$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft File: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json) Hash identifier: uwL9CPwUDMw9rbo9+ljQVMZtRKbdrJn0YV2ZG7kbl5Y= Subject key identifier: 6A:C3:EF:0B:CE:10:25:C1:35:FE:94:78:59:8F:94:01:95:B1:27:00 Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 66BB5142D4592D63BF1A7FA6B6F16911818E83D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft Manifest number: 04D6 Signing time: Mon 28 Apr 2025 12:21:09 +0000 Manifest this update: Mon 28 Apr 2025 12:16:09 +0000 Manifest next update: Thu 01 May 2025 19:25:09 +0000 Files and hashes: 1: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: mkruWkyUTX+c2Tw+0w7WwT3w2s3+OGAbVUZStH/a/n8=) 2: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I=) 3: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=) 4: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: qw0lOUkhaAxZB0W6Uovf+8Fl+4ITR1IdmbPGHHrVmrg=) 5: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: KXtJmDO4hKKtckmp6/OjWqYrbZ7ZmK12D4CTr8FodJE=) 6: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: hm/9X3cuyk8jd/AB2iBbcuodpHF2xW4uztYBSuY3yNU=) 7: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: Sy6BflqYLR0sZsbRWtHtSQOlWDRu7he2nETil7/zL5w=) 8: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: 7qHsw3w27NVdqWTWhdv7nrW74KPBDCmwGCBiiRBioWQ=) 9: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: qPhFyLO5p2XLEIOO0toGgTiGmQ5k4sJq0J9ZvFILUNg=) 10: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: 3p/hk5MLyUzRcTjxx6VZclvMzV7vaFx0cjt9/zXwI+E=) 11: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: m0CFS0bXXlC2sSkkYuX1uK7YpHcSKbwTasnOg//5UpE=) 12: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: 2/x4Qw/F/zsfsvc9JOJlY2G2LhkflQn7lD5v28Bqntk=) 13: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: mR2OodnuEc8FMW/yXSfH67atl5ZjjjMa7tHa3bMVOzY=) 14: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: iv0At4Oeueo57x1vdPZ8SVWvO7rIBV/xKbQmx2X640g=) 15: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: yzByHbO6Frok5mfNqGJAnbHUvCHTDaMTJ6hmg53mLQI=) 16: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: H5UbeEY/iKVWeyVEanGtaf2L0y0JUm9EF64WOl/HBQQ=) 17: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: CTD8Xvgjr9YDqDwDOqgLumiXOGwu1HyyyOVZc6JRmTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:bb:51:42:d4:59:2d:63:bf:1a:7f:a6:b6:f1:69:11:81:8e:83:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Apr 28 12:16:09 2025 GMT Not After : May 1 19:25:09 2025 GMT Subject: CN=6AC3EF0BCE1025C135FE9478598F940195B12700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:56:15:93:55:f4:8f:23:e6:76:b3:ea:b8: a2:55:90:87:04:a9:fd:6d:8d:cf:d2:18:3a:5b:5b: a3:db:b9:40:54:5a:2b:21:73:d2:3c:a3:f7:a0:e0: 25:c0:ea:ca:95:d7:ce:84:85:9c:af:bc:b9:c0:0d: 