$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft File: 0110A7C2C5E7B74C89B036FFF78974619577D31C.mft (raw, json) Hash identifier: 8JoWuDQ2PTssw8Vnl+M/98OCYzN9r3irZthUIMnMphc= Subject key identifier: 47:D8:23:E6:10:07:2D:FC:74:27:B4:33:70:0A:9E:4D:07:9D:20:FF Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Certificate serial: 4AC89C440C1F4E7FDD7BE3CA5E695E8860AE70DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft Manifest number: 0323 Signing time: Tue 11 Mar 2025 08:32:11 +0000 Manifest this update: Tue 11 Mar 2025 08:27:11 +0000 Manifest next update: Fri 14 Mar 2025 19:22:11 +0000 Files and hashes: 1: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: /5HPI/v4iubSCQroqnhPXE4GtPrs5UXNLGr3H1hdfDc=) 2: 0110A7C2C5E7B74C89B036FFF78974619577D31C.crl (hash: NVrD+B7VbbJ8LB4QLIc4LHZsUHOV0Zm2+jbHXDEag10=) 3: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: 74pFaN/es75Ig0CrWkt2hfhPk+/GuU1QhSqPlkk7DKc=) 4: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: hf05sx3KHiq0EmV0xomKGB6bGQWNqcACIyo69C+x6+4=) 5: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: x4vPZ2aTLCzhdI+kT6TmSeDdittz+9oPzaV4G0leVHQ=) 6: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: sl/cNrLjimhUwgJlyiEL9+yWJE0qkI5bXAAutsG+vfs=) 7: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: y7zcsUC/TOyIwZvIqyc4CBiD2NSMQoBZl5emOVxFygs=) 8: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Pmh/HGW6XVZDRxgmyf7EREKf9d/bSITsOHkEqHsv+x0=) 9: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: 9H8WN2ev6lmK4SojAmFVs+iJbsTZqa4TXPxeNsz3ugU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 19:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c8:9c:44:0c:1f:4e:7f:dd:7b:e3:ca:5e:69:5e:88:60:ae:70:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Validity Not Before: Mar 11 08:27:11 2025 GMT Not After : Mar 14 19:22:11 2025 GMT Subject: CN=47D823E610072DFC7427B433700A9E4D079D20FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3f:9a:4a:c9:2c:b9:4b:20:5e:0a:4f:6d:49: 5e:e1:ec:77:f3:e8:c6:7d:45:9a:2c:b9:27:03:fd: d7:fb:7d:32:f9:2b:38:63:d3:77:22:33:0a:31:11: 12:fa:02:a3:e6:5d:0b:12:25:21:a2:4f:bd:7d:df: 6d:4f:23:ea:ef:36:0a:a8:07:e5:f9:f6:72:f1:18: bd:ff:b8:16:76:e3:4e:fa:05:0a:7b:13:59:99:a0: e7:0f:4c:1a:ca:fc:05:76:4a:2c:8c:df:4c:07:fc: 6d:fd:ca:fd:3a:ac:f2:76:44:16:51:f3:4f:04:13: dc:f6:e3:04:a8:2d:31:c0:82:34:f0:e7:72:2c:c5: 83:b6:dd:2f:da:28:d8:49:75:01:c2:d5:d9:19:94: 44:d5:90:91:1b:94:7e:a2:98:79:92:e6:08:e5:e3: 52:5f:91:a9:69:6d:3e:e6:eb:00:b9:72:16:c7:91: 59:fb:98:98:01:d2:8e:d9:36:18:a3:51:f1:5b:05: cf:00:e8:e4:a2:7f:ee:86:35:b3:02:18:45:54:a6: 18:a6:ed:cc:f2:4e:0c:e5:86:1a:85:70:f7:4c:82: 