$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: BVHo5FYool6SX0kDt9xNc0XfhiUvVLxnWNIzPgtUHYM= Subject key identifier: 7B:6E:7F:00:81:8B:E5:0D:5E:65:CA:99:D7:4B:E5:03:12:8A:2E:38 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 613E14D682E545CBFE0F0408906EDAF45E7510F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 053F Signing time: Thu 24 Apr 2025 10:10:03 +0000 Manifest this update: Thu 24 Apr 2025 10:05:03 +0000 Manifest next update: Sun 27 Apr 2025 15:04:03 +0000 Files and hashes: 1: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: NK8AMyH49RDURDa52fnFyC1QVEBgQHZx9YpkNDHoceg=) 2: AS17885.roa (hash: Hrw/Bx/6mEnK2f91wIyEGNRzxwWv30dDgbF4gTiEsOM=) 3: AS139994.roa (hash: V1fHZHeyWM0yunBqcSWTYR9zxd5+dcGWhieykWfyO08=) 4: AS24203.roa (hash: oXVZzAc1BVWz8rI4bEPFSzCb/DwmmJ/Nlya3vD+jXrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:3e:14:d6:82:e5:45:cb:fe:0f:04:08:90:6e:da:f4:5e:75:10:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Apr 24 10:05:03 2025 GMT Not After : Apr 27 15:04:03 2025 GMT Subject: CN=7B6E7F00818BE50D5E65CA99D74BE503128A2E38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:df:05:9a:c4:6a:5f:41:d5:e4:71:61:98: 8c:ab:f6:9f:05:f0:3c:92:03:ec:51:8b:a0:76:1d: 90:45:e5:e1:22:d7:2b:53:c5:79:56:54:03:df:4e: 3c:4b:3f:7a:49:ae:2c:59:a9:09:34:61:2e:ed:77: d9:25:28:47:1b:a0:b7:0b:5b:13:77:e2:1e:ed:09: 35:2d:76:66:f1:ab:c3:15:c1:2b:4b:c3:ba:fe:2a: 48:6d:a6:0a:fa:84:93:72:42:a7:b9:72:b3:a2:cc: c5:58:bc:80:54:29:85:9d:b9:8a:ab:ea:82:91:0d: 99:f3:74:a2:28:d3:e7:04:dc:05:b9:f2:1f:6b:0b: 65:3d:eb:1b:71:cd:77:af:e8:ea:91:20:1d:29:61: 97:57:52:e6:90:58:98:c9:b5:9e:95:39:7c:35:85: 23:1d:d1:12:e5:1c:f0:62:90:25:5f:1d:1a:50:40: a7:16:fe:86:2f:bf:51:f2:ca:15:88:0b:46:ed:e3: 00:34:4b:f7:0b:9e:88:40:b0:83:7a:0e:86:85:04: fe:8d:94:06:63:c1:6c:bb:bc:2e:ee:ae:e7:c8:4d: 52:7b:8c:58:5d:a2:2a:1c:f3:d6:b2:52:8d:63:62: f1:10:0d:c8:66:39:cd:7a:98:c9:cc:06:da:4c:f1: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6E:7F:00:81:8B:E5:0D:5E:65:CA:99:D7:4B:E5:03:12:8A:2E:38 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:34:a5:ba:37:c1:47:cd:22:31:04:04:a0:b2:bc:27:ec:58: 69:c2:fd:de:0b:e8:41:aa:69:63:0b:8c:ef:cc:27:d4:25:15: 22:d3:55:37:50:1e:c0:51:30:a4:ea:2c:4c:83:5b:19:7d:1b: 8c:a4:55:03:40:7c:9f:68:6c:83:47:fd:49:f0:22:04:25:de: 5e:ed:a3:c0:06:88:bc:66:2a:91:79:08:cb:74:f0:80:44:10: e9:bc:21:fe:3d:76:3d:66:74:fa:68:9b:0d:2e:3c:0e:09:9c: 51:cd:59:cb:81:ec:b7:fb:ac:66:ab:8e:0b:f3:42:a5:20:0c: 3c:c5:b6:df:48:ce:4b:56:9a:75:cd:ce:7b:ac:f9:2d:f9:0f: 0e:7e:33:be:2e:f0:c6:ca:b1:81:0f:76:37:bc:4e:27:60:db: dd:54:e9:c7:3a:a3:e3:b5:ab:70:39:a0:06:fe:79:94:49:ac: 01:87:21:21:22:da:8b:01:96:1a:48:d6:9c:7a:81:3d:a5:a2: 0a:a1:2b:77:af:10:2a:ee:f2:bf:c3:92:a6:91:d7:e5:a9:e4: 15:97:fc:b4:ca:51:9c:77:23:a1:f8:a8:1d:c6:0d:14:55:ee: 8b:6c:89:1e:6a:33:6f:09:f5:01:9e:35:da:2c:ee:75:30:28: 4b:73:d2:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYT4U1oLlRcv+DwQIkG7a9F51EPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTA0MjQxMDA1MDNaFw0yNTA0MjcxNTA0MDNaMDMxMTAvBgNV BAMTKDdCNkU3RjAwODE4QkU1MEQ1RTY1Q0E5OUQ3NEJFNTAzMTI4QTJFMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVd8FmsRqX0HV5HFhmIyr9p8F 8DySA+xRi6B2HZBF5eEi1ytTxXlWVAPfTjxLP3pJrixZqQk0YS7td9klKEcboLcL WxN34h7tCTUtdmbxq8MVwStLw7r+Kkhtpgr6hJNyQqe5crOizMVYvIBUKYWduYqr 6oKRDZnzdKIo0+cE3AW58h9rC2U96xtxzXev6OqRIB0pYZdXUuaQWJjJtZ6VOXw1 hSMd0RLlHPBikCVfHRpQQKcW/oYvv1HyyhWIC0bt4wA0S/cLnohAsIN6DoaFBP6N lAZjwWy7vC7urufITVJ7jFhdoioc89ayUo1jYvEQDchmOc16mMnMBtpM8TeNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe25/AIGL5Q1eZcqZ10vlAxKKLjgwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABU0pbo3wUfNIjEEBKCyvCfsWGnC/d4L6EGq aWMLjO/MJ9QlFSLTVTdQHsBRMKTqLEyDWxl9G4ykVQNAfJ9obINH/UnwIgQl3l7t o8AGiLxmKpF5CMt08IBEEOm8If49dj1mdPpomw0uPA4JnFHNWcuB7Lf7rGarjgvz QqUgDDzFtt9IzktWmnXNznus+S35Dw5+M74u8MbKsYEPdje8Tidg291U6cc6o+O1 q3A5oAb+eZRJrAGHISEi2osBlhpI1px6gT2logqhK3evECru8r/DkqaR1+Wp5BWX /LTKUZx3I6H4qB3GDRRV7otsiR5qM28J9QGeNdos7nUwKEtz0mc= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net