$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: N4Y5czslBPyct4DEfMVROYCxmYiu35iL2eddSYZPTMU= Subject key identifier: CE:E0:4D:65:74:16:E3:64:D9:2C:59:D1:23:28:BF:04:9A:DA:8F:5D Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 632F94B474C184A98EFD2654E8EA13507FCE26E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 0131 Signing time: Wed 30 Apr 2025 04:01:16 +0000 Manifest this update: Wed 30 Apr 2025 03:56:16 +0000 Manifest next update: Sat 03 May 2025 05:06:16 +0000 Files and hashes: 1: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: K6wVrrcLEBjlC6xeoIoIGULUclDZlzAkoc88QQdbCvU=) 2: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: NQ2ye5QxCxIoEkqHxBUJyo6rSBIUVJNBvpNF3uf87lc=) 3: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 4: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: g83LIJ3ExQtEGXGTQd6P8xh7CcOhD81osnr+YMgS0Qs=) 5: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: 21cpDFe/haDs0njL2oPUNz4sAGajUf2AiXZqZS0XaNQ=) 6: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: VCJVYb5Yj3VQmqeBZPc4wM5hAoFiEaNDgbEKKi9Z34Y=) 7: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 8: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 9: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) 10: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: P8qqWd8lu4ePMxcCVDgoAu5B+0ALSgogKErRSPrn+aQ=) 11: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: 4rWzT0kttC+3o1m8M4nqZx/LEwYsgQQY9aJJrFVM75k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 05:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2f:94:b4:74:c1:84:a9:8e:fd:26:54:e8:ea:13:50:7f:ce:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Apr 30 03:56:16 2025 GMT Not After : May 3 05:06:16 2025 GMT Subject: CN=CEE04D657416E364D92C59D12328BF049ADA8F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fa:b1:ef:e6:75:23:5e:6b:a2:e9:0e:3c:e1: a6:59:55:7f:43:6e:c9:71:69:2a:26:f2:ac:06:b9: 58:bb:c6:92:07:ab:97:61:0d:46:9d:59:ab:d5:ac: cd:70:82:ab:e5:bb:78:f5:ab:90:dc:d8:bf:11:3b: b0:40:cb:cc:43:d0:eb:95:22:d4:02:0a:e0:fe:ff: fb:12:34:cd:27:38:ce:02:ad:83:82:0b:a5:e0:ab: 1b:5b:e7:e8:9d:02:6b:8a:68:e6:78:76:fb:2c:28: 63:30:3a:80:58:ed:16:2d:f1:9a:0c:eb:d5:79:97: 8f:0b:38:91:cb:72:40:33:7c:ab:2b:92:d3:97:d7: 96:fc:cf:4b:0e:23:09:38:21:45:fe:b4:e7:a6:b2: cd:54:0c:86:aa:06:49:d8:e2:76:c4:82:9c:50:25: 8a:c9:61:9e:4e:05:8e:75:0c:12:74:e5:61:3e:77: f7:51:04:35:af:3d:ed:83:46:d9:c9:b8:61:8b:e0: 6c:fa:cf:e6:1f:5e:47:a7:5a:31:8a:97:fd:6a:b2: b5:50:d5:6a:8f:9f:a9:6c:b7:75:b4:66:dc:6d:21: 61:34:95:93:88:de:5f:fa:cc:00:b8:52:4b:5d:77: d9:f3:d1:e0:2d:ed:90:da:25:0f:14:5b:e1:3a:d3: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E0:4D:65:74:16:E3:64:D9:2C:59:D1:23:28:BF:04:9A:DA:8F:5D X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b8:d6:9c:3a:2f:ef:7e:f5:4f:56:7f:7e:b6:a8:f4:3c:69: e8:6d:74:90:a0:5e:2f:f1:fd:57:71:9f:00:2f:d8:63:5f:b7: c5:aa:61:54:33:a3:53:a2:99:75:89:8f:2b:9d:f5:0c:63:72: 35:02:9b:4d:c2:6d:60:fd:1c:2b:23:e9:a7:8f:68:8a:c8:6a: 13:af:8d:b8:3d:22:1b:40:d4:6a:f5:14:85:08:77:57:83:fa: a9:bb:3b:ff:18:43:06:de:34:ef:37:c0:fc:29:d1:70:47:7b: 42:a6:0e:03:74:06:4c:d9:20:43:e5:65:8d:d6:96:91:94:3c: 26:bd:c5:e9:28:f9:6f:5d:36:a5:53:8c:42:5e:68:b3:e6:0f: 4a:7f:b9:e8:5d:f0:61:61:e5:57:12:c4:72:20:5f:5d:8f:f2: b4:9a:fa:31:3f:e0:cf:79:a0:db:2c:9d:7f:7b:61:95:8c:e1: 23:2d:40:8a:07:24:08:b1:2e:e7:52:bf:de:0f:70:2c:76:ad: 25:dc:b2:b6:fe:ed:6a:d7:3c:54:dc:76:0d:4d:5d:79:b8:68: aa:c7:68:86:7a:de:7a:0d:ee:68:11:e0:66:a6:aa:7d:7f:d7: b8:ff:20:11:e0:26:44:30:c4:91:a5:ec:27:31:23:87:db:6d: 65:bb:11:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYy+UtHTBhKmO/SZU6OoTUH/OJuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTA0MzAwMzU2MTZaFw0yNTA1MDMwNTA2MTZaMDMxMTAvBgNV BAMTKENFRTA0RDY1NzQxNkUzNjREOTJDNTlEMTIzMjhCRjA0OUFEQThGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+rHv5nUjXmui6Q484aZZVX9D bslxaSom8qwGuVi7xpIHq5dhDUadWavVrM1wgqvlu3j1q5Dc2L8RO7BAy8xD0OuV ItQCCuD+//sSNM0nOM4CrYOCC6Xgqxtb5+idAmuKaOZ4dvssKGMwOoBY7RYt8ZoM 69V5l48LOJHLckAzfKsrktOX15b8z0sOIwk4IUX+tOemss1UDIaqBknY4nbEgpxQ JYrJYZ5OBY51DBJ05WE+d/dRBDWvPe2DRtnJuGGL4Gz6z+YfXkenWjGKl/1qsrVQ 1WqPn6lst3W0ZtxtIWE0lZOI3l/6zAC4Uktdd9nz0eAt7ZDaJQ8UW+E609i1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzuBNZXQW42TZLFnRIyi/BJraj10wHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEi41pw6L+9+9U9Wf362qPQ8aehtdJCgXi/x /VdxnwAv2GNft8WqYVQzo1OimXWJjyud9QxjcjUCm03CbWD9HCsj6aePaIrIahOv jbg9IhtA1Gr1FIUId1eD+qm7O/8YQwbeNO83wPwp0XBHe0KmDgN0BkzZIEPlZY3W lpGUPCa9xeko+W9dNqVTjEJeaLPmD0p/uehd8GFh5VcSxHIgX12P8rSa+jE/4M95 oNssnX97YZWM4SMtQIoHJAixLudSv94PcCx2rSXcsrb+7WrXPFTcdg1NXXm4aKrH aIZ63noN7mgR4Gamqn1/17j/IBHgJkQwxJGl7CcxI4fbbWW7Eac= -----END CERTIFICATE-----Generated at Wed Apr 30 21:26:10 2025 by rpki-client