$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: 9j+Z9NXzdFLSFXZah7VnQivAOn//lkKxYsNxA71O38s= Subject key identifier: 52:95:1F:FC:44:C5:24:6C:BF:D3:1A:D9:53:A6:58:1B:2F:2D:59:30 Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 470A6A198F53255E1FE4FD226C6944BC7F4139B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 02B4 Signing time: Fri 09 May 2025 08:30:02 +0000 Manifest this update: Fri 09 May 2025 08:25:02 +0000 Manifest next update: Mon 12 May 2025 11:08:02 +0000 Files and hashes: 1: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: yMquIfkMWPzoQ9Xm8XIQIX7dn6GlFMqBJ+LakF1xY4I=) 2: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: a7PTXgKIuAxPVgmOfgSfIiexn0wfFohzIh28xEr3Sns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0a:6a:19:8f:53:25:5e:1f:e4:fd:22:6c:69:44:bc:7f:41:39:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: May 9 08:25:02 2025 GMT Not After : May 12 11:08:02 2025 GMT Subject: CN=52951FFC44C5246CBFD31AD953A6581B2F2D5930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:7c:15:76:58:aa:77:20:f0:27:2c:eb:86: c8:c1:10:c0:74:05:66:f4:75:41:fb:9a:79:5a:77: 9c:1c:ab:e7:13:11:95:c9:82:1f:df:20:d5:87:32: af:8c:20:a7:07:c9:22:c9:7b:31:3f:74:a5:3f:9e: 72:08:cf:80:6d:5b:5f:32:65:f9:62:32:f4:6c:41: ad:f4:a0:43:d9:3e:d8:c7:bf:79:43:db:d6:24:5b: 75:4e:6d:a0:03:fc:bf:65:74:73:c7:e4:b1:08:18: 39:83:68:65:fb:8f:d0:97:13:c4:35:c6:ac:07:ea: 97:c4:b9:34:fd:52:53:96:0a:d7:5e:53:3f:a8:09: e3:3d:64:1c:da:f1:a2:d7:9a:d5:ab:74:6c:81:bf: 2b:f2:93:2b:b0:85:d4:1e:a0:82:91:8e:93:d1:23: 72:e8:37:dc:b5:e3:88:8c:85:fd:a3:57:c3:c2:e7: ed:d9:6a:1e:92:69:f2:51:d4:74:8c:a8:c6:5a:f7: d1:db:ab:b9:99:a0:46:24:cf:66:c2:37:7f:6b:64: e6:2e:1d:0a:ab:fe:31:0f:3b:cb:5d:4e:b3:5b:ea: ba:d6:89:09:33:95:96:c4:10:7f:92:5b:27:79:f3: b5:b4:bd:d8:a2:b2:c2:34:fa:01:12:f9:cf:b4:5a: 93:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:95:1F:FC:44:C5:24:6C:BF:D3:1A:D9:53:A6:58:1B:2F:2D:59:30 X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b1:8a:73:fb:f4:57:62:67:98:94:ad:1a:ce:2b:ce:8a:30: 07:50:1e:c7:a9:bd:ba:e7:4d:88:a8:64:54:fc:96:46:6c:58: 75:98:83:17:64:81:b8:da:4e:32:a3:e2:5f:cc:4d:6c:e6:d2: 45:dd:1d:8b:0b:f4:11:b7:aa:fc:29:d1:bf:88:e3:7c:b5:63: 82:31:63:c4:47:ee:b3:f2:c9:68:e3:7c:e2:bc:26:aa:82:a2: 3c:dc:3d:b4:e7:7c:f2:c5:5b:57:1b:54:19:d1:46:f2:c6:0a: 35:69:5a:fb:b4:d9:86:43:a7:de:85:2a:53:74:02:9d:10:e6: f9:b7:ab:33:ab:22:2e:bd:5a:a6:95:be:b6:fd:d2:64:c4:48: c7:39:d9:f4:7f:87:37:7f:b8:93:7f:c7:62:ac:50:58:5b:75: 5e:09:2a:71:3c:a8:82:d2:9b:6b:34:9a:fc:9f:47:47:d4:fc: 1b:49:d6:37:2d:3f:cf:ac:af:69:a5:d3:f9:36:26:7c:be:bd: 03:85:2d:29:ac:d3:06:0a:cd:8a:74:23:72:dc:18:62:52:68: 50:8a:a0:f5:78:95:cd:a9:31:cc:ad:27:2c:86:6d:a0:68:b5: 45:74:ec:7b:e5:bb:bf:2f:14:b0:2d:49:63:bf:a6:7a:69:c1: b9:bf:eb:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwpqGY9TJV4f5P0ibGlEvH9BObYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNTA1MDkwODI1MDJaFw0yNTA1MTIxMTA4MDJaMDMxMTAvBgNV BAMTKDUyOTUxRkZDNDRDNTI0NkNCRkQzMUFEOTUzQTY1ODFCMkYyRDU5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuHwVdliqdyDwJyzrhsjBEMB0 BWb0dUH7mnlad5wcq+cTEZXJgh/fINWHMq+MIKcHySLJezE/dKU/nnIIz4BtW18y ZfliMvRsQa30oEPZPtjHv3lD29YkW3VObaAD/L9ldHPH5LEIGDmDaGX7j9CXE8Q1 xqwH6pfEuTT9UlOWCtdeUz+oCeM9ZBza8aLXmtWrdGyBvyvykyuwhdQeoIKRjpPR I3LoN9y144iMhf2jV8PC5+3Zah6SafJR1HSMqMZa99Hbq7mZoEYkz2bCN39rZOYu HQqr/jEPO8tdTrNb6rrWiQkzlZbEEH+SWyd587W0vdiissI0+gES+c+0WpOTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpUf/ETFJGy/0xrZU6ZYGy8tWTAwHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWxinP79FdiZ5iUrRrOK86KMAdQHsepvbrn TYioZFT8lkZsWHWYgxdkgbjaTjKj4l/MTWzm0kXdHYsL9BG3qvwp0b+I43y1Y4Ix Y8RH7rPyyWjjfOK8JqqCojzcPbTnfPLFW1cbVBnRRvLGCjVpWvu02YZDp96FKlN0 Ap0Q5vm3qzOrIi69WqaVvrb90mTESMc52fR/hzd/uJN/x2KsUFhbdV4JKnE8qILS m2s0mvyfR0fU/BtJ1jctP8+sr2ml0/k2Jny+vQOFLSms0wYKzYp0I3LcGGJSaFCK oPV4lc2pMcytJyyGbaBotUV07Hvlu78vFLAtSWO/pnppwbm/6zc= -----END CERTIFICATE-----Generated at Sat May 10 12:22:37 2025 by rpki-client