$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft File: 8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft (raw, json) Hash identifier: nH3ff3Yk1RKlheY9C61TJVYVgxsiDN6ypjjz0Cx8Ynw= Subject key identifier: 63:CD:E4:D3:92:96:8D:B0:09:8E:4B:4E:29:B2:6C:F5:2A:71:8F:58 Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 7EE692ACB37B496D7BB008A90EA6E79562299CA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft Manifest number: 03AF Signing time: Fri 09 May 2025 06:12:08 +0000 Manifest this update: Fri 09 May 2025 06:07:08 +0000 Manifest next update: Mon 12 May 2025 09:18:08 +0000 Files and hashes: 1: 3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa (hash: JzP3prHOgFH/3pcbrciCFSrBpBQbgCsXcDvrDwP8+gk=) 2: 323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (hash: Dbjg+vJVIA/12edzQmA2oSGprW6vIebqnxwMgbbyHSg=) 3: 323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa (hash: mLEiuQCorcJxBHY4wKeDm97Zmemknme8ExMbOOO5lWE=) 4: 3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa (hash: HvZ4UYj4GoZLl8NmzF+1Ghc67KVbsVnEc2wguYPDAT4=) 5: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (hash: FMTDgQIzYg7LkyNw3U8hdH5e4+pcbdgl2jE3AQpixqA=) 6: 323430343a636163303a3a2f33322d3332203d3e20313339343137.roa (hash: U8X775Erg4KvjSwclcGWHuukxGyQmMyExSHIbSXOqZk=) 7: 323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa (hash: XIq5Jxfb9ma1VO6ZcqWrbd6msJG9iOe53aiAMMFJVTU=) 8: 323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa (hash: /ipEpvxAxMNFMGkmyQkvLOJHP/gNCq+5XDe4sK/nkoY=) 9: 8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl (hash: XXjjnHuwD/9u53n1obBdb00Ttyzr7yN6Rl73Egpv1pw=) 10: 323430343a636163303a3a2f34382d3438203d3e20313339343137.roa (hash: uZbhPmuZtG5Md74mhofu8RolET7EoiAnsaXNVE7s4XM=) 11: 323430343a636163303a626162653a3a2f34382d3438203d3e20313339343137.roa (hash: kecTFoic7r1wTr3NJ9A3b39hJiSlgzYyqWz3ChKgWu8=) 12: 323430343a636163303a666630303a3a2f34302d3430203d3e20313339343137.roa (hash: KSjkQ8QwpppJxiJX2WOeGB6CdtpxTCvIwn/6JwQhtW0=) 13: 323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa (hash: oRfT4X0Sy9tnBNiJsxtxMTFV7eQ+myy/o8BOZoNv2r8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 09:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e6:92:ac:b3:7b:49:6d:7b:b0:08:a9:0e:a6:e7:95:62:29:9c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: May 9 06:07:08 2025 GMT Not After : May 12 09:18:08 2025 GMT Subject: CN=63CDE4D392968DB0098E4B4E29B26CF52A718F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:fd:68:7d:35:11:35:41:11:8f:ff:82:9a: b0:d4:4e:ee:be:e1:aa:22:76:fd:82:15:a6:4f:42: af:45:3c:a9:01:d4:e2:98:b7:d3:31:34:d2:86:fe: 3d:c2:19:86:fc:15:67:50:d6:39:f6:20:52:8c:c4: ce:4e:27:39:ce:57:2f:98:08:cc:73:dd:a6:1d:fd: d9:ae:59:44:cd:3c:55:7b:a9:df:63:77:e8:6e:19: 38:e0:bb:35:a0:22:42:24:f2:41:cd:f7:5f:a5:54: 