$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: t5Lh6oervOnpoy6eT1Me3sZ+hoUM1HJb0n9JN3F59oA= Subject key identifier: 02:E3:DD:F6:1E:6F:E5:1F:D3:64:BA:59:75:EB:17:24:95:4B:DE:6C Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 5AC79D93E956B10508ECFBFA99F3CE9E5416A19F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 04B5 Signing time: Sat 19 Jul 2025 07:20:04 +0000 Manifest this update: Sat 19 Jul 2025 07:15:04 +0000 Manifest next update: Tue 22 Jul 2025 09:29:04 +0000 Files and hashes: 1: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: UlAh8zKWIPZHwNHmAImvacovNeaS9Y+qOJYX1Qlb9uc=) 2: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: fCxNB92I7IbGXOIh0cYwKtOEy+omOcGdqqpVkcwN8pc=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c7:9d:93:e9:56:b1:05:08:ec:fb:fa:99:f3:ce:9e:54:16:a1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Jul 19 07:15:04 2025 GMT Not After : Jul 22 09:29:04 2025 GMT Subject: CN=02E3DDF61E6FE51FD364BA5975EB1724954BDE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:40:1d:ef:98:9e:d0:a9:a1:33:68:bf:c4:4d: e7:95:25:08:a8:18:1b:0d:e0:f5:05:71:03:e8:95: 57:46:f7:db:78:e1:46:ea:39:7b:63:2c:2c:29:98: 0c:4d:2d:2f:6c:ba:53:26:6f:a1:3e:a5:5f:65:e4: 52:1e:c5:87:3d:e4:ae:b8:a6:09:bc:e6:8d:7d:47: 2c:5d:07:e0:03:03:f2:6f:7d:9d:5b:f1:1e:b3:47: 40:b8:5d:d2:a1:8c:95:35:94:f1:c0:b4:1c:0c:2e: cf:22:86:20:95:a3:c3:e8:92:fd:c0:c6:13:5b:9d: d3:98:20:8a:f2:1f:e0:79:35:d0:7c:b5:09:b5:65: 98:a0:96:a0:85:d6:18:6c:ee:0e:37:30:9b:ae:f2: 39:7a:0b:af:26:56:e1:c4:eb:47:ff:91:c8:71:29: a7:71:32:e7:be:ed:c8:85:da:81:dc:62:1c:16:46: 81:95:ad:11:9d:82:cc:a2:aa:20:b4:d4:f0:93:0c: 72:ca:4b:c0:93:ab:bf:da:de:f7:a4:9a:25:4a:33: 2f:86:a1:7a:9c:39:9b:86:f4:c2:9c:94:fe:9d:2e: 08:92:cd:91:fa:5c:18:cb:7d:5f:06:e3:6d:56:8e: ca:34:70:ac:86:0c:53:f8:89:48:5c:15:f4:80:9f: b2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E3:DD:F6:1E:6F:E5:1F:D3:64:BA:59:75:EB:17:24:95:4B:DE:6C X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:65:50:72:05:3d:6a:9e:8e:a4:c0:e4:2b:3b:80:e0:5c:c8: 6e:2a:73:ff:96:52:eb:8b:c8:7a:17:0b:d5:4c:99:1c:dd:00: 95:5b:75:b8:e2:4b:fd:87:92:cb:b3:32:fa:10:48:87:d2:3b: 3d:de:39:0a:0b:44:fb:a5:ad:9c:7e:ca:cf:a4:43:52:c5:b3: 6d:62:f9:2e:f5:df:bf:21:ab:55:d1:b2:30:c6:d0:7d:7a:50: ae:91:3d:3d:15:04:54:dc:77:36:94:39:4e:0c:d5:7c:86:cb: d9:0c:10:e8:aa:d8:7e:20:fc:5e:ea:bf:f3:15:04:b6:a5:0f: 3b:89:46:3a:99:96:64:95:ce:84:62:b9:01:89:2a:d0:fe:7b: 01:fe:d8:3c:05:a9:8f:af:a7:51:36:b5:d9:ba:5a:6b:ba:ba: c4:4d:c7:35:24:d2:ae:ab:1a:72:dd:68:8a:62:d8:75:c5:9d: 14:4c:a7:e4:01:67:8e:04:8a:bc:5a:75:5f:9a:67:b2:2f:43: c4:b7:42:23:dc:35:2c:65:8f:bc:2d:18:bb:55:f0:30:34:00: 87:5a:54:e6:b9:19:ee:88:49:32:e2:f1:19:fb:a5:db:55:22: 4c:9e:76:b2:b6:2b:6a:d3:02:d6:70:a7:dd:59:39:b3:36:82: 12:39:a5:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsedk+lWsQUI7Pv6mfPOnlQWoZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTA3MTkwNzE1MDRaFw0yNTA3MjIwOTI5MDRaMDMxMTAvBgNV BAMTKDAyRTNEREY2MUU2RkU1MUZEMzY0QkE1OTc1RUIxNzI0OTU0QkRFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQB3vmJ7QqaEzaL/ETeeVJQio GBsN4PUFcQPolVdG99t44UbqOXtjLCwpmAxNLS9sulMmb6E+pV9l5FIexYc95K64 pgm85o19RyxdB+ADA/JvfZ1b8R6zR0C4XdKhjJU1lPHAtBwMLs8ihiCVo8Pokv3A xhNbndOYIIryH+B5NdB8tQm1ZZiglqCF1hhs7g43MJuu8jl6C68mVuHE60f/kchx KadxMue+7ciF2oHcYhwWRoGVrRGdgsyiqiC01PCTDHLKS8CTq7/a3vekmiVKMy+G oXqcOZuG9MKclP6dLgiSzZH6XBjLfV8G421Wjso0cKyGDFP4iUhcFfSAn7IdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAuPd9h5v5R/TZLpZdesXJJVL3mwwHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFlUHIFPWqejqTA5Cs7gOBcyG4qc/+WUuuL yHoXC9VMmRzdAJVbdbjiS/2HksuzMvoQSIfSOz3eOQoLRPulrZx+ys+kQ1LFs21i +S71378hq1XRsjDG0H16UK6RPT0VBFTcdzaUOU4M1XyGy9kMEOiq2H4g/F7qv/MV BLalDzuJRjqZlmSVzoRiuQGJKtD+ewH+2DwFqY+vp1E2tdm6Wmu6usRNxzUk0q6r GnLdaIpi2HXFnRRMp+QBZ44EirxadV+aZ7IvQ8S3QiPcNSxlj7wtGLtV8DA0AIda VOa5Ge6ISTLi8Rn7pdtVIkyedrK2K2rTAtZwp91ZObM2ghI5pU0= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:00 2025 by rpki-client