$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft File: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft (raw, json) Hash identifier: VY/GkCLMdBEBI/PrtpA+0ib151amp3majjMaeI/NomE= Subject key identifier: DA:B0:FA:CD:C8:DB:46:5B:02:BE:06:62:8B:07:8C:24:D2:8A:AA:E4 Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 259CF34FFF473D392FCD96FEF72D1A08CDBDB65C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft Manifest number: 4C Signing time: Thu 03 Apr 2025 19:32:39 +0000 Manifest this update: Thu 03 Apr 2025 19:27:39 +0000 Manifest next update: Mon 07 Apr 2025 01:09:39 +0000 Files and hashes: 1: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: EfPoQqtxgLuobpoazcJOzehsaHb5tIneq6Zek5DzcaE=) 2: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl (hash: 2pj1kc6rFThIXPh/tmkoCm2WANnOkSaNbV3pqBu6RaM=) 3: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: J4isEyK1ySJtCWVpvhGVyfTYrZDUM8aentftYxqK7KA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 01:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9c:f3:4f:ff:47:3d:39:2f:cd:96:fe:f7:2d:1a:08:cd:bd:b6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Apr 3 19:27:39 2025 GMT Not After : Apr 7 01:09:39 2025 GMT Subject: CN=DAB0FACDC8DB465B02BE06628B078C24D28AAAE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d7:d2:46:ce:65:14:0b:a3:77:ef:36:0a:15: 57:f9:9d:32:7d:dd:f3:01:30:3b:aa:fe:f8:54:fc: 33:6a:13:5b:e1:a9:e4:a6:80:ec:69:fe:75:32:51: ba:fb:bf:32:02:1d:c1:12:18:72:a6:00:6e:6b:91: 39:e0:5f:fe:ef:06:5a:67:23:44:d3:c4:78:ff:87: c8:cf:93:8a:fa:00:38:bc:ae:d9:85:4e:9c:da:d2: 72:de:a5:27:c1:24:0d:b0:a5:1a:a2:24:5b:2a:12: f5:26:f9:91:6a:93:28:64:00:aa:fe:0e:97:8e:5a: f8:3e:ff:13:e6:38:85:22:5a:f5:bd:0d:a5:ac:3d: 2c:bc:e8:40:93:26:b0:4a:04:f8:ea:23:1d:a1:e4: 3d:a6:75:f5:3d:d8:ef:a5:14:95:29:ee:60:bb:7f: 71:a4:8f:57:97:c8:0f:48:24:f3:30:5b:2d:4c:1e: a1:04:c3:d0:b0:81:ae:b5:14:1f:a1:db:e1:9c:36: 5d:31:c9:fe:c6:8e:ad:27:7f:2a:9a:27:4e:7b:a5: 27:9c:de:5b:e6:32:16:4b:7e:b4:b6:0c:09:bb:a3: ce:7e:e4:ee:5c:ce:ba:f5:f5:d2:a6:92:e9:0a:66: 1f:1b:de:35:9f:c5:77:bf:5f:35:58:d1:6b:a3:6c: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B0:FA:CD:C8:DB:46:5B:02:BE:06:62:8B:07:8C:24:D2:8A:AA:E4 X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:98:6c:03:14:bc:1e:53:7d:8f:24:a5:d8:09:2e:01:18:96: 59:b1:4d:d6:a4:33:ac:be:ea:c1:91:16:98:b0:de:04:d2:f7: 98:58:85:1d:00:a9:37:25:3b:a1:b2:2e:ab:f6:3b:25:e8:19: 55:37:e3:06:99:eb:64:e4:98:c2:44:72:f9:3d:87:2b:e0:76: 35:65:55:36:fd:5e:0a:33:3d:27:60:37:6b:2c:b9:0d:e9:36: 6f:88:48:ee:39:2e:2d:86:e0:63:19:4b:80:86:5b:22:f8:86: 9e:44:cd:47:83:1f:3a:e8:cb:0f:a2:4c:18:8f:75:ff:34:10: 3b:37:9a:ac:85:4c:66:bc:80:42:be:65:ed:f1:1c:4d:83:03: 15:8c:fa:6d:10:fe:43:0c:2d:cc:94:d2:56:a3:26:03:e0:6a: ac:84:23:0a:e8:a9:a6:25:65:c9:9c:2d:91:dd:f7:c7:43:e0: 5b:e0:11:9b:2b:46:ee:7d:63:f7:6e:99:e7:be:9c:f0:80:b4: 07:81:bb:1c:2f:5b:16:58:b4:5c:bf:dc:8a:45:2e:15:80:5b: 10:3d:a8:e2:6d:30:f5:75:f4:9c:7d:30:85:c0:c7:aa:7d:7e: 87:65:f1:5d:12:f7:19:3a:03:f6:07:48:2a:ee:8c:1f:ae:80: af:05:66:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZzzT/9HPTkvzZb+9y0aCM29tlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNTA0MDMxOTI3MzlaFw0yNTA0MDcwMTA5MzlaMDMxMTAvBgNV BAMTKERBQjBGQUNEQzhEQjQ2NUIwMkJFMDY2MjhCMDc4QzI0RDI4QUFBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV19JGzmUUC6N37zYKFVf5nTJ9 3fMBMDuq/vhU/DNqE1vhqeSmgOxp/nUyUbr7vzICHcESGHKmAG5rkTngX/7vBlpn I0TTxHj/h8jPk4r6ADi8rtmFTpza0nLepSfBJA2wpRqiJFsqEvUm+ZFqkyhkAKr+ DpeOWvg+/xPmOIUiWvW9DaWsPSy86ECTJrBKBPjqIx2h5D2mdfU92O+lFJUp7mC7 f3Gkj1eXyA9IJPMwWy1MHqEEw9Cwga61FB+h2+GcNl0xyf7Gjq0nfyqaJ057pSec 3lvmMhZLfrS2DAm7o85+5O5czrr19dKmkukKZh8b3jWfxXe/XzVY0WujbChtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2rD6zcjbRlsCvgZiiweMJNKKquQwHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMw MzE0Q0ZBMzE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaYbAMUvB5TfY8kpdgJLgEYllmxTdakM6y+ 6sGRFpiw3gTS95hYhR0AqTclO6GyLqv2OyXoGVU34waZ62TkmMJEcvk9hyvgdjVl VTb9XgozPSdgN2ssuQ3pNm+ISO45Li2G4GMZS4CGWyL4hp5EzUeDHzroyw+iTBiP df80EDs3mqyFTGa8gEK+Ze3xHE2DAxWM+m0Q/kMMLcyU0lajJgPgaqyEIwroqaYl ZcmcLZHd98dD4FvgEZsrRu59Y/dumee+nPCAtAeBuxwvWxZYtFy/3IpFLhWAWxA9 qOJtMPV19Jx9MIXAx6p9fodl8V0S9xk6A/YHSCrujB+ugK8FZi4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:41 2025 by rpki-client