99:03:a5:a4:2b:7e:63:91:1e:0e:bb:d3:bb:04:ea: ad:15:5e:71:53:bc:b1:a4:e7:e8:3f:6f:d4:54:46: bc:fc:1a:6d:03:a6:f7:be:db:89:29:80:14:58:92: 97:9d:41:b0:98:73:94:3f:c1:76:fd:85:15:48:36: 27:25:9e:63:4e:4f:58:f1:79:11:07:36:95:c0:db: 71:91:fc:48:c2:82:dc:4b:4c:d4:c9:d4:d7:06:ad: c7:b4:c4:51:54:25:b3:cd:0a:9d:e7:71:b0:4e:5a: 89:22:66:c9:b8:ea:88:fa:fe:96:9c:4a:86:b8:ff: ad:21:5f:f2:6e:1b:b1:0c:ec:e2:c3:8d:30:d9:d7: 77:de:34:41:b1:9d:ff:dc:07:ac:ab:3c:d4:72:cf: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CD:E4:D3:92:96:8D:B0:09:8E:4B:4E:29:B2:6C:F5:2A:71:8F:58 X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:06:9e:60:3a:b3:97:e9:fb:c4:73:9a:53:59:b0:30:1b:48: 84:22:45:88:40:d6:48:b8:8b:42:5b:70:f0:08:a4:37:5b:7e: 81:b2:cf:50:d7:af:6f:cd:74:ca:84:a0:a6:b9:87:2a:ea:b8: 44:57:d2:04:be:cf:20:5e:3d:01:d5:72:88:72:b0:db:1c:a9: 4d:f4:7b:a2:ba:0f:42:65:47:a2:f3:40:2f:c6:d3:71:58:3f: 4e:06:2c:c1:f3:12:52:92:ef:01:ed:a0:6e:cc:21:86:84:15: f8:26:34:83:2f:05:72:3d:86:38:0b:58:1e:d7:e3:57:a1:26: 09:94:20:07:b4:af:aa:4a:17:0d:e3:94:ef:87:af:ba:cd:38: d0:3f:7b:51:ac:ee:a1:ea:9f:4f:4a:15:54:9c:f2:3c:e2:34: bf:9b:08:bd:03:14:b0:7e:98:d3:eb:f9:a8:67:a4:b3:c6:92: c4:52:59:8b:eb:aa:c4:75:a6:c7:14:9d:1d:83:2b:ed:56:f3: 13:49:f2:d5:31:2d:b9:ae:17:b1:9c:27:96:d8:d7:ef:ac:bd: b3:ed:89:c3:6b:ff:7e:4f:07:d7:8a:61:2a:01:93:c6:9b:fb: 33:6a:08:72:37:93:d5:45:38:49:db:d4:a6:b8:6d:ac:f9:78: ee:4c:9c:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuaSrLN7SW17sAipDqbnlWIpnKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNTA1MDkwNjA3MDhaFw0yNTA1MTIwOTE4MDhaMDMxMTAvBgNV BAMTKDYzQ0RFNEQzOTI5NjhEQjAwOThFNEI0RTI5QjI2Q0Y1MkE3MThGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hv1ofTURNUERj/+CmrDUTu6+ 4aoidv2CFaZPQq9FPKkB1OKYt9MxNNKG/j3CGYb8FWdQ1jn2IFKMxM5OJznOVy+Y CMxz3aYd/dmuWUTNPFV7qd9jd+huGTjguzWgIkIk8kHN91+lVJkDpaQrfmORHg67 07sE6q0VXnFTvLGk5+g/b9RURrz8Gm0Dpve+24kpgBRYkpedQbCYc5Q/wXb9hRVI NiclnmNOT1jxeREHNpXA23GR/EjCgtxLTNTJ1NcGrce0xFFUJbPNCp3ncbBOWoki Zsm46oj6/pacSoa4/60hX/JuG7EM7OLDjTDZ13feNEGxnf/cB6yrPNRyz5yhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY83k05KWjbAJjktOKbJs9Spxj1gwHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MTNmZjQtMjAyYi00OTk5LWI0 NWQtNzNjOTcyZjEwMTE2LzAvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2 MzM3MkRBRURENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgGnmA6s5fp+8RzmlNZsDAbSIQiRYhA1ki4 i0JbcPAIpDdbfoGyz1DXr2/NdMqEoKa5hyrquERX0gS+zyBePQHVcohysNscqU30 e6K6D0JlR6LzQC/G03FYP04GLMHzElKS7wHtoG7MIYaEFfgmNIMvBXI9hjgLWB7X 41ehJgmUIAe0r6pKFw3jlO+Hr7rNONA/e1Gs7qHqn09KFVSc8jziNL+bCL0DFLB+ mNPr+ahnpLPGksRSWYvrqsR1pscUnR2DK+1W8xNJ8tUxLbmuF7GcJ5bY1++svbPt icNr/35PB9eKYSoBk8ab+zNqCHI3k9VFOEnb1Ka4baz5eO5MnAs= -----END CERTIFICATE-----Generated at Sun May 11 01:34:15 2025 by rpki-client