$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft File: C00163880F235714759920507217F2A7D557C953.mft (raw, json) Hash identifier: 2eaCNQ53i1wKIsj4thKLcKK5iKa0sL5hZkWjhLqnrQM= Subject key identifier: 58:A4:44:87:60:3E:06:64:63:54:83:30:E0:5E:35:BF:36:48:72:6A Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 Certificate issuer: /CN=C00163880F235714759920507217F2A7D557C953 Certificate serial: 536687AB50F35A79585D21A09AB1289973B7ABEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft Manifest number: 04DB Signing time: Sun 27 Apr 2025 04:41:04 +0000 Manifest this update: Sun 27 Apr 2025 04:36:04 +0000 Manifest next update: Wed 30 Apr 2025 09:40:04 +0000 Files and hashes: 1: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: prxETRZ+UcJYInSy8kj+pHh+ePpdBSveL40hYMcOpu4=) 2: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: bsRtn7HqcpQRX69WpTIALDf59zF0XM0taxugCPsZKAs=) 3: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: IDWCZT4uAeHS9R8+qCUs6bMdQGmyEUG0b6ZQgSamVag=) 4: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: peoi92UYki92OlMKYXE7q6FGXu3QDKL092I9QxG8hOk=) 5: 34332e3235322e3135362e302f32322d3234203d3e203535363636.roa (hash: RejeS3+iaS53ceAS6fuGs26b5emqFusVNb6sZtoMkNY=) 6: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: pVP8WNT6LU5nlRqRUxl8FgSkFnHlZF7d9Y3T2wIWbOI=) 7: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: ojFdU43pMzAF8Kl2ss98Rrj2MseDcSjIaVkU6XMeYuI=) 8: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: M5MIXM9yrLqkivi97+1D94IkM8JBddI+ZQwKNBZcwPA=) 9: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: /N+GbbnL1idqgDjtW6KvcgPSGuY52hOxy4FItcWTp7M=) 10: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 4drbhys0k9nwMVhQ3qP8hx5pwYTiOzSCA3fRbQudv88=) 11: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: drDWXbS5Lt2BNjwhp2t9NFg/ubNQHhmV8ihSFb/W+xw=) 12: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: fv7w6z62outeFY04yktIZFxsP8pQo+LaBilVbns7Fng=) 13: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: /9HEDitBud2JL5PjNF8lccXxuUn2nEtlKhSkIJ1OpE8=) 14: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: jLKCSwUB/7+RWWMUUnjb77Vl80z1WI/m0WnLZPBMhZg=) 15: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: X1M4lkdlV+Ji88HiSy4MoehizuXPUPqhQ4nsudueXzM=) 16: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: V5/+oe0yc47TDeQuvZAPNLqrTj16mL6buLmaKxjOGog=) 17: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: vJEkgcLpU3cf/IfScJ12Mu6c2mkTNJRJxXf7tOrvqsU=) 18: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: Ewo+otbU3EuAz7CmopHziGOTbYOmapFScMdrRGG9Lcc=) 19: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: J/qEk8PLS2L818NmmW0MNEe+BNloyc7SI+CudCB88po=) 20: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: vUUnROqus6D3mRY4HQAIFQ7ChbN3n89TAiS9dIrWGT8=) 21: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: 8Pbf5fsxv/JzP6C1MTXqHphtIKSudWZyH6TaxId01SE=) 22: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: /nevEPzljzS1GPlEHXnOO2d6UHLxx+c29+SvhwCD4hA=) 23: C00163880F235714759920507217F2A7D557C953.crl (hash: KHUV4snvO++gsM0iPzmdgYQgwqFsfo24zF7Vco9+03Q=) 24: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: gu2eLJYOhzvMAWqCTll0Z1vHSzpodGweSdH5sGIIl3o=) 25: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: JYMDp6E4TEckql4p/4GjSNO2rr/124noQyLp4F0BuMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 09:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:66:87:ab:50:f3:5a:79:58:5d:21:a0:9a:b1:28:99:73:b7:ab:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00163880F235714759920507217F2A7D557C953 