$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft File: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft (raw, json) Hash identifier: UmQXkSIF4f82JplBxqFOuihR9Hs9EvlgS9oxv4+P1qo= Subject key identifier: 00:79:F8:8E:E5:06:B3:EF:83:75:FF:0C:F3:24:53:D2:F1:42:80:77 Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 1FF225FAD6BB63CAA003E4ECE6A2DFA097C98AB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft Manifest number: 04A1 Signing time: Wed 07 May 2025 11:11:58 +0000 Manifest this update: Wed 07 May 2025 11:06:58 +0000 Manifest next update: Sat 10 May 2025 14:45:58 +0000 Files and hashes: 1: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: b3QtB4OgqdRWfaRrhbvsm6gH1TsKPXL5Yz9+wyHqUXg=) 2: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: h7IiV0kh9O/RK06uMG1rhN5D8mRuZrUlThAbqSxDils=) 3: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: BuvczQEbe/bdskV+ebbMfwgi2QgHhXaT52MUJAQ4Uu4=) 4: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: mAylxMr8+d8mR8LWIKVq/3AjBIk2gwxyYbF7kLOA17c=) 5: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl (hash: hbU1VkaWVjCnqXmJqI3j+Oq93L5EJKd7BCLFcMkjQxY=) 6: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: IyTH+iDrZwcYpQjVq5OAN4r5uvDjzNsSK7r7mWOE79s=) 7: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: KC/48KyBK866tyRqnFAk104o6NtYIjI9BYH4NY1WGf4=) 8: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nGOhkS+SCCrJt9wmjNL7Gorc9U1h3Xuifw+uaNxyRl4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 14:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f2:25:fa:d6:bb:63:ca:a0:03:e4:ec:e6:a2:df:a0:97:c9:8a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: May 7 11:06:58 2025 GMT Not After : May 10 14:45:58 2025 GMT Subject: CN=0079F88EE506B3EF8375FF0CF32453D2F1428077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:03:b0:71:43:fe:48:3d:b7:09:7c:49:7e: b8:da:90:99:36:40:b5:ba:25:71:54:71:43:de:51: 49:db:6f:cb:3e:e1:0d:b9:ab:9c:cf:9d:6f:53:0f: 56:7f:f3:78:f4:da:41:87:4a:ff:e4:d7:70:c7:06: 82:ed:3d:d0:ac:3e:df:37:6a:df:3f:d4:b0:11:17: a1:da:9f:ee:a9:da:81:f7:4a:5a:08:3a:43:93:05: d4:e5:1b:e1:de:dd:ed:b4:df:1c:36:00:72:0e:7c: ab:bb:f8:91:95:f9:c7:18:5d:7f:fe:13:97:4e:5f: f3:3b:b7:04:6d:aa:67:cb:02:a5:c7:95:94:cd:9c: e6:d1:04:84:a4:6f:2e:3b:08:24:06:2d:b2:1c:21: 96:0b:7e:14:1c:43:fa:79:27:f1:0c:2a:18:1b:4e: de:2d:b9:05:68:5f:5d:9e:a9:ad:2a:58:3c:6e:a7: d4:13:63:97:6f:e0:44:5a:a5:67:51:7e:72:3a:35: bb:29:a5:bb:a2:2e:0c:ac:22:87:4d:1a:fb:2e:16: ec:a8:69:f7:2d:54:79:fa:3d:f1:c8:e7:38:a3:85: 37:00:db:c4:f2:0d:57:49:fa:c9:30:6d:88:c3:71: 64:ea:1d:fb:f3:7b:f2:61:79:77:18:18:20:af:9b: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:79:F8:8E:E5:06:B3:EF:83:75:FF:0C:F3:24:53:D2:F1:42:80:77 X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8c:8f:39:d2:9c:8d:be:05:71:9c:a0:99:46:65:18:09:93: 9e:60:76:0e:c5:d7:1a:17:10:e7:85:9c:ed:44:1f:03:1c:bd: 73:4c:61:8e:82:9a:d4:88:81:f7:eb:15:d6:de:53:79:75:93: d2:5e:05:43:a1:20:2c:d1:8a:36:66:43:d8:98:4e:97:e3:48: 9e:de:34:ee:42:d8:c6:1c:92:c6:69:a3:2f:05:f1:73:f2:04: a1:82:c8:1e:23:4f:f0:55:99:4d:7f:44:ea:10:2d:26:61:4d: d8:8a:0e:c1:be:7a:41:b8:bf:a2:d4:6c:18:e1:03:59:86:44: b3:df:d5:e7:d2:0c:af:5d:70:f9:a2:1b:aa:cb:0d:f3:a3:a2: 5c:55:c2:dd:17:67:f8:0a:62:5f:f4:77:93:b7:c1:60:b6:70: 2b:9f:0d:29:e5:cf:ae:c6:d2:79:3d:07:a4:e5:cb:49:81:87: 5e:de:d6:fc:6b:08:a4:d4:3c:bf:15:f1:ea:15:1f:55:b1:ac: 80:e3:d6:00:05:e7:13:cf:da:3f:ce:18:0f:55:ed:5e:d0:37: 23:25:13:51:c1:ec:2e:bd:f8:fa:60:77:72:e9:67:06:fc:54: 42:99:05:0f:08:1d:99:2c:33:96:bb:5b:2d:8c:63:c7:be:b8: 44:85:c7:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/Il+ta7Y8qgA+Ts5qLfoJfJirQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yNTA1MDcxMTA2NThaFw0yNTA1MTAxNDQ1NThaMDMxMTAvBgNV BAMTKDAwNzlGODhFRTUwNkIzRUY4Mzc1RkYwQ0YzMjQ1M0QyRjE0MjgwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIgOwcUP+SD23CXxJfrjakJk2 QLW6JXFUcUPeUUnbb8s+4Q25q5zPnW9TD1Z/83j02kGHSv/k13DHBoLtPdCsPt83 at8/1LARF6Han+6p2oH3SloIOkOTBdTlG+He3e203xw2AHIOfKu7+JGV+ccYXX/+ E5dOX/M7twRtqmfLAqXHlZTNnObRBISkby47CCQGLbIcIZYLfhQcQ/p5J/EMKhgb Tt4tuQVoX12eqa0qWDxup9QTY5dv4ERapWdRfnI6NbsppbuiLgysIodNGvsuFuyo afctVHn6PfHI5zijhTcA28TyDVdJ+skwbYjDcWTqHfvze/JheXcYGCCvm6LFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAHn4juUGs++Ddf8M8yRT0vFCgHcwHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2 QjVERDc4QzVCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqMjznSnI2+BXGcoJlGZRgJk55gdg7F1xoX EOeFnO1EHwMcvXNMYY6CmtSIgffrFdbeU3l1k9JeBUOhICzRijZmQ9iYTpfjSJ7e NO5C2MYcksZpoy8F8XPyBKGCyB4jT/BVmU1/ROoQLSZhTdiKDsG+ekG4v6LUbBjh A1mGRLPf1efSDK9dcPmiG6rLDfOjolxVwt0XZ/gKYl/0d5O3wWC2cCufDSnlz67G 0nk9B6Tly0mBh17e1vxrCKTUPL8V8eoVH1WxrIDj1gAF5xPP2j/OGA9V7V7QNyMl E1HB7C69+Ppgd3LpZwb8VEKZBQ8IHZksM5a7Wy2MY8e+uESFx0Y= -----END CERTIFICATE-----Generated at Wed May 7 20:12:02 2025 by rpki-client