$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: pi35ASlHqJiwiUVX/nCAY6PnVpK92ogQiU1DrWYd2tw= Subject key identifier: EF:CA:53:DB:C9:29:EB:7F:AC:19:B7:DA:B9:C1:40:C8:C9:0C:49:F0 Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 2BEB0CA71B810DF26B6F84EF3C716B41818C8729 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 02A4 Signing time: Thu 03 Apr 2025 17:00:02 +0000 Manifest this update: Thu 03 Apr 2025 16:55:02 +0000 Manifest next update: Sun 06 Apr 2025 22:43:02 +0000 Files and hashes: 1: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: a7PTXgKIuAxPVgmOfgSfIiexn0wfFohzIh28xEr3Sns=) 2: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: NrsN4LWpd1oQDP+g7Dz/FA49qPjRpHlzH5pkEruPTRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 22:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:eb:0c:a7:1b:81:0d:f2:6b:6f:84:ef:3c:71:6b:41:81:8c:87:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: Apr 3 16:55:02 2025 GMT Not After : Apr 6 22:43:02 2025 GMT Subject: CN=EFCA53DBC929EB7FAC19B7DAB9C140C8C90C49F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:64:3f:87:f5:ab:70:b0:f0:bb:9f:22:70: ab:85:59:14:77:d0:ad:14:8e:1c:cd:2f:0a:40:58: ef:aa:32:78:41:72:9a:ab:2f:b0:e0:58:ae:77:36: 3c:ed:f2:41:9c:3d:3a:92:b4:ba:4a:fc:81:a8:b3: c4:8e:67:59:a0:67:ff:07:f8:82:5b:f6:13:96:ea: 56:bc:ac:35:d1:10:92:0c:20:4c:a4:1b:e4:50:1a: ec:91:b4:66:e4:1f:60:f9:57:7a:ee:b6:40:a3:68: 6d:64:d1:bd:d4:de:9a:99:42:54:e7:fe:d8:34:30: cb:a6:c3:75:e2:39:16:47:6b:97:b7:77:0b:e3:85: f2:bc:0b:31:07:e8:58:3d:02:ce:17:1b:c2:c9:21: ab:3d:2b:b7:f0:b2:c8:ab:14:5f:71:b9:84:78:16: 22:e4:3e:04:db:1a:3e:36:b7:4c:3b:d1:4f:d4:00: c5:e6:34:2d:9e:2a:19:33:80:2f:de:91:0c:80:0f: 06:df:c9:7b:0f:ae:aa:0a:8d:70:6a:7d:f6:22:b1: 9d:ff:b2:8f:05:28:1b:5e:be:b3:31:e8:3d:87:01: e7:83:ec:0c:ac:d5:42:b3:1f:ac:a8:64:4c:bd:ff: 77:8f:0e:48:39:72:ba:a2:66:64:69:43:9a:dc:17: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:53:DB:C9:29:EB:7F:AC:19:B7:DA:B9:C1:40:C8:C9:0C:49:F0 X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a5:7f:06:37:6b:45:8a:d9:fa:48:a6:78:eb:42:0c:e3:ba: 9f:a9:81:50:0f:39:29:0d:80:35:8f:49:2f:1c:80:20:95:83: 4c:d0:78:b2:ba:a0:f5:8d:ba:3a:75:83:e7:8e:27:85:cf:72: be:79:a2:38:26:73:76:fc:ed:a9:c9:08:d6:d2:7a:94:bf:c5: 0c:7b:95:7f:ac:f6:26:73:02:2d:8e:bd:e8:7e:b9:c3:27:10: f4:47:b5:1a:39:b5:b1:ae:b5:98:09:8d:fc:4f:2f:f5:9e:8b: db:43:82:6e:9e:f2:4e:bc:f7:ba:af:9c:b0:cd:37:1c:e0:56: 70:54:d2:9e:f1:e1:de:ed:a2:ef:4d:d1:60:56:20:04:f2:ee: 40:dc:f7:ff:fc:27:a0:08:09:dc:78:be:53:c5:e5:8f:2a:6f: 9c:28:ea:aa:44:6f:6b:98:79:cc:30:b1:4b:7f:cf:a5:7c:58: e6:a5:7f:6c:7c:01:f5:d5:4c:ff:fd:bf:6b:d6:a2:93:b8:84: 8d:67:c1:9f:8f:ce:f5:1c:21:97:2c:5a:e3:86:72:cc:e3:40: f1:21:02:02:09:74:6c:a6:1c:6f:ec:9f:ee:18:84:ad:20:dc: fc:01:26:71:f1:38:4a:86:47:6f:25:ac:b2:9a:68:29:e3:e0: bf:05:98:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK+sMpxuBDfJrb4TvPHFrQYGMhykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNTA0MDMxNjU1MDJaFw0yNTA0MDYyMjQzMDJaMDMxMTAvBgNV BAMTKEVGQ0E1M0RCQzkyOUVCN0ZBQzE5QjdEQUI5QzE0MEM4QzkwQzQ5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCka2Q/h/WrcLDwu58icKuFWRR3 0K0UjhzNLwpAWO+qMnhBcpqrL7DgWK53Njzt8kGcPTqStLpK/IGos8SOZ1mgZ/8H +IJb9hOW6la8rDXREJIMIEykG+RQGuyRtGbkH2D5V3rutkCjaG1k0b3U3pqZQlTn /tg0MMumw3XiORZHa5e3dwvjhfK8CzEH6Fg9As4XG8LJIas9K7fwssirFF9xuYR4 FiLkPgTbGj42t0w70U/UAMXmNC2eKhkzgC/ekQyADwbfyXsPrqoKjXBqffYisZ3/ so8FKBtevrMx6D2HAeeD7Ays1UKzH6yoZEy9/3ePDkg5crqiZmRpQ5rcFwvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU78pT28kp63+sGbfaucFAyMkMSfAwHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+lfwY3a0WK2fpIpnjrQgzjup+pgVAPOSkN gDWPSS8cgCCVg0zQeLK6oPWNujp1g+eOJ4XPcr55ojgmc3b87anJCNbSepS/xQx7 lX+s9iZzAi2Oveh+ucMnEPRHtRo5tbGutZgJjfxPL/Wei9tDgm6e8k6897qvnLDN NxzgVnBU0p7x4d7tou9N0WBWIATy7kDc9//8J6AICdx4vlPF5Y8qb5wo6qpEb2uY ecwwsUt/z6V8WOalf2x8AfXVTP/9v2vWopO4hI1nwZ+PzvUcIZcsWuOGcszjQPEh AgIJdGymHG/sn+4YhK0g3PwBJnHxOEqGR28lrLKaaCnj4L8FmCs= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:36 2025 by rpki-client