$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: EJCSha4jUydYQIsXj9idT6Zgit/uhNvOHyT09EFL4Bg= Subject key identifier: 65:67:EE:95:32:BB:96:23:36:BD:7F:9B:83:CD:87:2F:2B:58:B7:C6 Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 6AE05CAC9D0335428B00E57EAC93C2EE0C2D9029 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 019B Signing time: Fri 04 Apr 2025 06:21:40 +0000 Manifest this update: Fri 04 Apr 2025 06:16:40 +0000 Manifest next update: Mon 07 Apr 2025 09:40:40 +0000 Files and hashes: 1: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: fOeClpPAM1TK8IOTss4/WbnoMHtsAOsqOEHzrDJIniQ=) 2: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: VspFw++2jUPUNxpc1/y0Mp4Lv1a+LwrFNdh9KUkbu+E=) 3: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: iLB+fBAUlNp5dmmJFqEzkB0F4PrJW1s9e1DeNYaco08=) 4: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: pd2NDQQQPyHZaBaBe61CyREtdlKxDZecHqykFbQ5pJ8=) 5: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: 2eBKUXWmF5ts/Iekm7oAEARBCDw1Enrm52lUVeCh2ig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 09:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e0:5c:ac:9d:03:35:42:8b:00:e5:7e:ac:93:c2:ee:0c:2d:90:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Apr 4 06:16:40 2025 GMT Not After : Apr 7 09:40:40 2025 GMT Subject: CN=6567EE9532BB962336BD7F9B83CD872F2B58B7C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:75:71:47:3f:c0:f8:ad:fd:89:24:82:df: 57:24:6d:35:6a:b3:e4:62:61:0e:b5:ca:a0:50:8a: 86:08:ef:c7:58:97:b5:20:ae:e8:c1:22:f7:eb:55: 0a:c1:fd:c5:3a:ca:e8:0c:1c:b2:9a:7b:c0:f0:8a: 26:fa:4a:9e:16:c5:b5:b1:60:c7:07:c3:e9:b0:4f: 83:8a:c9:22:91:1f:80:0f:0b:cf:44:4b:ad:a9:b1: 87:4b:53:f8:86:c9:9f:5f:46:6f:a7:a9:b8:c9:b5: ef:ff:41:b6:2b:b2:70:50:4e:c8:38:f3:0d:29:a2: 0c:cb:14:2e:62:82:27:69:54:1b:86:e1:1b:62:23: 37:19:e0:3b:02:16:d6:cc:5a:4d:3a:30:72:98:e6: 50:38:6b:42:11:48:00:25:b0:11:ab:25:60:89:4c: 39:0b:70:a0:79:4e:58:08:3f:97:2c:a9:97:5b:7f: 29:b8:69:24:6a:a4:83:31:ce:99:84:ef:7e:2c:28: 5e:07:e8:d3:ae:43:c0:a0:51:22:88:56:81:ba:1b: fb:17:71:18:39:85:12:e8:f8:d7:c2:a2:f0:0d:4b: a5:21:a6:5a:fe:e6:67:d1:08:30:02:e4:c4:11:b7: d0:6d:a9:2b:58:56:97:46:69:a8:21:c9:03:9c:44: 78:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:67:EE:95:32:BB:96:23:36:BD:7F:9B:83:CD:87:2F:2B:58:B7:C6 X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d1:83:fa:21:58:22:81:4c:fe:9f:2b:67:3a:9c:f5:64:63: 39:0e:74:cb:9f:37:00:40:55:67:ac:4b:d6:64:4d:a8:5e:59: 9d:00:b4:1f:88:41:36:da:78:a4:60:4b:91:0e:5d:2b:bc:62: 24:85:80:55:a9:05:05:ba:03:5d:d9:2a:b1:9b:6f:b8:2e:ea: 5d:6b:c2:6d:19:a0:5c:a8:1c:26:39:2d:9a:c8:9a:f9:57:98: 6e:8c:43:7e:cc:b9:11:f4:80:a9:c7:ea:12:3d:de:ab:4d:2f: 77:ff:4c:1b:d7:8c:71:2d:58:c4:22:89:6d:fb:ae:95:81:ce: 8c:e6:01:25:89:cd:22:bf:2e:43:80:f9:d4:47:94:59:ea:de: ac:23:6c:17:a2:da:01:13:a8:29:d9:a2:40:51:d8:55:d9:a9: 4b:b1:c7:02:70:de:d2:2d:e4:19:64:f7:9c:22:f4:1d:af:02: 20:f7:67:30:d3:e1:92:da:6b:6e:2a:97:1f:0e:b8:ab:ac:49: ae:88:6e:00:1e:ab:4b:66:f3:a1:6d:d7:c2:bb:13:d0:3f:d2: 14:35:87:19:31:d9:f2:4b:32:a2:93:db:79:94:a9:b2:21:1a: 8c:51:d0:52:0f:be:7e:4f:4f:35:23:01:3c:c8:21:8d:e6:09: c9:fc:c2:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUauBcrJ0DNUKLAOV+rJPC7gwtkCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNTA0MDQwNjE2NDBaFw0yNTA0MDcwOTQwNDBaMDMxMTAvBgNV BAMTKDY1NjdFRTk1MzJCQjk2MjMzNkJEN0Y5QjgzQ0Q4NzJGMkI1OEI3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QHVxRz/A+K39iSSC31ckbTVq s+RiYQ61yqBQioYI78dYl7UgrujBIvfrVQrB/cU6yugMHLKae8Dwiib6Sp4WxbWx YMcHw+mwT4OKySKRH4APC89ES62psYdLU/iGyZ9fRm+nqbjJte//QbYrsnBQTsg4 8w0pogzLFC5igidpVBuG4RtiIzcZ4DsCFtbMWk06MHKY5lA4a0IRSAAlsBGrJWCJ TDkLcKB5TlgIP5csqZdbfym4aSRqpIMxzpmE734sKF4H6NOuQ8CgUSKIVoG6G/sX cRg5hRLo+NfCovANS6Uhplr+5mfRCDAC5MQRt9BtqStYVpdGaaghyQOcRHjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZWfulTK7liM2vX+bg82HLytYt8YwHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/Rg/ohWCKBTP6fK2c6nPVkYzkOdMufNwBA VWesS9ZkTaheWZ0AtB+IQTbaeKRgS5EOXSu8YiSFgFWpBQW6A13ZKrGbb7gu6l1r wm0ZoFyoHCY5LZrImvlXmG6MQ37MuRH0gKnH6hI93qtNL3f/TBvXjHEtWMQiiW37 rpWBzozmASWJzSK/LkOA+dRHlFnq3qwjbBei2gETqCnZokBR2FXZqUuxxwJw3tIt 5Blk95wi9B2vAiD3ZzDT4ZLaa24qlx8OuKusSa6IbgAeq0tm86Ft18K7E9A/0hQ1 hxkx2fJLMqKT23mUqbIhGoxR0FIPvn5PTzUjATzIIY3mCcn8wpg= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:23 2025 by rpki-client