$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: 6fUF+S6oli60DjBhvm65M+/CXTEjGE8cSKOiXXlM2Jc= Subject key identifier: E3:52:E9:39:DB:A5:C3:F9:0F:34:74:74:56:2D:96:69:98:02:36:F5 Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 51BFC3246CCFB4710299D035875956EF0BD87B75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 04DD Signing time: Mon 28 Apr 2025 09:21:33 +0000 Manifest this update: Mon 28 Apr 2025 09:16:33 +0000 Manifest next update: Thu 01 May 2025 19:47:33 +0000 Files and hashes: 1: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=) 2: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: MQx/O8O2uQJVqHYOSxfo/Q2KG9J3bcLTiM4IdvIIF+I=) 3: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: UFrAKKu5fsS6UWOb9wJlqSpemNBUmWPsRRBfie+o4XQ=) 4: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: w8KhQhAE9qtOeUsIYiL4lko66TpmJ+xch/XP9e9vq2Y=) 5: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: 3/JuHuUhQ+BgWgEDwoMX4c9mv2tfthiK3Rg7bsqT6yE=) 6: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: VX2tVKkS7LzPxrLmOsssh+r2zJ3zeiGSJ2bMTYWz5Q8=) 7: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: dUXFtPIF61cMsxlijUdeGn+XAjJGBrV/EpzRTuOKE9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:bf:c3:24:6c:cf:b4:71:02:99:d0:35:87:59:56:ef:0b:d8:7b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Apr 28 09:16:33 2025 GMT Not After : May 1 19:47:33 2025 GMT Subject: CN=E352E939DBA5C3F90F347474562D9669980236F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:0b:07:ba:0a:9e:bd:04:08:82:16:85:eb: 80:af:e0:10:ae:75:cb:bc:c8:90:b1:a3:fd:af:cd: 0f:d2:50:31:8a:ff:86:d6:76:90:e1:f7:8c:4f:4a: bc:86:43:d2:92:4a:45:f4:ae:61:a8:a5:d7:b4:4a: a9:77:21:6b:9d:27:bb:3d:d7:05:b1:95:80:09:51: b3:08:7d:7e:8d:9c:19:a1:04:ea:a6:83:fe:07:99: e2:8f:50:cd:6b:5e:9e:88:7f:05:d6:91:eb:3f:d2: 70:46:6d:b5:9e:65:a7:00:4b:08:13:ab:32:cb:42: 2c:5a:b1:bf:1d:db:4b:67:3d:47:00:56:bc:fb:49: 8f:ef:85:5c:f9:bd:68:86:ab:f5:fd:39:f7:80:78: 30:b0:12:5c:70:3a:03:c8:e9:d4:8b:e0:20:13:9f: 9c:be:0e:2c:76:b4:5e:fe:ed:6b:88:a6:a7:49:07: 01:6d:ae:24:39:09:d0:f1:6f:91:ae:a5:08:08:a8: 3d:01:41:99:d0:0f:16:37:e5:34:e2:03:76:c7:9c: 1e:0c:69:32:ee:d3:9b:b6:50:a6:8a:fa:b9:06:ac: 7b:f3:03:be:49:4e:13:5b:ce:62:51:5f:c4:6b:56: 6e:5f:c9:02:31:7b:fc:da:e0:7d:49:67:db:11:ca: 03:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:52:E9:39:DB:A5:C3:F9:0F:34:74:74:56:2D:96:69:98:02:36:F5 X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:99:65:1f:5f:cd:c9:42:e6:d0:8d:90:50:eb:2b:9a:ad:85: 42:35:10:0f:c0:82:f0:46:e1:f5:b2:87:b0:e2:a9:8d:37:76: b7:58:56:f3:b7:ed:75:f7:7e:5c:e3:99:92:70:14:ec:10:c4: 2a:23:53:a7:30:2f:0b:5b:3b:5b:c2:a8:46:44:a8:d9:a6:4e: ca:05:80:b3:8d:52:b8:28:c5:c4:bb:23:03:a7:a2:84:dd:f5: 54:a4:50:d0:d9:8b:fa:72:c1:61:23:fd:a2:f0:dc:f4:7d:70: 5c:57:01:22:08:94:1e:1c:a4:b2:4d:1c:5e:5a:3c:52:eb:8e: 1a:47:01:57:30:70:5a:32:9e:63:a2:b3:f3:67:c1:a1:f3:c7: e3:74:f9:4c:53:1d:59:41:ab:00:4c:aa:a5:fd:3a:cb:0d:81: 47:17:8e:80:86:35:2c:96:6e:3f:d0:52:92:8e:bb:76:8d:14: 4d:41:07:f2:64:a5:bd:c5:a5:97:2f:0b:f7:0e:9b:15:e6:3e: 25:c9:55:fb:21:bd:c7:22:bc:b8:2a:95:9c:10:ac:b9:3b:09: 22:7a:a6:25:58:a6:d8:9e:78:75:1a:ae:e3:7b:71:59:1b:8c: b6:d1:6f:78:5e:4f:40:6d:04:d0:8a:26:70:0d:a9:8e:9d:44: 7e:06:da:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUb/DJGzPtHECmdA1h1lW7wvYe3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTA0MjgwOTE2MzNaFw0yNTA1MDExOTQ3MzNaMDMxMTAvBgNV BAMTKEUzNTJFOTM5REJBNUMzRjkwRjM0NzQ3NDU2MkQ5NjY5OTgwMjM2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgaQsHugqevQQIghaF64Cv4BCu dcu8yJCxo/2vzQ/SUDGK/4bWdpDh94xPSryGQ9KSSkX0rmGopde0Sql3IWudJ7s9 1wWxlYAJUbMIfX6NnBmhBOqmg/4HmeKPUM1rXp6IfwXWkes/0nBGbbWeZacASwgT qzLLQixasb8d20tnPUcAVrz7SY/vhVz5vWiGq/X9OfeAeDCwElxwOgPI6dSL4CAT n5y+Dix2tF7+7WuIpqdJBwFtriQ5CdDxb5GupQgIqD0BQZnQDxY35TTiA3bHnB4M aTLu05u2UKaK+rkGrHvzA75JThNbzmJRX8RrVm5fyQIxe/za4H1JZ9sRygMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU41LpOdulw/kPNHR0Vi2WaZgCNvUwHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuZZR9fzclC5tCNkFDrK5qthUI1EA/AgvBG 4fWyh7DiqY03drdYVvO37XX3flzjmZJwFOwQxCojU6cwLwtbO1vCqEZEqNmmTsoF gLONUrgoxcS7IwOnooTd9VSkUNDZi/pywWEj/aLw3PR9cFxXASIIlB4cpLJNHF5a PFLrjhpHAVcwcFoynmOis/NnwaHzx+N0+UxTHVlBqwBMqqX9OssNgUcXjoCGNSyW bj/QUpKOu3aNFE1BB/Jkpb3FpZcvC/cOmxXmPiXJVfshvccivLgqlZwQrLk7CSJ6 piVYptieeHUaruN7cVkbjLbRb3heT0BtBNCKJnANqY6dRH4G2oU= -----END CERTIFICATE-----Generated at Tue Apr 29 22:16:59 2025 by rpki-client