$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: LLDaqXqBALrVDHYJSjgYsh0dXAysoFqJabuSArJjkCI= Subject key identifier: 7B:72:36:DB:67:48:09:0B:01:D9:D4:74:4F:83:21:A1:DB:C4:03:E4 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 1F89288F81BB735E5CBDFBE46A3A8CE41E3F2660 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 04C8 Signing time: Sat 26 Apr 2025 22:32:12 +0000 Manifest this update: Sat 26 Apr 2025 22:27:12 +0000 Manifest next update: Wed 30 Apr 2025 06:32:12 +0000 Files and hashes: 1: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: F4/KJVXNTNm34izb7glpnGYFHc3KADsusKQ08aViHLM=) 2: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 3: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: HzzxfT3oKqV/mh7plD/9HZYf1gM9CnzWP+aXyNt10Zg=) 4: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: e/yjVod/7lR4uj/RENV7JfH5TX+LSB9hPgqV7eSiKp4=) 5: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: CpzM+132Mdd3sT2ikka6T6ZIOzo9cPs9M0vsLY9AeJk=) 6: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 7: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 8: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 9: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 10: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: u1lfWy0MDbubQseV6f0yVaeg4S5wTkc4cbrHCMmY4Yw=) 11: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 12: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 13: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 14: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: Hs35c6RHToYi6qvTeTc31yFLqwStwmhd6QBjMnOffHI=) 15: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 16: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 17: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 18: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 19: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 20: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: 7d6L1YnpzkSH3cjd/bratlHXMkaO39mRUgOEKpnPFL4=) 21: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 22: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 06:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:89:28:8f:81:bb:73:5e:5c:bd:fb:e4:6a:3a:8c:e4:1e:3f:26:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Apr 26 22:27:12 2025 GMT Not After : Apr 30 06:32:12 2025 GMT Subject: CN=7B7236DB6748090B01D9D4744F8321A1DBC403E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:53:a5:1a:59:c3:df:77:b1:1a:a1:1b:70: 04:8e:13:56:dc:09:70:50:f4:6a:e6:39:ad:5f:8a: 77:26:30:42:9f:71:1f:54:d1:2d:74:1e:61:db:b4: 75:a0:49:23:58:90:be:1a:e4:d3:a3:42:fd:7b:a1: 78:63:22:4f:d6:2a:f2:00:91:6f:5e:94:af:5c:91: 0d:76:61:e4:f5:2f:67:54:18:a9:7e:5c:12:6d:68: 17:73:20:be:b6:ad:3a:bc:50:67:44:8e:3e:9e:6a: d7:bc:9f:44:1a:e5:d6:7f:ae:a0:c4:24:7e:a5:00: a0:af:a6:07:e0:8e:2d:5c:a1:a8:01:81:3d:ef:f1: 85:e2:3b:23:94:ee:93:70:9e:7e:ab:ca:79:d6:e4: 46:96:8a:0c:94:30:e4:67:14:23:66:42:17:62:26: 1a:22:b6:57:9c:8b:0c:65:46:2c:0e:df:8a:1c:0a: df:d7:9c:52:bd:d9:70:d7:d0:f4:75:a6:15:1e:26: 6f:00:ab:ca:42:c5:a6:04:24:eb:3a:58:ab:0e:7e: 9d:bc:94:4b:38:c5:31:2b:d6:39:b7:52:71:98:9c: f7:ff:36:72:2e:3d:c3:4e:b1:b2:f3:22:0b:e9:e5: 54:18:b3:af:97:74:7a:92:b8:63:1b:ab:ae:dc:b9: e2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:72:36:DB:67:48:09:0B:01:D9:D4:74:4F:83:21:A1:DB:C4:03:E4 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d3:10:21:56:0d:eb:29:44:fe:87:06:7d:94:2c:1c:8c:ea: 47:9d:d2:5a:89:ef:93:d6:81:27:83:8f:7c:02:03:64:5e:f4: 2d:2e:30:f2:18:bf:f9:ec:9a:90:1a:cf:50:db:3e:27:24:74: 85:9b:35:58:e5:ad:24:38:a8:8d:50:3c:5c:fc:93:4d:63:98: 0c:2d:86:5d:a4:1f:11:ad:3a:fc:f4:08:b7:c9:63:a4:ae:1e: 8a:00:79:88:9b:68:18:b0:a7:17:28:40:ee:cd:f0:a8:d9:a7: b4:6a:22:f8:8d:f9:80:4e:40:13:d0:98:e0:ca:c4:d3:6f:d3: 08:5b:9f:e6:c0:3f:fe:88:77:9d:fa:d4:56:54:31:bf:da:44: 0d:d2:e9:99:05:72:05:4b:8e:7c:f2:3c:ea:7b:88:f8:9e:43: 56:fd:11:90:7c:a3:d5:b0:12:86:97:37:00:35:37:f4:3e:1f: 88:b7:1a:d2:41:74:17:02:e9:de:30:ed:7f:2a:9f:24:83:c9: cf:ad:85:c7:23:3c:f0:07:34:61:25:71:2e:1b:11:70:85:06: a0:b5:11:62:6e:22:c9:dc:bf:07:6a:9e:00:64:85:6f:b4:2e: 52:4e:4f:c0:a1:a4:70:3e:d9:0c:26:7f:a3:8f:79:18:dd:61: 91:8b:18:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4koj4G7c15cvfvkajqM5B4/JmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA0MjYyMjI3MTJaFw0yNTA0MzAwNjMyMTJaMDMxMTAvBgNV BAMTKDdCNzIzNkRCNjc0ODA5MEIwMUQ5RDQ3NDRGODMyMUExREJDNDAzRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9A1OlGlnD33exGqEbcASOE1bc CXBQ9GrmOa1fincmMEKfcR9U0S10HmHbtHWgSSNYkL4a5NOjQv17oXhjIk/WKvIA kW9elK9ckQ12YeT1L2dUGKl+XBJtaBdzIL62rTq8UGdEjj6eate8n0Qa5dZ/rqDE JH6lAKCvpgfgji1coagBgT3v8YXiOyOU7pNwnn6rynnW5EaWigyUMORnFCNmQhdi JhoitleciwxlRiwO34ocCt/XnFK92XDX0PR1phUeJm8Aq8pCxaYEJOs6WKsOfp28 lEs4xTEr1jm3UnGYnPf/NnIuPcNOsbLzIgvp5VQYs6+XdHqSuGMbq67cueIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe3I222dICQsB2dR0T4MhodvEA+QwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3TECFWDespRP6HBn2ULByM6ked0lqJ75PW gSeDj3wCA2Re9C0uMPIYv/nsmpAaz1DbPickdIWbNVjlrSQ4qI1QPFz8k01jmAwt hl2kHxGtOvz0CLfJY6SuHooAeYibaBiwpxcoQO7N8KjZp7RqIviN+YBOQBPQmODK xNNv0whbn+bAP/6Id5361FZUMb/aRA3S6ZkFcgVLjnzyPOp7iPieQ1b9EZB8o9Ww EoaXNwA1N/Q+H4i3GtJBdBcC6d4w7X8qnySDyc+thccjPPAHNGElcS4bEXCFBqC1 EWJuIsncvwdqngBkhW+0LlJOT8ChpHA+2Qwmf6OPeRjdYZGLGCc= -----END CERTIFICATE-----Generated at Mon Apr 28 18:45:22 2025 by rpki-client