:e1:2d:47:d5:22:ac:b9:25:37:57:64:c8: eb:6a:40:20:f5:14:9b:a9:16:2d:17:6c:04:8e:f1:de:b0:a9: 45:fd:c8:92:1a:3b:2f:2f:8e:51:b6:11:c4:49:55:b9:7d:27: 45:6c:5d:0a:2c:f4:f9:95:74:fe:8a:71:dc:e7:db:54:3f:7d: 3c:fe:c8:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS8UlU2hs6TVhfnJoTPAOY4LDD1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz MDlCM0YzQjAeFw0yNTA1MDkxMjE2MDlaFw0yNTA1MTIyMjM3MDlaMDMxMTAvBgNV BAMTKDA3MTI0OTFDM0U0NkIxODhDNTQwQTIzODBDQUNEQzM3QkYyQzQ4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jXALnqJhZiXRFDWRf3Be431h IkeP5FBVtVghMSo2PR2ZV8jygrLUO2TFh1CpLIDdQFDA/6LaQq3EglchcTL8v+Vd SPWs8qOHHrL3gfKCuhWFpJotRRjiP5Jfxo+vQISC0prP9bkfxCEWyHAhBTbly9uX pS4SRvtMovFlAz0CO+Q0UuCItMH83nw9zNlYNXcqMM5mYEkg4cFwDjqphv5E9NLa dy9WP9VFsn8sWZA8ek0onf3Oq/Tl0rFxy1f77qirSkBCEEmUIHNC7C9DgSdipCa8 GNClsGVJZgX+DaAPpPdKZE68sMEBS9ibr2bAO6JFWz6XCB0zSfoND/Zhdy4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxJJHD5GsYjFQKI4DKzcN78sSGkwHwYDVR0j BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC M0YzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4NmIwOTItNTI3ZC00ODhmLWE5 ZjctMjQ3OTdkOTc3NGNiLzAvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlB NjgzMDlCM0YzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyicEfFR7+/TfLJ8ezUZnkB428ELENgCipz w+20+deyaZLMx8AaNYMcsqKMttyVCzxP/S+f1MLvwY3sgb0y9YX19rE/O4AbqSER VCdh3MabmidotuiLqhQZDCpULuZ+CVTXrJD7k/W/CiQm9965/EvaSJKr6Bnh3KUj S6ME1M25C2fgaxPK4sy5yG2o9vG/JqhDIb5VYe9+ofGyS0ajAs6c8OCPVga/h7sf md1764muFDLFsaUSUGr7OOEtR9UirLklN1dkyOtqQCD1FJupFi0XbASO8d6wqUX9 yJIaOy8vjlG2EcRJVbl9J0VsXQos9PmVdP6Kcdzn21Q/fTz+yFI= -----END CERTIFICATE-----Generated at Sun May 11 22:58:46 2025 by rpki-client