$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: cYTQEhxWOO8RN9s/C5JMot9gqCSc2t+7weocMQcrq60= Subject key identifier: 4D:0F:D0:8F:45:3B:F8:9A:F2:2E:29:9D:48:B3:CF:37:8D:B0:2F:D4 Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 545E06F2295304BA95692A0E678343A3FD722E57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 04DB Signing time: Tue 06 May 2025 15:12:01 +0000 Manifest this update: Tue 06 May 2025 15:07:01 +0000 Manifest next update: Fri 09 May 2025 22:29:01 +0000 Files and hashes: 1: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: mGafxLeKPnG7Eg+GZ3Uvf1Rg2MZjFuXySA60etRq29k=) 2: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: bFn5Y7JpqG3baSv58HSYajbj+++aONkagR6UZgJDf70=) 3: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: E6XmK1t6H2i7DnMzin3eXEnNRLj+glllDjzpw3yQ+tE=) 4: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: SDpHmQWrvR6QYeGR7FQ79oyRI2YwxolyxjXNhlqbQOw=) 5: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: f+KL9sRBKYThjcUf6Fn4ETIt2vwAYX6+xVDk6HrJGjI=) 6: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: vI68Gh5Oh59Rb2lPrZHZHoQWOjb0zjzOJoq8Na+SUkQ=) 7: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: loXO1gLH8c/NlHHmD4A8kL9Npr1jEJYQD8A1RLdw3ZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 22:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5e:06:f2:29:53:04:ba:95:69:2a:0e:67:83:43:a3:fd:72:2e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: May 6 15:07:01 2025 GMT Not After : May 9 22:29:01 2025 GMT Subject: CN=4D0FD08F453BF89AF22E299D48B3CF378DB02FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:19:52:fa:ed:a5:f8:b1:d1:ab:c1:4b:f2: ff:a2:7a:ed:e6:49:3a:d1:7e:90:04:aa:ec:6d:ff: c3:79:b5:5a:46:c3:64:3a:2d:3a:52:66:15:be:83: c2:7f:40:89:a3:f4:6e:53:c8:ad:26:56:4f:83:3f: 1c:96:c5:0b:12:fc:bd:36:43:44:74:c7:39:4b:67: dc:8f:68:55:66:05:4e:e8:53:e7:59:ec:18:90:70: 1d:31:30:dc:ff:24:4a:d1:fa:99:1b:f6:0a:cd:9f: 1e:8c:d0:c7:c7:d1:d6:aa:b0:95:03:37:87:58:1a: aa:46:1f:de:58:c3:66:6d:37:d7:2f:17:bd:18:db: 2a:52:85:91:c7:6c:7c:bc:b3:72:c1:7e:11:f8:ac: 53:01:37:6e:14:53:12:7d:0d:8f:10:e5:ea:83:59: 1d:a3:49:2e:bb:e8:6d:45:d8:57:f4:cd:18:60:04: 7d:38:5b:20:ca:e3:62:56:80:b5:d8:f6:dd:78:c5: 77:0e:80:43:08:d8:30:f3:43:51:08:ae:f1:b1:15: ca:97:d6:aa:24:85:d9:01:c1:b2:49:ec:0b:df:78: 73:55:01:c2:22:66:b7:93:ac:25:f2:79:6b:4d:4e: 8f:ca:40:46:7c:62:c7:af:40:8c:91:9c:eb:88:98: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0F:D0:8F:45:3B:F8:9A:F2:2E:29:9D:48:B3:CF:37:8D:B0:2F:D4 X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f7:db:e8:f6:b6:f4:8c:37:3c:fd:b4:4c:3e:57:44:af:69: eb:c7:9c:76:c1:49:e1:e1:72:41:e7:07:44:8d:94:10:52:8e: c0:5b:0d:3f:ad:17:00:46:95:32:e4:b0:c2:e1:ef:99:b1:cc: 29:29:88:b3:06:19:79:78:ea:a9:c3:4b:5d:08:66:5e:a3:ab: e4:30:29:5f:cc:1c:00:3f:ff:cd:26:b9:7b:bd:5f:af:97:10: 1f:bb:e0:35:1a:1d:49:96:f8:ea:c9:c1:50:27:f1:ef:91:ed: 64:fe:37:d8:61:d6:d1:38:e3:cd:2d:95:f7:ac:53:dd:00:cc: d3:f8:ef:0b:08:a9:9e:2e:24:fb:83:f8:0e:47:a3:ad:d6:87: 76:65:e9:f2:6b:1c:d3:8e:d7:fa:5e:a3:06:66:82:9f:c7:60: f5:45:cc:51:b2:ac:8a:9d:12:ca:88:6b:7a:3e:5b:fb:be:d8: ed:93:4a:49:bc:a7:1c:b4:ec:09:26:b9:3d:a7:20:5b:0f:e8: 34:a0:42:da:df:64:da:5e:31:32:b6:c6:06:34:a3:4d:ae:c7: 4f:41:90:1a:eb:f6:05:3c:f9:73:43:d4:be:d2:bc:f6:54:0d: 3a:5c:d9:82:38:c1:c0:c8:83:83:6a:9a:6a:25:c7:24:0b:2c: 06:f4:30:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVF4G8ilTBLqVaSoOZ4NDo/1yLlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNTA1MDYxNTA3MDFaFw0yNTA1MDkyMjI5MDFaMDMxMTAvBgNV BAMTKDREMEZEMDhGNDUzQkY4OUFGMjJFMjk5RDQ4QjNDRjM3OERCMDJGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHBlS+u2l+LHRq8FL8v+ieu3m STrRfpAEquxt/8N5tVpGw2Q6LTpSZhW+g8J/QImj9G5TyK0mVk+DPxyWxQsS/L02 Q0R0xzlLZ9yPaFVmBU7oU+dZ7BiQcB0xMNz/JErR+pkb9grNnx6M0MfH0daqsJUD N4dYGqpGH95Yw2ZtN9cvF70Y2ypShZHHbHy8s3LBfhH4rFMBN24UUxJ9DY8Q5eqD WR2jSS676G1F2Ff0zRhgBH04WyDK42JWgLXY9t14xXcOgEMI2DDzQ1EIrvGxFcqX 1qokhdkBwbJJ7AvfeHNVAcIiZreTrCXyeWtNTo/KQEZ8YsevQIyRnOuImIrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQ/Qj0U7+JryLimdSLPPN42wL9QwHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKD32+j2tvSMNzz9tEw+V0SvaevHnHbBSeHh ckHnB0SNlBBSjsBbDT+tFwBGlTLksMLh75mxzCkpiLMGGXl46qnDS10IZl6jq+Qw KV/MHAA//80muXu9X6+XEB+74DUaHUmW+OrJwVAn8e+R7WT+N9hh1tE4480tlfes U90AzNP47wsIqZ4uJPuD+A5Ho63Wh3Zl6fJrHNOO1/peowZmgp/HYPVFzFGyrIqd EsqIa3o+W/u+2O2TSkm8pxy07AkmuT2nIFsP6DSgQtrfZNpeMTK2xgY0o02ux09B kBrr9gU8+XND1L7SvPZUDTpc2YI4wcDIg4NqmmolxyQLLAb0MPQ= -----END CERTIFICATE-----Generated at Thu May 8 22:55:22 2025 by rpki-client