$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft File: 2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json) Hash identifier: 77BIRjlQzN7PJz6+ILw02sNunWqjoH7nPvilNfFi+1k= Subject key identifier: C3:38:FD:48:B8:DC:36:12:00:20:87:CF:F1:E4:C5:4B:56:34:28:F8 Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Certificate serial: 18C625A5E9B1C73657C927078BE59E1A8A2EC213 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft Manifest number: 0170 Signing time: Sun 27 Apr 2025 21:01:28 +0000 Manifest this update: Sun 27 Apr 2025 20:56:28 +0000 Manifest next update: Thu 01 May 2025 06:23:28 +0000 Files and hashes: 1: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: b6WR2/tkj/TJmHf4T96jHhe4cr6ziz5DRZJiP/dYI8w=) 2: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: cEeTKWmwIc5D8VRx4Wjyqi25fM0+EqJrs6oXdMSObyg=) 3: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: 2KzZDAzCYvLDGmuyMQTwS12UkngL2r4uYLx3E6PowDU=) 4: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: +UYTL16FoJzljt1WcPKnLkea4mRmhRtr/yGtN5BCt4Y=) 5: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: kRRcaFc2J9dVlk1FFSz0s3hPY1eoKnszPg9ucUh3LNQ=) 6: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: CV4aj5c0qTtoAuk2gjVJIigxTtOqOHVk941GV0y4c2o=) 7: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: zkaOl3WDUKt7L8bc11OX90l50YOHPUCk7N8DGiMpczs=) 8: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 8OfgAbNQVhDJJTxQBxc34yWofgtcid4J/JQSeq4njCk=) 9: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: oxNl3kL7pfOEMCZna82D8P/b9qkWwOtKEU4nTRdcl3U=) 10: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: KnUhOivFyTwSLl1lFtmGPDtu87HmW4jCAVjkx4JXtuo=) 11: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: 5m5TlKYtb1BvkeOY5L0iLxzd9TDfvf4dSOsCxsnrroA=) 12: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: Og2Q3pkFZ4RS1IltvMh5+zdPdJjL3PWI9O/DVgS24lg=) 13: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: hamVtzyWWFgDoUv3GhJNoDFMf/gHi6nIkoDk9iZqkLo=) 14: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: 2B4BWC55NSzsOeHuZPLfJe40yWnPIldeaIHKiGgIUpc=) 15: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: Q14M8/H1GKD5N/6iQpjuxENjm1t2nAKNH5gzPjfdhGE=) 16: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: 1qIDwmf6H3mEaUgvN2oFExXVVv8QpKj00JvdsYifsuk=) 17: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: 5t1AVxnTVPWVliNjx4dePm/Uoa7VF9/XPOB2dVW7zIc=) 18: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: 7u4efn7bHYzED6nyNb+Hqw9a6DQWqirinCujiYt23iE=) 19: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: ItE1oa3zcA/J6v7neMwAUFSJuwJHlB5fYUCcNJ52lrY=) 20: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: Fp3TdqFb3PCcEDYFQYYU/EXsl8Z+niV/5Guw5uw0Pl4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 06:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c6:25:a5:e9:b1:c7:36:57:c9:27:07:8b:e5:9e:1a:8a:2e:c2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Validity Not Before: Apr 27 20:56:28 2025 GMT Not After : May 1 06:23:28 2025 GMT Subject: CN=C338FD48B8DC3612002087CFF1E4C54B563428F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:de:b1:e9:1a:eb:61:17:e2:8d:9e:43:3f: 