$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: JX/h4m48D8OL35y0mUp5jtUYM37eqhRx74ZaZytkTjQ= Subject key identifier: E3:8C:DD:D8:69:39:37:26:00:A2:98:1B:C2:17:48:27:A5:77:78:91 Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 6110339BADB27A55AF54B6BA90DC942803778546 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 0491 Signing time: Tue 29 Apr 2025 00:20:04 +0000 Manifest this update: Tue 29 Apr 2025 00:15:04 +0000 Manifest next update: Fri 02 May 2025 12:00:04 +0000 Files and hashes: 1: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: YO37Y3eimIDdIo7K6UBGoqei0FiSorzSwQwRwyZtXq8=) 2: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: ut2hm8iO6rQXEOjVJh0m82NuvYMpAKl9z1YkOo3iU9I=) 3: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: UlAh8zKWIPZHwNHmAImvacovNeaS9Y+qOJYX1Qlb9uc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 12:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:10:33:9b:ad:b2:7a:55:af:54:b6:ba:90:dc:94:28:03:77:85:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Apr 29 00:15:04 2025 GMT Not After : May 2 12:00:04 2025 GMT Subject: CN=E38CDDD86939372600A2981BC2174827A5777891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:50:84:0d:ab:81:28:b3:2b:1c:a3:cc:58:6e: a5:41:8c:81:3f:42:2e:78:4a:8a:d2:0b:c0:58:25: f8:da:b1:72:2a:9b:c8:96:c5:f9:34:9c:10:b2:09: 8f:28:8e:97:81:7e:dc:3a:27:a6:89:2e:3a:42:84: 7f:52:a2:87:63:d8:37:73:d9:93:e0:3c:77:d5:42: a9:f8:99:e3:71:bb:b8:62:1d:79:c6:f9:42:4c:82: 7a:a1:7c:b2:8b:57:82:85:25:50:40:48:c3:f9:40: c1:b3:4e:f7:85:62:25:33:5c:1e:16:a9:93:c5:ed: af:15:a4:6f:4d:64:67:8a:17:09:ce:d2:7c:49:be: 61:ff:53:f8:78:47:96:6b:c2:d0:99:8c:bb:92:bd: e6:f9:0d:cf:54:13:4a:c8:0a:7b:fc:58:f6:b3:95: 86:81:5d:23:06:d1:ef:2d:aa:f2:b2:1d:50:27:d5: 99:0e:16:fd:b1:c7:08:f3:20:75:e4:56:40:f1:bc: 1e:8e:0f:02:92:9d:66:f9:06:53:90:69:83:c4:55: 05:7d:a5:20:6b:4e:a7:b5:7d:4b:a4:8a:a1:77:df: f1:f3:ee:e7:35:36:77:15:7e:9c:b0:c4:aa:3e:a8: 86:21:a7:de:c6:a7:42:f4:88:ec:ff:06:e4:5c:70: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8C:DD:D8:69:39:37:26:00:A2:98:1B:C2:17:48:27:A5:77:78:91 X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:01:33:d5:2e:6a:80:ea:68:ec:c3:79:8b:91:f0:cb:c1:c7: aa:50:41:16:f5:0c:35:f9:5b:37:df:f9:0d:af:39:95:26:82: 80:6b:57:b9:42:99:09:ce:b3:7a:eb:16:c1:6d:21:35:d1:d5: 50:05:21:3f:b7:48:59:3f:3c:92:81:2d:e9:31:fa:a6:71:d8: c0:5e:4a:57:e8:4b:16:55:af:0a:39:68:65:0e:53:cb:4b:fb: b3:90:35:14:5a:5b:1e:e0:de:e3:3c:c2:d7:2d:51:a2:13:26: e6:70:52:3b:e3:da:1e:d7:6c:3e:1a:33:f5:77:b7:4b:cf:eb: 53:af:e8:f4:9d:d9:b4:fe:2e:7b:ba:65:8c:58:5b:f5:f4:e8: 7c:f8:b8:f2:29:2e:6a:32:c8:15:26:fa:68:f7:ff:db:7d:44: e1:5e:c7:46:c8:d7:95:55:44:53:f1:60:65:ab:53:68:bc:b0: 9d:13:6f:5d:1b:32:af:69:7f:3c:3d:91:ba:9e:68:08:b1:0a: 60:54:c0:16:1d:fb:bd:99:e8:71:e9:85:4d:e8:ec:09:7a:1f: d9:38:0d:c4:b0:ee:c4:a1:a8:f5:d2:a3:f2:60:5d:61:14:6a: ac:57:47:14:c3:2f:52:56:2f:a3:b3:df:2f:3e:c3:16:26:99: ea:11:b1:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRAzm62yelWvVLa6kNyUKAN3hUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTA0MjkwMDE1MDRaFw0yNTA1MDIxMjAwMDRaMDMxMTAvBgNV BAMTKEUzOENEREQ4NjkzOTM3MjYwMEEyOTgxQkMyMTc0ODI3QTU3Nzc4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxUIQNq4Eosysco8xYbqVBjIE/ Qi54SorSC8BYJfjasXIqm8iWxfk0nBCyCY8ojpeBftw6J6aJLjpChH9Soodj2Ddz 2ZPgPHfVQqn4meNxu7hiHXnG+UJMgnqhfLKLV4KFJVBASMP5QMGzTveFYiUzXB4W qZPF7a8VpG9NZGeKFwnO0nxJvmH/U/h4R5ZrwtCZjLuSveb5Dc9UE0rICnv8WPaz lYaBXSMG0e8tqvKyHVAn1ZkOFv2xxwjzIHXkVkDxvB6ODwKSnWb5BlOQaYPEVQV9 pSBrTqe1fUukiqF33/Hz7uc1NncVfpywxKo+qIYhp97Gp0L0iOz/BuRccBQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU44zd2Gk5NyYAopgbwhdIJ6V3eJEwHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEBM9UuaoDqaOzDeYuR8MvBx6pQQRb1DDX5 Wzff+Q2vOZUmgoBrV7lCmQnOs3rrFsFtITXR1VAFIT+3SFk/PJKBLekx+qZx2MBe SlfoSxZVrwo5aGUOU8tL+7OQNRRaWx7g3uM8wtctUaITJuZwUjvj2h7XbD4aM/V3 t0vP61Ov6PSd2bT+Lnu6ZYxYW/X06Hz4uPIpLmoyyBUm+mj3/9t9ROFex0bI15VV RFPxYGWrU2i8sJ0Tb10bMq9pfzw9kbqeaAixCmBUwBYd+72Z6HHphU3o7Al6H9k4 DcSw7sShqPXSo/JgXWEUaqxXRxTDL1JWL6Oz3y8+wxYmmeoRsaE= -----END CERTIFICATE-----Generated at Tue Apr 29 09:13:21 2025 by rpki-client