$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: wn3OreKupDhla7o/ujv/rvco1LTd6PyJnbXbbiPpeOY= Subject key identifier: E4:1B:F1:47:82:B2:1A:FB:AD:91:07:D8:43:87:39:A9:8B:03:40:26 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 06DDD1C7CEC2448A49DAB1D851441D271FAE573E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: A0 Signing time: Mon 28 Apr 2025 11:31:44 +0000 Manifest this update: Mon 28 Apr 2025 11:26:44 +0000 Manifest next update: Thu 01 May 2025 16:40:44 +0000 Files and hashes: 1: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 2: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 3: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 4: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: Bso4OUgHmF6SLJmwp2e40LqDmiNFy5C7na0WOoc3qqU=) 5: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 6: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:dd:d1:c7:ce:c2:44:8a:49:da:b1:d8:51:44:1d:27:1f:ae:57:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Apr 28 11:26:44 2025 GMT Not After : May 1 16:40:44 2025 GMT Subject: CN=E41BF14782B21AFBAD9107D8438739A98B034026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:56:70:12:9c:1a:4f:4e:6b:9a:d3:4b:57: 96:f3:6a:d3:c4:47:dd:40:83:95:d2:44:6f:48:61: 6b:27:8c:44:5a:17:9f:b5:f9:40:12:3e:6d:98:20: 15:5a:82:ec:cb:ec:bf:c9:71:82:ca:77:b6:8f:4d: 07:a3:32:f2:11:fb:4d:e6:9c:37:5d:48:28:92:9b: 41:65:77:79:4c:78:31:e1:4f:f4:3c:a4:c5:6b:b6: 1b:7f:1e:05:a6:1e:ab:ad:8a:70:f3:56:ef:60:79: 48:b2:06:98:cd:35:f3:71:d7:c7:36:eb:4b:01:9e: 91:82:f9:29:c0:66:b6:bd:0e:56:65:d0:ee:6f:fa: 58:7e:92:b4:d2:3e:44:eb:a3:cb:ec:86:6c:4a:e0: c7:da:d8:d5:d6:ba:04:87:f1:d3:27:ef:f3:74:62: 7e:83:3c:8d:dd:69:ee:f1:4d:43:27:69:07:1b:2c: 28:57:90:fb:2d:81:63:c4:62:50:ff:33:3a:67:36: 1f:97:4e:81:c3:b2:55:97:0e:96:19:4b:3c:ba:36: 9e:f7:93:bc:8e:18:61:97:63:af:d7:68:29:1d:f8: b0:cd:0c:fc:9b:84:ae:5e:0f:4a:c9:3d:f6:90:91: 48:7d:39:59:06:f3:01:72:db:a5:5b:82:b4:4b:7b: 70:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1B:F1:47:82:B2:1A:FB:AD:91:07:D8:43:87:39:A9:8B:03:40:26 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:21:87:e3:cb:7c:41:21:a8:cb:df:a5:86:6a:1e:bd:d0:e0: 03:76:f6:4c:1e:6f:ab:ef:91:28:4b:e9:a4:18:2f:be:0a:6c: b5:96:8e:a9:af:41:f5:8c:a9:ad:a0:96:6c:36:eb:a9:0f:e7: c7:a0:01:ad:36:a3:e7:df:c6:3b:b6:37:23:cf:de:b2:d8:dd: 71:84:ad:f3:46:7d:62:61:8c:e2:85:5c:7d:d1:45:ae:25:8e: a0:64:96:1f:d3:f0:e5:98:95:d1:2c:c0:cd:04:e4:79:05:26: 07:67:ad:41:b7:c7:e2:41:47:69:59:db:84:3c:61:6a:9a:45: 08:10:49:52:09:a4:a4:12:e8:4e:c4:bd:cb:79:46:52:5e:1e: e2:f1:2c:90:67:62:d9:c6:eb:44:ec:ff:ec:6d:91:33:e5:07: 11:2b:68:c7:b4:47:55:78:1c:53:d8:59:9e:a2:4f:9d:cd:f3: 38:06:6b:39:9a:fb:e1:87:d5:de:92:67:6a:a4:92:fd:ab:1c: 5e:98:0e:12:d1:72:ae:5d:46:33:98:85:ff:82:d7:a7:37:1d: f7:be:b3:3d:44:cf:41:45:b4:19:25:25:0a:43:5d:90:9f:79: 1e:bb:30:39:b5:4b:62:ca:7a:0f:2f:b3:ab:a1:3b:74:fd:7e: de:7a:59:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBt3Rx87CRIpJ2rHYUUQdJx+uVz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTA0MjgxMTI2NDRaFw0yNTA1MDExNjQwNDRaMDMxMTAvBgNV BAMTKEU0MUJGMTQ3ODJCMjFBRkJBRDkxMDdEODQzODczOUE5OEIwMzQwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYFZwEpwaT05rmtNLV5bzatPE R91Ag5XSRG9IYWsnjERaF5+1+UASPm2YIBVaguzL7L/JcYLKd7aPTQejMvIR+03m nDddSCiSm0Fld3lMeDHhT/Q8pMVrtht/HgWmHqutinDzVu9geUiyBpjNNfNx18c2 60sBnpGC+SnAZra9DlZl0O5v+lh+krTSPkTro8vshmxK4Mfa2NXWugSH8dMn7/N0 Yn6DPI3dae7xTUMnaQcbLChXkPstgWPEYlD/MzpnNh+XToHDslWXDpYZSzy6Np73 k7yOGGGXY6/XaCkd+LDNDPybhK5eD0rJPfaQkUh9OVkG8wFy26VbgrRLe3BDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5BvxR4KyGvutkQfYQ4c5qYsDQCYwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0hh+PLfEEhqMvfpYZqHr3Q4AN29kweb6vv kShL6aQYL74KbLWWjqmvQfWMqa2glmw266kP58egAa02o+ffxju2NyPP3rLY3XGE rfNGfWJhjOKFXH3RRa4ljqBklh/T8OWYldEswM0E5HkFJgdnrUG3x+JBR2lZ24Q8 YWqaRQgQSVIJpKQS6E7Evct5RlJeHuLxLJBnYtnG60Ts/+xtkTPlBxEraMe0R1V4 HFPYWZ6iT53N8zgGazma++GH1d6SZ2qkkv2rHF6YDhLRcq5dRjOYhf+C16c3Hfe+ sz1Ez0FFtBklJQpDXZCfeR67MDm1S2LKeg8vs6uhO3T9ft56WRU= -----END CERTIFICATE-----Generated at Wed Apr 30 03:28:35 2025 by rpki-client