$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft File: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft (raw, json) Hash identifier: fQ05OqAZ3fTUedOD0m4+vmUgzbJR1alEuCXzOaiNmh0= Subject key identifier: E9:78:76:66:C1:09:7C:0E:EA:CC:96:0E:F9:34:A1:5E:71:AC:9C:E0 Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 70078912AA12AB72F9D52458F330BD1B1B85BEE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft Manifest number: 01B9 Signing time: Sun 27 Apr 2025 23:21:20 +0000 Manifest this update: Sun 27 Apr 2025 23:16:20 +0000 Manifest next update: Thu 01 May 2025 08:28:20 +0000 Files and hashes: 1: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: 6gMRYCDTA91uCrSpOJHQwzXcDUzZZQ/fPopmQLU54uQ=) 2: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: GK6TjIFHP3OKYpdF9mQ2NlZ0xI3zyr1c1AWcP5mkKcw=) 3: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: jkr10nu1KheD3rFITjZKu8+8qzjxbIrM8OjPSducB+Q=) 4: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl (hash: ZYH/D5w7o0K+VLZ0j2tmA2fbrxgIHfbAhjVMIbtUOgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:07:89:12:aa:12:ab:72:f9:d5:24:58:f3:30:bd:1b:1b:85:be:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Apr 27 23:16:20 2025 GMT Not After : May 1 08:28:20 2025 GMT Subject: CN=E9787666C1097C0EEACC960EF934A15E71AC9CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:74:d6:d0:b1:6e:25:f1:9b:55:e7:41:66: 69:fe:67:d3:ae:92:87:14:30:f8:d5:63:13:5a:1e: ea:ea:8c:28:f3:4e:38:18:a6:4f:06:0e:24:6d:18: b7:f2:e3:bd:6d:47:a3:04:7f:f1:dc:c4:d5:15:a3: 8d:c1:2d:70:6c:87:9c:b0:d9:73:40:6d:0c:26:a8: 24:73:b0:d2:f6:ff:9d:d1:15:3c:2e:9b:b5:d0:1e: ad:0f:dc:7f:23:23:39:95:ad:2e:c5:bf:19:51:e3: 8a:36:da:3c:5f:97:93:90:97:ad:1a:b9:ea:0a:cc: 4e:0b:91:6a:28:d1:d8:81:32:0b:80:e7:db:92:1b: e8:f2:68:02:79:c8:3d:58:66:ff:3a:81:15:a4:b5: d3:23:50:1c:06:b0:b9:c2:10:54:5b:c3:f0:47:3c: 59:1f:5d:1a:5b:9c:4e:67:52:a9:6d:e0:c0:8e:55: 3f:de:7b:82:cc:a7:c8:83:0d:16:96:91:52:e8:0c: 4e:2d:96:56:bd:e1:44:80:5c:36:e3:4b:f5:63:ff: 8e:d4:6a:1d:71:1d:ad:73:22:78:78:ce:31:66:7b: a0:f4:e7:8c:7a:4b:af:7a:b0:d9:24:b8:ce:4f:54: a3:44:1f:49:be:c2:78:47:fc:d9:15:4d:93:9c:8c: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:78:76:66:C1:09:7C:0E:EA:CC:96:0E:F9:34:A1:5E:71:AC:9C:E0 X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6f:83:81:57:2d:5c:b4:d9:c8:5e:26:dd:4a:64:d3:88:eb: b8:35:27:39:68:db:d3:d9:ea:a7:a9:f1:f6:1e:db:b2:4d:de: 88:d6:2c:30:86:c7:a8:3e:6b:30:60:77:e8:84:36:db:34:f2: 36:b8:28:06:5b:02:6e:e1:51:fd:8e:7e:da:4a:de:97:f6:14: 09:e9:f0:d2:d4:0e:80:eb:f9:29:82:b0:20:85:1e:83:11:7d: 70:bf:29:b1:99:0f:2f:11:c8:b6:75:28:3f:d8:ca:95:a1:9c: fe:6b:48:d7:1c:75:d2:9e:7e:f2:0a:58:91:b0:1b:b4:a9:d7: 49:a9:4a:70:df:58:63:e7:c1:3a:32:ac:f5:06:9d:d2:c4:a9: a8:55:89:52:bc:d2:df:d7:32:d6:db:56:ce:0e:4b:fa:7e:af: 81:dd:b2:42:da:62:fe:ca:fb:30:8e:f0:6e:00:98:0f:c6:55: 96:d8:4a:23:d5:6d:b8:b1:c8:ee:4c:24:48:4c:9a:b9:5e:bf: 22:52:73:89:7d:c6:56:1d:79:bf:a3:e4:87:08:0c:6e:18:b2: 82:ed:54:91:03:b5:ec:90:cb:1b:e7:3c:80:d9:88:35:ee:5b: 2e:d1:12:ca:40:1a:c2:d1:b5:e5:ab:6c:12:8d:a3:dc:b5:3b: 98:2c:38:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAeJEqoSq3L51SRY8zC9GxuFvugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNTA0MjcyMzE2MjBaFw0yNTA1MDEwODI4MjBaMDMxMTAvBgNV BAMTKEU5Nzg3NjY2QzEwOTdDMEVFQUNDOTYwRUY5MzRBMTVFNzFBQzlDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6THTW0LFuJfGbVedBZmn+Z9Ou kocUMPjVYxNaHurqjCjzTjgYpk8GDiRtGLfy471tR6MEf/HcxNUVo43BLXBsh5yw 2XNAbQwmqCRzsNL2/53RFTwum7XQHq0P3H8jIzmVrS7FvxlR44o22jxfl5OQl60a ueoKzE4LkWoo0diBMguA59uSG+jyaAJ5yD1YZv86gRWktdMjUBwGsLnCEFRbw/BH PFkfXRpbnE5nUqlt4MCOVT/ee4LMp8iDDRaWkVLoDE4tlla94USAXDbjS/Vj/47U ah1xHa1zInh4zjFme6D054x6S696sNkkuM5PVKNEH0m+wnhH/NkVTZOcjPejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Xh2ZsEJfA7qzJYO+TShXnGsnOAwHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1 MjJEQzlCODFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlvg4FXLVy02cheJt1KZNOI67g1Jzlo29PZ 6qep8fYe27JN3ojWLDCGx6g+azBgd+iENts08ja4KAZbAm7hUf2OftpK3pf2FAnp 8NLUDoDr+SmCsCCFHoMRfXC/KbGZDy8RyLZ1KD/YypWhnP5rSNccddKefvIKWJGw G7Sp10mpSnDfWGPnwToyrPUGndLEqahViVK80t/XMtbbVs4OS/p+r4HdskLaYv7K +zCO8G4AmA/GVZbYSiPVbbixyO5MJEhMmrlevyJSc4l9xlYdeb+j5IcIDG4YsoLt VJEDteyQyxvnPIDZiDXuWy7REspAGsLRteWrbBKNo9y1O5gsOMM= -----END CERTIFICATE-----Generated at Tue Apr 29 17:31:04 2025 by rpki-client