$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft File: 8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json) Hash identifier: fqHvpvJVoxii7LV+8SlGwAJRXZq1R2mSdM28tsjCjsw= Subject key identifier: 84:68:74:B8:C4:64:35:40:B6:0D:BE:73:35:7A:23:B9:CD:78:75:03 Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Certificate serial: 6A8FC6FB22F4D945109491954B2D4600C3190AC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft Manifest number: 04E8 Signing time: Tue 29 Apr 2025 19:32:04 +0000 Manifest this update: Tue 29 Apr 2025 19:27:03 +0000 Manifest next update: Fri 02 May 2025 23:46:03 +0000 Files and hashes: 1: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: lejxupJB/ypozilIjk9IOKEOtlHup4PnPlCfI+BqLVI=) 2: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 8kcmZ4RG24jB44cBv71IJKv0c+Dtp9Ygk9nrjPzZQxo=) 3: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: t5dSILf0M9LETh0ONTCtPeHbE5Gq+eulQJzX449lTa8=) 4: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: 1wEjJgzGmGFQx1qLaHwF1vXvoQd7g22cQT5tuVMpCSs=) 5: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: zqqM4+D0YvV3kzADDLg9UoTtA+fv3LSZ59niExdp6h4=) 6: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: 0on0Zr09JZO2uwExsn4al/aKrzhro4Rbk1hM7yfdFaI=) 7: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: q6gnQ689gbyPRWkFyTqwu7clrVFZi6YA0qntQoU052Y=) 8: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: w3mgpqsf+QCQ0IESSJ7u/cpRjR0jksdX+ZR9wNYh8rI=) 9: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: 6BZFe33/a07P77heVgE/RRa/s7Eo4pTfBbM0ftWFlFs=) 10: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: X56vIg89QvXR2/Fo201/ptqZZVOkB66ovf6WQHjaVKg=) 11: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs=) 12: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: LN+YrVCzUblkTbFghEN9RcfZWB+oIkio+9woygN18Nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 23:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8f:c6:fb:22:f4:d9:45:10:94:91:95:4b:2d:46:00:c3:19:0a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E Validity Not Before: Apr 29 19:27:03 2025 GMT Not After : May 2 23:46:03 2025 GMT Subject: CN=846874B8C4643540B60DBE73357A23B9CD787503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:c9:78:94:c6:20:d5:24:7a:02:fb:0d:43: 91:38:96:d3:b8:35:68:15:50:00:18:45:56:16:14: b6:85:a6:be:68:60:44:86:3f:37:65:44:3f:26:2c: b3:a2:61:d3:0b:f8:41:1c:1d:20:bb:0b:45:36:fb: d7:74:2e:cf:64:bb:75:5b:ae:d1:e5:4a:2c:66:98: 5f:93:54:fc:45:89:44:e3:c5:a4:5f:47:df:46:c9: 48:99:ff:bf:e1:ee:41:f0:f7:99:b2:d9:29:81:95: 0d:57:f2:06:b7:cd:c2:58:ea:fe:6d:7b:66:ca:58: 7a:eb:5b:ec:77:47:52:46:f0:a0:f6:8c:f5:55:2a: 2d:86:45:92:79:d6:40:2e:a8:6f:ed:6d:a2:d3:9e: b0:7d:6b:63:19:0c:7c:d2:62:de:1e:6b:e1:5c:10: 