$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: Mar8jj/dNDqBNqk5OxBMr5bhD8ZOrLMXSDSVVNIjK2Q= Subject key identifier: 04:5F:44:60:73:92:C2:C3:88:22:00:E9:4F:E7:83:6B:C0:F3:41:D7 Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 5318202FE2E4BA69080B50F4FFCBABA61943B797 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: 9D Signing time: Fri 04 Apr 2025 09:41:36 +0000 Manifest this update: Fri 04 Apr 2025 09:36:36 +0000 Manifest next update: Mon 07 Apr 2025 17:40:36 +0000 Files and hashes: 1: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) 2: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: ob+j+Kp3pyC6BZtFMlfmrq7EFYKMLBCb1DT72Fw9xyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:18:20:2f:e2:e4:ba:69:08:0b:50:f4:ff:cb:ab:a6:19:43:b7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Apr 4 09:36:36 2025 GMT Not After : Apr 7 17:40:36 2025 GMT Subject: CN=045F44607392C2C3882200E94FE7836BC0F341D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4e:6f:ba:2c:c8:9d:ef:fd:74:19:e3:25:84: 1b:14:2c:5d:ad:1c:1c:80:5a:06:6f:bf:dd:5e:9b: 6f:1d:0c:b2:23:d3:5e:c6:d5:68:23:0e:1a:cd:40: 85:fe:c9:4d:c5:36:37:8d:42:71:7c:e3:33:ce:79: 6f:ec:f6:49:6d:b1:c0:f1:c4:cd:e8:8a:67:03:fc: 95:e6:8b:7f:1e:cb:1a:93:a0:d0:22:01:6c:bd:6b: 63:9e:8d:6f:0d:72:dc:42:c3:c6:bc:2b:56:6c:b8: 93:17:6e:22:ea:5d:5e:dd:c5:d3:2d:9d:fc:52:04: 84:28:b4:74:10:06:b6:12:af:2b:4c:18:6f:fe:52: 5e:ec:57:8c:a9:7a:39:ef:47:53:3e:27:37:05:81: 5a:94:ae:1a:13:4b:8c:01:a7:18:93:c2:de:a3:15: b1:e8:3b:c6:b5:5a:eb:43:1e:df:ee:d8:b2:75:9a: 6c:60:af:35:e5:d6:e6:c8:2f:6f:b1:30:30:ae:ae: 38:c9:b5:64:ad:bd:81:29:7a:78:67:20:5a:c3:b0: bb:70:a4:b8:92:49:5e:a0:d7:96:b1:fc:ed:ad:37: bd:06:66:40:7e:df:3e:17:94:86:1e:31:9e:59:fe: b7:40:10:dd:99:4c:f3:b0:0b:70:a8:f2:7d:50:52: 5f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5F:44:60:73:92:C2:C3:88:22:00:E9:4F:E7:83:6B:C0:F3:41:D7 X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:dd:9e:30:1a:16:a7:e6:9b:7a:ab:a2:83:6b:09:23:34:39: c4:ee:8b:5a:b8:a2:93:10:fb:61:a8:fc:36:4b:b8:e5:35:70: 6d:7e:37:d9:0e:c7:ad:c5:82:98:79:d6:44:10:81:b6:34:cc: 2d:a6:47:62:62:d9:02:b3:aa:74:0d:ec:b3:fd:44:5a:fb:cf: ce:ce:43:8e:78:89:5b:15:a6:f1:ef:c3:a2:67:91:2d:96:70: 04:05:93:3b:da:02:61:69:23:07:84:46:ea:2b:b9:06:0d:26: f3:fa:32:f0:27:8b:49:5a:e2:44:7e:43:39:38:6f:30:1b:25: 5a:67:d6:e4:21:b4:05:fc:68:e3:ce:4a:1f:df:51:63:b7:da: e4:4c:95:cd:15:f2:69:ac:32:c0:ea:68:82:7a:12:43:12:bb: 77:56:00:75:f1:24:a9:45:9f:be:81:3e:66:c6:e9:dc:9d:31: cc:7a:55:05:b4:e6:7f:9f:31:88:81:83:9a:e4:62:47:8d:f6: 3d:57:f2:bb:3c:35:c5:af:b9:74:d7:ce:9b:ca:9e:34:92:b6: 8e:e6:fe:e8:87:cb:c5:dd:f9:e8:cb:8d:33:da:ec:57:8c:1f: c9:86:93:4e:cd:60:df:3c:c7:e6:39:7c:40:c3:bd:1c:a3:f4: 30:e6:b4:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxggL+LkumkIC1D0/8urphlDt5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTA0MDQwOTM2MzZaFw0yNTA0MDcxNzQwMzZaMDMxMTAvBgNV BAMTKDA0NUY0NDYwNzM5MkMyQzM4ODIyMDBFOTRGRTc4MzZCQzBGMzQxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtTm+6LMid7/10GeMlhBsULF2t HByAWgZvv91em28dDLIj017G1WgjDhrNQIX+yU3FNjeNQnF84zPOeW/s9kltscDx xM3oimcD/JXmi38eyxqToNAiAWy9a2OejW8NctxCw8a8K1ZsuJMXbiLqXV7dxdMt nfxSBIQotHQQBrYSrytMGG/+Ul7sV4ypejnvR1M+JzcFgVqUrhoTS4wBpxiTwt6j FbHoO8a1WutDHt/u2LJ1mmxgrzXl1ubIL2+xMDCurjjJtWStvYEpenhnIFrDsLtw pLiSSV6g15ax/O2tN70GZkB+3z4XlIYeMZ5Z/rdAEN2ZTPOwC3Co8n1QUl+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBF9EYHOSwsOIIgDpT+eDa8DzQdcwHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/dnjAaFqfmm3qrooNrCSM0OcTui1q4opMQ +2Go/DZLuOU1cG1+N9kOx63Fgph51kQQgbY0zC2mR2Ji2QKzqnQN7LP9RFr7z87O Q454iVsVpvHvw6JnkS2WcAQFkzvaAmFpIweERuoruQYNJvP6MvAni0la4kR+Qzk4 bzAbJVpn1uQhtAX8aOPOSh/fUWO32uRMlc0V8mmsMsDqaIJ6EkMSu3dWAHXxJKlF n76BPmbG6dydMcx6VQW05n+fMYiBg5rkYkeN9j1X8rs8NcWvuXTXzpvKnjSSto7m /uiHy8Xd+ejLjTPa7FeMH8mGk07NYN88x+Y5fEDDvRyj9DDmtMg= -----END CERTIFICATE-----Generated at Sat Apr 5 20:29:03 2025 by rpki-client