7c:3c:31:7b:7c:78:cd:59:24:92:c2:37:92:ed:6d: 2b:10:be:e5:a8:ea:98:bf:09:ba:bc:7d:e6:8b:54: d4:57:af:dd:79:3e:34:19:f9:15:d7:9d:f1:e9:7e: 69:27:f0:13:d1:f1:4f:cd:f5:9e:bd:f2:9e:5c:bd: 27:f8:73:12:70:bb:7f:86:04:3b:37:25:84:7d:2a: 39:85:52:0a:78:80:34:74:a9:69:ac:cb:6f:e0:f6: fe:e3:cf:bf:96:ec:31:c5:d1:a5:79:0c:11:c0:58: 22:09:e9:f2:55:0e:ba:fe:97:44:42:25:71:0c:54: 3a:0a:c2:cb:98:2b:8c:e8:92:ad:02:f3:1a:b1:e7: be:a9:a9:81:d3:dd:bd:02:9d:bd:bd:1b:97:60:d5: 28:1b:81:15:43:2d:f0:ed:f9:9f:48:2e:44:c5:1b: 98:16:72:bb:42:a4:99:2f:4d:69:d9:22:30:99:4c: 41:14:ef:33:ce:da:e1:67:43:03:3d:96:19:be:4d: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C3:EF:0B:CE:10:25:C1:35:FE:94:78:59:8F:94:01:95:B1:27:00 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3f:99:36:37:96:83:ce:06:39:e0:9d:a8:7e:7e:77:e8:6c: ab:50:54:8b:42:b4:e6:cd:24:af:22:68:20:6e:f0:1d:98:5e: 08:5f:ff:0d:e7:2b:ff:77:3f:8f:33:f4:f3:8f:96:1f:d0:1f: f5:1c:4d:81:6b:01:09:54:a1:9a:30:9e:d2:e0:49:fa:7a:48: be:24:de:f6:9f:0b:0b:55:8a:14:ab:25:84:a6:3b:0d:c6:ed: 40:23:a9:ae:93:ff:77:87:91:99:1a:23:42:ba:fe:c1:9e:73: 13:a4:d7:d1:13:51:f1:c7:2d:9a:93:3c:05:6d:f9:26:e4:d0: a6:f4:04:6d:b0:6c:e7:98:b1:74:52:47:4c:6f:2e:ef:9c:56: bf:fc:c0:08:7c:8c:1e:19:c1:c5:6c:cd:fe:6e:6f:cf:3f:20: a3:fe:50:18:b8:0e:3e:74:20:20:53:10:d1:56:5e:1a:31:9a: c5:c9:fe:46:2c:96:f6:54:67:96:26:e8:8d:40:9f:7e:78:8c: e3:e8:8f:13:87:00:08:71:57:1d:36:86:87:21:26:ae:4a:f6: 3c:41:92:f0:7a:65:c1:56:5a:e9:a3:93:a0:bb:89:8b:f4:56: 7e:4a:63:84:6b:99:35:76:a9:ad:07:e9:c5:cf:13:3b:dc:0e: d6:c2:cd:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrtRQtRZLWO/Gn+mtvFpEYGOg9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTA0MjgxMjE2MDlaFw0yNTA1MDExOTI1MDlaMDMxMTAvBgNV BAMTKDZBQzNFRjBCQ0UxMDI1QzEzNUZFOTQ3ODU5OEY5NDAxOTVCMTI3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xlYVk1X0jyPmdrPquKJVkIcE qf1tjc/SGDpbW6PbuUBUWishc9I8o/eg4CXA6sqV186EhZyvvLnADXw8MXt8eM1Z JJLCN5LtbSsQvuWo6pi/Cbq8feaLVNRXr915PjQZ+RXXnfHpfmkn8BPR8U/N9Z69 8p5cvSf4cxJwu3+GBDs3JYR9KjmFUgp4gDR0qWmsy2/g9v7jz7+W7DHF0aV5DBHA WCIJ6fJVDrr+l0RCJXEMVDoKwsuYK4zokq0C8xqx576pqYHT3b0Cnb29G5dg1Sgb gRVDLfDt+Z9ILkTFG5gWcrtCpJkvTWnZIjCZTEEU7zPO2uFnQwM9lhm+Tf7zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUasPvC84QJcE1/pR4WY+UAZWxJwAwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0 MzU4NDkwM0UxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY/mTY3loPOBjngnah+fnfobKtQVItCtObN JK8iaCBu8B2YXghf/w3nK/93P48z9POPlh/QH/UcTYFrAQlUoZowntLgSfp6SL4k 3vafCwtVihSrJYSmOw3G7UAjqa6T/3eHkZkaI0K6/sGecxOk19ETUfHHLZqTPAVt +Sbk0Kb0BG2wbOeYsXRSR0xvLu+cVr/8wAh8jB4ZwcVszf5ub88/IKP+UBi4Dj50 ICBTENFWXhoxmsXJ/kYslvZUZ5Ym6I1An354jOPojxOHAAhxVx02hochJq5K9jxB kvB6ZcFWWumjk6C7iYv0Vn5KY4RrmTV2qa0H6cXPEzvcDtbCzRI= -----END CERTIFICATE-----Generated at Wed Apr 30 03:44:06 2025 by rpki-client