$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft File: F33127B2252454B491C5DC9FE3937C56F28F8066.mft (raw, json) Hash identifier: +0e8585YlTiaF94myD+5jK9Nx5T0WLjF2DktkevaWBA= Subject key identifier: 6C:4E:C2:DB:A1:B1:C4:C7:55:6C:3F:E6:F5:79:D2:E0:43:59:67:AF Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 3ED15BA6C9E28778E320E6BA5E78F95E51ACDA5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft Manifest number: 03B2 Signing time: Tue 29 Apr 2025 11:00:55 +0000 Manifest this update: Tue 29 Apr 2025 10:55:55 +0000 Manifest next update: Fri 02 May 2025 13:40:55 +0000 Files and hashes: 1: F33127B2252454B491C5DC9FE3937C56F28F8066.crl (hash: CtRALrWHDCDi3rC09udcngMSU6DTeO9NmVGPR2s/0FE=) 2: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: LK7y7Lgv53BZtTgHVdhNU9vAFNrTBJKQoUlDcnr1peM=) 3: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: TZ45IaHiDcklYnYgaDPwrwSUbUctA3Q/NXqUbigRnzs=) 4: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: BhrGTMcOlTnS9+LXizZepRTc8dUVDoSk9wrBjorwUZI=) 5: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: xd0vdotwl3DI/gtzK9jd/Z1SgDoCaQpGK+EAJgcM1tI=) 6: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: m3SFMK5sTyp5JRSjSaSerEeKhJKK6aQm3Z3k3tuCZsA=) 7: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: gRftjSQQEs2HA/M7jkf+ozLtCrIoawfYsZxOb3X4kBI=) 8: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: N0CbxEaJ84FtSM59t7S0gaGm9kXwBwxvj0vCyUhse+Y=) 9: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: nPfvFxh32GtLGhwJQ/WVsbfFCUobHuoJlvZ49Ao0HyU=) 10: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: Xb1Bkjs5hzP5DiGreqFq1n1/N1wG2GKWoe1mJNbSKvU=) 11: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: 44xJ+4HPqKcd5YyfQZtlfLdXLia/wNGmzcAqkBPsBnY=) 12: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: DcGxDHPqViJVOJR4+8wZK4plCpX0AqnB3wzHsVU0B/I=) 13: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: sfYpDs3jHVhySahEuUQy0V6BeSKjH1Lk7XnZpDOyCWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 13:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d1:5b:a6:c9:e2:87:78:e3:20:e6:ba:5e:78:f9:5e:51:ac:da:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Apr 29 10:55:55 2025 GMT Not After : May 2 13:40:55 2025 GMT Subject: CN=6C4EC2DBA1B1C4C7556C3FE6F579D2E0435967AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:8b:0c:25:1e:6e:0f:91:3a:d5:9d:8a:45: 3e:ad:1a:7c:cf:ac:28:38:93:ae:e8:8c:76:9b:a9: b0:e4:d1:83:ac:83:0f:b6:1f:4f:6d:2d:95:a1:fc: b7:9e:26:ba:e4:98:96:20:86:be:93:a4:fe:1b:5d: e0:81:00:3f:18:3d:e2:a8:a9:18:37:8f:b1:40:e7: 07:d7:0c:1a:7f:1d:8f:6a:14:bf:35:17:d3:aa:c2: 2c:55:f0:57:b8:1e:67:5e:3e:d7:4f:41:43:e8:84: 84:5d:e9:bb:a2:94:f8:f8:d8:20:91:9e:ea:0b:b4: 