$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: 6Qptc9+0bzk0OL62HXVqyDgUfBiQSdVueQrmf3VTBLk= Subject key identifier: 5C:8A:71:A3:57:68:FC:EF:FB:5F:FD:C6:F4:CE:2A:AA:E9:D6:25:0F Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 0AE4022D1D340171AAD3E646F3BA8F80775F353D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 04C2 Signing time: Fri 04 Apr 2025 01:42:04 +0000 Manifest this update: Fri 04 Apr 2025 01:37:04 +0000 Manifest next update: Mon 07 Apr 2025 06:37:04 +0000 Files and hashes: 1: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: +T3Pt96JdYaCjZwslFQEnLh95PR6Wr1CkWYzNuxLhQk=) 2: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: 85sgPc+8MJjFBISIYvrxz+bYdA7pyeGAC/bMSWPrSJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e4:02:2d:1d:34:01:71:aa:d3:e6:46:f3:ba:8f:80:77:5f:35:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Apr 4 01:37:04 2025 GMT Not After : Apr 7 06:37:04 2025 GMT Subject: CN=5C8A71A35768FCEFFB5FFDC6F4CE2AAAE9D6250F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:9f:ac:59:11:39:55:42:bd:7b:00:b8:3c: 75:8d:08:e2:6d:61:dd:54:02:ff:d5:f7:17:f3:16: 0a:c1:a6:86:7d:6e:27:5d:33:6b:c5:d4:88:07:5d: bc:16:c8:ed:65:c2:7a:5a:42:63:86:2a:e4:a5:01: 98:bc:ad:47:1d:20:af:e2:29:71:ce:3a:84:3d:ba: a7:d1:b7:64:94:dd:2e:83:4d:ad:d3:09:8d:2b:95: 28:a7:f0:2e:b3:ba:0b:9f:68:85:da:7c:cc:2a:dc: 28:5a:8c:c3:1d:9d:ea:72:63:e2:2a:cd:72:45:1b: f4:7a:dc:52:be:13:68:ab:4d:ba:b0:f5:e3:b0:a2: 6e:82:fd:f7:e5:8a:29:45:f2:8c:af:54:f0:f6:92: 83:83:26:29:ff:31:a7:2b:12:c4:b7:bf:45:32:c7: 2f:88:8d:ae:03:39:04:5a:3b:d0:b0:23:31:1a:26: 81:1d:18:c3:f2:e0:76:12:48:90:00:2f:67:df:80: d9:e6:19:ff:1b:8d:49:49:f9:93:f0:41:37:78:4b: 4c:e5:c6:0b:af:e8:f6:d6:d6:59:52:0c:5a:76:46: e6:20:73:49:48:f8:8b:b5:2b:a7:f2:a2:f0:9a:c5: 04:aa:c3:89:4f:f4:02:57:15:b6:00:b2:d4:90:3a: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8A:71:A3:57:68:FC:EF:FB:5F:FD:C6:F4:CE:2A:AA:E9:D6:25:0F X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:18:ef:c8:07:9e:bd:21:57:dc:f5:c7:49:28:c1:cf:0a:2e: ed:e6:32:38:e3:00:76:53:51:4b:a0:cd:2b:60:7d:a6:a8:dc: b1:c2:5f:d7:38:72:8a:2e:b6:f2:a3:a2:50:24:37:2c:f7:6a: 97:71:74:c2:5e:c2:23:5f:5f:f1:36:83:43:ea:39:75:c5:4b: bc:e2:5c:be:75:5f:80:1d:33:a7:a2:d2:bb:99:d7:b4:10:98: 2e:eb:e5:8a:8d:9a:c8:75:13:1e:e8:82:2d:9f:e3:5f:78:20: db:d2:1f:12:86:3b:c9:cc:d9:27:23:5d:65:3e:0e:20:58:01: 75:79:af:f0:c8:ee:de:bc:41:5b:e6:6f:01:82:89:79:c2:bc: f6:5d:8e:01:83:7a:70:07:37:72:b6:3f:44:c7:45:5a:d9:a2: be:0b:80:b9:d5:de:9d:5a:16:19:e5:34:2a:d5:97:99:b3:04: 8f:15:18:00:84:ea:b8:f8:2a:9f:0e:45:17:b0:1e:09:bb:b4: 66:bd:a9:ca:2f:3e:38:2e:4a:2b:8d:c5:6d:5f:27:e5:1b:b6: 67:f1:2a:a2:9c:bc:d5:89:f9:28:be:49:b9:73:41:f2:af:f2: 3c:96:d9:d9:5e:7f:56:0c:3e:eb:b0:7e:7f:56:c2:bf:48:14: e8:60:a1:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCuQCLR00AXGq0+ZG87qPgHdfNT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNTA0MDQwMTM3MDRaFw0yNTA0MDcwNjM3MDRaMDMxMTAvBgNV BAMTKDVDOEE3MUEzNTc2OEZDRUZGQjVGRkRDNkY0Q0UyQUFBRTlENjI1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0p+sWRE5VUK9ewC4PHWNCOJt Yd1UAv/V9xfzFgrBpoZ9biddM2vF1IgHXbwWyO1lwnpaQmOGKuSlAZi8rUcdIK/i KXHOOoQ9uqfRt2SU3S6DTa3TCY0rlSin8C6zugufaIXafMwq3ChajMMdnepyY+Iq zXJFG/R63FK+E2irTbqw9eOwom6C/ffliilF8oyvVPD2koODJin/MacrEsS3v0Uy xy+Ija4DOQRaO9CwIzEaJoEdGMPy4HYSSJAAL2ffgNnmGf8bjUlJ+ZPwQTd4S0zl xguv6PbW1llSDFp2RuYgc0lI+Iu1K6fyovCaxQSqw4lP9AJXFbYAstSQOuT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXIpxo1do/O/7X/3G9M4qqunWJQ8wHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsY78gHnr0hV9z1x0kowc8KLu3mMjjjAHZT UUugzStgfaao3LHCX9c4cooutvKjolAkNyz3apdxdMJewiNfX/E2g0PqOXXFS7zi XL51X4AdM6ei0ruZ17QQmC7r5YqNmsh1Ex7ogi2f4194INvSHxKGO8nM2ScjXWU+ DiBYAXV5r/DI7t68QVvmbwGCiXnCvPZdjgGDenAHN3K2P0THRVrZor4LgLnV3p1a FhnlNCrVl5mzBI8VGACE6rj4Kp8ORRewHgm7tGa9qcovPjguSiuNxW1fJ+Ubtmfx KqKcvNWJ+Si+SblzQfKv8jyW2dlef1YMPuuwfn9Wwr9IFOhgoZ0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:55 2025 by rpki-client