$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft File: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json) Hash identifier: Y3LAqRAWILSHmXTS04gjIbE/U+JK+4crlcPirXiM64I= Subject key identifier: 38:A9:11:D3:4A:7B:0E:72:43:B7:35:E7:34:70:A5:77:E6:B2:CF:2B Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Certificate serial: 1F39D2FD3303D80E41F4CAE9D0DC12E69A330864 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft Manifest number: 04BE Signing time: Fri 04 Apr 2025 15:40:01 +0000 Manifest this update: Fri 04 Apr 2025 15:35:00 +0000 Manifest next update: Tue 08 Apr 2025 01:14:00 +0000 Files and hashes: 1: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: 5kphXit/LNBkVw8osIk/3vijQtN+EbxCtDf6F2cC7lU=) 2: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: zXSqQBvlzL5Qd7ukUJxUD+iaVT3g/E6NjHe1W2xTBhw=) 3: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: RQ8qS3znXvVJvNtPWPBA0wk2ih45H6PiyFCH7LH26So=) 4: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: nZcY2gfxAEyBR5vBIabcGR8YJ3boENfhzaPlLrFWCrY=) 5: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: QT2s5B9t6PnCCcNGSmiWwWVIE1Y3OmnLse/XbCIYmGE=) 6: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: bcv9+A8fnNa4nTKxyLUpprqdZBOoY3R/2lzSPgws1GM=) 7: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: ii86NXnr/WYmHnry427PiBTknuSG/osb8uEvWhmtijc=) 8: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: U7QS9bMS2+t1XHExH+JHZSXP/9sTh8XHPZioautpjoI=) 9: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: Jc3Bjwc0NpM8tWs7EPRXpo1XZ4ogHndYpl9zXECSo00=) 10: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: 7RROuYODVVhNO2+bjbdOGIl/UFrzyWOSbw909j2VmTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:39:d2:fd:33:03:d8:0e:41:f4:ca:e9:d0:dc:12:e6:9a:33:08:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Validity Not Before: Apr 4 15:35:00 2025 GMT Not After : Apr 8 01:14:00 2025 GMT Subject: CN=38A911D34A7B0E7243B735E73470A577E6B2CF2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:55:b9:58:14:0c:7d:81:01:f2:ab:85:fe:f5: 16:fa:b6:5d:ca:1d:06:3f:a3:5a:c4:16:9b:d5:5c: f5:d4:db:a0:ca:d3:3a:a8:42:bb:1e:f4:67:2c:b0: 4e:9a:fe:d8:51:b7:60:9b:88:ad:2c:90:4c:7b:11: f0:02:47:03:02:b6:45:89:13:8c:17:ef:71:09:15: 10:a2:45:2c:e8:71:5b:af:a8:c9:8c:c4:09:3a:84: 1b:72:5a:de:d2:18:fe:8a:75:cd:f3:44:c7:bb:f2: c1:a9:9d:e3:bb:a1:14:38:b0:81:91:b6:8d:32:36: 42:a5:35:f6:ea:92:4c:14:33:2a:08:5a:5a:12:b0: 22:d8:cd:88:ce:f1:8f:8a:17:d6:5c:8e:f1:65:51: d0:85:9f:27:30:f9:1d:5f:9a:1d:5e:bd:59:37:e2: 57:23:04:12:3e:56:83:04:70:40:c0:b5:e3:24:29: a5:67:25:59:8a:7e:42:59:5d:4a:9f:b6:4e:57:9b: 