$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: C4/2f5eRfFQiNzyp4hga5PkeS+zYhjovi0oy53Sxq8c= Subject key identifier: F1:50:69:18:41:5A:F3:39:24:B3:F9:B8:55:45:C4:28:FD:70:A2:A1 Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 4347E0316C3BF43029AB286B047FD72CA5B9FB63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 04A1 Signing time: Wed 04 Jun 2025 13:00:04 +0000 Manifest this update: Wed 04 Jun 2025 12:55:04 +0000 Manifest next update: Sat 07 Jun 2025 19:27:04 +0000 Files and hashes: 1: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: eHVGYrB7cyV4lpsGbMpuO9hzd36FHL5nb8Bh6R077p4=) 2: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: UlAh8zKWIPZHwNHmAImvacovNeaS9Y+qOJYX1Qlb9uc=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: YO37Y3eimIDdIo7K6UBGoqei0FiSorzSwQwRwyZtXq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:47:e0:31:6c:3b:f4:30:29:ab:28:6b:04:7f:d7:2c:a5:b9:fb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Jun 4 12:55:04 2025 GMT Not After : Jun 7 19:27:04 2025 GMT Subject: CN=F1506918415AF33924B3F9B85545C428FD70A2A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:08:9f:9e:8a:04:d0:92:79:87:f3:9b:cd: e9:a9:3b:f3:ad:da:fc:9c:a3:10:f3:27:d5:71:49: 04:d1:e2:46:2d:e6:29:a0:ba:c3:3f:e4:b3:be:04: 24:84:b6:48:c5:85:80:cd:8e:e6:0f:49:83:01:36: 1b:15:02:bc:42:ce:5c:b3:19:fe:b9:e7:62:4e:34: 9b:7b:91:b7:77:d2:34:d5:e2:4f:c8:03:83:24:d2: 5e:a6:d5:26:a0:44:29:a4:a2:9b:c2:bf:02:ae:c3: ac:27:2c:61:ee:3b:d9:ac:02:a5:49:7e:60:d3:a6: 64:8c:e4:57:bd:ce:ba:94:6c:40:fb:a4:ec:57:4d: ec:e7:93:b6:c0:84:ff:72:28:da:71:8d:63:fc:ec: 48:a0:a3:bd:3f:c4:8d:f5:0b:e9:b6:88:23:50:b6: 7c:be:0e:6d:67:24:ad:5b:e0:94:4f:2f:3f:ab:ae: 0f:d1:3d:1c:20:d3:44:c4:e0:fd:09:ff:54:f1:4c: cd:c1:ef:53:84:62:21:e5:e4:f8:a7:67:88:b5:99: e8:09:ff:c3:67:d5:81:1a:7b:51:f9:9f:b5:39:c3: a7:54:3e:c8:bb:cc:45:9d:fb:a9:ea:68:6d:11:6d: 07:ec:dc:a3:4b:b4:d0:f0:56:61:8c:86:08:66:cd: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:50:69:18:41:5A:F3:39:24:B3:F9:B8:55:45:C4:28:FD:70:A2:A1 X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e8:38:06:34:fa:ab:84:0a:03:20:6b:6a:53:78:4b:9b:7b: d4:b1:08:bc:b1:a0:34:a0:d7:00:48:f2:b6:9f:27:82:c4:13: 52:a6:db:ba:d9:a6:df:9b:c7:dd:62:98:9c:12:d8:3e:6e:bb: 7d:1f:28:b5:59:ea:3a:28:64:ad:e2:a0:47:6b:44:16:e4:c0: 68:b3:f1:29:14:b7:e6:84:0f:9c:5a:60:f4:0b:19:1a:5c:f3: 7d:4a:00:29:12:fc:d3:d0:10:16:17:4d:32:ff:3e:93:44:c8: 9b:bf:36:29:fc:88:d1:a0:08:95:18:2a:0f:ea:25:79:06:4f: 11:e2:c1:61:f8:ea:48:17:86:f3:5e:2f:24:32:e7:18:1f:28: 0b:d9:67:3e:2f:aa:60:b6:ef:13:67:e2:66:51:eb:15:b3:4f: 5c:93:94:e8:5a:45:ae:a1:01:8d:9b:10:0a:be:33:2a:43:36: 06:c8:b1:52:7b:7a:d6:46:a1:cb:a9:20:9b:5b:5f:25:30:a6: 79:e5:6e:24:80:c2:9d:99:ba:9b:c5:ee:be:f0:b3:14:dd:33: 64:f0:5f:07:59:21:ff:ea:1b:26:f9:7c:45:8b:d5:4e:40:86: 51:b6:ac:df:ba:9a:bf:a3:c3:5a:2b:18:a1:9b:71:7a:99:13: 38:19:d8:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0fgMWw79DApqyhrBH/XLKW5+2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTA2MDQxMjU1MDRaFw0yNTA2MDcxOTI3MDRaMDMxMTAvBgNV BAMTKEYxNTA2OTE4NDE1QUYzMzkyNEIzRjlCODU1NDVDNDI4RkQ3MEEyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcaAifnooE0JJ5h/ObzempO/Ot 2vycoxDzJ9VxSQTR4kYt5imgusM/5LO+BCSEtkjFhYDNjuYPSYMBNhsVArxCzlyz Gf6552JONJt7kbd30jTV4k/IA4Mk0l6m1SagRCmkopvCvwKuw6wnLGHuO9msAqVJ fmDTpmSM5Fe9zrqUbED7pOxXTeznk7bAhP9yKNpxjWP87Eigo70/xI31C+m2iCNQ tny+Dm1nJK1b4JRPLz+rrg/RPRwg00TE4P0J/1TxTM3B71OEYiHl5PinZ4i1megJ /8Nn1YEae1H5n7U5w6dUPsi7zEWd+6nqaG0RbQfs3KNLtNDwVmGMhghmzXLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8VBpGEFa8zkks/m4VUXEKP1woqEwHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEToOAY0+quECgMga2pTeEube9SxCLyxoDSg 1wBI8rafJ4LEE1Km27rZpt+bx91imJwS2D5uu30fKLVZ6jooZK3ioEdrRBbkwGiz 8SkUt+aED5xaYPQLGRpc831KACkS/NPQEBYXTTL/PpNEyJu/Nin8iNGgCJUYKg/q JXkGTxHiwWH46kgXhvNeLyQy5xgfKAvZZz4vqmC27xNn4mZR6xWzT1yTlOhaRa6h AY2bEAq+MypDNgbIsVJ7etZGocupIJtbXyUwpnnlbiSAwp2ZupvF7r7wsxTdM2Tw XwdZIf/qGyb5fEWL1U5AhlG2rN+6mr+jw1orGKGbcXqZEzgZ2J4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:17 2025 by rpki-client