$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: jmJmDm05TnqeYMikjwYDm0kOXiIkntRyFmkpakg+ils= Subject key identifier: EE:F8:30:DB:B9:08:79:B1:8D:2E:71:C9:B5:79:63:1E:AD:3A:24:C9 Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 15229D76D825653C03E9F2FC3A430A3164B2D375 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 038A Signing time: Thu 17 Apr 2025 21:01:01 +0000 Manifest this update: Thu 17 Apr 2025 20:56:01 +0000 Manifest next update: Mon 21 Apr 2025 04:40:01 +0000 Files and hashes: 1: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) 2: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: otJntjyd6Yyzlx9BeBXuShL6ChDB4wM7+71spo2na1c=) 3: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) 4: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 04:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:22:9d:76:d8:25:65:3c:03:e9:f2:fc:3a:43:0a:31:64:b2:d3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Apr 17 20:56:01 2025 GMT Not After : Apr 21 04:40:01 2025 GMT Subject: CN=EEF830DBB90879B18D2E71C9B579631EAD3A24C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:10:a0:84:72:21:0f:46:59:f0:a4:b9:d8:4b: 93:0c:3d:cd:4d:f7:bd:0a:53:95:c0:01:f3:79:94: 39:36:74:99:3d:45:a9:c8:bd:d4:8a:5c:2f:56:1e: 49:4c:9c:24:c0:6d:11:63:4b:02:ba:8e:59:11:d1: 29:b7:0e:69:20:69:f8:f8:c2:e4:56:43:2a:2a:d3: 06:04:0f:50:7b:12:63:8b:07:85:98:42:2a:fd:31: 56:a2:c4:48:fe:6b:19:40:88:66:79:c8:a2:6f:ae: 64:29:b8:66:b1:32:66:90:cf:43:01:46:94:e8:45: d2:18:ae:3c:58:ff:57:87:7e:96:1d:cc:32:bb:9e: 0c:b7:83:8b:bf:02:4d:be:96:6d:ef:af:2f:68:62: 91:97:23:fe:e0:5d:e6:49:e0:b3:96:23:ee:8a:1f: 57:3e:c2:bd:15:e9:1d:a7:64:28:e3:01:98:23:34: 5a:7e:1d:62:98:85:55:31:05:30:12:fd:6d:a6:10: 0e:51:1c:e1:31:50:af:6a:27:b6:ca:99:c0:a9:4b: 84:5a:ca:91:7d:c7:0f:c3:cb:00:8e:78:2e:a6:5a: f9:e8:1d:04:27:76:38:ee:f5:be:1b:1d:d0:c1:47: 14:1c:d8:27:72:98:2c:41:10:1f:32:93:ad:00:00: 94:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F8:30:DB:B9:08:79:B1:8D:2E:71:C9:B5:79:63:1E:AD:3A:24:C9 X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a9:d4:65:b3:ab:f4:b1:b3:52:c5:eb:9f:4c:83:b4:05:c8: c6:ab:77:e9:f8:b2:72:8f:24:bb:f8:e5:1c:26:8e:f8:b9:59: 03:3c:d5:25:43:12:70:08:3b:aa:a7:8f:64:e2:7f:b9:e8:90: 01:10:5c:94:ef:eb:1a:03:47:53:df:72:4f:d9:68:ac:50:4e: 7c:fa:f0:b9:4a:6d:86:a5:d7:75:7f:95:56:58:73:f6:6b:b2: 6c:aa:40:57:83:cd:31:ed:fc:a9:58:dd:de:c7:a1:26:0a:c2: 8e:d3:8b:bf:75:b9:6a:d5:40:2a:25:4c:9a:1d:b1:71:5b:7e: 68:6d:21:0d:8f:d6:ff:d8:56:ef:93:0d:fd:43:ba:33:92:3e: f0:e1:73:6a:d2:40:cb:0c:22:92:70:89:bb:26:80:d6:a0:d3: 7b:11:57:e8:a5:a4:54:ea:7a:8d:79:ef:89:e1:a9:56:7e:86: 1d:64:ba:ea:cb:64:cc:19:47:bb:75:41:0d:11:f3:6c:f1:b3: 0c:e6:9d:34:37:e6:17:74:74:c9:a1:00:a8:c4:36:96:c4:93: 60:f9:78:b8:28:f8:c2:93:0c:81:70:1f:4e:23:55:36:87:9b: 3b:da:4b:de:3a:eb:0b:26:16:72:1b:67:99:36:56:ed:d2:12: e6:6f:44:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSKddtglZTwD6fL8OkMKMWSy03UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTA0MTcyMDU2MDFaFw0yNTA0MjEwNDQwMDFaMDMxMTAvBgNV BAMTKEVFRjgzMERCQjkwODc5QjE4RDJFNzFDOUI1Nzk2MzFFQUQzQTI0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhEKCEciEPRlnwpLnYS5MMPc1N 970KU5XAAfN5lDk2dJk9RanIvdSKXC9WHklMnCTAbRFjSwK6jlkR0Sm3Dmkgafj4 wuRWQyoq0wYED1B7EmOLB4WYQir9MVaixEj+axlAiGZ5yKJvrmQpuGaxMmaQz0MB RpToRdIYrjxY/1eHfpYdzDK7ngy3g4u/Ak2+lm3vry9oYpGXI/7gXeZJ4LOWI+6K H1c+wr0V6R2nZCjjAZgjNFp+HWKYhVUxBTAS/W2mEA5RHOExUK9qJ7bKmcCpS4Ra ypF9xw/DywCOeC6mWvnoHQQndjju9b4bHdDBRxQc2CdymCxBEB8yk60AAJQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7vgw27kIebGNLnHJtXljHq06JMkwHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWp1GWzq/Sxs1LF659Mg7QFyMard+n4snKP JLv45Rwmjvi5WQM81SVDEnAIO6qnj2Tif7nokAEQXJTv6xoDR1Pfck/ZaKxQTnz6 8LlKbYal13V/lVZYc/ZrsmyqQFeDzTHt/KlY3d7HoSYKwo7Ti791uWrVQColTJod sXFbfmhtIQ2P1v/YVu+TDf1DujOSPvDhc2rSQMsMIpJwibsmgNag03sRV+ilpFTq eo1574nhqVZ+hh1kuurLZMwZR7t1QQ0R82zxswzmnTQ35hd0dMmhAKjENpbEk2D5 eLgo+MKTDIFwH04jVTaHmzvaS9466wsmFnIbZ5k2Vu3SEuZvRAs= -----END CERTIFICATE-----Generated at Sat Apr 19 12:18:18 2025 by rpki-client