$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft File: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft (raw, json) Hash identifier: k025wTaVszySfeoo9noEGH4d1mhmOUOmhS/2fdLAia8= Subject key identifier: F8:1C:54:22:56:FA:4A:0D:F6:DD:6B:D7:9E:BE:BB:17:ED:B0:EA:CE Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 Certificate issuer: /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Certificate serial: 3ED40D98052CC40165FD5622B83BBD0AD2B704BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft Manifest number: D4 Signing time: Thu 15 May 2025 03:21:34 +0000 Manifest this update: Thu 15 May 2025 03:16:34 +0000 Manifest next update: Sun 18 May 2025 12:13:34 +0000 Files and hashes: 1: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl (hash: Is7TkK7DTG7v9LXVOFa315Lze/MTYIFrOYVSVzqgpOk=) 2: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (hash: 9iQrzztLoFvpsEnzNnL5P1t1/bjXuRlh5hUEQazNDWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 12:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d4:0d:98:05:2c:c4:01:65:fd:56:22:b8:3b:bd:0a:d2:b7:04:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Validity Not Before: May 15 03:16:34 2025 GMT Not After : May 18 12:13:34 2025 GMT Subject: CN=F81C542256FA4A0DF6DD6BD79EBEBB17EDB0EACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:b3:74:bf:cb:61:09:82:bb:b5:1b:25:14: e4:9d:ee:4a:e4:de:d4:b9:0b:23:91:24:a6:50:e1: aa:ad:7d:c8:d7:6f:d7:49:1b:55:87:99:97:f4:5d: f8:db:d8:e6:fd:90:bd:81:f3:cc:ab:36:74:f5:dc: af:9f:9e:cf:ae:33:da:d9:54:e6:ad:42:6d:32:f0: 28:3a:f9:ef:7c:aa:5b:eb:e6:9b:26:b3:77:5a:05: cb:d2:64:82:5b:b9:c8:e3:62:2d:21:f3:05:69:51: 62:24:9e:6a:b7:eb:4f:2b:a5:a2:62:06:df:a2:09: 3b:34:4b:b7:3a:07:63:4a:aa:ac:b4:92:5e:b1:9c: 24:8e:47:ea:d0:cb:c6:10:72:23:2a:72:b2:0d:9d: 7a:33:8b:b8:4c:59:37:c9:87:d0:db:19:13:f8:e9: 4c:65:1a:e7:3d:e8:44:b8:84:da:45:b7:b4:91:7a: 5c:55:65:5d:24:5e:53:7b:40:5b:a4:19:84:a9:75: 5d:92:c3:6c:01:18:e1:4d:48:e2:ef:48:98:5c:24: e9:e1:fb:27:01:5d:03:65:17:8d:50:9e:88:c4:69: c9:e0:08:a5:db:e7:ed:ec:66:a7:31:fa:91:84:eb: f9:23:22:78:2f:d2:a8:da:39:f2:e5:80:ca:95:1e: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1C:54:22:56:FA:4A:0D:F6:DD:6B:D7:9E:BE:BB:17:ED:B0:EA:CE X509v3 Authority Key Identifier: keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e6:c7:f8:58:10:5d:25:15:0d:71:d2:88:6c:84:fa:5c:c2: 55:09:2d:9c:b3:4c:b3:23:8e:77:9d:11:1f:eb:c6:98:b1:80: 21:7d:7c:ed:8e:fe:08:33:85:32:4c:59:fd:2d:58:e5:42:e8: ab:76:64:bc:1a:f8:9c:74:8a:cf:53:72:fc:8f:7b:9d:a2:1c: 29:2f:1a:62:9c:e0:1e:5c:86:22:1d:75:3c:7d:4b:bb:af:28: 1f:4b:1b:5a:95:ed:d6:43:5e:54:e2:2f:b0:53:e4:66:9e:62: e1:80:ff:92:3d:ce:8d:99:d1:c5:1c:d0:66:86:43:8c:72:d3: 94:bb:e8:cd:31:c9:27:fe:48:a1:a3:41:e1:61:47:ec:18:cc: d3:4f:f8:b7:36:a0:fe:a5:21:71:34:fe:4f:05:89:b5:9f:f1: ff:ba:a2:c2:f8:e3:32:31:6a:fb:b7:08:ae:4a:f9:3c:db:48: 18:2f:53:74:9a:95:3e:93:3f:82:fb:7d:21:6d:61:da:76:e9: d0:c4:f5:bc:54:4d:d7:9f:e7:f8:15:2b:6e:15:f0:1c:f4:e3: bb:cb:a6:bb:ef:5d:1a:b5:7c:a0:4b:a7:82:08:71:17:1c:b2: 29:33:9d:b3:fd:aa:0e:cc:c7:91:92:33:f0:f1:01:2b:f7:30: 2e:df:99:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtQNmAUsxAFl/VYiuDu9CtK3BLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5 QTREN0JENjAeFw0yNTA1MTUwMzE2MzRaFw0yNTA1MTgxMjEzMzRaMDMxMTAvBgNV BAMTKEY4MUM1NDIyNTZGQTRBMERGNkRENkJENzlFQkVCQjE3RURCMEVBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUbN0v8thCYK7tRslFOSd7krk 3tS5CyORJKZQ4aqtfcjXb9dJG1WHmZf0Xfjb2Ob9kL2B88yrNnT13K+fns+uM9rZ VOatQm0y8Cg6+e98qlvr5psms3daBcvSZIJbucjjYi0h8wVpUWIknmq3608rpaJi Bt+iCTs0S7c6B2NKqqy0kl6xnCSOR+rQy8YQciMqcrINnXozi7hMWTfJh9DbGRP4 6UxlGuc96ES4hNpFt7SRelxVZV0kXlN7QFukGYSpdV2Sw2wBGOFNSOLvSJhcJOnh +ycBXQNlF41QnojEacngCKXb5+3sZqcx+pGE6/kjIngv0qjaOfLlgMqVHrBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+BxUIlb6Sg323WvXnr67F+2w6s4wHwYDVR0j BBgwFoAUsQ/M4Ccg6WTSk0Lg8738Z5pNe9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTU5MzQ0NS1hMjVkLTQ4ZTAtYWJjMi1hYjA1ZTA2NTA2NTUvMC9CMTBGQ0NFMDI3 MjBFOTY0RDI5MzQyRTBGM0JERkM2NzlBNEQ3QkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5QTRE N0JENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU1OTM0NDUtYTI1ZC00OGUwLWFi YzItYWIwNWUwNjUwNjU1LzAvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZD Njc5QTREN0JENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTmx/hYEF0lFQ1x0ohshPpcwlUJLZyzTLMj jnedER/rxpixgCF9fO2O/ggzhTJMWf0tWOVC6Kt2ZLwa+Jx0is9TcvyPe52iHCkv GmKc4B5chiIddTx9S7uvKB9LG1qV7dZDXlTiL7BT5GaeYuGA/5I9zo2Z0cUc0GaG Q4xy05S76M0xySf+SKGjQeFhR+wYzNNP+Lc2oP6lIXE0/k8FibWf8f+6osL44zIx avu3CK5K+TzbSBgvU3SalT6TP4L7fSFtYdp26dDE9bxUTdef5/gVK24V8Bz047vL prvvXRq1fKBLp4IIcRccsikznbP9qg7Mx5GSM/DxASv3MC7fmcA= -----END CERTIFICATE-----Generated at Thu May 15 20:44:42 2025 by rpki-client