Validity Not Before: Apr 27 04:36:04 2025 GMT Not After : Apr 30 09:40:04 2025 GMT Subject: CN=58A44487603E066463548330E05E35BF3648726A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:f7:c4:90:ea:82:b7:00:de:0f:09:64:95: 2e:ab:e7:ef:30:f7:e1:eb:bd:67:12:da:89:68:77: dd:83:ce:95:2f:15:df:e2:f9:86:35:56:c9:2a:74: c7:f6:4d:44:7d:1b:f8:28:46:05:46:35:64:8e:6b: ea:45:a3:42:c0:ef:e7:b3:c8:78:46:00:ef:4a:39: cb:ee:bc:3e:dd:58:54:e4:5d:fd:4c:86:1b:1a:cd: d9:fe:a3:5d:3c:ca:e6:67:7a:82:bd:37:ee:e7:2f: 90:b2:f6:94:0d:49:44:e0:9c:42:cd:b3:1c:d0:93: 90:d8:b7:64:df:2a:5a:27:4a:df:fe:1a:3f:da:10: aa:05:db:6f:fe:44:c7:32:c2:d3:13:b6:e3:08:ec: 9e:9b:00:76:33:72:4b:19:d9:f5:7a:ac:79:5e:d5: 3f:38:db:b7:f8:12:e3:36:98:60:15:b8:0c:a5:7f: 76:17:66:ac:2f:3c:a8:48:8a:ae:da:25:4d:91:07: 11:01:6f:06:d6:c3:50:46:79:52:0a:62:0e:4c:cd: 9c:09:0b:ec:b4:a4:21:0a:1e:82:81:cc:c1:c1:f2: 6a:38:2c:5a:5d:52:18:eb:e6:77:25:90:7b:d7:74: d4:9d:7f:73:89:97:41:77:24:22:5f:93:95:e0:3c: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A4:44:87:60:3E:06:64:63:54:83:30:E0:5E:35:BF:36:48:72:6A X509v3 Authority Key Identifier: keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:4e:4a:1e:6a:0c:74:6c:ac:5b:04:9a:63:36:eb:01:16:24: a2:a9:37:ae:2a:a4:b7:15:18:a9:2b:ef:a7:7b:20:98:c4:45: 72:37:33:5a:08:18:61:a4:90:df:c8:cd:79:f1:78:1f:e3:e3: 84:ea:43:48:bf:0f:5c:a1:ce:8e:e0:1e:7a:02:70:bb:83:4a: 24:c3:9c:0c:34:6a:3c:3d:df:7c:b3:8b:4f:e0:32:48:02:04: 8d:e6:c5:54:e7:0d:11:25:c7:d4:41:60:6c:b9:63:41:d5:54: 07:a4:25:ff:7c:d0:b5:57:60:d2:6c:4f:65:62:c5:ed:ab:1b: 40:fe:3d:24:23:5b:c4:c7:a5:cd:15:bd:dc:79:3a:92:74:e3: 88:65:5d:dd:45:b2:e8:7e:9c:5f:9d:50:2e:64:b9:9a:16:27: fa:bb:90:75:03:51:52:86:a8:e1:9c:ad:b7:48:ca:16:31:d1: 17:3c:4d:8e:bd:35:4f:01:ea:10:ac:f4:13:c3:4e:13:57:aa: 33:e4:1f:99:87:b7:6d:f8:de:fe:07:c5:af:4a:d5:be:65:aa: 1a:26:8d:a0:82:bb:dd:91:41:6d:47:cc:8c:10:a3:2b:b8:e5: f1:ce:51:e0:fa:5f:8b:07:7e:ca:df:4b:55:ab:23:89:9d:d4: ea:26:e2:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2aHq1DzWnlYXSGgmrEomXO3q+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE NTU3Qzk1MzAeFw0yNTA0MjcwNDM2MDRaFw0yNTA0MzAwOTQwMDRaMDMxMTAvBgNV BAMTKDU4QTQ0NDg3NjAzRTA2NjQ2MzU0ODMzMEUwNUUzNUJGMzY0ODcyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9ffEkOqCtwDeDwlklS6r5+8w 9+HrvWcS2olod92DzpUvFd/i+YY1VskqdMf2TUR9G/goRgVGNWSOa+pFo0LA7+ez yHhGAO9KOcvuvD7dWFTkXf1Mhhsazdn+o108yuZneoK9N+7nL5Cy9pQNSUTgnELN sxzQk5DYt2TfKlonSt/+Gj/aEKoF22/+RMcywtMTtuMI7J6bAHYzcksZ2fV6rHle 1T8427f4EuM2mGAVuAylf3YXZqwvPKhIiq7aJU2RBxEBbwbWw1BGeVIKYg5MzZwJ C+y0pCEKHoKBzMHB8mo4LFpdUhjr5nclkHvXdNSdf3OJl0F3JCJfk5XgPB0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKREh2A+BmRjVIMw4F41vzZIcmowHwYDVR0j BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3 Qzk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhN2ExMTUtYjhiOC00OTBiLTgz MjAtYzllNTlhMTAwM2RkLzAvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0Yy QTdENTU3Qzk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFOSh5qDHRsrFsEmmM26wEWJKKpN64qpLcV GKkr76d7IJjERXI3M1oIGGGkkN/IzXnxeB/j44TqQ0i/D1yhzo7gHnoCcLuDSiTD nAw0ajw933yzi0/gMkgCBI3mxVTnDRElx9RBYGy5Y0HVVAekJf980LVXYNJsT2Vi xe2rG0D+PSQjW8THpc0Vvdx5OpJ044hlXd1Fsuh+nF+dUC5kuZoWJ/q7kHUDUVKG qOGcrbdIyhYx0Rc8TY69NU8B6hCs9BPDThNXqjPkH5mHt2343v4Hxa9K1b5lqhom jaCCu92RQW1HzIwQoyu45fHOUeD6X4sHfsrfS1WrI4md1Oom4uk= -----END CERTIFICATE-----Generated at Tue Apr 29 11:29:23 2025 by rpki-client