$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: gBndwXfprpzUXz4P05Da2/b/MOz6kk25Jg5vpNQu8kI= Subject key identifier: 80:44:96:3F:34:0C:13:38:82:90:46:3E:BA:07:C3:CB:49:EF:4D:4F Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 03EF24A012641EF7C2633F967AA07B21D07A2075 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 02AE Signing time: Sat 26 Apr 2025 10:40:02 +0000 Manifest this update: Sat 26 Apr 2025 10:35:02 +0000 Manifest next update: Tue 29 Apr 2025 11:17:02 +0000 Files and hashes: 1: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: gYvAMdzBeXtQ0+dNMRyxjFNi9/hTuu8aKzfE8Ci5cqw=) 2: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: a7PTXgKIuAxPVgmOfgSfIiexn0wfFohzIh28xEr3Sns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 11:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ef:24:a0:12:64:1e:f7:c2:63:3f:96:7a:a0:7b:21:d0:7a:20:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: Apr 26 10:35:02 2025 GMT Not After : Apr 29 11:17:02 2025 GMT Subject: CN=8044963F340C13388290463EBA07C3CB49EF4D4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:b5:86:e4:23:c8:77:53:ed:4e:9a:d3:47: 4b:c0:5d:87:4e:e2:5a:12:6f:ff:88:7e:a6:d7:ad: e9:b9:dc:ed:c1:9d:41:c3:d1:85:5b:d6:60:78:fc: 7e:fa:36:27:d3:54:ec:1d:fa:d9:09:dc:b2:ad:4b: 86:5b:c4:3e:8c:ea:ed:78:ba:05:8f:45:82:a7:19: b6:35:91:9f:c9:e4:b0:b3:cf:2e:db:7d:ea:5a:7c: 1c:bd:24:d6:27:52:34:c0:96:6e:32:a0:12:b9:a2: 86:ad:75:66:7e:a3:cf:83:ce:67:5b:67:1b:14:a8: fa:bc:70:ce:1c:ca:17:d4:4c:1c:53:8e:91:a4:40: d3:bb:c9:55:1a:f3:2e:bc:ad:e5:99:20:b6:a6:a4: 9b:b2:b6:e6:cc:81:38:d5:cd:8c:4a:a4:87:5e:9e: 89:c9:80:97:d7:41:7d:ec:fd:d0:bc:46:40:d0:de: c5:ee:05:c6:33:ff:57:0e:ec:60:5c:6d:0f:3d:bc: 74:a9:94:65:48:0e:13:16:26:a9:d8:9d:99:1c:71: 09:ef:a1:0b:b4:a6:a6:55:e4:a1:57:a6:b1:6e:a1: c6:45:ab:d0:18:51:51:1b:8e:99:17:1b:fa:09:be: 3b:22:1e:18:2f:cb:51:1b:34:c2:33:4c:15:83:83: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:44:96:3F:34:0C:13:38:82:90:46:3E:BA:07:C3:CB:49:EF:4D:4F X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ed:9a:bf:dd:48:51:10:d0:d6:2c:98:26:12:59:77:a8:6b: 90:75:3f:e7:c9:d6:1d:37:07:ff:f1:85:7c:d8:7c:86:18:6a: 80:55:ed:aa:2e:2b:8a:48:39:10:49:ae:8f:c4:da:d2:77:e7: 62:5c:d4:5f:13:79:91:10:7f:7b:f1:3c:93:73:bd:35:fb:2f: f8:d5:8e:74:e6:b3:28:60:fd:88:3c:0b:64:2e:8e:1f:17:9a: e4:9b:da:94:0d:e2:77:88:79:e3:05:3f:76:d1:fc:4d:b4:72: d0:13:50:1a:ac:f4:e6:c0:30:0c:8e:d5:4d:fa:a8:28:d6:73: 6d:91:22:ff:b9:95:32:ac:38:b4:fa:1e:f1:a3:e2:75:ef:5a: e4:74:15:87:db:11:f9:95:05:1b:d7:bf:21:ee:b6:d0:21:98: 8c:0f:30:16:20:23:39:d5:fd:27:2c:ef:41:2e:24:71:09:43: 76:98:1d:30:61:4f:d8:3e:8b:84:7d:18:3c:4c:a1:34:b8:50: 5c:75:43:96:6c:e0:b5:2a:6c:64:a6:13:d4:9b:7f:86:ed:90: 24:23:14:e8:c8:26:5b:da:04:4a:6e:6d:6f:9b:21:5c:4e:45: 33:73:f1:dd:5d:da:5f:3e:2a:87:91:d6:2d:25:28:64:d1:d9: b4:7d:6d:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+8koBJkHvfCYz+WeqB7IdB6IHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNTA0MjYxMDM1MDJaFw0yNTA0MjkxMTE3MDJaMDMxMTAvBgNV BAMTKDgwNDQ5NjNGMzQwQzEzMzg4MjkwNDYzRUJBMDdDM0NCNDlFRjRENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKrWG5CPId1PtTprTR0vAXYdO 4loSb/+IfqbXrem53O3BnUHD0YVb1mB4/H76NifTVOwd+tkJ3LKtS4ZbxD6M6u14 ugWPRYKnGbY1kZ/J5LCzzy7bfepafBy9JNYnUjTAlm4yoBK5ooatdWZ+o8+Dzmdb ZxsUqPq8cM4cyhfUTBxTjpGkQNO7yVUa8y68reWZILampJuytubMgTjVzYxKpIde nonJgJfXQX3s/dC8RkDQ3sXuBcYz/1cO7GBcbQ89vHSplGVIDhMWJqnYnZkccQnv oQu0pqZV5KFXprFuocZFq9AYUVEbjpkXG/oJvjsiHhgvy1EbNMIzTBWDgwW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgESWPzQMEziCkEY+ugfDy0nvTU8wHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHtmr/dSFEQ0NYsmCYSWXeoa5B1P+fJ1h03 B//xhXzYfIYYaoBV7aouK4pIORBJro/E2tJ352Jc1F8TeZEQf3vxPJNzvTX7L/jV jnTmsyhg/Yg8C2Qujh8XmuSb2pQN4neIeeMFP3bR/E20ctATUBqs9ObAMAyO1U36 qCjWc22RIv+5lTKsOLT6HvGj4nXvWuR0FYfbEfmVBRvXvyHuttAhmIwPMBYgIznV /Scs70EuJHEJQ3aYHTBhT9g+i4R9GDxMoTS4UFx1Q5Zs4LUqbGSmE9Sbf4btkCQj FOjIJlvaBEpubW+bIVxORTNz8d1d2l8+KoeR1i0lKGTR2bR9bTE= -----END CERTIFICATE-----Generated at Sun Apr 27 00:12:58 2025 by rpki-client