9c:8a:83:45:04:24:84:f6:e0:a9:4b:8a:ae:8d:8c: 9a:44:99:84:86:59:35:8f:24:0b:e0:2c:01:c7:7c: c6:6f:b4:ba:d3:29:48:ff:93:b9:f4:99:ab:61:80: 2b:54:c2:2d:55:9e:cf:65:40:6d:c3:57:61:a0:cf: d8:bc:00:ae:66:7e:e9:74:de:24:03:09:a2:0c:47: 3f:46:b2:77:0f:fd:b1:99:13:9f:84:27:1b:9c:cd: 1f:11:a7:00:ef:92:cb:e2:bb:88:c4:50:da:fa:c8: 6c:a7:72:f9:0e:dc:f5:4d:ff:88:c5:8f:d5:94:de: 46:c4:7f:3a:ac:b4:26:cc:68:5b:02:ee:50:a5:4e: 9f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4E:C2:DB:A1:B1:C4:C7:55:6C:3F:E6:F5:79:D2:E0:43:59:67:AF X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b0:99:3d:39:f3:90:ec:e9:36:ed:98:92:09:cb:05:f0:5d: 07:7d:6f:af:69:2f:d8:2d:2b:f7:4f:a7:ac:65:f7:67:54:3b: 02:c0:ad:e2:a9:8e:36:c0:ac:fa:5a:c7:1c:3a:cc:78:0c:2d: 12:13:15:a4:2f:fe:a2:4b:68:86:f9:93:d8:97:d7:c6:38:96: b4:40:af:f3:be:96:45:96:58:67:2d:e4:03:99:57:16:6a:d1: 07:b8:96:51:78:fd:a3:62:0f:93:d9:3c:ac:a8:f3:c6:81:46: 7c:43:9a:9b:c5:c1:1e:c0:10:2e:aa:55:60:d4:b6:f5:a9:29: e0:cd:23:35:41:ba:f1:f7:71:68:33:72:6f:bf:c5:bd:53:df: 4f:f8:7e:3a:20:65:ac:bc:2b:59:aa:fa:a6:77:78:cc:6f:cb: 19:b4:87:f9:f5:87:be:db:42:3a:47:10:8e:09:4f:4c:0c:51: 58:89:89:e5:47:f8:3e:87:07:04:8d:df:bd:f2:74:f6:09:da: 05:0d:e8:bc:d1:d6:69:c7:b6:92:58:e5:fb:54:3c:ac:1e:21: 0b:f9:af:c5:6d:fb:d4:4c:d8:a5:d9:c8:aa:e5:4a:1c:77:cd: 41:31:cc:37:3c:9c:a7:21:30:27:0e:07:db:c2:b4:b2:6e:ca: 26:a3:98:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtFbpsnih3jjIOa6Xnj5XlGs2l4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNTA0MjkxMDU1NTVaFw0yNTA1MDIxMzQwNTVaMDMxMTAvBgNV BAMTKDZDNEVDMkRCQTFCMUM0Qzc1NTZDM0ZFNkY1NzlEMkUwNDM1OTY3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ2IsMJR5uD5E61Z2KRT6tGnzP rCg4k67ojHabqbDk0YOsgw+2H09tLZWh/LeeJrrkmJYghr6TpP4bXeCBAD8YPeKo qRg3j7FA5wfXDBp/HY9qFL81F9OqwixV8Fe4HmdePtdPQUPohIRd6builPj42CCR nuoLtJyKg0UEJIT24KlLiq6NjJpEmYSGWTWPJAvgLAHHfMZvtLrTKUj/k7n0math gCtUwi1Vns9lQG3DV2Ggz9i8AK5mful03iQDCaIMRz9GsncP/bGZE5+EJxuczR8R pwDvksviu4jEUNr6yGyncvkO3PVN/4jFj9WU3kbEfzqstCbMaFsC7lClTp+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbE7C26GxxMdVbD/m9XnS4ENZZ68wHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm M2YtNTIxMTk0NjEwMWMzLzAvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdD NTZGMjhGODA2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWwmT0585Ds6TbtmJIJywXwXQd9b69pL9gt K/dPp6xl92dUOwLAreKpjjbArPpaxxw6zHgMLRITFaQv/qJLaIb5k9iX18Y4lrRA r/O+lkWWWGct5AOZVxZq0Qe4llF4/aNiD5PZPKyo88aBRnxDmpvFwR7AEC6qVWDU tvWpKeDNIzVBuvH3cWgzcm+/xb1T30/4fjogZay8K1mq+qZ3eMxvyxm0h/n1h77b QjpHEI4JT0wMUViJieVH+D6HBwSN373ydPYJ2gUN6LzR1mnHtpJY5ftUPKweIQv5 r8Vt+9RM2KXZyKrlShx3zUExzDc8nKchMCcOB9vCtLJuyiajmGw= -----END CERTIFICATE-----Generated at Wed Apr 30 03:49:29 2025 by rpki-client