$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft File: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft (raw, json) Hash identifier: ZeJP76cxRCipgCUOBWmIPn/S5TUIBFi3yd3T14rTrf8= Subject key identifier: 90:10:DE:1B:4B:EF:17:AB:7D:DE:AA:E5:97:1B:5F:83:ED:17:07:61 Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Certificate serial: 0FEFC76311C722487BF7BD1417BE18031F64DDC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft Manifest number: 049A Signing time: Mon 28 Apr 2025 23:00:02 +0000 Manifest this update: Mon 28 Apr 2025 22:55:02 +0000 Manifest next update: Fri 02 May 2025 08:57:02 +0000 Files and hashes: 1: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: GGTZ8ZWEqHxChvcJE8MjjNJMuF3dWYhHR2I8858Cz0U=) 2: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: YsPCY6UCv05oHfHFXQer5wdXjWe1w4PGTDeh2YhnWn4=) 3: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: XGyX1fDJCJeIJhfCIkQQCr6OHIb1I8YyoWexjVgFMdA=) 4: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: ZgDGXCsSyzDrJGQuDM1q2yAFTUBJsm9YLq4ntv3/5wQ=) 5: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: oI85Nkz5/CMZA7k3SxUQ6Xmc+24Tvrh8kDV6p9ogj1M=) 6: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl (hash: QthgRJSbC+Dj3IYp4lmthUwKE7avc+Y5wZCiIi2Xifg=) 7: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: dK7eIqeYPbIOw6nXsyQPzgXcTaUh+WVDmTdqwqkNOyk=) 8: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: BrYtifMnKnRRiHxJbZJmvvBOsJOs2dpAKTUH37CnH1c=) 9: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: r0TbBF8saS2mOL5XeCwhn4JCtsrTGBwfR9bmqMpX7uY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 08:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ef:c7:63:11:c7:22:48:7b:f7:bd:14:17:be:18:03:1f:64:dd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Validity Not Before: Apr 28 22:55:02 2025 GMT Not After : May 2 08:57:02 2025 GMT Subject: CN=9010DE1B4BEF17AB7DDEAAE5971B5F83ED170761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:ed:ff:4c:1d:39:a2:8a:45:a4:61:51:f5: d1:b9:fc:73:1e:57:d5:10:8f:27:f7:72:16:09:13: 0f:06:20:44:6d:b1:64:e6:51:73:3b:93:c7:84:07: 7c:d5:45:a4:3a:f9:ff:ae:6b:5c:3d:c6:03:e5:fd: a8:d6:9e:5f:74:da:7f:b9:01:26:7e:e0:c7:22:3b: 59:a6:b1:57:5c:3f:15:05:70:a0:3b:31:a5:37:34: 21:3f:66:87:a6:1e:0a:7f:4c:c7:3f:97:4d:b1:64: a6:f5:f5:09:15:6a:99:4b:80:fc:85:1d:8e:e2:40: 18:5f:1f:16:cd:03:3b:5b:21:6c:4f:3d:2a:bd:fc: 6f:ab:cc:17:48:6a:91:56:31:ff:14:fc:9a:c7:c3: 7f:cf:97:e2:45:67:0b:d7:ce:10:8b:91:a3:72:ed: cc:31:5a:01:ff:50:c6:3a:f9:12:99:be:d9:a9:ee: 19:e3:d0:36:8f:58:ef:72:64:28:c3:8c:05:6d:1c: 