$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: bayVn1XE8HQKGcdthjuGJmKWOVOv6aA+6/BRJgnebSc= Subject key identifier: 9F:94:87:17:8F:70:B2:8B:CD:0E:33:18:E9:76:FA:23:A6:A6:6A:A7 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 36B5E6782A71C064F2CA313A7762591ED30DCCBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 052C Signing time: Thu 13 Mar 2025 06:30:03 +0000 Manifest this update: Thu 13 Mar 2025 06:25:03 +0000 Manifest next update: Sun 16 Mar 2025 09:18:03 +0000 Files and hashes: 1: AS24203.roa (hash: oXVZzAc1BVWz8rI4bEPFSzCb/DwmmJ/Nlya3vD+jXrk=) 2: AS139994.roa (hash: V1fHZHeyWM0yunBqcSWTYR9zxd5+dcGWhieykWfyO08=) 3: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: ryo6U7DECT2S5RyXjvrJgruUtThVbL+SzkxexvA4PzM=) 4: AS17885.roa (hash: Hrw/Bx/6mEnK2f91wIyEGNRzxwWv30dDgbF4gTiEsOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b5:e6:78:2a:71:c0:64:f2:ca:31:3a:77:62:59:1e:d3:0d:cc:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Mar 13 06:25:03 2025 GMT Not After : Mar 16 09:18:03 2025 GMT Subject: CN=9F9487178F70B28BCD0E3318E976FA23A6A66AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:a6:b3:42:5c:6c:e8:b6:88:e4:35:ee:6f: af:b5:24:87:5d:50:86:f5:5c:a3:e7:6e:34:f7:0c: 8d:aa:b8:39:04:5a:a3:25:27:b5:d5:3c:c8:b6:92: cb:42:2d:a2:2a:68:9c:4c:9b:53:d0:33:f5:c5:26: 7a:44:a1:45:2d:f0:5a:49:28:cf:d8:2a:e8:9d:67: e9:2b:64:fb:a5:89:80:e0:8c:df:33:d0:93:29:6f: da:cb:c6:c5:25:af:6a:89:89:40:53:62:dc:29:66: a4:ad:ce:ed:14:c5:54:dd:c0:3b:66:3b:47:47:10: 0e:71:0e:0a:eb:71:6b:cf:28:bf:09:dd:fd:8d:94: 9e:76:17:fe:c3:a6:38:69:92:95:25:17:98:b1:b6: 92:54:0d:cc:eb:62:4c:31:44:bb:fb:ef:06:85:3d: cf:01:e7:14:f9:5b:5e:81:a3:c9:be:60:1f:12:69: 22:d2:38:bb:fa:c5:37:c0:fd:07:f3:dd:cc:b6:2b: 52:39:ca:7f:a3:e3:c4:65:23:56:1c:bf:59:e4:a3: f6:0a:3e:40:84:9e:5d:39:cc:a9:e3:01:06:06:0b: b3:9a:7a:13:98:c5:da:a7:a9:5b:09:70:0c:7d:66: ac:6a:c4:9b:8a:b9:9d:fb:b9:49:d0:4e:12:d5:4b: c1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:94:87:17:8F:70:B2:8B:CD:0E:33:18:E9:76:FA:23:A6:A6:6A:A7 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ac:e6:52:58:9d:e6:7e:5d:a5:08:73:7e:4c:25:fb:fe:1c: 2c:be:54:6c:d6:77:31:0f:92:ec:0f:86:5c:04:bb:95:23:dd: 0f:c8:1c:f8:f3:e8:2d:56:8e:2c:77:b8:f6:3f:22:d5:79:2a: 1c:15:e1:66:ad:72:3e:b8:04:97:b3:b8:da:de:fc:e3:51:f9: 27:1e:76:21:39:c4:1b:85:f4:ac:d2:02:39:23:15:76:59:32: 90:b3:d0:c6:6a:9c:27:68:9e:08:47:af:97:52:eb:98:80:e8: 5b:76:0e:8a:30:80:b4:86:5a:d9:8a:d4:8c:fa:e5:b1:0d:d7: ab:ca:fa:75:d2:22:27:4a:9b:c5:fb:80:61:9d:e6:86:26:81: b6:00:01:96:16:94:42:7a:c2:7e:94:cd:b9:1c:87:2f:72:4f: 54:51:be:26:83:36:be:9b:e8:08:e9:70:a8:61:03:30:85:25: e6:da:86:b9:09:d6:e2:e2:43:68:67:84:19:95:76:10:e7:71: 1d:e6:5f:77:2d:ed:b6:ee:34:1d:d0:2d:6b:2f:22:a0:51:cd: e1:3c:21:e0:0e:13:10:7c:60:b1:25:f2:ec:07:7e:04:4f:c9: 83:80:1c:a7:ba:49:06:fa:30:19:14:d3:af:b5:6f:69:6f:10: 04:f0:b5:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrXmeCpxwGTyyjE6d2JZHtMNzLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTAzMTMwNjI1MDNaFw0yNTAzMTYwOTE4MDNaMDMxMTAvBgNV BAMTKDlGOTQ4NzE3OEY3MEIyOEJDRDBFMzMxOEU5NzZGQTIzQTZBNjZBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gKazQlxs6LaI5DXub6+1JIdd UIb1XKPnbjT3DI2quDkEWqMlJ7XVPMi2kstCLaIqaJxMm1PQM/XFJnpEoUUt8FpJ KM/YKuidZ+krZPuliYDgjN8z0JMpb9rLxsUlr2qJiUBTYtwpZqStzu0UxVTdwDtm O0dHEA5xDgrrcWvPKL8J3f2NlJ52F/7DpjhpkpUlF5ixtpJUDczrYkwxRLv77waF Pc8B5xT5W16Bo8m+YB8SaSLSOLv6xTfA/Qfz3cy2K1I5yn+j48RlI1Ycv1nko/YK PkCEnl05zKnjAQYGC7OaehOYxdqnqVsJcAx9ZqxqxJuKuZ37uUnQThLVS8FNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn5SHF49wsovNDjMY6Xb6I6amaqcwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACs5lJYneZ+XaUIc35MJfv+HCy+VGzWdzEP kuwPhlwEu5Uj3Q/IHPjz6C1Wjix3uPY/ItV5KhwV4Watcj64BJezuNre/ONR+Sce diE5xBuF9KzSAjkjFXZZMpCz0MZqnCdonghHr5dS65iA6Ft2DoowgLSGWtmK1Iz6 5bEN16vK+nXSIidKm8X7gGGd5oYmgbYAAZYWlEJ6wn6Uzbkchy9yT1RRviaDNr6b 6AjpcKhhAzCFJebahrkJ1uLiQ2hnhBmVdhDncR3mX3ct7bbuNB3QLWsvIqBRzeE8 IeAOExB8YLEl8uwHfgRPyYOAHKe6SQb6MBkU06+1b2lvEATwtbI= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:46 2025 by rpki-client