$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: iVcBQPyg/xZSYhAmvccbcP8TLwwtGC5R3NppFD1MKHs= Subject key identifier: 3B:D5:8C:AB:84:09:5F:7A:CF:DE:C5:1E:C2:74:C4:7E:0B:BC:5A:B6 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 71AD5777915A1C75DE824E00B835646EE291E3B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 041D Signing time: Thu 08 May 2025 13:00:49 +0000 Manifest this update: Thu 08 May 2025 12:55:49 +0000 Manifest next update: Sun 11 May 2025 17:31:49 +0000 Files and hashes: 1: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=) 2: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: J7UBujXxeX1A6Lj+ev7Ll5yk1glq4xofemGTlazxA3U=) 3: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: UMpjLuebG+yMQNJv43xd3u8qZ1cqsp7h54oRFs+fJIg=) 4: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: Si3tPvzTYMJNo6ziKI0r83ugddQoVhs+qZtKjviywZY=) 5: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=) 6: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: s/yj35IxEbWgMmRyngcwwQ2XYvpHuhez/PCo0jx4Hk4=) 7: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=) 8: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 0q8NrmjjcxoNrx7WtkZa7JKjlra7drxIR2Rkv2uH0qU=) 9: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ad:57:77:91:5a:1c:75:de:82:4e:00:b8:35:64:6e:e2:91:e3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: May 8 12:55:49 2025 GMT Not After : May 11 17:31:49 2025 GMT Subject: CN=3BD58CAB84095F7ACFDEC51EC274C47E0BBC5AB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:29:ae:cc:1f:48:67:07:10:f9:e9:9b:0e: 19:e6:23:e6:63:00:e9:d2:35:13:db:f3:a6:91:e3: b1:63:0f:d7:64:7e:4d:f6:73:04:d7:db:d4:da:65: dc:69:f0:41:8b:48:ff:7f:6b:4e:70:39:66:e4:0d: 79:93:b1:36:0b:c2:91:11:f0:4a:87:b0:5a:23:ae: e1:7e:29:42:48:59:3d:28:3b:e8:c3:cf:12:46:f5: e0:34:b5:cf:ff:9b:b9:6d:a4:f9:70:a2:16:60:05: 72:fb:02:b4:d8:ee:5f:29:40:ac:a1:41:34:9c:89: 90:3c:bb:3a:85:c3:d0:d2:a3:55:c8:dd:5e:a6:2f: 33:d0:e8:dc:8b:fe:e8:be:0c:af:bd:72:89:27:59: f2:8c:a7:c6:e8:ff:b2:aa:0b:7d:77:23:3f:6c:25: 9a:8d:38:12:69:d6:9d:07:44:75:88:51:87:48:82: ff:54:17:4a:79:29:9e:1e:1f:a4:ee:03:7a:57:ec: f8:13:ff:f5:f2:c6:a8:34:06:a7:b4:a9:81:6c:3b: 48:55:d0:1a:98:7f:c9:ce:ac:72:c6:07:0e:4a:a2: 1d:2f:60:c0:ce:2e:3d:bd:f2:bf:35:f4:d2:7c:d5: f9:f3:24:ba:48:33:68:b3:71:d3:60:39:ec:a7:9c: 5a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D5:8C:AB:84:09:5F:7A:CF:DE:C5:1E:C2:74:C4:7E:0B:BC:5A:B6 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e4:88:ff:4e:01:c7:9b:32:ff:4e:a2:bd:7c:b9:c1:f0:7b: e4:ab:84:a5:e1:a9:44:72:ef:23:ea:48:1c:10:d4:ac:78:09: f7:a1:24:4c:14:05:1a:fe:32:28:2d:53:cd:e3:f6:bf:a0:2c: a5:c7:ea:55:a1:2e:d7:cb:ea:0d:89:f1:e9:fa:a8:ee:30:c0: 32:72:26:35:70:85:ef:71:87:e1:b5:f4:35:ca:73:15:16:3e: f5:31:ff:7a:ad:2a:56:98:87:67:b5:cd:38:1c:b5:ce:70:c0: 02:fe:6b:e3:f1:3b:bb:a2:f7:fe:89:f3:d6:43:e5:da:6f:96: db:2b:2a:9e:63:9c:8f:72:e3:28:00:45:17:c5:a9:02:3c:2f: b3:36:d0:57:fe:01:bf:27:5d:89:19:05:e9:d5:30:54:72:a5: 1d:ed:d4:79:dc:68:67:fd:a4:3c:7b:e0:36:4d:9e:6f:ff:31: 15:19:39:53:a5:59:9f:62:b1:31:e0:bc:8b:2f:67:2a:e4:05: 64:a6:5a:de:c6:3d:c4:38:ec:53:d5:0b:30:2b:63:62:53:77: 05:3f:9d:1b:5e:37:cf:8f:9a:99:4f:c6:6d:29:fb:63:ae:af: dc:ca:6a:37:2c:89:f9:16:0f:aa:76:06:bb:03:9c:0d:12:7a: e4:9c:82:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUca1Xd5FaHHXegk4AuDVkbuKR47kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTA1MDgxMjU1NDlaFw0yNTA1MTExNzMxNDlaMDMxMTAvBgNV BAMTKDNCRDU4Q0FCODQwOTVGN0FDRkRFQzUxRUMyNzRDNDdFMEJCQzVBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAICmuzB9IZwcQ+embDhnmI+Zj AOnSNRPb86aR47FjD9dkfk32cwTX29TaZdxp8EGLSP9/a05wOWbkDXmTsTYLwpER 8EqHsFojruF+KUJIWT0oO+jDzxJG9eA0tc//m7ltpPlwohZgBXL7ArTY7l8pQKyh QTSciZA8uzqFw9DSo1XI3V6mLzPQ6NyL/ui+DK+9coknWfKMp8bo/7KqC313Iz9s JZqNOBJp1p0HRHWIUYdIgv9UF0p5KZ4eH6TuA3pX7PgT//Xyxqg0Bqe0qYFsO0hV 0BqYf8nOrHLGBw5Koh0vYMDOLj298r819NJ81fnzJLpIM2izcdNgOeynnFqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO9WMq4QJX3rP3sUewnTEfgu8WrYwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfkiP9OAcebMv9Oor18ucHwe+SrhKXhqURy 7yPqSBwQ1Kx4CfehJEwUBRr+MigtU83j9r+gLKXH6lWhLtfL6g2J8en6qO4wwDJy JjVwhe9xh+G19DXKcxUWPvUx/3qtKlaYh2e1zTgctc5wwAL+a+PxO7ui9/6J89ZD 5dpvltsrKp5jnI9y4ygARRfFqQI8L7M20Ff+Ab8nXYkZBenVMFRypR3t1HncaGf9 pDx74DZNnm//MRUZOVOlWZ9isTHgvIsvZyrkBWSmWt7GPcQ47FPVCzArY2JTdwU/ nRteN8+PmplPxm0p+2Our9zKajcsifkWD6p2BrsDnA0SeuScgoI= -----END CERTIFICATE-----Generated at Thu May 8 15:49:17 2025 by rpki-client