$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft File: F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft (raw, json) Hash identifier: kyDCxEy/XfjZBUmUEJ4BwNrP4JSdtxbaoNmar34PJUw= Subject key identifier: A0:21:76:03:D0:DC:88:97:E9:76:A0:3E:99:E9:E1:A0:19:6D:ED:B4 Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Certificate serial: 47A3830BF7A10600ADD7FC0151E5896B417C082B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft Manifest number: 0238 Signing time: Fri 25 Apr 2025 16:10:01 +0000 Manifest this update: Fri 25 Apr 2025 16:05:01 +0000 Manifest next update: Mon 28 Apr 2025 16:42:01 +0000 Files and hashes: 1: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: kInQZ6+a0szsE+89xOKFo2QCmfmxhWma36K3DO0bgYU=) 2: F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl (hash: GfD6Otq90X1dkH5FETiAgWbzXQHBXTKDCew2zaMfDCg=) 3: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: D+zqgakWFBdHD5/mV/z3ocZSo/C1/ZxuuNBMHS2Lcrc=) 4: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: 5nvoiGj4OjH2+HTzWQu4bmTNWJXJYHQTVDrsbt8AseA=) 5: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: 8rveHwJAjbzT7JrCP+j85CvzS9UmV2iXwgKY+Z+QZfY=) 6: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: qsAy9+8K3YocUUVABAHpwtAAQ9W+nqV1JTT37/pzGo4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 16:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a3:83:0b:f7:a1:06:00:ad:d7:fc:01:51:e5:89:6b:41:7c:08:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Validity Not Before: Apr 25 16:05:01 2025 GMT Not After : Apr 28 16:42:01 2025 GMT Subject: CN=A0217603D0DC8897E976A03E99E9E1A0196DEDB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:9a:43:e0:9b:70:e1:43:a5:71:45:49:8f: b4:b9:4a:93:91:71:4c:8f:2a:88:31:71:94:8e:18: de:36:0b:67:cd:0a:f4:83:3d:77:4e:eb:9d:09:1d: 65:cd:1b:d0:6d:3c:97:02:e6:fb:48:6e:dc:31:6c: 77:bf:9d:b1:f1:29:11:c7:09:af:12:af:1b:3d:a7: 8b:14:96:ca:72:a7:e1:f5:e3:61:c6:e2:cc:4e:9e: 34:d6:d5:9e:b4:06:27:c4:5d:42:6f:86:bd:34:7b: 2c:a1:13:17:e7:1d:4a:27:6d:b2:7c:40:a8:8c:cb: 1e:b1:f9:5b:fb:72:3d:41:18:8b:8a:e2:35:f7:28: 45:12:d6:dd:ed:c9:d4:0f:c4:c2:a4:10:aa:ce:2a: 34:a4:88:68:30:8f:e0:75:b9:a5:5e:6b:4d:4e:d3: 7f:2d:09:44:3e:6d:36:d3:cf:b6:8f:06:b7:bf:aa: d9:b6:c5:3a:e4:ff:fc:75:1d:ce:56:4a:97:da:f2: 41:1c:c0:9a:2c:77:d2:41:9f:66:d0:51:f1:2d:11: 16:79:4e:c0:fd:c2:b5:89:c1:29:1c:19:fd:54:a7: 0a:26:ce:84:32:68:b3:02:c6:9a:65:e5:6c:05:89: 02:96:a9:e6:a7:4c:40:d5:a7:76:21:f3:0e:79:75: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:21:76:03:D0:DC:88:97:E9:76:A0:3E:99:E9:E1:A0:19:6D:ED:B4 