$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft File: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft (raw, json) Hash identifier: 9KXhZRm8h5aVosKTT6brgQL7rM0sqXP1F4Jk3MbyVh4= Subject key identifier: 1E:E7:CA:25:1C:84:9B:5C:B9:D0:B3:AE:47:3B:25:76:54:DA:CA:59 Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD Certificate issuer: /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Certificate serial: 35842665185F93577A2D2B3D5D78CA030E638D86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft Manifest number: 04C1 Signing time: Sat 05 Apr 2025 10:21:15 +0000 Manifest this update: Sat 05 Apr 2025 10:16:15 +0000 Manifest next update: Tue 08 Apr 2025 12:37:15 +0000 Files and hashes: 1: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: IG4+6wpyLqd68emapMZn0l0WwPLKecBNd2LG8+PvHPA=) 2: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: qjwbpIUKu8J7exTf84Eh6e0xxwi2ceN6FlK9iJ3EEpQ=) 3: 10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl (hash: 0FE5htYE5TB9Uyc4HZFSDIYUYrBQWmHpLdmk16kJ/xM=) 4: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: O+LAGn+3p/JmOKYseWU4KHzACzaz3Bqro9bKFNw6x2s=) 5: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: GCZ+ywLVdXETN59FcabnrSgZd/++3118oy4m7Uehvw0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:84:26:65:18:5f:93:57:7a:2d:2b:3d:5d:78:ca:03:0e:63:8d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD Validity Not Before: Apr 5 10:16:15 2025 GMT Not After : Apr 8 12:37:15 2025 GMT Subject: CN=1EE7CA251C849B5CB9D0B3AE473B257654DACA59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:ba:88:8e:db:4e:66:56:99:9e:c5:16:eb: 3c:e3:d1:e5:ce:31:cd:d8:dc:9b:78:d5:0f:11:46: 77:b5:ef:6a:a4:5f:11:ed:69:be:a6:d7:4d:b6:d2: 26:b9:1b:6a:86:af:5a:0e:83:5f:a8:e5:b1:50:3e: b7:0c:4d:ab:86:a6:be:a3:4c:90:1c:33:52:d7:2f: 2b:7e:42:08:60:92:30:15:bb:22:9d:9e:d2:24:4d: 31:ea:6e:fc:67:5a:9e:e5:4f:fc:5b:fa:6b:4c:b9: bd:26:b3:4c:b0:7b:43:4b:f0:dc:9a:6c:7b:e8:d5: aa:0f:39:92:4e:10:80:f5:a9:3e:f8:80:16:66:40: c6:2f:86:38:db:0d:42:64:d4:be:d1:47:a7:77:4e: d0:15:a7:57:e8:51:62:a0:54:26:dd:99:01:28:9f: 38:30:3b:17:01:fe:c6:44:14:ef:fe:57:ec:22:21: 5f:30:5d:c8:25:1e:4e:2e:03:28:71:88:ed:aa:43: cc:59:ba:3e:39:5c:f5:e5:69:65:81:83:bb:d9:3c: 3a:35:91:37:6b:06:8f:2b:26:a5:ba:25:4e:cd:c5: f9:ff:10:6a:b9:0c:91:b2:17:af:04:7a:2b:88:6a: ee:96:f3:82:21:cc:a7:da:6d:69:71:50:b0:c5:34: 07:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E7:CA:25:1C:84:9B:5C:B9:D0:B3:AE:47:3B:25:76:54:DA:CA:59 X509v3 Authority Key Identifier: keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cf:3c:75:9b:b3:94:91:e3:c2:cc:b1:04:7a:1d:61:af:d4: 7f:58:14:03:36:8a:12:19:54:f9:95:43:13:89:f4:b3:30:36: ac:75:53:1e:58:e7:9c:7e:17:c6:3f:41:8d:f5:2a:95:c1:f2: 7e:af:ef:ba:88:aa:73:94:c5:1d:f4:02:ea:07:8d:5f:79:22: fd:90:c8:d3:08:07:43:66:93:87:fd:45:60:15:87:63:0f:83: ad:2c:40:44:ce:f1:d5:06:61:d7:fe:48:5e:e7:70:aa:66:e4: 89:a7:19:51:68:92:2b:dc:6d:a7:72:a6:64:09:06:27:3f:2c: 04:63:3b:03:fe:85:40:37:a4:3a:7b:5b:cf:8b:ee:17:18:ed: 76:4c:0f:5b:f7:84:a3:c3:b3:54:de:ec:a0:e0:b0:63:34:19: a2:74:38:e1:51:37:90:22:92:25:22:b9:ac:16:d2:60:d9:94: c7:6b:fc:b2:04:44:6d:99:ea:08:87:7c:2c:d8:1c:f4:1c:ab: 28:9c:a8:9a:06:ed:a1:7f:f0:d6:27:9a:8e:71:b6:c8:cf:fa: a3:50:82:3d:c3:2a:b0:dd:58:2f:4e:74:1e:9a:21:30:6a:3f: fe:64:73:7f:d2:de:08:1b:12:c4:86:b2:76:4d:70:90:6b:10: 92:6e:60:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYQmZRhfk1d6LSs9XXjKAw5jjYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMy Q0M5QThBRDAeFw0yNTA0MDUxMDE2MTVaFw0yNTA0MDgxMjM3MTVaMDMxMTAvBgNV BAMTKDFFRTdDQTI1MUM4NDlCNUNCOUQwQjNBRTQ3M0IyNTc2NTREQUNBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwerqIjttOZlaZnsUW6zzj0eXO Mc3Y3Jt41Q8RRne172qkXxHtab6m10220ia5G2qGr1oOg1+o5bFQPrcMTauGpr6j TJAcM1LXLyt+QghgkjAVuyKdntIkTTHqbvxnWp7lT/xb+mtMub0ms0ywe0NL8Nya bHvo1aoPOZJOEID1qT74gBZmQMYvhjjbDUJk1L7RR6d3TtAVp1foUWKgVCbdmQEo nzgwOxcB/sZEFO/+V+wiIV8wXcglHk4uAyhxiO2qQ8xZuj45XPXlaWWBg7vZPDo1 kTdrBo8rJqW6JU7Nxfn/EGq5DJGyF68EeiuIau6W84IhzKfabWlxULDFNAeDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHufKJRyEm1y50LOuRzsldlTaylkwHwYDVR0j BBgwFoAUEMPhdjnIsZNin5fcvR70MyzJqK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzU2OGI1Yi1iNmFlLTQ1M2UtOGUxNi1kNTVkZDYzNTQ2MGIvMC8xMEMzRTE3NjM5 QzhCMTkzNjI5Rjk3RENCRDFFRjQzMzJDQzlBOEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMyQ0M5 QThBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0 MzMyQ0M5QThBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPPPHWbs5SR48LMsQR6HWGv1H9YFAM2ihIZ VPmVQxOJ9LMwNqx1Ux5Y55x+F8Y/QY31KpXB8n6v77qIqnOUxR30AuoHjV95Iv2Q yNMIB0Nmk4f9RWAVh2MPg60sQETO8dUGYdf+SF7ncKpm5ImnGVFokivcbadypmQJ Bic/LARjOwP+hUA3pDp7W8+L7hcY7XZMD1v3hKPDs1Te7KDgsGM0GaJ0OOFRN5Ai kiUiuawW0mDZlMdr/LIERG2Z6giHfCzYHPQcqyicqJoG7aF/8NYnmo5xtsjP+qNQ gj3DKrDdWC9OdB6aITBqP/5kc3/S3ggbEsSGsnZNcJBrEJJuYCg= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:24 2025 by rpki-client