$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft File: 0110A7C2C5E7B74C89B036FFF78974619577D31C.mft (raw, json) Hash identifier: Re0A1T12wuobDQEt4rV8Zu7vlHW12lrEWVj6XiF6l8w= Subject key identifier: 9B:17:3C:C0:1F:8D:A3:AC:5D:86:C1:A8:58:76:C9:21:0B:74:4A:B8 Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Certificate serial: 70B4CF610BE700CB6F60D455E688A9E6D549CDCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft Manifest number: 0319 Signing time: Sun 16 Feb 2025 16:12:07 +0000 Manifest this update: Sun 16 Feb 2025 16:07:07 +0000 Manifest next update: Wed 19 Feb 2025 23:09:07 +0000 Files and hashes: 1: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: hf05sx3KHiq0EmV0xomKGB6bGQWNqcACIyo69C+x6+4=) 2: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: sl/cNrLjimhUwgJlyiEL9+yWJE0qkI5bXAAutsG+vfs=) 3: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Pmh/HGW6XVZDRxgmyf7EREKf9d/bSITsOHkEqHsv+x0=) 4: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: x4vPZ2aTLCzhdI+kT6TmSeDdittz+9oPzaV4G0leVHQ=) 5: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: /5HPI/v4iubSCQroqnhPXE4GtPrs5UXNLGr3H1hdfDc=) 6: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: 9H8WN2ev6lmK4SojAmFVs+iJbsTZqa4TXPxeNsz3ugU=) 7: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: 74pFaN/es75Ig0CrWkt2hfhPk+/GuU1QhSqPlkk7DKc=) 8: 0110A7C2C5E7B74C89B036FFF78974619577D31C.crl (hash: lcLXL0ZD9hcvMuhkUjYd63HP3pyRO4RKSIt8muX3hT0=) 9: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: y7zcsUC/TOyIwZvIqyc4CBiD2NSMQoBZl5emOVxFygs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b4:cf:61:0b:e7:00:cb:6f:60:d4:55:e6:88:a9:e6:d5:49:cd:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Validity Not Before: Feb 16 16:07:07 2025 GMT Not After : Feb 19 23:09:07 2025 GMT Subject: CN=9B173CC01F8DA3AC5D86C1A85876C9210B744AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:ab:23:89:17:61:96:8e:0f:7f:63:0e:86: b6:d8:5a:37:59:a7:78:b1:5d:c2:3d:86:b1:2e:4b: e3:2a:a0:72:bf:6a:ef:51:e0:97:30:fa:6f:70:68: 21:80:ae:99:30:1e:76:3f:9b:aa:b3:73:67:b1:37: 3b:76:44:5f:c8:31:bb:56:7c:72:58:61:90:47:08: ae:05:a9:84:ca:e5:cd:2e:b1:79:81:dc:bd:6e:ee: 19:9f:ab:2d:3f:cb:58:b7:e9:bc:29:1f:05:f3:ea: 34:b5:c8:35:c1:8e:8b:b7:99:e7:9c:1e:7f:86:a0: 58:42:c2:30:b6:1d:27:14:13:66:68:3a:e1:cc:d0: f4:c6:2e:32:fa:d4:71:8c:e1:55:30:93:15:85:14: f5:0e:29:b6:98:31:66:c0:5e:27:64:0e:40:6e:aa: 73:4b:79:5d:11:8d:c6:98:e6:31:73:13:67:fd:ae: a0:eb:89:3c:3f:1e:33:cf:88:23:b4:1f:f2:a0:0a: 1c:5f:4f:31:53:a5:27:d4:ae:df:1c:27:06:92:20: 0b:6a:c1:12:ac:cc:b5:5b:58:0f:91:67:c4:6d:e8: 32:8b:5f:83:d3:31:05:8c:f8:7e:b2:56:37:11:92: 