$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft (raw, json) Hash identifier: pfvmNjPNM6zN0VYRKGaJS/BXnheXgQMvi4hQg/+By2I= Subject key identifier: 18:0C:89:D2:00:27:10:D6:48:97:98:29:4C:FA:33:2B:40:E6:73:8C Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Certificate serial: 08CF19B62C57C0D8C3139395F64B7D1554ADD507 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft Manifest number: B4 Signing time: Wed 07 May 2025 23:41:46 +0000 Manifest this update: Wed 07 May 2025 23:36:46 +0000 Manifest next update: Sun 11 May 2025 11:37:46 +0000 Files and hashes: 1: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: wcDH9AdpabWfc3QDSNUcqcNVJyS1nJjFmeaYmT+uW0g=) 2: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl (hash: LiVxx22krINuuKwjnEKKa55NekCL3647XVIH+u71wP4=) 3: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: SnVzmW28Qau3350GHvbjUPG7RqP7p+g79S8zzI64Aww=) 4: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: gUosjAgXVzbDSO3SLIPnQM2jycHvd3EtJFyhi4PT5RM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 11:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cf:19:b6:2c:57:c0:d8:c3:13:93:95:f6:4b:7d:15:54:ad:d5:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Validity Not Before: May 7 23:36:46 2025 GMT Not After : May 11 11:37:46 2025 GMT Subject: CN=180C89D2002710D6489798294CFA332B40E6738C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:06:d6:c4:a8:36:cd:72:fa:cc:39:69:20: 21:52:74:d6:f8:b2:bc:f2:5a:cd:dd:3b:58:a9:eb: d8:ef:b6:24:ee:89:4a:e5:5e:d9:31:4b:88:ea:8d: fb:3a:14:d6:ba:8e:0d:ae:39:10:22:5e:19:29:e1: f5:08:7a:80:cb:5b:7f:aa:51:d5:a1:9b:c7:88:38: 8e:2e:12:55:37:8f:29:a9:b2:64:d7:2d:70:bc:67: 42:8a:3a:9a:87:4b:fd:e5:29:e4:62:a3:fa:e9:21: d1:81:95:9b:8d:32:d6:d3:e7:61:2b:a4:d9:7c:23: 54:b4:87:34:99:3d:b6:e8:92:5c:06:42:d0:2a:61: 6b:2e:bf:f9:20:3c:64:00:55:b1:fc:8e:fe:69:30: 1f:60:d3:e9:ff:30:ea:5b:f6:50:26:f7:25:1f:f8: 3e:62:d6:21:dd:4f:ad:b0:50:a4:a5:6c:3f:34:55: 31:f2:bc:18:99:b8:90:6c:38:8a:7f:9b:7e:4a:c5: 8f:78:18:52:85:b5:19:d9:d7:bd:09:16:14:f9:c2: 1b:23:fa:91:e3:c7:f5:02:c3:41:fa:76:16:43:ff: cb:46:0d:29:23:60:b5:f6:d8:4e:b6:8a:a7:40:32: b7:a2:60:0d:bd:33:f2:de:a2:5c:d0:4d:c1:ed:80: 5f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0C:89:D2:00:27:10:D6:48:97:98:29:4C:FA:33:2B:40:E6:73:8C X509v3 Authority Key Identifier: keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d0:94:88:32:ff:8d:a6:b7:ca:1a:ae:dc:d6:04:5f:91:f5: 21:27:6a:e8:68:b6:fa:47:cc:7c:70:64:8f:22:5b:a4:0a:e2: c0:c9:66:e7:30:52:4e:f9:d1:39:55:a7:90:0d:a8:ad:7b:18: 0d:df:84:b7:46:a1:50:c1:ca:97:d0:55:99:a1:fe:dd:6b:9c: c2:38:0a:29:5e:7f:ab:44:72:92:a8:cf:b1:bb:dc:4d:ef:59: 8d:b1:fc:0b:d5:99:1a:3f:f9:f9:13:01:a5:8f:94:e9:4b:9f: 33:18:54:82:d2:fb:15:74:83:9d:48:57:c6:3f:88:d4:92:bf: 8f:58:ab:16:f0:ee:17:94:fb:a9:27:98:c2:e2:39:2e:ef:42: 28:5a:c1:3a:5e:3c:ee:be:a0:b2:d5:6d:86:62:1b:a9:98:67: 8c:63:04:f2:cf:ee:df:de:df:b7:f6:10:8c:fd:0e:e2:e1:d0: a7:e5:d1:2d:0d:84:54:d4:95:d8:6d:f8:93:02:b4:f3:3c:03: a1:a0:03:11:8c:97:44:da:5b:7a:d7:56:86:35:5f:da:05:d7: e6:03:4e:c1:a3:68:82:fd:8d:57:e1:f3:a2:a7:06:76:e8:7b: d7:d8:cf:05:03:cb:ed:95:1a:43:32:fd:56:b2:55:82:30:81: 7f:01:98:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCM8ZtixXwNjDE5OV9kt9FVSt1QcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJC RjdCN0NGNDAeFw0yNTA1MDcyMzM2NDZaFw0yNTA1MTExMTM3NDZaMDMxMTAvBgNV BAMTKDE4MEM4OUQyMDAyNzEwRDY0ODk3OTgyOTRDRkEzMzJCNDBFNjczOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+AbWxKg2zXL6zDlpICFSdNb4 srzyWs3dO1ip69jvtiTuiUrlXtkxS4jqjfs6FNa6jg2uORAiXhkp4fUIeoDLW3+q UdWhm8eIOI4uElU3jympsmTXLXC8Z0KKOpqHS/3lKeRio/rpIdGBlZuNMtbT52Er pNl8I1S0hzSZPbboklwGQtAqYWsuv/kgPGQAVbH8jv5pMB9g0+n/MOpb9lAm9yUf +D5i1iHdT62wUKSlbD80VTHyvBiZuJBsOIp/m35KxY94GFKFtRnZ170JFhT5whsj +pHjx/UCw0H6dhZD/8tGDSkjYLX22E62iqdAMreiYA29M/LeolzQTcHtgF/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGAyJ0gAnENZIl5gpTPozK0Dmc4wwHwYDVR0j BBgwFoAUEJAr867BZfycw81yrcq/W797fPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC8xMDkwMkJGM0FF QzE2NUZDOUNDM0NENzJBRENBQkY1QkJGN0I3Q0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJCRjdC N0NGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjMDU1MjEtMDMzOC00ZjMxLWEy MDktNGY4NzhiZWY2MzhhLzAvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJG NUJCRjdCN0NGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvQlIgy/42mt8oartzWBF+R9SEnauhotvpH zHxwZI8iW6QK4sDJZucwUk750TlVp5ANqK17GA3fhLdGoVDBypfQVZmh/t1rnMI4 Cilef6tEcpKoz7G73E3vWY2x/AvVmRo/+fkTAaWPlOlLnzMYVILS+xV0g51IV8Y/ iNSSv49Yqxbw7heU+6knmMLiOS7vQihawTpePO6+oLLVbYZiG6mYZ4xjBPLP7t/e 37f2EIz9DuLh0Kfl0S0NhFTUldht+JMCtPM8A6GgAxGMl0TaW3rXVoY1X9oF1+YD TsGjaIL9jVfh86KnBnboe9fYzwUDy+2VGkMy/VayVYIwgX8BmB4= -----END CERTIFICATE-----Generated at Thu May 8 23:05:25 2025 by rpki-client