$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: 3Ot7QeYmN+FoFjKsxgeviMJwKham4Rma5xos1Ul5O6Y= Subject key identifier: DE:BE:FF:6C:1D:1E:27:B5:65:A6:91:F7:20:3C:76:9B:E1:76:E5:E3 Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 4025F1E031CFF06EC0D714C9E1621D44F74CFF3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 04BD Signing time: Tue 05 Aug 2025 14:30:04 +0000 Manifest this update: Tue 05 Aug 2025 14:25:04 +0000 Manifest next update: Sat 09 Aug 2025 02:29:04 +0000 Files and hashes: 1: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: AwJmGvg7EYxjN5/X7HCFVCaSmXbsObRFQgaA3bw4ZHQ=) 2: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: UlAh8zKWIPZHwNHmAImvacovNeaS9Y+qOJYX1Qlb9uc=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:25:f1:e0:31:cf:f0:6e:c0:d7:14:c9:e1:62:1d:44:f7:4c:ff:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Aug 5 14:25:04 2025 GMT Not After : Aug 9 02:29:04 2025 GMT Subject: CN=DEBEFF6C1D1E27B565A691F7203C769BE176E5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:f3:e8:ea:a2:8c:60:b6:3f:2b:76:f6:d1: d6:ec:4e:67:71:e3:88:c5:da:5a:37:53:e7:46:68: 10:e9:d5:d8:c4:0e:49:99:0a:87:95:11:2d:26:9d: 7d:50:61:cc:91:c1:68:b1:d2:fc:70:20:c0:8d:00: 0c:d3:5f:70:83:5b:a9:29:0f:7f:47:31:1f:7a:47: c0:ca:02:aa:87:91:44:4e:bd:8d:33:69:05:b8:53: 7c:b2:36:03:c9:2b:45:ba:76:0f:8b:a1:41:15:31: d3:2f:0a:a2:62:a8:d8:49:91:e3:cb:bb:4d:b5:42: 45:3a:59:cb:6b:56:23:7f:ec:b5:97:27:aa:7d:a2: be:f5:12:d5:64:ee:61:3d:27:ab:61:31:2a:9c:32: 68:4f:d2:e7:15:ea:93:9e:17:90:33:e5:51:5e:ae: 1d:44:91:59:22:c1:29:21:3f:74:72:a6:c0:d5:5f: 47:e0:e0:b5:31:9c:0c:10:85:7f:3e:fd:7f:d7:64: 0b:8f:f7:b3:66:fd:c4:3d:cc:ce:63:44:4b:12:52: d1:ab:ea:9a:9a:d0:c0:97:37:b7:61:9d:1f:e4:d7: 38:6e:bb:72:0e:8a:99:be:22:29:af:57:be:ee:ae: df:82:2f:a6:50:1b:8a:4d:e6:d5:76:78:1f:ee:e0: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BE:FF:6C:1D:1E:27:B5:65:A6:91:F7:20:3C:76:9B:E1:76:E5:E3 X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:de:97:83:a6:4e:f9:05:6e:c5:8e:27:98:c5:6d:53:6c:f4: 88:b1:e0:3f:e2:af:b0:3a:35:c1:52:45:ef:2b:00:d7:95:bc: 1e:39:ef:5b:0a:be:84:34:6f:0e:0f:12:eb:64:b1:6e:0e:86: 3c:ee:19:28:dd:5a:43:e7:d4:21:cc:43:87:7e:0c:6e:f4:30: 00:67:73:ee:5e:80:f5:86:7b:73:26:41:68:09:01:bb:be:92: ab:ac:8a:29:39:ff:80:df:33:58:1d:5c:7f:9b:05:bb:58:8c: f7:0c:b3:21:ec:ba:95:68:22:0d:7a:90:53:02:11:26:e7:f4: 66:fa:b2:a6:3f:1c:37:6b:88:99:b1:7a:bc:63:10:8b:9f:31: 8d:3c:6a:4a:40:5c:57:30:10:96:1b:3b:76:33:1e:4c:63:1f: 87:09:87:a0:60:11:15:6d:df:37:8f:69:f1:65:32:f1:38:cf: 8f:8f:09:c3:48:f5:86:89:38:c5:23:77:e5:fb:b8:39:05:d2: cb:fc:60:a9:e6:82:8d:95:f4:de:6e:8e:8a:fc:95:63:e9:b9: 83:73:6e:93:e6:43:da:81:b2:04:f3:e3:4f:03:3d:d4:06:21: e9:9a:d0:6b:78:5c:4b:4a:d0:a0:32:90:8f:b2:96:07:9c:b5: 91:b5:9d:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCXx4DHP8G7A1xTJ4WIdRPdM/zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTA4MDUxNDI1MDRaFw0yNTA4MDkwMjI5MDRaMDMxMTAvBgNV BAMTKERFQkVGRjZDMUQxRTI3QjU2NUE2OTFGNzIwM0M3NjlCRTE3NkU1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwvPo6qKMYLY/K3b20dbsTmdx 44jF2lo3U+dGaBDp1djEDkmZCoeVES0mnX1QYcyRwWix0vxwIMCNAAzTX3CDW6kp D39HMR96R8DKAqqHkUROvY0zaQW4U3yyNgPJK0W6dg+LoUEVMdMvCqJiqNhJkePL u021QkU6WctrViN/7LWXJ6p9or71EtVk7mE9J6thMSqcMmhP0ucV6pOeF5Az5VFe rh1EkVkiwSkhP3RypsDVX0fg4LUxnAwQhX8+/X/XZAuP97Nm/cQ9zM5jREsSUtGr 6pqa0MCXN7dhnR/k1zhuu3IOipm+IimvV77urt+CL6ZQG4pN5tV2eB/u4Px/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3r7/bB0eJ7VlppH3IDx2m+F25eMwHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnel4OmTvkFbsWOJ5jFbVNs9Iix4D/ir7A6 NcFSRe8rANeVvB4571sKvoQ0bw4PEutksW4OhjzuGSjdWkPn1CHMQ4d+DG70MABn c+5egPWGe3MmQWgJAbu+kqusiik5/4DfM1gdXH+bBbtYjPcMsyHsupVoIg16kFMC ESbn9Gb6sqY/HDdriJmxerxjEIufMY08akpAXFcwEJYbO3YzHkxjH4cJh6BgERVt 3zePafFlMvE4z4+PCcNI9YaJOMUjd+X7uDkF0sv8YKnmgo2V9N5ujor8lWPpuYNz bpPmQ9qBsgTz408DPdQGIema0Gt4XEtK0KAykI+ylgectZG1nVk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:10 2025 by rpki-client