$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: WoCBcGKhjGTmSEy1Y2hJorm4JJ80NxRTiIUndEev+QM= Subject key identifier: 3D:A9:30:71:C4:91:E7:D5:01:1E:41:09:0B:23:3B:6B:F9:8C:FD:66 Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 4B1B75CE3DCE47AEDC19EBC28907997E7CB69DAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 04AB Signing time: Fri 27 Jun 2025 12:50:04 +0000 Manifest this update: Fri 27 Jun 2025 12:45:04 +0000 Manifest next update: Mon 30 Jun 2025 23:34:04 +0000 Files and hashes: 1: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: p3ZJWp10DNVtt196inCIGml39r6Gahitq6rHcUaX7N0=) 2: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: UlAh8zKWIPZHwNHmAImvacovNeaS9Y+qOJYX1Qlb9uc=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: YO37Y3eimIDdIo7K6UBGoqei0FiSorzSwQwRwyZtXq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 23:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1b:75:ce:3d:ce:47:ae:dc:19:eb:c2:89:07:99:7e:7c:b6:9d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Jun 27 12:45:04 2025 GMT Not After : Jun 30 23:34:04 2025 GMT Subject: CN=3DA93071C491E7D5011E41090B233B6BF98CFD66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:eb:33:58:9e:70:00:c2:01:11:b9:45:20: 13:4b:17:df:88:e9:4c:71:ff:7d:be:40:f3:52:00: b8:2a:7b:3a:c2:da:ad:7d:0f:66:86:23:c7:21:64: 97:fa:5c:d7:2f:b9:37:ae:03:11:81:6e:7b:3e:09: 80:9a:79:2d:61:8f:28:f8:e0:b0:b4:86:0b:28:ec: fc:a5:5b:9b:1b:b1:13:66:d1:89:07:07:c3:ed:26: 47:17:4c:ba:bb:45:0b:18:37:1b:ce:d0:8d:fc:7a: 56:b8:5b:c9:8f:d5:3d:a1:45:c1:01:06:48:f0:ba: 32:7e:98:73:94:99:2c:49:0d:81:31:c8:23:f6:86: 8b:19:60:c1:4c:d1:cb:67:fc:07:fd:39:83:ef:cb: 3b:96:1b:11:67:12:03:0c:da:87:ae:e7:15:5b:3f: db:3b:21:7a:ba:49:85:ee:b0:b7:b2:13:63:0b:05: b7:1a:98:0f:b0:cb:7d:dc:6b:4a:14:f7:28:dd:9b: 16:09:65:dd:b5:dc:12:f9:5e:48:82:9a:b2:ab:4b: 8d:20:5b:c3:f4:3b:b0:cd:28:12:33:30:4f:ba:1d: 9c:86:cd:7a:2c:bb:6e:62:fa:9b:2b:02:9c:d2:fc: f6:c9:a2:75:1a:25:b9:5c:1a:2b:3c:e8:34:9a:ec: 04:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A9:30:71:C4:91:E7:D5:01:1E:41:09:0B:23:3B:6B:F9:8C:FD:66 X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:00:31:25:35:6b:52:74:c3:56:ad:f4:49:19:e2:d8:de:e8: 0d:70:81:d1:84:9f:a6:6d:b1:3b:d9:0c:b1:ec:01:92:ae:06: d2:98:cd:c6:7d:48:40:3c:7e:4c:6b:89:5a:2d:e1:9d:fe:e9: b6:c6:8c:0a:93:8b:d6:b0:f7:32:23:17:bb:53:9a:52:60:84: bf:71:ba:ea:a1:ef:6d:32:4a:ea:d3:53:d3:0d:82:07:9d:97: 54:c2:d0:a5:00:8e:1d:e6:40:5c:c0:d8:3a:dc:23:d0:c3:b8: c3:48:76:85:04:f8:38:f1:b8:b5:4f:23:4d:44:c7:22:38:4a: 95:3f:73:39:8e:8a:37:4d:94:b0:6e:17:84:1a:4f:79:fd:42: 2c:f7:fb:21:f2:69:a8:7d:11:24:5e:86:ee:62:80:5e:31:48: 3e:5a:7d:4c:be:f1:fb:16:d5:9b:4f:44:d6:78:ce:cc:95:fb: 5d:35:4e:f3:19:10:20:7c:dd:69:cc:e6:ea:c1:7c:4d:9a:5d: ec:e4:55:61:13:7c:fc:1f:7a:1a:5f:9b:6b:02:a4:db:62:c2: 26:bf:61:32:50:f2:d3:f5:6c:76:52:43:86:8a:cd:0d:19:45: d3:5d:4a:07:58:8a:f1:df:8b:d9:b7:a2:cd:99:db:5d:81:f3: 96:8f:ce:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxt1zj3OR67cGevCiQeZfny2naowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTA2MjcxMjQ1MDRaFw0yNTA2MzAyMzM0MDRaMDMxMTAvBgNV BAMTKDNEQTkzMDcxQzQ5MUU3RDUwMTFFNDEwOTBCMjMzQjZCRjk4Q0ZENjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaqeszWJ5wAMIBEblFIBNLF9+I 6Uxx/32+QPNSALgqezrC2q19D2aGI8chZJf6XNcvuTeuAxGBbns+CYCaeS1hjyj4 4LC0hgso7PylW5sbsRNm0YkHB8PtJkcXTLq7RQsYNxvO0I38ela4W8mP1T2hRcEB BkjwujJ+mHOUmSxJDYExyCP2hosZYMFM0ctn/Af9OYPvyzuWGxFnEgMM2oeu5xVb P9s7IXq6SYXusLeyE2MLBbcamA+wy33ca0oU9yjdmxYJZd213BL5XkiCmrKrS40g W8P0O7DNKBIzME+6HZyGzXosu25i+psrApzS/PbJonUaJblcGis86DSa7ASdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPakwccSR59UBHkEJCyM7a/mM/WYwHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYAMSU1a1J0w1at9EkZ4tje6A1wgdGEn6Zt sTvZDLHsAZKuBtKYzcZ9SEA8fkxriVot4Z3+6bbGjAqTi9aw9zIjF7tTmlJghL9x uuqh720ySurTU9MNggedl1TC0KUAjh3mQFzA2DrcI9DDuMNIdoUE+DjxuLVPI01E xyI4SpU/czmOijdNlLBuF4QaT3n9Qiz3+yHyaah9ESRehu5igF4xSD5afUy+8fsW 1ZtPRNZ4zsyV+101TvMZECB83WnM5urBfE2aXezkVWETfPwfehpfm2sCpNtiwia/ YTJQ8tP1bHZSQ4aKzQ0ZRdNdSgdYivHfi9m3os2Z212B85aPzgg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:49 2025 by rpki-client