$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: 56u60bMPNzkMVMk5RzXpIhlOaLptLZkzq4HhgN8VqJs= Subject key identifier: 8B:E7:62:A1:FE:98:EC:86:27:AC:9F:37:A8:12:76:3D:34:3B:43:BD Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 19D4F8DE6B8D5A0114C2FFA16FB7A96F5B621E68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 0130 Signing time: Mon 28 Apr 2025 02:41:15 +0000 Manifest this update: Mon 28 Apr 2025 02:36:15 +0000 Manifest next update: Thu 01 May 2025 04:00:15 +0000 Files and hashes: 1: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 2: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: NQ2ye5QxCxIoEkqHxBUJyo6rSBIUVJNBvpNF3uf87lc=) 3: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: g83LIJ3ExQtEGXGTQd6P8xh7CcOhD81osnr+YMgS0Qs=) 4: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: dQ9d4uuVUUO/EAFn1wsTtY/Iw9VdMQ7VD525q6CvzeI=) 5: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: 4rWzT0kttC+3o1m8M4nqZx/LEwYsgQQY9aJJrFVM75k=) 6: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 7: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: P8qqWd8lu4ePMxcCVDgoAu5B+0ALSgogKErRSPrn+aQ=) 8: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: K6wVrrcLEBjlC6xeoIoIGULUclDZlzAkoc88QQdbCvU=) 9: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: VCJVYb5Yj3VQmqeBZPc4wM5hAoFiEaNDgbEKKi9Z34Y=) 10: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 11: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 04:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d4:f8:de:6b:8d:5a:01:14:c2:ff:a1:6f:b7:a9:6f:5b:62:1e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Apr 28 02:36:15 2025 GMT Not After : May 1 04:00:15 2025 GMT Subject: CN=8BE762A1FE98EC8627AC9F37A812763D343B43BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:1f:b8:7c:7b:63:ad:87:12:38:85:e6:6d: b3:01:17:30:73:a0:0d:9d:f3:19:e1:ab:fc:f3:f3: 82:ab:ee:62:a3:ab:f8:a7:04:68:af:fd:f0:76:7a: d0:83:80:a3:e3:54:5d:00:e5:f3:28:fe:da:12:fb: 4c:7b:02:57:b3:69:bf:35:32:f2:8a:b9:93:b0:61: 68:1f:2f:6f:09:1b:ee:6b:a4:b3:5d:dc:0a:e3:80: d1:1a:a7:00:10:f9:09:f7:1b:58:12:ed:aa:b9:3e: 88:4b:43:9c:84:c8:2b:94:29:0c:d1:23:e0:43:1e: 88:df:33:5a:4a:85:e6:50:62:49:46:c9:8c:a8:f0: 4e:f5:d0:f0:e5:8a:ac:a6:fe:59:b6:a5:37:80:26: eb:97:68:ad:de:6b:08:1f:a9:90:0e:88:2d:7d:ae: cb:3a:ef:d5:51:f6:a2:70:ee:eb:b0:97:da:fc:90: 56:5f:e5:12:32:cd:e0:b9:2a:59:4c:b9:ab:45:a7: b2:22:22:55:ec:f5:01:1a:a7:5e:e3:e0:84:47:5e: 5d:b1:a3:c3:16:43:66:1d:9f:30:48:83:09:7d:e8: fd:74:42:79:83:c2:55:a5:30:ed:2b:dd:09:77:f3: 6a:7e:1f:e9:63:19:b7:43:1a:32:67:66:3d:e7:32: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E7:62:A1:FE:98:EC:86:27:AC:9F:37:A8:12:76:3D:34:3B:43:BD X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:93:7d:05:5c:7e:29:76:b4:6b:ce:c1:74:11:97:9f:78:bf: 58:d1:c6:70:ac:9a:a2:68:a9:71:23:84:84:ac:dd:0e:bd:db: 24:96:55:79:8d:e9:4c:fb:cd:15:76:2f:58:d3:6d:5e:8e:0e: 42:a9:61:5d:19:be:c8:5d:66:c8:94:8b:ac:63:4b:0f:72:7d: c3:8b:a1:d6:11:11:f4:2e:b1:32:a9:ab:ab:28:e1:02:96:0e: 0d:0b:2e:3f:92:79:62:ac:9f:b5:cc:4b:0b:7f:78:73:1f:d7: c2:83:81:18:1f:75:c4:5f:89:01:0a:9a:67:eb:f4:07:28:ab: 49:ce:6a:92:50:13:c7:c2:1c:18:32:e2:d9:83:86:63:74:0f: a9:39:50:dc:b8:19:01:46:17:9d:cc:89:b0:87:40:4d:b1:ce: 9a:45:c6:31:38:73:c5:48:54:4a:7a:40:91:63:5a:3c:bb:14: 98:f7:21:2c:47:0c:75:12:da:4e:a7:c7:07:59:eb:6c:ae:72: d5:63:96:43:9c:bf:45:df:3f:9e:a9:22:b6:16:66:2f:e3:8e: 84:33:f1:6f:3b:06:e7:e0:18:41:44:6d:d4:68:2c:a8:55:b0: c3:2b:e9:3f:43:d7:46:d3:9a:88:83:90:44:9c:9a:a3:09:8b: 71:17:eb:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdT43muNWgEUwv+hb7epb1tiHmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTA0MjgwMjM2MTVaFw0yNTA1MDEwNDAwMTVaMDMxMTAvBgNV BAMTKDhCRTc2MkExRkU5OEVDODYyN0FDOUYzN0E4MTI3NjNEMzQzQjQzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWh+4fHtjrYcSOIXmbbMBFzBz oA2d8xnhq/zz84Kr7mKjq/inBGiv/fB2etCDgKPjVF0A5fMo/toS+0x7Alezab81 MvKKuZOwYWgfL28JG+5rpLNd3ArjgNEapwAQ+Qn3G1gS7aq5PohLQ5yEyCuUKQzR I+BDHojfM1pKheZQYklGyYyo8E710PDliqym/lm2pTeAJuuXaK3eawgfqZAOiC19 rss679VR9qJw7uuwl9r8kFZf5RIyzeC5KllMuatFp7IiIlXs9QEap17j4IRHXl2x o8MWQ2YdnzBIgwl96P10QnmDwlWlMO0r3Ql382p+H+ljGbdDGjJnZj3nMndhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi+diof6Y7IYnrJ83qBJ2PTQ7Q70wHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByTfQVcfil2tGvOwXQRl594v1jRxnCsmqJo qXEjhISs3Q692ySWVXmN6Uz7zRV2L1jTbV6ODkKpYV0ZvshdZsiUi6xjSw9yfcOL odYREfQusTKpq6so4QKWDg0LLj+SeWKsn7XMSwt/eHMf18KDgRgfdcRfiQEKmmfr 9Acoq0nOapJQE8fCHBgy4tmDhmN0D6k5UNy4GQFGF53MibCHQE2xzppFxjE4c8VI VEp6QJFjWjy7FJj3ISxHDHUS2k6nxwdZ62yuctVjlkOcv0XfP56pIrYWZi/jjoQz 8W87BufgGEFEbdRoLKhVsMMr6T9D10bTmoiDkEScmqMJi3EX6xE= -----END CERTIFICATE-----Generated at Tue Apr 29 14:31:57 2025 by rpki-client