49:92:5c:72:3b:48:1c:80:64:58:1c:97:f4:80:0a: d1:13:90:76:e2:6e:f4:75:d2:17:c3:06:fd:04:7a: 8b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D8:23:E6:10:07:2D:FC:74:27:B4:33:70:0A:9E:4D:07:9D:20:FF X509v3 Authority Key Identifier: keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:07:ac:d8:ec:dc:9f:23:e6:22:83:08:0c:53:a8:5e:cb:d7: c2:0d:6f:16:c4:9d:9d:ed:3e:40:0b:9b:e4:06:6d:08:44:31: 62:7b:a3:df:ec:bd:db:06:8d:c2:60:0a:ef:c2:1d:09:b8:b2: be:0b:90:03:cd:4f:cf:ec:8f:87:f5:a2:4f:9b:00:b3:2b:21: e9:14:9f:c8:39:1f:d6:69:85:89:59:db:9f:96:3f:5e:12:af: 73:2f:31:a0:6c:e0:85:34:f6:be:b1:0c:e7:88:72:5a:c0:74: ab:46:32:59:39:f2:6e:dd:66:e9:85:0b:27:fd:c5:d1:88:1b: 01:d6:0a:66:fb:72:7e:6e:89:08:9c:e6:a6:9d:65:58:91:d1: 5b:97:d5:eb:d6:87:74:ce:75:87:7a:ec:c9:03:d4:25:9f:b3: 8e:bb:c9:4b:59:9c:f2:ef:d7:48:48:fb:94:b9:3c:7b:6b:eb: 52:55:cb:40:fd:8b:e7:90:f5:48:44:cc:a7:ca:26:53:d1:eb: b5:6c:f2:1b:a1:6b:fb:43:0d:50:7f:07:34:8a:18:21:2d:6a: 1a:88:9f:9a:c4:46:95:9f:f4:bb:0c:62:1b:67:41:e3:77:f0: e7:fd:bb:b9:80:ca:3e:5d:ed:03:9b:05:73:1e:71:b6:08:b4: b3:6a:6f:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsicRAwfTn/de+PKXmleiGCucNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5 NTc3RDMxQzAeFw0yNTAzMTEwODI3MTFaFw0yNTAzMTQxOTIyMTFaMDMxMTAvBgNV BAMTKDQ3RDgyM0U2MTAwNzJERkM3NDI3QjQzMzcwMEE5RTREMDc5RDIwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLP5pKySy5SyBeCk9tSV7h7Hfz 6MZ9RZosuScD/df7fTL5Kzhj03ciMwoxERL6AqPmXQsSJSGiT719321PI+rvNgqo B+X59nLxGL3/uBZ24076BQp7E1mZoOcPTBrK/AV2SiyM30wH/G39yv06rPJ2RBZR 808EE9z24wSoLTHAgjTw53IsxYO23S/aKNhJdQHC1dkZlETVkJEblH6imHmS5gjl 41JfkalpbT7m6wC5chbHkVn7mJgB0o7ZNhijUfFbBc8A6OSif+6GNbMCGEVUphim 7czyTgzlhhqFcPdMgkmSXHI7SByAZFgcl/SACtETkHbibvR10hfDBv0EeounAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9gj5hAHLfx0J7QzcAqeTQedIP8wHwYDVR0j BBgwFoAUARCnwsXnt0yJsDb/94l0YZV30xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzBkZmI1YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMC8wMTEwQTdDMkM1 RTdCNzRDODlCMDM2RkZGNzg5NzQ2MTk1NzdEMzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5NTc3 RDMxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0 NjE5NTc3RDMxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIHrNjs3J8j5iKDCAxTqF7L18INbxbEnZ3t PkALm+QGbQhEMWJ7o9/svdsGjcJgCu/CHQm4sr4LkAPNT8/sj4f1ok+bALMrIekU n8g5H9ZphYlZ25+WP14Sr3MvMaBs4IU09r6xDOeIclrAdKtGMlk58m7dZumFCyf9 xdGIGwHWCmb7cn5uiQic5qadZViR0VuX1evWh3TOdYd67MkD1CWfs467yUtZnPLv 10hI+5S5PHtr61JVy0D9i+eQ9UhEzKfKJlPR67Vs8huha/tDDVB/BzSKGCEtahqI n5rERpWf9LsMYhtnQeN38Of9u7mAyj5d7QObBXMecbYItLNqbw0= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:39 2025 by rpki-client