$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: l4W5/+n3eRP0XB7/JESCT+DkvxkXADq0OW+UbDx8P3A= Subject key identifier: FE:92:25:29:78:EA:6D:2D:81:6D:39:37:28:98:E7:59:68:A8:38:D4 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 5F2DFACF9A6F351EC76957E72557642822D62E05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 0418 Signing time: Sun 27 Apr 2025 00:30:49 +0000 Manifest this update: Sun 27 Apr 2025 00:25:49 +0000 Manifest next update: Wed 30 Apr 2025 07:17:49 +0000 Files and hashes: 1: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=) 2: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: UMpjLuebG+yMQNJv43xd3u8qZ1cqsp7h54oRFs+fJIg=) 3: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: Q42RUhUAXxkODBT77y4o1GxfbcNdoUlUUUdqbWJPuuQ=) 4: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 0q8NrmjjcxoNrx7WtkZa7JKjlra7drxIR2Rkv2uH0qU=) 5: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=) 6: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=) 7: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: Si3tPvzTYMJNo6ziKI0r83ugddQoVhs+qZtKjviywZY=) 8: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=) 9: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: s/yj35IxEbWgMmRyngcwwQ2XYvpHuhez/PCo0jx4Hk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 07:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2d:fa:cf:9a:6f:35:1e:c7:69:57:e7:25:57:64:28:22:d6:2e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Apr 27 00:25:49 2025 GMT Not After : Apr 30 07:17:49 2025 GMT Subject: CN=FE92252978EA6D2D816D39372898E75968A838D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:22:0f:c8:ee:ad:5f:e2:47:10:aa:10:9c: c6:6a:9d:75:52:f8:f4:5a:25:df:f2:c7:ca:34:fa: bf:11:0c:bf:ae:2d:bc:2e:51:3c:29:f1:63:71:16: b6:28:11:8e:81:12:94:b5:38:a3:ec:7e:59:40:d5: 87:29:45:b5:85:10:66:13:cd:47:28:43:7c:7f:26: d0:72:73:d8:63:aa:66:b4:84:ed:2e:ad:fd:7f:8a: 39:09:2e:8e:86:a9:a2:71:e1:8f:4b:1c:8f:f4:d2: e3:c1:18:2d:86:c8:aa:74:8e:1e:5b:68:2c:d8:8e: c2:aa:1c:71:cd:43:b5:e9:55:a1:e0:25:14:e5:15: 3d:41:df:e6:25:1f:28:6f:26:fc:2b:5d:9b:08:b5: 56:b9:e9:58:73:1a:0c:f2:e8:40:1d:87:fe:c8:ce: ea:e0:8e:9b:43:f7:19:9f:32:8a:ff:40:d0:dd:1e: 75:d5:32:bf:36:93:c3:3d:58:ec:2b:3b:f5:ed:78: 9c:74:bf:9e:e3:a5:66:a7:16:74:93:01:56:fd:9c: ca:d1:0b:d1:e6:54:a7:a8:07:c8:b0:70:b9:9b:4b: fa:c0:e6:0e:f4:1b:34:4f:be:12:79:22:4a:f9:ce: 76:a7:6c:e8:ba:7d:d3:01:30:16:60:c0:2f:4d:fe: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:92:25:29:78:EA:6D:2D:81:6D:39:37:28:98:E7:59:68:A8:38:D4 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3a:ca:10:78:e1:c8:95:64:4c:57:73:48:47:d4:1e:18:3e: f4:6a:65:99:09:2a:92:ea:38:ad:cf:2f:07:c1:f3:3e:8d:32: 67:a8:b6:22:e8:6c:71:17:5c:bd:9c:f6:ab:0b:99:cf:0f:c2: d9:88:61:88:07:2d:68:78:1c:03:04:4f:4c:e1:09:14:6e:62: 43:24:be:13:66:70:ad:9c:ed:16:71:7a:b9:16:59:e2:6e:10: e7:ce:34:1a:13:2c:03:90:b4:96:2f:18:38:a2:9b:5b:cd:5b: 11:59:d6:a6:29:2a:c3:e2:19:10:4b:53:57:4f:df:05:70:65: 6a:a8:e2:6f:bb:fa:a3:7f:96:dc:a0:a9:aa:ce:8e:94:f6:e4: ef:45:03:24:63:36:32:5e:52:f0:12:8a:dd:b6:e1:f3:1f:18: ca:f5:21:c1:65:51:98:7a:5b:4f:25:94:10:37:09:31:9f:c6: 0f:80:c7:c1:48:2a:39:96:8f:76:a8:81:83:a7:61:26:4b:4c: a4:c0:bc:8e:0d:fc:ec:4a:a4:a5:66:72:e1:e1:b7:1f:59:4f: c7:d2:d9:a3:b0:82:52:47:51:3e:4e:ff:4c:ac:59:e5:70:3d: 18:a8:d0:a7:d4:85:6b:dc:c0:e4:60:5f:7b:4f:b6:4e:ff:91: 68:7e:02:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXy36z5pvNR7HaVfnJVdkKCLWLgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTA0MjcwMDI1NDlaFw0yNTA0MzAwNzE3NDlaMDMxMTAvBgNV BAMTKEZFOTIyNTI5NzhFQTZEMkQ4MTZEMzkzNzI4OThFNzU5NjhBODM4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+CIPyO6tX+JHEKoQnMZqnXVS +PRaJd/yx8o0+r8RDL+uLbwuUTwp8WNxFrYoEY6BEpS1OKPsfllA1YcpRbWFEGYT zUcoQ3x/JtByc9hjqma0hO0urf1/ijkJLo6GqaJx4Y9LHI/00uPBGC2GyKp0jh5b aCzYjsKqHHHNQ7XpVaHgJRTlFT1B3+YlHyhvJvwrXZsItVa56VhzGgzy6EAdh/7I zurgjptD9xmfMor/QNDdHnXVMr82k8M9WOwrO/XteJx0v57jpWanFnSTAVb9nMrR C9HmVKeoB8iwcLmbS/rA5g70GzRPvhJ5Ikr5znanbOi6fdMBMBZgwC9N/osjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/pIlKXjqbS2BbTk3KJjnWWioONQwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAII6yhB44ciVZExXc0hH1B4YPvRqZZkJKpLq OK3PLwfB8z6NMmeotiLobHEXXL2c9qsLmc8PwtmIYYgHLWh4HAMET0zhCRRuYkMk vhNmcK2c7RZxerkWWeJuEOfONBoTLAOQtJYvGDiim1vNWxFZ1qYpKsPiGRBLU1dP 3wVwZWqo4m+7+qN/ltygqarOjpT25O9FAyRjNjJeUvASit224fMfGMr1IcFlUZh6 W08llBA3CTGfxg+Ax8FIKjmWj3aogYOnYSZLTKTAvI4N/OxKpKVmcuHhtx9ZT8fS 2aOwglJHUT5O/0ysWeVwPRio0KfUhWvcwORgX3tPtk7/kWh+Ass= -----END CERTIFICATE-----Generated at Sun Apr 27 17:18:42 2025 by rpki-client