$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft File: 5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json) Hash identifier: 4hlmJ9bChgPL2PuSC0vNxuI1gYHOkts8PQO1xtiS3xU= Subject key identifier: 85:23:86:56:D5:FB:FB:67:65:0F:81:54:BA:39:6A:25:D3:44:CF:AC Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 Certificate issuer: /CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Certificate serial: 5A4FD9E598017641D8182AB6920B26AC635ED975 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft Manifest number: EC Signing time: Fri 04 Apr 2025 09:21:13 +0000 Manifest this update: Fri 04 Apr 2025 09:16:13 +0000 Manifest next update: Mon 07 Apr 2025 11:18:13 +0000 Files and hashes: 1: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: rDDQFMa5PHcR0rQDqlaV8D00HufNaJZzZFc/LJG67DM=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: sxaPQ+ZqxnBrZjtGVRwER4T4gwZhUZTm3DzgPwkczhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4f:d9:e5:98:01:76:41:d8:18:2a:b6:92:0b:26:ac:63:5e:d9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Validity Not Before: Apr 4 09:16:13 2025 GMT Not After : Apr 7 11:18:13 2025 GMT Subject: CN=85238656D5FBFB67650F8154BA396A25D344CFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:f9:71:3e:b0:56:b6:c7:a5:af:ca:f5:7f: 02:8c:72:2e:29:d1:3b:dd:c9:94:8c:34:bd:58:67: a7:ce:36:e6:88:a6:18:fb:17:34:ec:7d:5f:0e:57: 94:4c:94:d3:cf:77:50:38:3f:d0:f4:87:7b:8c:b5: a5:8d:b7:9d:78:4d:a8:eb:99:5c:fa:5c:0d:c0:3c: c2:2d:ac:4e:81:a6:7d:15:9b:7d:96:36:37:4b:af: e2:fd:2b:a0:cf:a7:7d:38:f6:ea:75:42:0b:09:e2: 42:d3:c5:73:b6:0e:73:ab:e2:06:18:02:17:d2:f9: b0:1c:a9:42:2e:14:8c:b9:d0:e8:c2:6c:2a:0b:1e: 6a:2e:7a:af:d5:b3:86:70:58:d5:e2:f1:49:96:ad: 4c:b1:ca:65:50:f5:75:ff:b1:0c:3a:26:a0:c0:02: fe:a3:d6:eb:d4:0c:78:fc:7d:cd:ad:b6:d7:d1:72: 88:58:b8:ef:72:a7:18:cf:85:c3:24:55:81:27:03: 84:2d:94:07:fe:49:b8:7f:e9:b3:a7:56:31:be:d0: 46:7f:2d:ed:fa:15:16:86:eb:c9:0d:82:f7:9d:22: c7:0a:92:ce:84:fa:29:27:92:32:72:21:a3:6f:17: 70:95:05:d0:74:61:01:38:4c:67:12:7f:7f:fa:b8: 21:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:86:56:D5:FB:FB:67:65:0F:81:54:BA:39:6A:25:D3:44:CF:AC X509v3 Authority Key Identifier: keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:fb:d7:8b:b7:4f:6d:58:c5:30:40:c8:54:98:9c:73:6f:23: 22:fb:82:d0:6c:54:b8:fe:bb:68:08:b5:c0:43:77:c8:c5:bb: cc:d4:85:01:8d:ae:8e:7a:40:f1:80:5f:1d:f6:fc:39:3b:e1: 7f:23:62:c4:ea:72:49:d4:6e:13:55:15:b6:e5:19:d9:13:07: 82:6e:ed:0e:b8:4b:66:99:92:31:6c:9a:b7:27:dd:08:ce:e2: 1e:d6:7b:a5:e1:a0:f4:ae:5e:b9:2c:db:02:cb:6f:f5:9d:1c: bb:87:09:41:34:61:84:e3:61:dc:20:6c:06:7a:08:35:24:78: 05:fd:82:c6:bd:f0:ef:d5:89:4a:a2:66:42:86:78:12:f5:50: 8e:0e:37:db:2d:42:fe:bb:36:92:6c:f1:54:20:aa:92:79:55: e6:8c:51:65:cb:97:05:05:ac:f5:e6:53:8d:2e:36:84:86:e9: 21:31:c1:de:a0:d6:0b:49:bf:d1:2c:f2:c0:ee:4f:46:49:75: b5:d0:13:0a:e9:c9:98:7d:2c:42:c8:69:a1:e3:6d:83:25:2f: 99:f0:52:70:b5:d1:a6:f4:91:f0:dd:b2:49:6f:2d:8b:8b:0a: 59:dc:00:0e:e3:d2:63:cb:c9:02:69:bb:a0:ae:0c:54:d4:50: d3:63:d1:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWk/Z5ZgBdkHYGCq2kgsmrGNe2XUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4 QTA5MzUzMDAeFw0yNTA0MDQwOTE2MTNaFw0yNTA0MDcxMTE4MTNaMDMxMTAvBgNV BAMTKDg1MjM4NjU2RDVGQkZCNjc2NTBGODE1NEJBMzk2QTI1RDM0NENGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9G/lxPrBWtselr8r1fwKMci4p 0TvdyZSMNL1YZ6fONuaIphj7FzTsfV8OV5RMlNPPd1A4P9D0h3uMtaWNt514Tajr mVz6XA3APMItrE6Bpn0Vm32WNjdLr+L9K6DPp3049up1QgsJ4kLTxXO2DnOr4gYY AhfS+bAcqUIuFIy50OjCbCoLHmoueq/Vs4ZwWNXi8UmWrUyxymVQ9XX/sQw6JqDA Av6j1uvUDHj8fc2tttfRcohYuO9ypxjPhcMkVYEnA4QtlAf+Sbh/6bOnVjG+0EZ/ Le36FRaG68kNgvedIscKks6E+iknkjJyIaNvF3CVBdB0YQE4TGcSf3/6uCGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhSOGVtX7+2dlD4FUujlqJdNEz6wwHwYDVR0j BBgwFoAUXFWRgTBphu6Jqt8KHPx46ooJNTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmE4MWU2ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC81QzU1OTE4MTMw Njk4NkVFODlBQURGMEExQ0ZDNzhFQThBMDkzNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4QTA5 MzUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4 RUE4QTA5MzUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACP714u3T21YxTBAyFSYnHNvIyL7gtBsVLj+ u2gItcBDd8jFu8zUhQGNro56QPGAXx32/Dk74X8jYsTqcknUbhNVFbblGdkTB4Ju 7Q64S2aZkjFsmrcn3QjO4h7We6XhoPSuXrks2wLLb/WdHLuHCUE0YYTjYdwgbAZ6 CDUkeAX9gsa98O/ViUqiZkKGeBL1UI4ON9stQv67NpJs8VQgqpJ5VeaMUWXLlwUF rPXmU40uNoSG6SExwd6g1gtJv9Es8sDuT0ZJdbXQEwrpyZh9LELIaaHjbYMlL5nw UnC10ab0kfDdsklvLYuLClncAA7j0mPLyQJpu6CuDFTUUNNj0fs= -----END CERTIFICATE-----Generated at Sat Apr 5 23:18:58 2025 by rpki-client