0f:b7:dc:d7:59:ad:2c:93:04:cc:44:aa:96:2c:a4: 4c:97:7d:33:3f:02:63:32:78:73:d1:43:61:2f:ce: 46:3b:14:69:ca:7b:b9:15:7c:c1:a7:11:c5:48:b5: 60:9e:b6:47:05:40:9e:fb:69:c3:c1:88:d3:d2:74: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A9:11:D3:4A:7B:0E:72:43:B7:35:E7:34:70:A5:77:E6:B2:CF:2B X509v3 Authority Key Identifier: keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:2c:7c:d2:6a:f8:e5:f8:8e:7e:f3:1d:64:ea:e5:86:b8:9a: 19:f2:66:4b:12:a0:41:8f:9d:ac:bf:bf:61:d0:5a:d2:47:48: 64:22:b1:e0:e5:0b:4f:ac:38:44:06:fe:1d:8c:66:c5:e3:7a: a5:9a:27:30:bf:37:70:b5:e4:f8:c0:d0:ec:fb:11:9b:f0:8a: f1:55:82:fd:44:cc:37:29:5b:4e:ca:9b:74:c0:f1:67:e0:f9: e0:f5:b6:7b:ef:a3:14:05:80:95:1e:49:f7:1a:bf:5e:ce:cf: 3b:4d:00:6f:4b:86:43:d9:37:cb:e3:48:59:af:a6:a2:e3:79: 4a:2d:b6:43:79:8f:38:f4:45:83:89:97:17:11:af:b4:71:81: 19:dd:f3:51:96:a7:d8:29:a1:2c:b7:99:0d:41:f3:2d:51:66: 90:22:a2:af:db:55:3b:18:9f:22:1f:17:df:62:3b:a5:08:3f: b2:8b:35:28:fa:4c:12:79:d6:1f:5d:d1:08:b6:59:d5:d4:8e: 27:1c:43:82:a1:7e:85:cc:b5:de:54:ac:bb:0e:bf:83:4b:0b: 23:5b:53:67:25:e7:89:32:77:83:88:5c:10:15:59:41:72:7b: b3:a5:79:4f:f5:57:25:6d:c4:e6:e6:a3:f1:07:61:33:3f:f0: 7a:7d:12:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHznS/TMD2A5B9Mrp0NwS5pozCGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1 REUwRUEwQzAeFw0yNTA0MDQxNTM1MDBaFw0yNTA0MDgwMTE0MDBaMDMxMTAvBgNV BAMTKDM4QTkxMUQzNEE3QjBFNzI0M0I3MzVFNzM0NzBBNTc3RTZCMkNGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVblYFAx9gQHyq4X+9Rb6tl3K HQY/o1rEFpvVXPXU26DK0zqoQrse9GcssE6a/thRt2CbiK0skEx7EfACRwMCtkWJ E4wX73EJFRCiRSzocVuvqMmMxAk6hBtyWt7SGP6Kdc3zRMe78sGpneO7oRQ4sIGR to0yNkKlNfbqkkwUMyoIWloSsCLYzYjO8Y+KF9ZcjvFlUdCFnycw+R1fmh1evVk3 4lcjBBI+VoMEcEDAteMkKaVnJVmKfkJZXUqftk5Xmw+33NdZrSyTBMxEqpYspEyX fTM/AmMyeHPRQ2EvzkY7FGnKe7kVfMGnEcVItWCetkcFQJ77acPBiNPSdC7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOKkR00p7DnJDtzXnNHCld+ayzyswHwYDVR0j BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw RUEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYwN2Q5MjktNGNhOC00ZjUzLWEy OTgtNWUzM2JlMWY4NjA0LzAvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3 OUU1REUwRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMsfNJq+OX4jn7zHWTq5Ya4mhnyZksSoEGP nay/v2HQWtJHSGQiseDlC0+sOEQG/h2MZsXjeqWaJzC/N3C15PjA0Oz7EZvwivFV gv1EzDcpW07Km3TA8Wfg+eD1tnvvoxQFgJUeSfcav17OzztNAG9LhkPZN8vjSFmv pqLjeUottkN5jzj0RYOJlxcRr7RxgRnd81GWp9gpoSy3mQ1B8y1RZpAioq/bVTsY nyIfF99iO6UIP7KLNSj6TBJ51h9d0Qi2WdXUjiccQ4KhfoXMtd5UrLsOv4NLCyNb U2cl54kyd4OIXBAVWUFye7OleU/1VyVtxObmo/EHYTM/8Hp9EqU= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:05 2025 by rpki-client