$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: R7Eelb/xFsjVB+GnCFuSyKegxMAsUfQlD+kIr5DQ0lA= Subject key identifier: 77:71:27:5F:DC:07:4A:1B:8C:B7:1B:BB:8B:7E:67:84:F4:F7:49:C0 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 17FDF13B196F51F8F9AE0728B5472070A9CE359E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 0540 Signing time: Sat 26 Apr 2025 15:10:03 +0000 Manifest this update: Sat 26 Apr 2025 15:05:03 +0000 Manifest next update: Wed 30 Apr 2025 01:44:03 +0000 Files and hashes: 1: AS139994.roa (hash: V1fHZHeyWM0yunBqcSWTYR9zxd5+dcGWhieykWfyO08=) 2: AS24203.roa (hash: oXVZzAc1BVWz8rI4bEPFSzCb/DwmmJ/Nlya3vD+jXrk=) 3: AS17885.roa (hash: Hrw/Bx/6mEnK2f91wIyEGNRzxwWv30dDgbF4gTiEsOM=) 4: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: zxe018ilzp/wvR7bPBDBmtKdAhQhYgkaPROnIP0eGIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 01:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fd:f1:3b:19:6f:51:f8:f9:ae:07:28:b5:47:20:70:a9:ce:35:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Apr 26 15:05:03 2025 GMT Not After : Apr 30 01:44:03 2025 GMT Subject: CN=7771275FDC074A1B8CB71BBB8B7E6784F4F749C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:fb:0b:42:74:50:b5:4f:52:75:ca:a8:37: 06:cf:68:85:4c:9f:1e:2e:7a:7e:b7:1d:4a:2d:e7: bc:2a:4a:e3:37:d2:76:e9:c4:8d:ab:da:38:d3:e4: f2:7f:2c:ac:57:b9:f2:2e:9a:23:cc:32:df:9e:37: 77:21:57:f9:f2:c5:9d:0d:74:57:7e:72:1c:92:8a: 2c:f4:44:fc:bd:96:eb:d6:7d:58:43:84:ee:7a:36: e3:bb:ec:01:ab:3c:b2:73:0e:b2:1e:46:54:51:1c: a9:40:71:47:3c:24:d4:38:05:74:4c:79:85:c8:a1: 0c:7f:c7:b4:ae:dc:c6:11:a0:fa:79:b6:37:2f:84: 6b:c2:a3:25:23:7c:05:9a:c2:25:d7:8c:b4:62:4e: bb:80:c4:3c:71:25:c0:a6:08:24:8f:1c:86:b7:65: c2:4f:7d:a2:96:a4:47:0e:c5:55:a9:07:f7:b9:af: e0:c4:e0:53:90:00:50:34:91:55:48:93:8c:4f:6c: 5b:43:e3:04:95:65:fc:c9:ce:de:7e:a4:98:30:df: f8:38:d4:ae:90:b3:5c:6d:54:0e:db:ab:d9:8d:e0: 05:ea:e2:04:e6:72:cc:8b:49:49:9d:50:ef:34:0c: 80:fe:ef:ba:a5:9b:2b:e2:8c:8a:5f:de:aa:40:ae: b5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:71:27:5F:DC:07:4A:1B:8C:B7:1B:BB:8B:7E:67:84:F4:F7:49:C0 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:03:14:33:be:d3:77:3c:00:dd:c2:82:2a:64:df:0e:1f:4e: 35:ea:1c:c0:39:80:bb:3c:a2:6a:b2:c4:92:65:c9:a8:ae:2a: a2:2e:26:83:c4:05:f0:0d:24:5d:06:0a:dd:58:21:89:9f:38: cb:5c:f0:e1:54:ac:2d:72:21:d1:99:82:5c:d2:25:8e:5b:2d: 1b:59:29:a4:9e:1d:58:ca:32:42:0b:9d:bf:c9:32:b8:a7:81: 15:ca:cd:a1:f3:90:f4:0e:3e:ea:ec:4b:ec:e4:83:c0:13:44: 7f:39:33:b2:04:a1:0b:5e:63:59:e0:81:8b:7f:3f:54:94:12: 8c:3a:77:37:e5:2b:dc:ea:bd:0b:80:58:dd:64:9f:53:09:91: e0:4f:4b:53:5d:a9:0a:67:ec:95:17:b4:4c:6e:ea:36:8a:3c: 73:64:4d:f0:06:36:87:ba:cf:c6:da:71:cd:08:b8:0f:c7:e5: 3c:c0:c1:c7:d2:7d:d2:8f:32:13:54:b5:9b:9b:23:c6:c0:3b: 7a:89:f5:db:44:4b:b0:d5:02:53:a4:bf:a9:9a:86:f3:dc:4a: d7:b4:d8:03:d2:dc:46:55:5b:f3:ce:22:ee:18:da:db:50:e6: c3:9e:40:9e:c1:71:ac:d0:c8:20:68:02:63:14:b2:5b:b0:7a: d5:8e:04:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/3xOxlvUfj5rgcotUcgcKnONZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTA0MjYxNTA1MDNaFw0yNTA0MzAwMTQ0MDNaMDMxMTAvBgNV BAMTKDc3NzEyNzVGREMwNzRBMUI4Q0I3MUJCQjhCN0U2Nzg0RjRGNzQ5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJH/sLQnRQtU9SdcqoNwbPaIVM nx4uen63HUot57wqSuM30nbpxI2r2jjT5PJ/LKxXufIumiPMMt+eN3chV/nyxZ0N dFd+chySiiz0RPy9luvWfVhDhO56NuO77AGrPLJzDrIeRlRRHKlAcUc8JNQ4BXRM eYXIoQx/x7Su3MYRoPp5tjcvhGvCoyUjfAWawiXXjLRiTruAxDxxJcCmCCSPHIa3 ZcJPfaKWpEcOxVWpB/e5r+DE4FOQAFA0kVVIk4xPbFtD4wSVZfzJzt5+pJgw3/g4 1K6Qs1xtVA7bq9mN4AXq4gTmcsyLSUmdUO80DID+77qlmyvijIpf3qpArrW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd3EnX9wHShuMtxu7i35nhPT3ScAwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4DFDO+03c8AN3Cgipk3w4fTjXqHMA5gLs8 omqyxJJlyaiuKqIuJoPEBfANJF0GCt1YIYmfOMtc8OFUrC1yIdGZglzSJY5bLRtZ KaSeHVjKMkILnb/JMringRXKzaHzkPQOPursS+zkg8ATRH85M7IEoQteY1nggYt/ P1SUEow6dzflK9zqvQuAWN1kn1MJkeBPS1NdqQpn7JUXtExu6jaKPHNkTfAGNoe6 z8bacc0IuA/H5TzAwcfSfdKPMhNUtZubI8bAO3qJ9dtES7DVAlOkv6mahvPcSte0 2APS3EZVW/POIu4Y2ttQ5sOeQJ7BcazQyCBoAmMUsluwetWOBN8= -----END CERTIFICATE-----Generated at Sun Apr 27 23:51:18 2025 by rpki-client