$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json) Hash identifier: 8JyptqZ5oka6coKYpADUBkUZ8vUWJ+Zj3PVo0HLZwlM= Subject key identifier: 75:F8:4C:C3:F5:D4:57:1A:07:2C:EE:28:CB:66:E3:D5:0E:58:00:4D Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 54DF7454ED54E2AAF8DFBBFAE4FDA4C87E4081EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft Manifest number: 04CA Signing time: Fri 04 Apr 2025 09:21:27 +0000 Manifest this update: Fri 04 Apr 2025 09:16:27 +0000 Manifest next update: Mon 07 Apr 2025 13:15:27 +0000 Files and hashes: 1: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: t/lGN+cHqnT2gGMIk9W0tULxw1M28YA7EezVMr+adtk=) 2: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: gglX1Ue7msHCOwrGTgIXx/95UkxFKDwgs3VTDwnAgLA=) 3: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: eQag8HLHZu1kiCQwBVORmEZkcS9c5Ry+vEgpFVk0Re8=) 4: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: 77Uaq405aecCjRZ1hW4Q+EEazhfZI1UiNjat3IG/Q8I=) 5: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: NloRN/KvVOfP2gOHZv5SKsFWw6tMgshmag0wYmz9lTQ=) 6: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: EGergzWDAprJ0pWqTKnjEV/FMMwX4Eg9ePrJ+3sYH/g=) 7: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: m/65e9cOFT5GxdbAl14pYw1g3WDPcrPd8V2NoqzZ7g4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 13:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:df:74:54:ed:54:e2:aa:f8:df:bb:fa:e4:fd:a4:c8:7e:40:81:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Apr 4 09:16:27 2025 GMT Not After : Apr 7 13:15:27 2025 GMT Subject: CN=75F84CC3F5D4571A072CEE28CB66E3D50E58004D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:1f:43:b0:3a:98:ec:b3:89:25:c3:dc:03: a6:27:85:5f:f1:50:f5:4f:98:a8:04:18:17:a9:d6: de:e9:61:4d:14:b9:b6:8c:f9:b3:c7:10:0f:0d:54: e4:52:0a:90:91:1a:2f:2e:ef:a0:ae:97:27:02:28: ac:c4:1b:50:32:0f:9a:9f:a7:48:72:b7:21:7b:f7: e8:9e:b6:28:a8:07:8c:53:df:6e:d0:9e:4b:ea:70: 68:3c:b9:d3:d7:85:32:2c:33:f3:bf:a4:f6:e2:3c: aa:41:e5:bb:e7:df:8f:d6:90:cd:ca:c6:fb:81:47: 80:54:1f:a2:ac:36:08:8a:fd:f3:53:a0:f4:bc:04: ba:b3:d8:61:32:39:05:e3:4e:1e:62:b2:e0:6b:b8: 6b:0c:4e:79:8f:48:ea:c3:57:11:2c:ad:cb:c4:ca: 53:ed:d2:fc:50:6b:f0:62:3a:0c:a0:25:14:8d:dd: 6a:3c:c2:7c:71:ee:0b:e9:36:67:e2:3c:de:18:ed: b1:a0:b6:2d:ef:b6:fd:07:72:0e:4e:af:02:84:40: 88:82:e4:a1:7d:e0:4b:b2:0a:2f:8a:a0:85:e8:75: e5:c9:e8:43:9f:67:b5:a6:ee:3b:3a:dc:32:af:01: 2f:7a:06:de:85:39:83:f7:a3:32:dd:6d:6c:ee:43: 4a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F8:4C:C3:F5:D4:57:1A:07:2C:EE:28:CB:66:E3:D5:0E:58:00:4D X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:60:38:48:fe:95:9a:04:94:0b:8b:0e:51:dc:28:97:1a:7e: c0:4c:a2:4b:6c:a5:9d:8d:d7:aa:62:e9:7b:27:cc:8e:49:ba: f9:82:00:13:b0:7a:21:7a:e2:1b:eb:d9:90:d8:85:6e:c6:52: 24:3e:33:cc:68:16:61:d5:30:2e:98:f1:56:9e:df:be:cc:ba: 12:02:19:9b:b8:7a:8d:d8:2d:76:6d:32:e3:b3:bb:31:23:93: 7f:1a:f1:8f:e2:a1:30:5b:53:08:27:7b:3f:56:0c:40:34:a7: 82:28:c9:11:0e:c2:78:e0:c0:b8:49:6e:8b:62:8e:8e:94:c5: 4c:c9:dd:05:a4:24:4c:8a:b9:cf:90:de:0e:41:89:d8:3a:d3: a6:3d:17:f0:d8:2b:2b:8e:6d:ef:9b:d4:c9:68:be:db:d3:f6: 98:ec:84:3a:f8:ae:31:1f:23:d0:83:77:54:dc:c1:9d:a8:d4: 5c:54:bc:e3:96:db:79:94:34:88:c6:67:cb:88:59:4c:18:7b: 6b:86:f3:65:d1:fe:b9:a3:7e:69:d9:22:fc:ed:43:51:7c:09: 0a:bf:d2:68:1b:ef:00:34:56:85:c6:bf:05:e2:47:86:b3:f0: 8a:53:ba:f6:94:72:44:96:e8:6b:35:0e:15:aa:ae:b0:ed:16: 5c:8a:02:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVN90VO1U4qr437v65P2kyH5Age4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNTA0MDQwOTE2MjdaFw0yNTA0MDcxMzE1MjdaMDMxMTAvBgNV BAMTKDc1Rjg0Q0MzRjVENDU3MUEwNzJDRUUyOENCNjZFM0Q1MEU1ODAwNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4h9DsDqY7LOJJcPcA6YnhV/x UPVPmKgEGBep1t7pYU0UubaM+bPHEA8NVORSCpCRGi8u76CulycCKKzEG1AyD5qf p0hytyF79+ietiioB4xT327QnkvqcGg8udPXhTIsM/O/pPbiPKpB5bvn34/WkM3K xvuBR4BUH6KsNgiK/fNToPS8BLqz2GEyOQXjTh5isuBruGsMTnmPSOrDVxEsrcvE ylPt0vxQa/BiOgygJRSN3Wo8wnxx7gvpNmfiPN4Y7bGgti3vtv0Hcg5OrwKEQIiC 5KF94EuyCi+KoIXodeXJ6EOfZ7Wm7js63DKvAS96Bt6FOYP3ozLdbWzuQ0rZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdfhMw/XUVxoHLO4oy2bj1Q5YAE0wHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUz N0NEQTY2MkM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1gOEj+lZoElAuLDlHcKJcafsBMoktspZ2N 16pi6XsnzI5JuvmCABOweiF64hvr2ZDYhW7GUiQ+M8xoFmHVMC6Y8Vae377MuhIC GZu4eo3YLXZtMuOzuzEjk38a8Y/ioTBbUwgnez9WDEA0p4IoyREOwnjgwLhJboti jo6UxUzJ3QWkJEyKuc+Q3g5Bidg606Y9F/DYKyuObe+b1MlovtvT9pjshDr4rjEf I9CDd1TcwZ2o1FxUvOOW23mUNIjGZ8uIWUwYe2uG82XR/rmjfmnZIvztQ1F8CQq/ 0mgb7wA0VoXGvwXiR4az8IpTuvaUckSW6Gs1DhWqrrDtFlyKArE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:10 2025 by rpki-client