$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft File: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft (raw, json) Hash identifier: DRqjQ6vBHELdZBT9mWoHHJBFjkmaguBPqh0KlTwrgyE= Subject key identifier: AC:8F:D6:19:02:D1:14:C3:AE:9F:98:74:47:31:A1:47:0A:D6:EB:81 Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 Certificate issuer: /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Certificate serial: 5C2B521B5E8597100BF6FC5D388AC05B65432E92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft Manifest number: C2 Signing time: Fri 04 Apr 2025 23:11:34 +0000 Manifest this update: Fri 04 Apr 2025 23:06:34 +0000 Manifest next update: Tue 08 Apr 2025 03:18:34 +0000 Files and hashes: 1: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (hash: 9iQrzztLoFvpsEnzNnL5P1t1/bjXuRlh5hUEQazNDWU=) 2: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl (hash: IwCd3X3yRdUXOY2jlPTnlrULOpY5oiDTfo09vaZVW7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2b:52:1b:5e:85:97:10:0b:f6:fc:5d:38:8a:c0:5b:65:43:2e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Validity Not Before: Apr 4 23:06:34 2025 GMT Not After : Apr 8 03:18:34 2025 GMT Subject: CN=AC8FD61902D114C3AE9F98744731A1470AD6EB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:47:d0:ea:7d:66:d6:ba:52:c2:86:92:db:43: 32:c6:00:c3:7a:43:06:43:4f:65:fa:3d:ea:e0:06: e7:fd:85:2e:8a:31:6b:df:89:e1:c7:0a:ba:6d:8c: 01:b5:ae:f2:ea:9b:db:87:9b:d6:f8:df:24:dd:ab: 9a:e1:f2:7e:d6:78:e8:3b:ce:14:ad:22:48:1e:a0: c8:60:21:be:77:a6:4d:73:92:1e:ee:c6:4b:bf:14: 55:00:23:ac:78:8b:35:af:95:f4:cd:11:81:a3:93: 31:43:8e:1d:fa:11:df:df:49:1a:e4:82:9f:42:c4: f0:c9:45:d7:7d:4b:11:4a:e0:de:4c:34:c9:c3:bd: 6c:36:ca:af:4d:9d:10:9d:0f:28:a9:17:46:e3:ff: 4f:b5:fd:da:62:76:dd:27:6e:4a:85:25:5b:1d:fd: ab:0f:6b:90:99:f3:c0:65:7e:c2:ad:2a:99:e2:2c: a2:7e:02:36:ad:1b:7b:13:f4:52:ae:38:e0:76:fd: 52:03:d6:2f:b6:10:77:27:cf:71:1e:a2:13:68:9c: 93:f9:25:64:29:28:22:e4:62:90:15:3f:00:39:8d: 82:02:74:c8:94:df:f6:23:9a:af:e7:6c:6a:86:a2: d6:03:f8:0e:a6:0c:94:26:16:75:2b:27:db:ce:a0: c8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8F:D6:19:02:D1:14:C3:AE:9F:98:74:47:31:A1:47:0A:D6:EB:81 X509v3 Authority Key Identifier: keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:62:cf:eb:d2:fb:30:95:a8:b4:cc:01:bf:89:e2:fa:96:f2: 85:cb:17:30:26:f7:1d:9d:d1:50:8f:84:10:34:38:2a:cd:90: f1:67:bb:c9:a2:96:9f:ad:9b:39:1c:fe:6a:32:df:f5:49:fb: 2f:80:0a:68:24:e7:3f:85:2f:45:d7:89:2c:9a:b8:b7:8d:63: 31:8c:62:19:50:27:41:30:e0:6d:28:f5:7e:22:e3:76:73:5e: e9:23:9c:fd:fe:73:e5:1e:5d:37:52:47:3f:7e:01:d6:8f:1e: 02:e0:bf:86:87:e7:be:e9:29:93:65:dc:bf:71:80:14:e3:63: be:bd:57:73:56:b3:55:79:ac:3d:36:0d:d0:f3:2b:29:d3:f1: 8b:95:e6:2a:48:90:53:e4:54:ae:c6:5a:12:bc:ab:f4:2c:0d: 51:93:12:31:8a:bf:62:66:f7:ab:00:a0:bc:8d:2e:51:6b:3e: 56:7b:02:d7:ad:4c:fd:bc:9f:e4:78:3b:60:58:78:4d:86:ad: 4a:ed:d6:b6:87:80:42:8c:63:e3:89:30:f5:4b:33:eb:68:24: 55:b6:48:c1:f7:36:e5:a1:c3:e5:a5:85:7c:98:14:cf:20:2a: 60:e5:d0:75:3d:81:91:fa:57:13:9f:72:44:aa:1b:9a:4e:1a: 67:29:5a:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCtSG16FlxAL9vxdOIrAW2VDLpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5 QTREN0JENjAeFw0yNTA0MDQyMzA2MzRaFw0yNTA0MDgwMzE4MzRaMDMxMTAvBgNV BAMTKEFDOEZENjE5MDJEMTE0QzNBRTlGOTg3NDQ3MzFBMTQ3MEFENkVCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAR9DqfWbWulLChpLbQzLGAMN6 QwZDT2X6PergBuf9hS6KMWvfieHHCrptjAG1rvLqm9uHm9b43yTdq5rh8n7WeOg7 zhStIkgeoMhgIb53pk1zkh7uxku/FFUAI6x4izWvlfTNEYGjkzFDjh36Ed/fSRrk gp9CxPDJRdd9SxFK4N5MNMnDvWw2yq9NnRCdDyipF0bj/0+1/dpidt0nbkqFJVsd /asPa5CZ88BlfsKtKpniLKJ+AjatG3sT9FKuOOB2/VID1i+2EHcnz3EeohNonJP5 JWQpKCLkYpAVPwA5jYICdMiU3/Yjmq/nbGqGotYD+A6mDJQmFnUrJ9vOoMjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrI/WGQLRFMOun5h0RzGhRwrW64EwHwYDVR0j BBgwFoAUsQ/M4Ccg6WTSk0Lg8738Z5pNe9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTU5MzQ0NS1hMjVkLTQ4ZTAtYWJjMi1hYjA1ZTA2NTA2NTUvMC9CMTBGQ0NFMDI3 MjBFOTY0RDI5MzQyRTBGM0JERkM2NzlBNEQ3QkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5QTRE N0JENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU1OTM0NDUtYTI1ZC00OGUwLWFi YzItYWIwNWUwNjUwNjU1LzAvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZD Njc5QTREN0JENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBiz+vS+zCVqLTMAb+J4vqW8oXLFzAm9x2d 0VCPhBA0OCrNkPFnu8milp+tmzkc/moy3/VJ+y+ACmgk5z+FL0XXiSyauLeNYzGM YhlQJ0Ew4G0o9X4i43ZzXukjnP3+c+UeXTdSRz9+AdaPHgLgv4aH577pKZNl3L9x gBTjY769V3NWs1V5rD02DdDzKynT8YuV5ipIkFPkVK7GWhK8q/QsDVGTEjGKv2Jm 96sAoLyNLlFrPlZ7AtetTP28n+R4O2BYeE2GrUrt1raHgEKMY+OJMPVLM+toJFW2 SMH3NuWhw+WlhXyYFM8gKmDl0HU9gZH6VxOfckSqG5pOGmcpWtE= -----END CERTIFICATE-----Generated at Sun Apr 6 02:40:50 2025 by rpki-client