$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft File: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft (raw, json) Hash identifier: V34KvnJON3tWfQv+KDd+9fenAYm7bwap1c4brpyRB28= Subject key identifier: 8E:BE:E7:03:52:6A:00:73:35:08:B6:48:EE:3F:1C:25:52:87:67:65 Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 65E96D716B3D54CF8BFB6CBE4F223ECB02EB6B4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft Manifest number: 04E2 Signing time: Mon 05 May 2025 08:10:46 +0000 Manifest this update: Mon 05 May 2025 08:05:46 +0000 Manifest next update: Thu 08 May 2025 13:48:46 +0000 Files and hashes: 1: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: TyftOcvbZs91N5rxusfIjMZ5akc+NP+roH91JhFQg20=) 2: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl (hash: AIB8bBomhj2kNymL8EQQVb2VCF57k0w4ovFfzjp2dKE=) 3: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: JnLquCgIroielTjx4ROKisgjaiP3OgaMmkhANFXPFCc=) 4: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: WDUUBVToiU1iccjikjgrMyjUMVvcr2yL6nTb6EMxpMs=) 5: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: /vst8lOP9Na9sgAVJ1wD7o5HJMQFWxGn08eczXMCCA0=) 6: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: JxgdhcTrs6B/jpG5QUO9aLWXUNbAlaSX869U6y/nYjo=) 7: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: JqPwBzOb9IGp/J3IK4HU+cGl2mSkMSYQ3owKhX9duIs=) 8: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: pR7u7IsW9E5zx/4Gewaf11qIOvq1r/xgCkMTQFAUEcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 13:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e9:6d:71:6b:3d:54:cf:8b:fb:6c:be:4f:22:3e:cb:02:eb:6b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: May 5 08:05:46 2025 GMT Not After : May 8 13:48:46 2025 GMT Subject: CN=8EBEE703526A00733508B648EE3F1C2552876765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:4d:f1:15:78:f7:ed:ea:3d:1c:ec:16:ff: 3c:cf:0c:37:53:73:35:42:66:f2:25:aa:bc:e0:52: b9:18:85:e6:f3:34:c1:e9:e2:7f:58:bb:fd:b8:97: 2e:d6:97:47:94:32:16:6c:e0:26:40:44:22:62:4b: cc:a3:fc:4d:c9:8b:ce:fa:ae:d3:63:bb:f5:66:83: 9b:d7:16:5e:b8:e2:de:3b:ff:91:a3:c5:2a:53:e4: fe:69:99:cf:42:0d:24:66:69:63:18:bf:af:41:3d: dc:5c:60:c7:7f:81:40:2a:82:cf:83:e1:25:d5:43: cc:a6:7c:fd:63:4e:35:41:c0:7d:48:d5:98:08:72: d9:10:9a:53:dc:43:04:f2:6b:db:d6:05:1b:f2:28: f4:f7:24:6f:9c:f3:49:60:3d:80:c6:10:43:63:43: 32:7b:97:04:34:f9:ca:3c:fe:8b:e5:51:8f:20:6a: ad:a1:dd:b0:73:a4:22:9e:b7:ae:17:4b:21:d9:4d: 92:1f:1c:8e:ae:a2:b1:b7:b8:ed:75:3f:6f:b4:bf: 5e:47:65:d1:f2:1d:40:cf:63:47:80:05:08:6d:56: 47:d8:21:2f:24:e2:6d:36:cb:62:77:7c:59:b7:e3: b5:87:2e:55:76:d9:56:73:8c:5c:a0:37:ad:40:d6: bc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BE:E7:03:52:6A:00:73:35:08:B6:48:EE:3F:1C:25:52:87:67:65 X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:59:71:e6:0d:95:e1:61:b0:12:ff:86:c3:0c:43:9c:01:f2: 3c:ad:35:2b:bb:ad:70:83:a8:9e:4f:4e:01:f1:28:24:0d:7a: 60:8b:50:41:35:ad:87:fd:c0:9d:44:45:a1:f0:fd:ab:89:a2: e8:36:0e:ba:7d:49:fc:6d:40:2d:93:36:99:70:a9:6f:4e:70: fb:9a:be:c4:3f:f0:74:e7:74:b8:fe:74:aa:af:b0:59:de:95: 4d:f7:06:4c:22:58:95:f2:60:bd:53:f5:5b:19:0a:d0:d2:6a: 89:80:96:03:6a:76:a9:9d:2f:3d:5e:0f:af:65:f2:74:99:77: 69:1f:69:b7:5b:f2:ed:9c:76:c5:87:3c:95:43:ea:1c:1f:26: ee:56:de:68:35:9c:49:0a:d2:68:23:12:15:ad:0b:67:fc:63: f3:a3:61:93:de:cd:f4:79:4b:5d:04:b9:02:42:0b:2a:86:bd: c3:d7:4d:de:a6:e4:54:5a:84:df:a0:09:8d:09:0c:10:25:04: 0a:17:ac:e5:84:ab:a1:58:d6:2e:1d:e9:a2:8c:81:f4:3f:24: 7d:9b:5c:e2:57:fc:6a:b2:6c:82:36:53:51:fa:86:90:72:3f: 9c:12:69:84:2c:a4:eb:80:4e:2f:e2:65:af:d5:78:a1:ab:7d: 46:da:fb:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeltcWs9VM+L+2y+TyI+ywLra00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNTA1MDUwODA1NDZaFw0yNTA1MDgxMzQ4NDZaMDMxMTAvBgNV BAMTKDhFQkVFNzAzNTI2QTAwNzMzNTA4QjY0OEVFM0YxQzI1NTI4NzY3NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZE3xFXj37eo9HOwW/zzPDDdT czVCZvIlqrzgUrkYhebzNMHp4n9Yu/24ly7Wl0eUMhZs4CZARCJiS8yj/E3Ji876 rtNju/Vmg5vXFl644t47/5GjxSpT5P5pmc9CDSRmaWMYv69BPdxcYMd/gUAqgs+D 4SXVQ8ymfP1jTjVBwH1I1ZgIctkQmlPcQwTya9vWBRvyKPT3JG+c80lgPYDGEENj QzJ7lwQ0+co8/ovlUY8gaq2h3bBzpCKet64XSyHZTZIfHI6uorG3uO11P2+0v15H ZdHyHUDPY0eABQhtVkfYIS8k4m02y2J3fFm347WHLlV22VZzjFygN61A1rxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjr7nA1JqAHM1CLZI7j8cJVKHZ2UwHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiY2MwMGQtY2U3OS00MjE2LWE2 MmItZTNkNTBjYzc5NDQyLzAvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0 RjUxMkU0RkQ2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5ZceYNleFhsBL/hsMMQ5wB8jytNSu7rXCD qJ5PTgHxKCQNemCLUEE1rYf9wJ1ERaHw/auJoug2Drp9SfxtQC2TNplwqW9OcPua vsQ/8HTndLj+dKqvsFnelU33BkwiWJXyYL1T9VsZCtDSaomAlgNqdqmdLz1eD69l 8nSZd2kfabdb8u2cdsWHPJVD6hwfJu5W3mg1nEkK0mgjEhWtC2f8Y/OjYZPezfR5 S10EuQJCCyqGvcPXTd6m5FRahN+gCY0JDBAlBAoXrOWEq6FY1i4d6aKMgfQ/JH2b XOJX/GqybII2U1H6hpByP5wSaYQspOuATi/iZa/VeKGrfUba+9E= -----END CERTIFICATE-----Generated at Wed May 7 04:55:31 2025 by rpki-client