$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft File: 5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft (raw, json) Hash identifier: Vko5JTJD22z2PKgw5B334FuDMHx6J4G9TzuCDZl7/AQ= Subject key identifier: 86:90:20:8C:63:B8:1F:83:F0:65:1A:C7:A1:DD:4B:96:6F:7B:C8:CD Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Certificate serial: 620CB0B0D46C3271B4616AC61EE9773AF35B6DAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft Manifest number: 025D Signing time: Mon 17 Feb 2025 03:26:35 +0000 Manifest this update: Mon 17 Feb 2025 03:21:35 +0000 Manifest next update: Thu 20 Feb 2025 11:13:35 +0000 Files and hashes: 1: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: 28vgeLNt3g9napF7ybKdFbQimDX85rDBRhlE0yU7IqI=) 2: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: SHAFGJOdQSS5ZqozGPq16khbD5estk3T1ejmGm1B3pU=) 3: 3130332e39342e3233382e302f32342d3234203d3e203138333933.roa (hash: aGknBXKounTfIsfHYzGFX2ryMMvmOOlJfHr9mLb3pxA=) 4: 5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl (hash: RCFH8QRaiY7s3wvsZm7YalmR5s6EJlcbKKdhyvzixk4=) 5: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: YUNDCL4eKY/WSBYrQHBCQwjmiznybb06CPTcpquocBA=) 6: 3130332e39342e3233392e302f32342d3234203d3e203138333933.roa (hash: yHN/GvrfbLo0VCaVCry5XPx/5PHyIuK8RO+vZhQqY1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 11:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0c:b0:b0:d4:6c:32:71:b4:61:6a:c6:1e:e9:77:3a:f3:5b:6d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Validity Not Before: Feb 17 03:21:35 2025 GMT Not After : Feb 20 11:13:35 2025 GMT Subject: CN=8690208C63B81F83F0651AC7A1DD4B966F7BC8CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:90:d6:ff:78:6b:1b:82:31:b0:70:3f:e8: 01:6d:97:d2:cb:f1:e8:f2:a4:64:08:07:e5:d2:c2: 2c:a2:5f:24:f3:0d:01:b1:25:0f:86:68:d4:84:b4: c1:5e:ce:29:05:bc:69:f5:9e:14:90:73:52:b8:6b: e0:0a:41:95:31:f4:58:40:64:b6:2f:3a:cf:49:9c: 2a:17:ff:46:49:53:30:c2:2c:de:3b:e4:ac:76:d2: 88:4d:7e:62:cc:cc:2d:a0:b9:1b:a3:63:de:38:cc: d9:09:11:dd:95:ca:6d:6d:ab:b2:0e:ae:b1:18:37: 37:63:a7:b1:9c:4c:2b:62:f4:1d:df:e4:f6:3f:a1: bc:ab:f0:e5:a2:39:e8:a6:71:0b:8a:56:a5:e5:4e: 65:3b:67:1b:2f:b6:17:b6:0a:05:68:4e:69:7e:23: 54:2c:2f:4f:5f:eb:5f:cf:78:59:fd:8f:71:4a:62: 3e:b3:b0:9e:62:e4:a4:cd:a0:22:ed:8a:4e:f4:5b: 09:45:3c:97:54:93:34:92:79:32:d2:80:ce:cf:90: 4b:ff:37:92:3f:48:4e:5e:68:4d:8e:df:c8:17:fb: 90:41:33:f1:65:54:e8:e3:04:7b:b7:33:b9:45:90: 