X509v3 Authority Key Identifier: keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1b:af:3e:35:c2:55:36:87:00:be:48:7a:4e:87:96:2e:15: e9:2d:60:3d:b4:6a:ca:6f:ce:02:10:72:29:14:25:c1:be:cf: 72:59:5d:f1:24:0c:f6:92:5b:a1:6b:3e:31:4d:86:0a:80:46: 03:e9:2e:b5:e9:2b:82:e7:51:5d:a5:f2:97:a9:f6:87:58:8d: fd:2d:ad:ed:5a:ab:e4:84:d9:36:b7:8f:e7:cf:c9:ee:46:99: 2b:38:68:48:0f:06:3f:a3:e2:4e:b6:bb:18:9a:74:9d:ce:b7: 99:bb:80:5d:f2:5e:ff:b6:b4:59:75:c5:2b:58:c6:e2:bb:d0: 77:6c:63:08:b1:f9:93:27:07:4d:cd:bd:5d:4b:40:18:52:1d: 70:35:37:e0:86:63:cb:81:46:d5:ec:ee:33:2f:cb:ed:0e:ab: 6d:7d:7d:4a:e7:ed:02:47:8c:58:b9:89:af:1a:c6:37:2e:12: 07:72:2d:9d:96:61:bb:ef:51:61:e0:c5:6c:75:16:be:51:83: 30:13:a2:10:62:f9:02:e3:5c:1e:d5:04:88:5e:99:28:89:88: af:90:ce:bd:41:e8:ab:ba:aa:16:35:65:e1:2e:7a:72:6a:6e: 87:0f:f3:bb:51:02:71:80:e6:e9:7b:fb:37:66:2c:4a:0a:30: 12:78:e8:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6ODC/ehBgCt1/wBUeWJa0F8CCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkx QkJCOTJGNzAeFw0yNTA0MjUxNjA1MDFaFw0yNTA0MjgxNjQyMDFaMDMxMTAvBgNV BAMTKEEwMjE3NjAzRDBEQzg4OTdFOTc2QTAzRTk5RTlFMUEwMTk2REVEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4u5pD4Jtw4UOlcUVJj7S5SpOR cUyPKogxcZSOGN42C2fNCvSDPXdO650JHWXNG9BtPJcC5vtIbtwxbHe/nbHxKRHH Ca8Srxs9p4sUlspyp+H142HG4sxOnjTW1Z60BifEXUJvhr00eyyhExfnHUonbbJ8 QKiMyx6x+Vv7cj1BGIuK4jX3KEUS1t3tydQPxMKkEKrOKjSkiGgwj+B1uaVea01O 038tCUQ+bTbTz7aPBre/qtm2xTrk//x1Hc5WSpfa8kEcwJosd9JBn2bQUfEtERZ5 TsD9wrWJwSkcGf1UpwomzoQyaLMCxppl5WwFiQKWqeanTEDVp3Yh8w55df8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoCF2A9DciJfpdqA+menhoBlt7bQwHwYDVR0j BBgwFoAU+N9A5Mlfnr+BRThwc2mV6Ru7kvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDAzYWYwMS1mMjM5LTRhMWYtODFjZC00MTA2YmViYjJhMjIvMC9GOERGNDBFNEM5 NUY5RUJGODE0NTM4NzA3MzY5OTVFOTFCQkI5MkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkxQkJC OTJGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1 RTkxQkJCOTJGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgbrz41wlU2hwC+SHpOh5YuFektYD20aspv zgIQcikUJcG+z3JZXfEkDPaSW6FrPjFNhgqARgPpLrXpK4LnUV2l8pep9odYjf0t re1aq+SE2Ta3j+fPye5GmSs4aEgPBj+j4k62uxiadJ3Ot5m7gF3yXv+2tFl1xStY xuK70HdsYwix+ZMnB03NvV1LQBhSHXA1N+CGY8uBRtXs7jMvy+0Oq219fUrn7QJH jFi5ia8axjcuEgdyLZ2WYbvvUWHgxWx1Fr5RgzATohBi+QLjXB7VBIhemSiJiK+Q zr1B6Ku6qhY1ZeEuenJqbocP87tRAnGA5ul7+zdmLEoKMBJ46OM= -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:50 2025 by rpki-client on console.sobornost.net