$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: pRoTJxQxZyd6taULN8n+8MiqHwNtp6eaeLclNMB6FzY= Subject key identifier: 50:3D:48:FB:35:9C:3B:2C:47:B9:F4:79:53:FF:77:1B:92:98:BD:D2 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 37EAE101374A2D9E8018E379333932919551CC3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 0521 Signing time: Sun 16 Feb 2025 12:50:03 +0000 Manifest this update: Sun 16 Feb 2025 12:45:03 +0000 Manifest next update: Wed 19 Feb 2025 18:27:03 +0000 Files and hashes: 1: AS17885.roa (hash: Hrw/Bx/6mEnK2f91wIyEGNRzxwWv30dDgbF4gTiEsOM=) 2: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: hpyNqFMaws7TlnvgvthadGPlCgpZ8J4S5fYvjUacuhs=) 3: AS139994.roa (hash: V1fHZHeyWM0yunBqcSWTYR9zxd5+dcGWhieykWfyO08=) 4: AS24203.roa (hash: oXVZzAc1BVWz8rI4bEPFSzCb/DwmmJ/Nlya3vD+jXrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 16:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ea:e1:01:37:4a:2d:9e:80:18:e3:79:33:39:32:91:95:51:cc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Feb 16 12:45:03 2025 GMT Not After : Feb 19 18:27:03 2025 GMT Subject: CN=503D48FB359C3B2C47B9F47953FF771B9298BDD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:d0:f4:ec:55:26:41:58:66:f8:9e:64:48: db:0e:0d:25:7f:33:71:b5:bf:aa:71:64:00:18:24: 8f:53:07:56:61:f3:00:9b:75:08:65:de:62:bd:4d: bb:71:1d:c7:fb:57:79:b9:3a:63:fd:88:4e:55:fa: d2:8b:5a:40:f9:00:80:b4:3e:55:07:e4:01:2e:83: ab:fa:79:ee:c3:74:e6:8b:17:40:5c:69:b1:41:4b: e9:f1:11:80:34:2b:28:56:72:5a:11:41:ba:a4:44: 79:da:39:9b:a6:6a:fb:9b:b0:fc:54:3c:70:4f:ed: ad:85:22:74:62:13:5c:8f:9c:ba:8f:15:9f:36:46: 7c:f3:4e:42:f6:fe:2e:e1:5c:41:72:3b:30:95:73: f2:e0:ef:7e:97:40:bc:b1:d7:3b:5e:ab:dc:b1:6c: 37:c1:01:1c:b5:f7:57:b2:89:86:1a:32:d4:59:9c: f2:84:49:48:87:ce:7c:47:ef:fe:2f:d3:00:a2:0a: de:49:1f:81:4b:f7:db:a4:3d:35:ba:bb:d0:04:8b: 5e:60:a9:1a:73:f1:76:b1:5b:19:3b:b5:70:f0:8c: 84:12:86:e0:99:b3:d1:98:41:06:f2:5f:5e:37:3c: c1:e6:03:14:c0:fd:67:81:30:bc:08:0f:7f:74:6e: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3D:48:FB:35:9C:3B:2C:47:B9:F4:79:53:FF:77:1B:92:98:BD:D2 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:cd:38:ab:fe:21:b3:fc:b8:ee:a6:bc:2a:20:58:93:02:c7: 0e:8a:b7:2e:75:67:fb:5b:cc:fd:21:5a:32:e8:02:ee:35:87: 7f:d2:0c:99:de:38:1c:ce:82:69:62:e0:2c:a2:ea:c7:4a:83: 75:72:cf:57:d2:06:32:56:dc:1a:24:ce:85:9f:4d:dd:9b:c1: b7:b7:20:62:f9:72:00:95:72:84:46:77:fe:4f:2b:9f:9a:54: 21:a9:01:2e:27:b9:ee:83:80:92:67:e8:30:40:d7:0c:5b:24: ec:78:70:93:b6:09:7e:bd:55:4f:b2:c8:9b:9f:2b:9c:dd:d5: 03:44:d7:cc:d8:20:66:07:9a:01:98:34:f9:b5:85:38:4e:6e: 9b:8c:0f:ae:22:5f:72:d8:bc:bb:e7:54:5e:71:9c:ff:a5:57: fb:c5:64:04:12:29:bf:d5:e0:85:6c:78:4a:fb:fe:bd:3a:cc: 7d:8e:e8:05:be:1a:39:fe:26:68:df:13:13:9f:1e:88:19:7f: cd:9d:84:52:b1:70:a6:09:4b:c3:eb:d5:f7:85:3c:c3:0e:2b: 8b:0f:b2:73:b8:a6:99:83:c9:e5:f8:4d:6e:0c:e0:ed:0a:34: ec:80:97:10:32:af:95:6a:1f:e6:9b:9a:c7:68:de:e4:f5:79: 80:00:b2:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+rhATdKLZ6AGON5MzkykZVRzD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTAyMTYxMjQ1MDNaFw0yNTAyMTkxODI3MDNaMDMxMTAvBgNV BAMTKDUwM0Q0OEZCMzU5QzNCMkM0N0I5RjQ3OTUzRkY3NzFCOTI5OEJERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rND07FUmQVhm+J5kSNsODSV/ M3G1v6pxZAAYJI9TB1Zh8wCbdQhl3mK9TbtxHcf7V3m5OmP9iE5V+tKLWkD5AIC0 PlUH5AEug6v6ee7DdOaLF0BcabFBS+nxEYA0KyhWcloRQbqkRHnaOZumavubsPxU PHBP7a2FInRiE1yPnLqPFZ82RnzzTkL2/i7hXEFyOzCVc/Lg736XQLyx1zteq9yx bDfBARy191eyiYYaMtRZnPKESUiHznxH7/4v0wCiCt5JH4FL99ukPTW6u9AEi15g qRpz8XaxWxk7tXDwjIQShuCZs9GYQQbyX143PMHmAxTA/WeBMLwID390bsXvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUD1I+zWcOyxHufR5U/93G5KYvdIwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfNOKv+IbP8uO6mvCogWJMCxw6Kty51Z/tb zP0hWjLoAu41h3/SDJneOBzOgmli4Cyi6sdKg3Vyz1fSBjJW3BokzoWfTd2bwbe3 IGL5cgCVcoRGd/5PK5+aVCGpAS4nue6DgJJn6DBA1wxbJOx4cJO2CX69VU+yyJuf K5zd1QNE18zYIGYHmgGYNPm1hThObpuMD64iX3LYvLvnVF5xnP+lV/vFZAQSKb/V 4IVseEr7/r06zH2O6AW+Gjn+JmjfExOfHogZf82dhFKxcKYJS8Pr1feFPMMOK4sP snO4ppmDyeX4TW4M4O0KNOyAlxAyr5VqH+abmsdo3uT1eYAAsh4= -----END CERTIFICATE-----Generated at Sun Feb 16 21:08:35 2025 by rpki-client