$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: Vd5WhadlWsle/u7+ovtrhB5tbKi1Q+SJ/rlwX4mMhss= Subject key identifier: 22:4E:9A:0A:D9:88:13:6D:6F:F2:7A:73:34:3A:A9:83:96:59:0E:96 Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 6BFE95295A17F146DD0BDC2C7A1C8D384287BB47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 0165 Signing time: Sat 05 Apr 2025 09:50:34 +0000 Manifest this update: Sat 05 Apr 2025 09:45:34 +0000 Manifest next update: Tue 08 Apr 2025 20:56:34 +0000 Files and hashes: 1: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: XTHSvGcaRTEV+p1Y+pj9uwCkeA4dOjhqgF5dBEY4xig=) 2: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: IYSPzv0ipkmDqn5ZyXeN0f328BkzkZ8Pmn6bIzAKtQc=) 3: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: gv6D3iBz0iac0G2BgdIiqKtsTvU5Ksz+dTyqFF6KDGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fe:95:29:5a:17:f1:46:dd:0b:dc:2c:7a:1c:8d:38:42:87:bb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Apr 5 09:45:34 2025 GMT Not After : Apr 8 20:56:34 2025 GMT Subject: CN=224E9A0AD988136D6FF27A73343AA98396590E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:89:d5:ca:29:08:94:51:7c:8e:ea:4d:04:8c: fd:3c:82:18:9b:65:e9:19:3f:5e:1c:f1:26:8b:fc: c9:16:df:e3:e5:1d:8b:ca:23:2c:83:ee:be:8b:0c: 89:18:d1:74:1b:c1:64:ac:9f:7e:f3:ba:5c:5f:93: 8e:93:4b:a4:25:b1:36:06:75:0b:3d:fd:fd:09:c7: cc:c2:b0:3f:36:ab:20:a1:62:cd:c5:31:ef:44:56: 70:4e:a9:78:98:c5:cd:37:a0:da:75:54:74:04:fd: 3d:4e:db:e5:14:76:f0:41:4f:4c:ed:8e:ea:3a:f6: 87:0e:f3:49:d8:bf:25:d6:6a:0d:39:66:69:90:62: 70:70:46:90:c3:9f:38:bd:e2:a2:93:b4:56:ff:d7: ab:e0:e6:f8:76:71:41:18:c0:3b:d3:e9:bc:cd:23: e9:45:57:70:9e:8b:fb:45:27:52:79:63:f1:cc:96: 46:37:bb:3f:f2:8b:61:89:d3:fe:87:61:2f:15:c2: 30:d3:56:26:99:75:00:2b:91:b1:31:1b:d5:20:b3: ba:5f:91:67:25:f5:55:0b:20:b5:e9:7c:cb:2e:fc: 2a:34:74:d0:55:c8:03:f0:e0:66:b7:6d:a0:0f:e3: 68:80:60:3f:e3:d1:63:93:6c:04:fd:ac:d9:de:49: 5b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4E:9A:0A:D9:88:13:6D:6F:F2:7A:73:34:3A:A9:83:96:59:0E:96 X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:48:60:6e:b3:7a:dc:2d:b7:e4:67:70:6f:62:d8:42:0b:b6: a3:1a:d8:9b:1d:71:a5:c4:3f:9b:3d:98:d5:97:89:ad:a2:6b: 46:ee:fa:81:bb:96:81:a4:eb:38:c9:56:6c:e3:b4:0f:74:df: d8:34:cf:35:d2:1e:d6:10:8d:59:bc:ac:e2:ca:83:ce:fb:94: 57:66:17:6a:4f:ca:38:85:09:d9:3f:a8:b2:9c:fb:b0:94:c1: 75:4b:43:3e:fa:24:c9:99:e9:9b:f1:37:70:8f:95:25:02:81: fb:ba:33:f8:59:01:40:88:7e:7a:e2:da:1a:69:7c:b5:cb:0e: 72:cc:e9:0f:e1:e8:c0:bb:2b:02:6f:81:41:44:d3:4b:09:cb: 9b:51:2a:a0:99:67:b4:07:b7:79:40:e5:84:15:bf:e6:b0:7c: 98:ac:04:8e:c6:00:e0:9f:b5:34:25:c5:b5:e6:23:2d:e7:db: b0:de:9d:20:c3:59:c8:ed:2f:75:77:2d:2c:dc:ac:7b:f6:82: e7:b6:b2:9a:83:d3:f1:1f:11:c2:f8:19:7b:d4:c2:96:0c:ef: ff:d6:2d:b5:b2:22:00:26:f8:43:3c:50:6a:52:5a:04:0f:74: 0c:70:42:e4:07:df:f4:86:4f:c9:5d:27:d1:8d:0c:c4:a2:73: bc:ba:f2:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/6VKVoX8UbdC9wsehyNOEKHu0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTA0MDUwOTQ1MzRaFw0yNTA0MDgyMDU2MzRaMDMxMTAvBgNV BAMTKDIyNEU5QTBBRDk4ODEzNkQ2RkYyN0E3MzM0M0FBOTgzOTY1OTBFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbidXKKQiUUXyO6k0EjP08ghib ZekZP14c8SaL/MkW3+PlHYvKIyyD7r6LDIkY0XQbwWSsn37zulxfk46TS6QlsTYG dQs9/f0Jx8zCsD82qyChYs3FMe9EVnBOqXiYxc03oNp1VHQE/T1O2+UUdvBBT0zt juo69ocO80nYvyXWag05ZmmQYnBwRpDDnzi94qKTtFb/16vg5vh2cUEYwDvT6bzN I+lFV3Cei/tFJ1J5Y/HMlkY3uz/yi2GJ0/6HYS8VwjDTViaZdQArkbExG9Ugs7pf kWcl9VULILXpfMsu/Co0dNBVyAPw4Ga3baAP42iAYD/j0WOTbAT9rNneSVvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIk6aCtmIE21v8npzNDqpg5ZZDpYwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVIYG6zetwtt+RncG9i2EILtqMa2JsdcaXE P5s9mNWXia2ia0bu+oG7loGk6zjJVmzjtA9039g0zzXSHtYQjVm8rOLKg877lFdm F2pPyjiFCdk/qLKc+7CUwXVLQz76JMmZ6ZvxN3CPlSUCgfu6M/hZAUCIfnri2hpp fLXLDnLM6Q/h6MC7KwJvgUFE00sJy5tRKqCZZ7QHt3lA5YQVv+awfJisBI7GAOCf tTQlxbXmIy3n27DenSDDWcjtL3V3LSzcrHv2gue2spqD0/EfEcL4GXvUwpYM7//W LbWyIgAm+EM8UGpSWgQPdAxwQuQH3/SGT8ldJ9GNDMSic7y68oM= -----END CERTIFICATE-----Generated at Sat Apr 5 21:17:07 2025 by rpki-client