$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: 6o2mNVsc8mdp7zlfAr8o7bV0Oc1vQWUydCHD0Fkej8M= Subject key identifier: F6:D9:9C:D3:DA:1C:13:FF:E3:5F:9F:50:29:4D:9C:B8:39:DC:42:FC Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 1DD9AFCE5C352EE8A7391DBBB461D4AB8BB4C36F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 038F Signing time: Tue 29 Apr 2025 00:11:01 +0000 Manifest this update: Tue 29 Apr 2025 00:06:01 +0000 Manifest next update: Fri 02 May 2025 02:20:01 +0000 Files and hashes: 1: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: /Et/jus+JbGu+QRy546rTVocbcP41IberYuaV0Z9aWI=) 2: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) 3: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) 4: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d9:af:ce:5c:35:2e:e8:a7:39:1d:bb:b4:61:d4:ab:8b:b4:c3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Apr 29 00:06:01 2025 GMT Not After : May 2 02:20:01 2025 GMT Subject: CN=F6D99CD3DA1C13FFE35F9F50294D9CB839DC42FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:12:86:4f:ca:61:ef:92:f3:d7:03:08:f6: 52:9c:0f:2e:74:cb:83:5a:9d:82:8d:d7:dc:d1:cd: b5:6e:29:ed:7f:73:76:ea:6d:d6:2e:e0:bc:00:b0: 91:ff:d0:72:68:83:2f:f6:ff:00:c1:53:9f:c7:8d: 90:ff:30:74:b6:b4:8f:36:f2:89:a1:9e:46:c5:b8: 1c:5c:f7:27:0b:83:92:27:4f:b3:dd:0a:34:a6:2a: 3c:52:85:b8:43:6d:a6:f4:5b:b0:61:23:8b:1a:fa: 5e:1d:09:57:69:cb:bd:8f:33:92:4c:d9:da:9c:ba: 3a:07:87:6e:e9:df:95:f4:cb:cb:9f:b2:c4:c1:a9: 9b:a5:b8:63:a6:ca:9d:5f:25:55:67:50:74:f2:64: f6:cd:5f:c8:e5:a7:30:e2:e3:29:cb:04:15:fb:d7: 74:2d:a3:80:88:7e:b1:c1:92:bc:8f:cc:28:ad:84: ad:49:e1:08:87:af:65:4c:a2:7f:19:2c:5e:2b:e1: ec:fd:ad:90:9a:28:c9:e0:4c:0d:5d:4f:0b:ff:20: 26:08:8d:f8:ad:b2:3e:b3:af:02:03:93:2a:91:5d: 0e:2e:32:0f:ca:3d:4d:bb:37:0e:84:47:aa:45:23: db:98:6d:22:d5:fc:76:07:74:bf:ec:2d:d9:e5:1d: 1f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D9:9C:D3:DA:1C:13:FF:E3:5F:9F:50:29:4D:9C:B8:39:DC:42:FC X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:05:7b:56:ac:7d:c0:f2:64:d2:eb:10:f7:64:bc:1b:e3:4e: 39:f1:cd:94:86:74:4b:de:41:ee:2a:16:56:c8:d0:33:d7:60: a0:46:25:e0:80:dd:f7:9f:30:fb:c8:6f:70:44:fd:ef:ee:be: 8e:f2:07:25:ef:ff:81:c2:56:42:84:5d:bc:ad:9c:34:ad:73: 2e:91:2e:70:66:57:0e:49:af:a6:19:4d:6e:e8:f5:29:bf:1f: c8:85:00:c0:5a:33:6a:f0:16:7e:72:0c:5a:0f:f4:b5:36:5c: ba:e2:5c:08:40:50:5f:ff:5a:3f:72:09:aa:d0:0f:8e:05:46: 93:bc:50:7e:b0:da:8b:7a:a8:52:47:07:3f:43:9b:cc:e5:7a: 0e:6c:ae:f1:77:66:0f:14:a3:27:14:bf:84:f4:cd:a1:21:ca: 9d:ee:31:06:da:14:49:e6:e0:9e:dd:e7:a1:31:16:e5:b3:79: 76:4d:2d:38:13:d8:12:e1:4b:1c:50:ca:5f:c7:c7:a3:5f:71: ee:88:3c:dd:d0:3c:25:4f:0f:c4:83:d7:40:7d:35:4e:89:47: 7f:b7:7e:db:b8:ce:6d:4c:d7:05:23:48:8d:21:16:fb:05:ec: 13:f1:03:20:e7:06:0a:43:4e:7a:ff:c2:f1:89:49:d1:f7:42: 93:83:37:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdmvzlw1LuinOR27tGHUq4u0w28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTA0MjkwMDA2MDFaFw0yNTA1MDIwMjIwMDFaMDMxMTAvBgNV BAMTKEY2RDk5Q0QzREExQzEzRkZFMzVGOUY1MDI5NEQ5Q0I4MzlEQzQyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRxKGT8ph75Lz1wMI9lKcDy50 y4NanYKN19zRzbVuKe1/c3bqbdYu4LwAsJH/0HJogy/2/wDBU5/HjZD/MHS2tI82 8omhnkbFuBxc9ycLg5InT7PdCjSmKjxShbhDbab0W7BhI4sa+l4dCVdpy72PM5JM 2dqcujoHh27p35X0y8ufssTBqZuluGOmyp1fJVVnUHTyZPbNX8jlpzDi4ynLBBX7 13Qto4CIfrHBkryPzCithK1J4QiHr2VMon8ZLF4r4ez9rZCaKMngTA1dTwv/ICYI jfitsj6zrwIDkyqRXQ4uMg/KPU27Nw6ER6pFI9uYbSLV/HYHdL/sLdnlHR9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9tmc09ocE//jX59QKU2cuDncQvwwHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0Fe1asfcDyZNLrEPdkvBvjTjnxzZSGdEve Qe4qFlbI0DPXYKBGJeCA3fefMPvIb3BE/e/uvo7yByXv/4HCVkKEXbytnDStcy6R LnBmVw5Jr6YZTW7o9Sm/H8iFAMBaM2rwFn5yDFoP9LU2XLriXAhAUF//Wj9yCarQ D44FRpO8UH6w2ot6qFJHBz9Dm8zleg5srvF3Zg8UoycUv4T0zaEhyp3uMQbaFEnm 4J7d56ExFuWzeXZNLTgT2BLhSxxQyl/Hx6Nfce6IPN3QPCVPD8SD10B9NU6JR3+3 ftu4zm1M1wUjSI0hFvsF7BPxAyDnBgpDTnr/wvGJSdH3QpODNyg= -----END CERTIFICATE-----Generated at Tue Apr 29 18:34:31 2025 by rpki-client