$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft File: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json) Hash identifier: PGnV+F+Do/YrXGUtPpGYnlXYNLWYImP+DbTWhOFOmXg= Subject key identifier: 9F:06:CC:88:71:50:51:DD:E0:73:BC:6D:BB:08:1A:FD:5D:F3:40:02 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 371CB9E0198C68838D739EE833F94D16EA80C8A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft Manifest number: AD Signing time: Mon 28 Apr 2025 15:21:32 +0000 Manifest this update: Mon 28 Apr 2025 15:16:32 +0000 Manifest next update: Fri 02 May 2025 00:29:32 +0000 Files and hashes: 1: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=) 2: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=) 3: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=) 4: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=) 5: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=) 6: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=) 7: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=) 8: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=) 9: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=) 10: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: Ni8WxtYAMcP0PVt+5iE0yw2gInviW32ufbNvGb5z/Cc=) 11: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=) 12: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1c:b9:e0:19:8c:68:83:8d:73:9e:e8:33:f9:4d:16:ea:80:c8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Apr 28 15:16:32 2025 GMT Not After : May 2 00:29:32 2025 GMT Subject: CN=9F06CC88715051DDE073BC6DBB081AFD5DF34002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:95:81:7f:1c:25:6f:e8:d8:3f:01:90:6b: 43:06:cd:b3:61:72:1a:10:f1:85:f6:fc:a1:10:8a: db:fd:ff:08:28:69:35:ab:14:ea:05:ff:b8:86:97: aa:b8:91:0e:14:1a:b6:7b:38:6b:dc:a9:f9:8f:85: 38:3e:b5:cc:d1:ca:4f:be:3d:d6:44:89:40:d1:a0: e4:f4:71:f3:ff:da:a5:db:c9:f0:db:8c:89:d2:ef: 52:c8:85:4f:8b:c5:e4:fd:e1:7f:b9:ed:ac:62:39: d9:2d:be:94:66:a2:57:af:72:a6:b9:ea:f3:c5:c2: da:31:03:e1:38:94:9f:79:d5:56:56:7c:2c:a5:95: 47:aa:fc:ac:6a:9b:ba:a9:f5:8b:f3:76:c3:f6:8a: d1:17:21:77:10:2a:5b:70:7c:ed:15:ef:28:3b:18: 30:2a:a1:5b:41:35:ce:ab:3e:1b:e6:f3:aa:ff:5d: 42:ce:dd:71:5b:30:95:2f:18:18:67:38:79:56:ab: 8f:34:27:00:8b:11:07:87:fb:12:f0:a4:76:e4:e5: 6c:3a:4b:2d:25:c3:c1:74:3d:04:67:a2:00:24:86: 0d:9f:9e:6c:15:e6:bf:1e:a3:bb:43:49:2f:9a:7f: a3:9c:9f:a1:7c:f1:97:d9:ef:46:25:97:61:a1:cf: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:06:CC:88:71:50:51:DD:E0:73:BC:6D:BB:08:1A:FD:5D:F3:40:02 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ad:2d:73:e4:cc:e0:5f:f2:e3:73:b3:c4:70:84:73:9e:7f: 98:43:d1:bd:1f:11:da:d1:54:e4:7b:61:ad:eb:b0:4c:5c:1e: 33:c3:20:6b:c6:76:78:ba:26:7d:a9:a7:a7:98:1f:41:7e:4a: 51:bb:b6:1e:7f:f8:39:72:4f:80:30:06:e9:1c:24:b4:68:10: 44:c3:f5:9f:7a:cb:21:c7:91:27:f0:99:69:2d:ab:13:90:36: 91:b8:47:78:d1:14:87:c7:42:e1:e5:44:58:c1:28:d2:84:6b: 69:fc:1e:16:17:38:16:cc:12:c7:44:ba:2a:5d:e3:42:77:47: 09:c0:ca:64:a5:60:58:81:d6:2f:bb:f4:f8:0a:17:29:60:07: 3e:bf:df:5d:e8:f3:3c:e7:33:00:1c:19:23:8b:9f:da:43:a7: e2:5a:62:a8:95:e2:c8:2a:bc:f2:8d:50:c1:64:82:bf:4b:9a: 5e:ac:e8:02:3b:c7:97:d3:80:35:5c:56:97:0a:63:23:f0:8f: 08:d5:67:4f:7b:5a:58:b1:5a:05:54:0d:9a:45:e1:1f:5c:d7: 66:65:61:53:a0:95:fa:17:fe:a4:35:ef:60:65:70:93:25:bc: 7f:7a:76:5a:61:94:25:c9:45:07:0f:e7:51:3a:c3:3e:a3:9d: 4f:bb:2c:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxy54BmMaIONc57oM/lNFuqAyKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNTA0MjgxNTE2MzJaFw0yNTA1MDIwMDI5MzJaMDMxMTAvBgNV BAMTKDlGMDZDQzg4NzE1MDUxRERFMDczQkM2REJCMDgxQUZENURGMzQwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsJWBfxwlb+jYPwGQa0MGzbNh choQ8YX2/KEQitv9/wgoaTWrFOoF/7iGl6q4kQ4UGrZ7OGvcqfmPhTg+tczRyk++ PdZEiUDRoOT0cfP/2qXbyfDbjInS71LIhU+LxeT94X+57axiOdktvpRmolevcqa5 6vPFwtoxA+E4lJ951VZWfCyllUeq/Kxqm7qp9YvzdsP2itEXIXcQKltwfO0V7yg7 GDAqoVtBNc6rPhvm86r/XULO3XFbMJUvGBhnOHlWq480JwCLEQeH+xLwpHbk5Ww6 Sy0lw8F0PQRnogAkhg2fnmwV5r8eo7tDSS+af6Ocn6F88ZfZ70Yll2Ghz3+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnwbMiHFQUd3gc7xtuwga/V3zQAIwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I2M2Y3NzEtYTk1Zi00YjUzLTg3 YmMtOGJmZjUwNGRhMWY0LzAvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0 REZDMTIwMjg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOtLXPkzOBf8uNzs8RwhHOef5hD0b0fEdrR VOR7Ya3rsExcHjPDIGvGdni6Jn2pp6eYH0F+SlG7th5/+DlyT4AwBukcJLRoEETD 9Z96yyHHkSfwmWktqxOQNpG4R3jRFIfHQuHlRFjBKNKEa2n8HhYXOBbMEsdEuipd 40J3RwnAymSlYFiB1i+79PgKFylgBz6/313o8zznMwAcGSOLn9pDp+JaYqiV4sgq vPKNUMFkgr9Lml6s6AI7x5fTgDVcVpcKYyPwjwjVZ097WlixWgVUDZpF4R9c12Zl YVOglfoX/qQ172BlcJMlvH96dlphlCXJRQcP51E6wz6jnU+7LDI= -----END CERTIFICATE-----Generated at Wed Apr 30 05:49:05 2025 by rpki-client