32:8d:58:71:b4:f6:0a:43:28:91:e8:4a:37:16:17: af:cb:36:13:f8:6c:cc:5a:60:51:0f:e2:fe:ba:b1: d0:28:90:9e:ec:b2:7d:ee:cb:cf:94:eb:00:b5:f6: be:c6:11:62:f5:33:0c:fa:11:86:6e:11:6e:b5:0a: 67:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:10:DE:1B:4B:EF:17:AB:7D:DE:AA:E5:97:1B:5F:83:ED:17:07:61 X509v3 Authority Key Identifier: keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:07:4f:88:04:18:1c:32:e3:61:ee:81:6e:78:5a:65:8a:1c: 26:4b:21:10:3d:74:71:34:47:84:06:90:b1:9b:0f:17:c6:6e: 86:af:38:4a:03:d2:ab:d6:49:bd:81:8f:e3:f2:0e:bd:1c:76: f6:56:30:91:8f:07:05:b6:e6:e5:48:40:d1:2a:df:b2:bd:8b: 6f:a1:28:51:92:f5:64:b1:63:a1:7e:7b:3b:2a:74:37:6e:1b: fb:0e:e0:ba:ca:4c:dc:af:e5:42:f2:7f:4c:0c:d3:32:cb:25: 75:af:44:0f:5a:78:1b:ac:42:5e:d5:48:bc:3b:e9:9c:4d:1f: e5:0e:c6:fa:1d:7b:e7:b2:84:54:db:c8:3a:ac:89:f1:e0:7c: 7e:80:11:60:26:d9:09:80:67:0c:96:08:41:04:cc:0d:6b:e6: d1:65:60:7a:5f:7a:ec:5d:03:21:0f:48:cf:f2:8f:92:5c:37: 3e:dd:a2:57:8e:19:1b:53:cb:3c:cc:9c:ee:dc:de:0f:7a:d8: 00:2f:71:11:96:85:38:5d:f9:d9:fa:e1:d4:8f:04:ab:24:26: 11:75:36:5a:50:3b:34:33:c0:77:fd:9c:f5:b9:30:80:e9:93: 55:2e:fc:cd:38:76:fa:6c:34:28:26:5b:9f:50:3e:9c:7d:73: 71:c0:84:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+/HYxHHIkh7970UF74YAx9k3cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5 Qjk0MTBFOTAeFw0yNTA0MjgyMjU1MDJaFw0yNTA1MDIwODU3MDJaMDMxMTAvBgNV BAMTKDkwMTBERTFCNEJFRjE3QUI3RERFQUFFNTk3MUI1RjgzRUQxNzA3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08u3/TB05oopFpGFR9dG5/HMe V9UQjyf3chYJEw8GIERtsWTmUXM7k8eEB3zVRaQ6+f+ua1w9xgPl/ajWnl902n+5 ASZ+4MciO1mmsVdcPxUFcKA7MaU3NCE/ZoemHgp/TMc/l02xZKb19QkVaplLgPyF HY7iQBhfHxbNAztbIWxPPSq9/G+rzBdIapFWMf8U/JrHw3/Pl+JFZwvXzhCLkaNy 7cwxWgH/UMY6+RKZvtmp7hnj0DaPWO9yZCjDjAVtHDKNWHG09gpDKJHoSjcWF6/L NhP4bMxaYFEP4v66sdAokJ7ssn3uy8+U6wC19r7GEWL1Mwz6EYZuEW61CmcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkBDeG0vvF6t93qrllxtfg+0XB2EwHwYDVR0j BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4 RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0 MTBFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFE ODI5Qjk0MTBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAHT4gEGBwy42HugW54WmWKHCZLIRA9dHE0 R4QGkLGbDxfGboavOEoD0qvWSb2Bj+PyDr0cdvZWMJGPBwW25uVIQNEq37K9i2+h KFGS9WSxY6F+ezsqdDduG/sO4LrKTNyv5ULyf0wM0zLLJXWvRA9aeBusQl7VSLw7 6ZxNH+UOxvode+eyhFTbyDqsifHgfH6AEWAm2QmAZwyWCEEEzA1r5tFlYHpfeuxd AyEPSM/yj5JcNz7doleOGRtTyzzMnO7c3g962AAvcRGWhThd+dn64dSPBKskJhF1 NlpQOzQzwHf9nPW5MIDpk1Uu/M04dvpsNCgmW59QPpx9c3HAhMc= -----END CERTIFICATE-----Generated at Wed Apr 30 08:14:20 2025 by rpki-client