$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: FWrBzoi0VSgA3K8IHh+ID8MwYGWTrcfbW0Y1ngVpa/k= Subject key identifier: 4C:2A:00:40:D3:9F:88:49:BE:56:C5:BF:73:76:1B:84:14:72:97:A1 Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 79911D72558BA516E0C78F14920AC035264D92C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 02FF Signing time: Fri 18 Apr 2025 09:40:36 +0000 Manifest this update: Fri 18 Apr 2025 09:35:36 +0000 Manifest next update: Mon 21 Apr 2025 18:03:36 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: d+ITxps3cZ18Zq/dbteBtMW4w2s91LJtz5llba104bg=) 2: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: 3GxsaSW5yc7sCleBaqSUrAVXFMQlOnOR7O4MyVmdM68=) 3: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: MJ5rji/pccqQ0iJjDsk6/7TOxTNMih19wHwBeZGz1Sk=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: dvdUssi0GYF+nu0bzgaccucJ6IsLa1FRw2pzBTZE3GU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 18:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:91:1d:72:55:8b:a5:16:e0:c7:8f:14:92:0a:c0:35:26:4d:92:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Apr 18 09:35:36 2025 GMT Not After : Apr 21 18:03:36 2025 GMT Subject: CN=4C2A0040D39F8849BE56C5BF73761B84147297A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:8a:3d:a2:d3:0b:14:fc:51:e1:84:a4:b8: 6a:60:a6:6b:a6:19:e0:ed:c3:0a:38:5b:17:ca:e0: 00:23:26:ba:86:1f:dd:8b:bf:e7:ae:50:93:da:2e: f0:e1:db:20:59:26:95:02:fd:24:26:63:ab:93:8d: 6f:5d:3b:6b:cf:1c:86:ad:48:f9:0e:01:48:10:2a: d2:35:43:92:48:fc:22:54:d6:68:20:69:45:aa:b8: 12:b9:96:5b:46:73:35:51:64:ac:5a:58:76:64:37: 36:7f:51:b6:6b:02:e6:8d:fc:4d:0c:b7:ee:37:61: 5f:3d:41:1f:dc:11:17:08:85:a3:ea:97:d3:95:fa: 64:41:ed:9f:a8:78:d1:1c:54:ca:90:8a:30:0f:d7: b9:ef:31:b1:33:2e:e8:b4:81:c7:d2:67:c8:b5:13: 18:7e:03:80:5d:16:45:aa:b6:71:0d:0f:d1:f6:9d: a4:cb:9e:b6:9d:61:a0:72:68:64:02:ac:3b:7a:5a: 83:cc:7e:8d:9f:1b:d7:ab:2a:f6:67:b8:a6:cb:64: 51:51:0b:97:f8:a6:a9:cd:ed:12:e1:b1:c8:ce:9c: 48:7e:5d:9f:ee:1d:4e:eb:8b:89:ea:c8:de:0f:e3: 68:5a:27:70:f8:4a:e6:5d:23:8f:2c:ff:3f:eb:2d: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2A:00:40:D3:9F:88:49:BE:56:C5:BF:73:76:1B:84:14:72:97:A1 X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6f:4a:cf:d1:66:c9:1d:f9:59:2f:e2:af:e8:b0:20:a7:51: b7:56:28:6f:6e:87:d9:35:57:02:1b:2c:8f:a8:34:a7:73:14: e4:eb:37:79:2a:c9:a3:e3:35:0e:08:5f:92:68:b4:45:02:2d: 7b:d6:9e:32:71:9d:43:dd:79:53:fc:cf:13:5a:cf:98:35:90: c4:0a:90:b3:2d:9a:ad:19:ed:2a:42:9d:0a:f8:2c:ab:e3:3f: 2b:5f:42:dc:62:9f:10:7a:8b:52:0f:cb:ff:45:e8:90:d5:b1: 8b:d1:7e:d6:65:34:a9:ff:f8:67:d6:6e:fa:ce:9d:e5:81:a5: d9:29:8f:73:ec:b5:69:92:fa:77:a6:38:31:f0:52:c3:46:2a: e8:72:03:e0:f0:e4:49:e0:76:a6:52:92:75:20:72:1d:59:6d: 40:22:f4:58:24:34:d8:ba:95:3c:77:90:84:32:ef:6a:cc:71: 50:21:cc:a9:d2:07:54:d6:11:88:da:ab:3c:67:f0:b7:71:53: 88:da:71:60:48:a0:6c:94:a6:22:07:4e:38:a6:0e:51:77:8b: 61:ac:f5:c7:91:bd:f8:a7:2f:c2:47:ed:bc:c6:fc:b7:a4:db: b0:cb:27:00:47:cb:5e:70:dc:43:0c:9c:ce:04:08:b4:1f:4b: 0d:1b:f6:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZEdclWLpRbgx48UkgrANSZNksIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTA0MTgwOTM1MzZaFw0yNTA0MjExODAzMzZaMDMxMTAvBgNV BAMTKDRDMkEwMDQwRDM5Rjg4NDlCRTU2QzVCRjczNzYxQjg0MTQ3Mjk3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxYo9otMLFPxR4YSkuGpgpmum GeDtwwo4WxfK4AAjJrqGH92Lv+euUJPaLvDh2yBZJpUC/SQmY6uTjW9dO2vPHIat SPkOAUgQKtI1Q5JI/CJU1mggaUWquBK5lltGczVRZKxaWHZkNzZ/UbZrAuaN/E0M t+43YV89QR/cERcIhaPql9OV+mRB7Z+oeNEcVMqQijAP17nvMbEzLui0gcfSZ8i1 Exh+A4BdFkWqtnEND9H2naTLnradYaByaGQCrDt6WoPMfo2fG9erKvZnuKbLZFFR C5f4pqnN7RLhscjOnEh+XZ/uHU7ri4nqyN4P42haJ3D4SuZdI48s/z/rLTC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTCoAQNOfiEm+VsW/c3YbhBRyl6EwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdvSs/RZskd+Vkv4q/osCCnUbdWKG9uh9k1 VwIbLI+oNKdzFOTrN3kqyaPjNQ4IX5JotEUCLXvWnjJxnUPdeVP8zxNaz5g1kMQK kLMtmq0Z7SpCnQr4LKvjPytfQtxinxB6i1IPy/9F6JDVsYvRftZlNKn/+GfWbvrO neWBpdkpj3PstWmS+nemODHwUsNGKuhyA+Dw5EngdqZSknUgch1ZbUAi9FgkNNi6 lTx3kIQy72rMcVAhzKnSB1TWEYjaqzxn8LdxU4jacWBIoGyUpiIHTjimDlF3i2Gs 9ceRvfinL8JH7bzG/Lek27DLJwBHy15w3EMMnM4ECLQfSw0b9oo= -----END CERTIFICATE-----Generated at Sat Apr 19 12:18:05 2025 by rpki-client