$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft File: 5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json) Hash identifier: 6H5bDGwgcGQ0yR6JQrM1EjpJ6LQeKFLKcLU52/jT4Jg= Subject key identifier: CD:0D:E7:5F:A7:61:07:2A:3F:57:7A:80:7B:D2:7F:C5:37:18:3E:06 Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 661345C2B1154D05C32750BF1CBC06AA6C130233 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft Manifest number: 0474 Signing time: Sat 05 Apr 2025 23:32:20 +0000 Manifest this update: Sat 05 Apr 2025 23:27:20 +0000 Manifest next update: Wed 09 Apr 2025 04:13:20 +0000 Files and hashes: 1: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: W9Jw8giNR658nRPc+q97wnAWe5Ok215SV1KycMOvpe4=) 2: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: l2QbtL5+hyyVVRfe0YZF9ChrujkW/kf4eBNWFTqGhOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 04:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:13:45:c2:b1:15:4d:05:c3:27:50:bf:1c:bc:06:aa:6c:13:02:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Apr 5 23:27:20 2025 GMT Not After : Apr 9 04:13:20 2025 GMT Subject: CN=CD0DE75FA761072A3F577A807BD27FC537183E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:59:bc:aa:21:2a:06:68:87:0b:ad:55:d3: 60:98:43:79:e6:66:2f:9e:ee:46:ed:f7:eb:6f:79: 1b:50:58:45:a4:b0:13:c1:df:e7:4c:17:51:09:6e: 4d:13:87:ee:06:32:e3:08:b3:51:81:82:ed:d1:0a: dd:3e:45:f8:30:15:89:70:c5:e4:c3:ae:3a:77:b3: 7f:9c:ad:74:a3:32:c5:47:d7:43:ec:6f:0f:bb:6f: 4e:bd:38:7f:24:79:af:a1:a7:74:6a:85:14:1b:0d: 7b:1b:55:51:d9:95:75:b8:71:41:bc:51:1f:e9:1d: 40:0b:8a:0b:9a:08:3f:ab:b0:4a:88:ae:7c:ca:f1: f3:ca:2f:6e:c3:53:f9:48:ce:96:54:c1:36:01:48: 91:98:28:f6:79:4b:c9:ed:48:a7:87:ee:a9:90:81: b8:a4:02:75:5f:50:a2:8b:cb:41:66:bc:95:b9:f1: 97:bf:d6:25:87:c8:9b:0c:9a:fb:f7:15:18:b7:0c: a0:50:1e:d9:8f:d0:f9:e6:cd:34:04:a1:b3:18:38: 1c:73:ed:65:d2:fb:6e:95:f5:d1:c5:3c:dd:01:e0: 48:73:9a:4a:e8:87:70:7b:55:44:de:39:d6:fa:4c: 60:00:62:05:e9:d7:49:04:03:6c:2b:53:09:8d:a6: c8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0D:E7:5F:A7:61:07:2A:3F:57:7A:80:7B:D2:7F:C5:37:18:3E:06 X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:3e:c2:ca:bd:b0:e5:2f:9d:15:7d:c1:1d:6d:b1:98:48:de: fc:ec:6e:91:dc:ba:db:6a:e5:0e:86:21:c3:fd:41:32:a5:54: 00:e2:d5:d2:47:f4:3f:b6:b2:56:26:93:7a:33:cd:73:c8:34: e7:20:49:58:60:77:41:84:aa:43:d1:47:31:3d:51:3d:a5:56: f8:52:3c:e7:2f:f0:8c:c1:b6:55:28:4c:cb:58:16:43:82:dd: 07:c4:2b:6a:48:43:30:91:14:ac:56:6d:77:fb:b5:cc:76:28: 72:c6:c3:cc:75:94:64:e0:60:fd:30:c3:42:d4:e5:79:66:d5: 73:30:0c:3a:1d:09:7b:bd:5a:f2:16:73:21:c5:94:fe:5f:0c: f9:dc:db:60:93:d9:35:b9:27:9c:f5:40:48:80:e9:cf:e2:8d: 87:2e:37:02:74:3f:65:89:8e:2b:56:4f:9b:dc:80:99:4a:5c: 69:2b:0a:2b:90:ae:02:c6:0b:ce:7e:d1:20:f7:b5:26:8b:71: 19:6a:5e:e3:5a:08:1b:49:30:37:9f:7e:04:93:f5:09:5f:62: 48:08:69:00:91:01:ed:39:1c:77:3c:ca:c8:27:ba:ae:fd:c9: 56:cc:7f:d7:32:94:3c:ff:6a:50:b1:0f:b2:1f:32:ac:44:16: 3d:55:c8:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhNFwrEVTQXDJ1C/HLwGqmwTAjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0 MzBGRDM0QjAeFw0yNTA0MDUyMzI3MjBaFw0yNTA0MDkwNDEzMjBaMDMxMTAvBgNV BAMTKENEMERFNzVGQTc2MTA3MkEzRjU3N0E4MDdCRDI3RkM1MzcxODNFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrlm8qiEqBmiHC61V02CYQ3nm Zi+e7kbt9+tveRtQWEWksBPB3+dMF1EJbk0Th+4GMuMIs1GBgu3RCt0+RfgwFYlw xeTDrjp3s3+crXSjMsVH10Psbw+7b069OH8kea+hp3RqhRQbDXsbVVHZlXW4cUG8 UR/pHUALiguaCD+rsEqIrnzK8fPKL27DU/lIzpZUwTYBSJGYKPZ5S8ntSKeH7qmQ gbikAnVfUKKLy0FmvJW58Ze/1iWHyJsMmvv3FRi3DKBQHtmP0PnmzTQEobMYOBxz 7WXS+26V9dHFPN0B4Ehzmkroh3B7VUTeOdb6TGAAYgXp10kEA2wrUwmNpshJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQ3nX6dhByo/V3qAe9J/xTcYPgYwHwYDVR0j BBgwFoAUXcXTZViSIpW4Xnrjp5F4+0MP00swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4 OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZEMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0MzBG RDM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4 RkI0MzBGRDM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKU+wsq9sOUvnRV9wR1tsZhI3vzsbpHcuttq 5Q6GIcP9QTKlVADi1dJH9D+2slYmk3ozzXPINOcgSVhgd0GEqkPRRzE9UT2lVvhS POcv8IzBtlUoTMtYFkOC3QfEK2pIQzCRFKxWbXf7tcx2KHLGw8x1lGTgYP0ww0LU 5Xlm1XMwDDodCXu9WvIWcyHFlP5fDPnc22CT2TW5J5z1QEiA6c/ijYcuNwJ0P2WJ jitWT5vcgJlKXGkrCiuQrgLGC85+0SD3tSaLcRlqXuNaCBtJMDeffgST9QlfYkgI aQCRAe05HHc8ysgnuq79yVbMf9cylDz/alCxD7IfMqxEFj1VyDs= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:40 2025 by rpki-client