$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft (raw, json) Hash identifier: Jwa8qpSChFQl5ySOKIg0ffXI9eSUyJHqpPK0wk1pmVE= Subject key identifier: A5:E1:A3:90:2E:5E:CA:1C:3F:63:8F:65:F9:8B:DC:FD:D6:60:1E:01 Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Certificate serial: 6514CEE21C0B5D08DBFC28D98ADD849802C8FD9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft Manifest number: C0 Signing time: Tue 03 Jun 2025 20:42:12 +0000 Manifest this update: Tue 03 Jun 2025 20:37:12 +0000 Manifest next update: Sat 07 Jun 2025 07:14:12 +0000 Files and hashes: 1: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: SnVzmW28Qau3350GHvbjUPG7RqP7p+g79S8zzI64Aww=) 2: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: gUosjAgXVzbDSO3SLIPnQM2jycHvd3EtJFyhi4PT5RM=) 3: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: wcDH9AdpabWfc3QDSNUcqcNVJyS1nJjFmeaYmT+uW0g=) 4: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl (hash: ivEnT6Q3ts6GJV96d/6GFJHveLOm8Dpn+G121N84XeQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:14:ce:e2:1c:0b:5d:08:db:fc:28:d9:8a:dd:84:98:02:c8:fd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Validity Not Before: Jun 3 20:37:12 2025 GMT Not After : Jun 7 07:14:12 2025 GMT Subject: CN=A5E1A3902E5ECA1C3F638F65F98BDCFDD6601E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:3f:1c:96:09:d3:52:77:f1:62:02:59:5e: ab:d0:eb:af:ce:6e:9b:46:bd:ca:eb:fa:4d:c9:13: 67:ef:7c:cc:1f:88:ef:12:65:07:44:e8:d2:d5:8c: af:80:ec:c2:35:14:f9:67:61:73:d5:53:36:42:bb: 5d:bf:cb:db:a6:06:a9:21:9b:d3:93:0f:27:e9:78: db:44:c0:31:fb:54:45:4f:b3:06:c2:85:41:ff:6a: 39:3c:60:2a:6e:5d:14:49:7f:64:6b:58:14:99:ab: 72:1d:98:b1:81:7d:7c:87:e5:df:32:88:12:38:11: f4:60:5b:3a:aa:fb:b4:54:f0:a5:ef:6c:16:c5:70: 06:ca:82:18:ea:b2:a6:d6:09:02:4d:0b:59:76:cd: 61:61:20:1b:93:6d:83:9d:20:dc:ad:9c:a2:69:31: 2f:7c:ed:08:b7:c8:59:50:de:db:1d:ea:d9:39:f5: 8c:e9:6b:56:31:7e:27:42:72:a0:e1:56:16:e6:fa: 9d:d3:54:68:df:9c:32:a9:1b:9a:33:2d:c8:10:3b: c1:87:d5:d2:a3:a9:4a:47:f7:a3:47:ad:e1:19:16: a5:c5:10:68:23:2d:34:f4:5e:9b:4c:76:82:73:c2: a3:69:de:80:41:61:52:8a:68:d4:7c:00:94:33:4f: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E1:A3:90:2E:5E:CA:1C:3F:63:8F:65:F9:8B:DC:FD:D6:60:1E:01 X509v3 Authority Key Identifier: keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:de:4e:3c:f9:65:89:bd:17:67:8b:35:e3:2b:9e:42:a3:46: 59:d8:d2:22:2a:ff:e4:4b:1b:57:a3:bd:50:5b:f5:2f:1b:d9: 44:c8:91:5d:ea:90:58:68:bb:4a:27:72:de:06:a3:f3:97:6d: 94:51:e8:9a:d4:d1:67:2a:35:40:b8:17:ec:b4:56:2b:94:e0: 65:91:4e:61:bb:80:03:b9:81:64:bf:94:96:48:01:e3:f5:e3: 70:a4:0f:b6:3a:7b:38:94:e6:31:87:33:17:a8:3e:df:59:2a: f0:77:69:78:4e:c7:df:88:96:9f:89:d6:13:42:b2:e2:89:4c: ef:62:54:ef:6e:90:a2:d5:4d:88:d9:47:aa:96:53:6b:40:bc: ea:70:4c:31:dd:bb:ed:64:d9:9b:3f:a1:72:f3:67:dc:58:60: 41:33:91:d7:bc:42:0d:f9:4b:d8:91:86:13:50:ac:ca:c8:3b: d4:87:f6:11:f8:b2:ef:53:c3:8a:98:4e:1e:7f:7f:ab:e7:80: 7f:56:d3:c0:28:c3:02:8b:e4:d1:17:62:c1:c9:8f:f4:d8:5d: 55:d3:95:35:d1:87:d2:e3:fa:68:99:30:f7:13:12:5b:4f:fa: 56:fa:cc:ce:c2:f1:3b:bd:42:9d:de:a6:c0:c1:16:27:71:c8: c9:2b:c6:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRTO4hwLXQjb/CjZit2EmALI/ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJC RjdCN0NGNDAeFw0yNTA2MDMyMDM3MTJaFw0yNTA2MDcwNzE0MTJaMDMxMTAvBgNV BAMTKEE1RTFBMzkwMkU1RUNBMUMzRjYzOEY2NUY5OEJEQ0ZERDY2MDFFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sT8clgnTUnfxYgJZXqvQ66/O bptGvcrr+k3JE2fvfMwfiO8SZQdE6NLVjK+A7MI1FPlnYXPVUzZCu12/y9umBqkh m9OTDyfpeNtEwDH7VEVPswbChUH/ajk8YCpuXRRJf2RrWBSZq3IdmLGBfXyH5d8y iBI4EfRgWzqq+7RU8KXvbBbFcAbKghjqsqbWCQJNC1l2zWFhIBuTbYOdINytnKJp MS987Qi3yFlQ3tsd6tk59Yzpa1YxfidCcqDhVhbm+p3TVGjfnDKpG5ozLcgQO8GH 1dKjqUpH96NHreEZFqXFEGgjLTT0XptMdoJzwqNp3oBBYVKKaNR8AJQzT4aJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpeGjkC5eyhw/Y49l+Yvc/dZgHgEwHwYDVR0j BBgwFoAUEJAr867BZfycw81yrcq/W797fPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC8xMDkwMkJGM0FF QzE2NUZDOUNDM0NENzJBRENBQkY1QkJGN0I3Q0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJCRjdC N0NGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjMDU1MjEtMDMzOC00ZjMxLWEy MDktNGY4NzhiZWY2MzhhLzAvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJG NUJCRjdCN0NGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDeTjz5ZYm9F2eLNeMrnkKjRlnY0iIq/+RL G1ejvVBb9S8b2UTIkV3qkFhou0onct4Go/OXbZRR6JrU0WcqNUC4F+y0ViuU4GWR TmG7gAO5gWS/lJZIAeP143CkD7Y6eziU5jGHMxeoPt9ZKvB3aXhOx9+Ilp+J1hNC suKJTO9iVO9ukKLVTYjZR6qWU2tAvOpwTDHdu+1k2Zs/oXLzZ9xYYEEzkde8Qg35 S9iRhhNQrMrIO9SH9hH4su9Tw4qYTh5/f6vngH9W08AowwKL5NEXYsHJj/TYXVXT lTXRh9Lj+miZMPcTEltP+lb6zM7C8Tu9Qp3epsDBFidxyMkrxiw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:46 2025 by rpki-client