94:1f:0c:e4:9c:ee:00:e9:0e:e6:07:63:87:c1:f1: 9d:17:05:09:c0:22:5c:da:9b:1d:a8:e4:eb:3c:0a: ac:bd:8e:dd:a7:95:66:e8:37:84:b8:8a:3b:f6:e0: 90:bc:3e:6b:21:00:00:ba:b8:0e:49:4d:8d:5e:68: cc:47:57:a5:18:8f:24:a6:81:ca:aa:e0:72:81:af: b3:92:3b:92:90:be:4e:3d:f7:4f:14:92:f7:36:01: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:68:74:B8:C4:64:35:40:B6:0D:BE:73:35:7A:23:B9:CD:78:75:03 X509v3 Authority Key Identifier: keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:8a:49:05:15:70:03:3b:13:a3:90:2d:a1:4d:be:e3:a8:23: 7e:a4:a2:55:75:8f:40:da:28:82:ec:47:14:0b:c9:ea:f5:40: b9:c9:43:93:fa:ed:47:d6:38:27:41:94:ad:f4:fb:63:cd:fb: 5f:34:9c:fb:ba:81:56:9f:c0:fd:c0:88:7e:5e:ce:d5:d5:76: 11:1b:ed:92:99:34:0b:f9:6a:c8:7a:96:34:50:6f:86:32:60: 21:58:8d:44:3c:39:3f:54:f8:f3:81:46:51:c1:a0:69:52:70: 24:65:88:42:08:ae:f9:72:70:b7:5d:1e:ba:87:4e:0b:01:99: cb:7e:bc:74:b3:68:84:22:75:1b:c0:e8:0d:68:b7:21:3e:1d: d5:6a:5f:ae:1e:7a:28:5b:4b:5e:d0:d6:15:9e:9b:d0:a1:ee: 25:d1:d4:6a:0a:b2:db:fd:2a:25:80:69:fd:1e:8c:3c:9a:b2: cd:0c:d8:3e:f2:79:12:6c:2d:7f:55:44:cc:0e:e3:c0:94:65: f3:f6:15:12:3b:54:21:36:ab:62:c7:28:1e:85:cf:a0:60:be: d2:7f:af:f8:55:60:06:3e:98:02:dc:1f:c1:f0:0f:d2:07:ce: 8a:5d:c5:88:2e:2c:7b:d5:3b:11:e0:dd:1a:36:66:63:7f:e3: b1:cc:a2:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUao/G+yL02UUQlJGVSy1GAMMZCsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0 ODUzMEU5RTAeFw0yNTA0MjkxOTI3MDNaFw0yNTA1MDIyMzQ2MDNaMDMxMTAvBgNV BAMTKDg0Njg3NEI4QzQ2NDM1NDBCNjBEQkU3MzM1N0EyM0I5Q0Q3ODc1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNMl4lMYg1SR6AvsNQ5E4ltO4 NWgVUAAYRVYWFLaFpr5oYESGPzdlRD8mLLOiYdML+EEcHSC7C0U2+9d0Ls9ku3Vb rtHlSixmmF+TVPxFiUTjxaRfR99GyUiZ/7/h7kHw95my2SmBlQ1X8ga3zcJY6v5t e2bKWHrrW+x3R1JG8KD2jPVVKi2GRZJ51kAuqG/tbaLTnrB9a2MZDHzSYt4ea+Fc EJQfDOSc7gDpDuYHY4fB8Z0XBQnAIlzamx2o5Os8Cqy9jt2nlWboN4S4ijv24JC8 PmshAAC6uA5JTY1eaMxHV6UYjySmgcqq4HKBr7OSO5KQvk49908Ukvc2AZDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGh0uMRkNUC2Db5zNXojuc14dQMwHwYDVR0j BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz MEU5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdhMmQyNWItY2IxOC00NWJlLTlm YTEtMTU0Y2ExNTc5MjIzLzAvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5 Qzc0ODUzMEU5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqKSQUVcAM7E6OQLaFNvuOoI36kolV1j0Da KILsRxQLyer1QLnJQ5P67UfWOCdBlK30+2PN+180nPu6gVafwP3AiH5eztXVdhEb 7ZKZNAv5ash6ljRQb4YyYCFYjUQ8OT9U+POBRlHBoGlScCRliEIIrvlycLddHrqH TgsBmct+vHSzaIQidRvA6A1otyE+HdVqX64eeihbS17Q1hWem9Ch7iXR1GoKstv9 KiWAaf0ejDyass0M2D7yeRJsLX9VRMwO48CUZfP2FRI7VCE2q2LHKB6Fz6BgvtJ/ r/hVYAY+mALcH8HwD9IHzopdxYguLHvVOxHg3Ro2ZmN/47HMonY= -----END CERTIFICATE-----Generated at Wed Apr 30 12:47:25 2025 by rpki-client