4a:d9:b2:b6:df:d4:f2:96:2b:54:20:eb:98:19:4f: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:90:20:8C:63:B8:1F:83:F0:65:1A:C7:A1:DD:4B:96:6F:7B:C8:CD X509v3 Authority Key Identifier: keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:40:75:95:78:1f:f4:4f:2f:76:d5:be:5a:99:8f:0c:92:d3: 47:2b:a0:89:89:90:34:25:58:3e:92:28:bc:1f:ec:5f:4f:09: 9f:45:d6:e7:c2:49:c4:26:86:9c:2d:e1:28:5f:fa:c8:78:4c: 6d:28:67:26:f1:b7:44:2d:c1:28:46:35:cc:22:33:dd:d2:73: 65:7b:11:c5:be:ad:c3:80:8f:6e:cb:e4:78:76:32:59:7d:27: 7e:80:55:8a:7c:aa:8f:d8:b4:6c:41:36:4f:88:07:85:a8:53: af:31:49:80:54:d5:1e:80:fc:91:62:07:df:a7:8a:3d:e2:3d: 93:0d:d1:5c:d1:eb:07:d8:40:1c:bc:36:be:5d:f1:63:49:18: 64:5e:ca:e1:7c:67:1f:26:ef:43:22:c1:cc:cc:ed:0d:8c:85: 3b:38:ef:70:25:92:71:a1:f0:bd:46:49:55:42:55:eb:7e:94: 88:69:e8:ba:da:65:b0:3c:be:36:94:24:55:a7:e2:c8:0d:c8: 7a:b9:b5:28:02:40:67:84:a2:c6:35:36:b0:b0:12:bd:3a:0f: b1:70:3f:9b:31:de:45:e3:78:03:58:3d:6b:b9:f6:49:73:8d: e7:ed:60:ee:a6:10:0e:38:50:6f:bd:c2:c4:b4:15:63:86:5f: 3b:a5:21:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgywsNRsMnG0YWrGHul3OvNbbawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3 RTc5RTY0MjAeFw0yNTAyMTcwMzIxMzVaFw0yNTAyMjAxMTEzMzVaMDMxMTAvBgNV BAMTKDg2OTAyMDhDNjNCODFGODNGMDY1MUFDN0ExREQ0Qjk2NkY3QkM4Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTpDW/3hrG4IxsHA/6AFtl9LL 8ejypGQIB+XSwiyiXyTzDQGxJQ+GaNSEtMFezikFvGn1nhSQc1K4a+AKQZUx9FhA ZLYvOs9JnCoX/0ZJUzDCLN475Kx20ohNfmLMzC2guRujY944zNkJEd2Vym1tq7IO rrEYNzdjp7GcTCti9B3f5PY/obyr8OWiOeimcQuKVqXlTmU7Zxsvthe2CgVoTml+ I1QsL09f61/PeFn9j3FKYj6zsJ5i5KTNoCLtik70WwlFPJdUkzSSeTLSgM7PkEv/ N5I/SE5eaE2O38gX+5BBM/FlVOjjBHu3M7lFkErZsrbf1PKWK1Qg65gZT4j3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhpAgjGO4H4PwZRrHod1Llm97yM0wHwYDVR0j BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5 RTY0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZjgzNTItY2Q2NS00ZGI3LWIw Y2ItMDQ4YjQ1ZTdhNGJmLzAvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZD QzU3RTc5RTY0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZAdZV4H/RPL3bVvlqZjwyS00croImJkDQl WD6SKLwf7F9PCZ9F1ufCScQmhpwt4Shf+sh4TG0oZybxt0QtwShGNcwiM93Sc2V7 EcW+rcOAj27L5Hh2Mll9J36AVYp8qo/YtGxBNk+IB4WoU68xSYBU1R6A/JFiB9+n ij3iPZMN0VzR6wfYQBy8Nr5d8WNJGGReyuF8Zx8m70MiwczM7Q2MhTs473AlknGh 8L1GSVVCVet+lIhp6LraZbA8vjaUJFWn4sgNyHq5tSgCQGeEosY1NrCwEr06D7Fw P5sx3kXjeANYPWu59klzjeftYO6mEA44UG+9wsS0FWOGXzulIXo= -----END CERTIFICATE-----Generated at Wed Feb 19 21:57:39 2025 by rpki-client