06:23:d3:66:32:b4:73:d1:ab:af:da:dc:3c:2f:32: a5:c3:64:26:fc:8e:96:d3:f8:46:4e:09:c3:df:82: 72:97:05:47:74:84:71:67:2e:64:e7:0d:7c:38:b1: 33:36:b4:6c:f1:e6:85:52:e6:58:77:d4:52:d1:1e: 0d:7c:ff:79:6d:57:82:b7:fc:0f:b9:51:d7:c6:0d: ca:a8:32:4e:86:9f:bb:ca:3c:00:01:8a:c3:8c:5d: d0:b8:4a:8c:ce:ab:7d:a1:fd:8d:bf:24:4d:a8:0a: 97:94:1b:a2:03:5e:05:6b:74:fe:02:f1:28:a6:1d: 8d:9f:1b:98:b2:d8:f1:32:21:8b:14:9a:ba:66:86: 64:58:3b:d7:dc:05:40:8d:27:95:4e:b5:21:40:be: 54:fc:03:d8:cb:2c:b0:9b:00:7a:13:57:b9:65:10: 36:d3:5c:42:49:56:8d:65:2d:f2:cb:06:76:80:1c: 0e:8d:78:22:7b:9a:8a:08:53:53:b5:e2:db:7b:93: 25:13:fc:eb:7c:09:89:cf:09:8a:29:5b:97:86:e1: 80:65:f8:20:53:b0:34:f1:08:71:59:7d:30:55:11: 0d:0b:6b:be:38:56:bb:c8:2a:21:9f:d5:c8:c0:d7: 60:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:38:FD:48:B8:DC:36:12:00:20:87:CF:F1:E4:C5:4B:56:34:28:F8 X509v3 Authority Key Identifier: keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:14:75:3d:3a:b4:ff:57:fb:f5:2e:73:45:cf:54:b3:36:1e: 3e:54:15:12:41:ce:65:1e:45:56:76:ba:0c:91:c2:30:38:f8: 84:23:91:f6:de:2c:c3:88:59:04:ec:62:5c:5b:5a:ef:ae:5f: 83:d2:ca:94:c7:59:07:d0:04:42:55:45:b3:95:2b:ce:b6:6c: 2e:94:3c:d1:8a:0d:c3:bf:60:a8:bc:00:00:ed:06:ac:06:71: b5:94:d5:6f:f4:8f:79:1b:07:0b:f3:ae:7b:7a:b7:a5:d7:3a: 76:39:45:0a:d3:e9:de:f4:87:65:a1:16:7f:2d:d6:b4:c6:76: 5b:60:06:5f:3d:5d:50:91:43:6d:ea:51:2d:f5:3b:e9:10:58: 6c:f1:00:98:70:bd:c8:b1:b5:6e:ca:05:0a:0d:53:91:75:df: 71:3c:93:88:ba:6b:cf:32:77:f5:5c:dd:b8:c3:cd:7c:8e:9e: 03:58:30:69:28:66:0e:fa:7f:84:06:3c:04:a0:d1:f3:92:a9: 33:3b:7c:2f:48:d7:4d:7a:68:1c:68:12:2d:30:79:5f:f9:15: a6:a8:f2:d9:ad:e7:5e:74:3a:22:65:0d:1e:eb:c5:66:e6:25: 3e:c7:56:43:a6:a3:6d:ad:e6:b1:45:32:2d:3f:db:12:8a:71: 3f:4d:4f:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMYlpemxxzZXyScHi+WeGoouwhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF MkY5MjE2NjAeFw0yNTA0MjcyMDU2MjhaFw0yNTA1MDEwNjIzMjhaMDMxMTAvBgNV BAMTKEMzMzhGRDQ4QjhEQzM2MTIwMDIwODdDRkYxRTRDNTRCNTYzNDI4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQv96x6RrrYRfijZ5DPwYj02Yy tHPRq6/a3DwvMqXDZCb8jpbT+EZOCcPfgnKXBUd0hHFnLmTnDXw4sTM2tGzx5oVS 5lh31FLRHg18/3ltV4K3/A+5UdfGDcqoMk6Gn7vKPAABisOMXdC4SozOq32h/Y2/ JE2oCpeUG6IDXgVrdP4C8SimHY2fG5iy2PEyIYsUmrpmhmRYO9fcBUCNJ5VOtSFA vlT8A9jLLLCbAHoTV7llEDbTXEJJVo1lLfLLBnaAHA6NeCJ7mooIU1O14tt7kyUT /Ot8CYnPCYopW5eG4YBl+CBTsDTxCHFZfTBVEQ0La744VrvIKiGf1cjA12AJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwzj9SLjcNhIAIIfP8eTFS1Y0KPgwHwYDVR0j BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5 MjE2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjM2NiYzQtODg4My00MTFjLTg3 NmUtZTllMjNhOGQ4YWQ5LzAvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5 M0VFMkY5MjE2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwUdT06tP9X+/Uuc0XPVLM2Hj5UFRJBzmUe RVZ2ugyRwjA4+IQjkfbeLMOIWQTsYlxbWu+uX4PSypTHWQfQBEJVRbOVK862bC6U PNGKDcO/YKi8AADtBqwGcbWU1W/0j3kbBwvzrnt6t6XXOnY5RQrT6d70h2WhFn8t 1rTGdltgBl89XVCRQ23qUS31O+kQWGzxAJhwvcixtW7KBQoNU5F133E8k4i6a88y d/Vc3bjDzXyOngNYMGkoZg76f4QGPASg0fOSqTM7fC9I1016aBxoEi0weV/5Faao 8tmt5150OiJlDR7rxWbmJT7HVkOmo22t5rFFMi0/2xKKcT9NTwQ= -----END CERTIFICATE-----Generated at Wed Apr 30 00:11:17 2025 by rpki-client