08:28:ca:e8:ee:66:a2:4d:26:ee:97:19:af:88:bc: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:17:3C:C0:1F:8D:A3:AC:5D:86:C1:A8:58:76:C9:21:0B:74:4A:B8 X509v3 Authority Key Identifier: keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:60:58:21:ab:bc:b8:94:61:88:17:4a:b8:69:28:f8:6d:e0: 65:f5:4c:a3:59:12:89:e9:a0:1c:2b:c0:13:dc:2d:68:f8:db: 4c:b4:76:2c:e9:91:33:73:dc:a9:60:c1:85:3d:63:a1:9b:ad: a0:81:b4:ff:28:cf:d8:14:f8:1d:be:8e:7c:cb:fc:32:aa:7b: 90:16:32:03:b0:9d:70:51:fa:45:aa:d1:8c:21:8b:9c:fc:f6: dd:7d:7b:27:75:7a:04:8e:6c:87:1f:64:63:39:43:b1:d3:a9: 3e:ce:3b:51:f1:ae:b6:fd:68:d4:34:86:bb:c9:bb:9e:60:95: e3:bf:c0:02:5f:85:0d:a2:bc:7f:b7:6b:60:cb:67:f6:ce:ff: bf:8c:5a:d9:b4:b3:50:60:76:66:12:6e:04:cd:13:56:a8:62: 3c:aa:f8:19:27:e0:21:51:56:2e:1b:a4:d7:9c:e6:43:93:0d: 4b:64:22:15:f6:3e:77:8d:83:99:30:90:1d:82:19:4c:b6:c9: 0b:2e:fa:ae:0b:9c:dd:4f:d4:c6:fe:21:42:65:68:22:30:e9: 5d:79:d1:80:a2:01:8b:20:f8:6d:e0:eb:12:1d:0a:6f:56:ab: 46:89:44:5c:64:b7:ce:f7:33:d9:ee:46:76:14:cf:62:a5:10: 2c:97:02:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLTPYQvnAMtvYNRV5oip5tVJzcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5 NTc3RDMxQzAeFw0yNTAyMTYxNjA3MDdaFw0yNTAyMTkyMzA5MDdaMDMxMTAvBgNV BAMTKDlCMTczQ0MwMUY4REEzQUM1RDg2QzFBODU4NzZDOTIxMEI3NDRBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jKsjiRdhlo4Pf2MOhrbYWjdZ p3ixXcI9hrEuS+MqoHK/au9R4Jcw+m9waCGArpkwHnY/m6qzc2exNzt2RF/IMbtW fHJYYZBHCK4FqYTK5c0usXmB3L1u7hmfqy0/y1i36bwpHwXz6jS1yDXBjou3meec Hn+GoFhCwjC2HScUE2ZoOuHM0PTGLjL61HGM4VUwkxWFFPUOKbaYMWbAXidkDkBu qnNLeV0RjcaY5jFzE2f9rqDriTw/HjPPiCO0H/KgChxfTzFTpSfUrt8cJwaSIAtq wRKszLVbWA+RZ8Rt6DKLX4PTMQWM+H6yVjcRkggoyujuZqJNJu6XGa+IvKo5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmxc8wB+No6xdhsGoWHbJIQt0SrgwHwYDVR0j BBgwFoAUARCnwsXnt0yJsDb/94l0YZV30xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzBkZmI1YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMC8wMTEwQTdDMkM1 RTdCNzRDODlCMDM2RkZGNzg5NzQ2MTk1NzdEMzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5NTc3 RDMxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0 NjE5NTc3RDMxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxgWCGrvLiUYYgXSrhpKPht4GX1TKNZEonp oBwrwBPcLWj420y0dizpkTNz3KlgwYU9Y6GbraCBtP8oz9gU+B2+jnzL/DKqe5AW MgOwnXBR+kWq0Ywhi5z89t19eyd1egSObIcfZGM5Q7HTqT7OO1Hxrrb9aNQ0hrvJ u55gleO/wAJfhQ2ivH+3a2DLZ/bO/7+MWtm0s1BgdmYSbgTNE1aoYjyq+Bkn4CFR Vi4bpNec5kOTDUtkIhX2PneNg5kwkB2CGUy2yQsu+q4LnN1P1Mb+IUJlaCIw6V15 0YCiAYsg+G3g6xIdCm9Wq0aJRFxkt873M9nuRnYUz2KlECyXApg= -----END CERTIFICATE-----Generated at Mon Feb 17 07:19:38 2025 by rpki-client