$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: uuJpVGKUrHyBcw7LIahFYfDiMSzuNQ2gfhCycEwpxTU= Subject key identifier: 3F:EF:7A:0A:82:55:CC:50:97:67:04:17:44:BA:6C:69:6E:93:C4:8F Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 90F0A31E7D4812749A7C87F42AE2ED8580A360 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 08 Signing time: Sat 05 Apr 2025 11:31:59 +0000 Manifest this update: Sat 05 Apr 2025 11:26:59 +0000 Manifest next update: Tue 08 Apr 2025 16:26:59 +0000 Files and hashes: 1: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: TUD15hZhSTgH1RshgGErXpeDdkCctcCBTtzBJE0KrLI=) 2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) 3: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) 4: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90:f0:a3:1e:7d:48:12:74:9a:7c:87:f4:2a:e2:ed:85:80:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Apr 5 11:26:59 2025 GMT Not After : Apr 8 16:26:59 2025 GMT Subject: CN=3FEF7A0A8255CC509767041744BA6C696E93C48F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:4c:72:33:45:75:c0:5b:4f:b4:3c:f2:8d: 69:28:f0:12:c4:2b:90:82:d5:31:60:c8:9b:5e:d1: 2c:35:b7:aa:a0:ae:6f:52:6f:83:ab:c9:3c:eb:e1: ad:3a:75:38:29:b5:0e:2a:d2:1e:d1:7c:64:d4:ae: fd:8a:9c:34:87:9f:40:47:d0:89:18:0d:a2:e2:8d: b4:01:ca:97:e8:ba:f4:1c:1f:71:ef:e3:84:75:98: 32:28:c3:f5:b3:47:c9:04:f9:24:5b:53:e1:96:51: d6:eb:46:1c:d0:61:bf:c7:ed:c8:e4:cc:5d:b9:1c: 61:63:16:aa:a0:f6:4d:b3:6e:71:57:99:7f:94:59: e2:6e:5e:bc:06:9e:e2:88:b8:48:e8:92:6f:2c:76: 73:7a:46:bc:34:0a:14:ea:39:11:43:a7:82:13:56: 28:67:68:9e:2d:c8:1d:48:65:ef:76:0a:41:82:b4: 63:99:c3:94:6d:4a:c5:2c:d1:ce:61:84:ab:a8:36: 74:df:ee:3a:9d:b1:59:03:59:cc:7d:01:03:bf:e2: 4c:f9:99:1e:de:c0:3c:33:9f:bc:d3:05:15:9c:85: 0f:3d:6d:87:02:ca:2f:e3:64:2a:b5:5b:9b:87:4a: f1:03:1e:c8:54:ae:fd:7a:27:87:62:20:b8:b3:e5: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EF:7A:0A:82:55:CC:50:97:67:04:17:44:BA:6C:69:6E:93:C4:8F X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:54:75:9c:0f:df:ed:71:97:4e:ec:ee:85:4f:c8:5d:82:90: a8:d4:41:2a:33:58:2e:ad:03:26:87:4f:d2:0b:d9:da:2f:e3: ac:9e:70:ed:cc:af:ca:57:da:40:45:ad:1b:f5:91:a7:5a:95: 97:f7:f5:ba:ce:53:ed:25:9a:40:e8:52:67:af:cf:5a:d3:a8: 74:1a:e9:a6:40:de:e5:3d:45:16:12:0e:2b:32:2c:fb:13:60: d1:79:d3:fc:34:28:da:a5:2a:36:68:37:82:cc:d9:c2:6a:5f: e9:3c:7f:6c:a1:db:e8:c4:9c:21:85:27:1c:b8:ce:c6:25:8e: 23:95:38:58:b3:9f:39:6a:72:b9:7b:64:d0:72:0f:32:65:45: df:83:d2:50:e7:ca:88:27:4c:fa:63:61:e0:8b:bf:43:48:95: 56:d6:bd:81:cd:27:54:4f:fe:91:a6:3f:b6:db:4f:b3:a0:02: 48:5d:2a:b8:24:77:ce:0b:78:8a:39:d9:1c:74:6d:6a:1f:33: 61:a3:81:d7:a6:28:36:b0:99:0c:24:e7:91:d9:6a:cb:94:4a: b6:17:58:a6:77:81:6d:46:38:e4:05:fd:50:3a:d9:2a:3a:01: 0d:4b:72:00:c0:08:d0:c7:ac:11:25:53:50:41:28:6d:4c:08: 14:7a:e3:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJDwox59SBJ0mnyH9Cri7YWAo2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNTA0MDUxMTI2NTlaFw0yNTA0MDgxNjI2NTlaMDMxMTAvBgNV BAMTKDNGRUY3QTBBODI1NUNDNTA5NzY3MDQxNzQ0QkE2QzY5NkU5M0M0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXe0xyM0V1wFtPtDzyjWko8BLE K5CC1TFgyJte0Sw1t6qgrm9Sb4OryTzr4a06dTgptQ4q0h7RfGTUrv2KnDSHn0BH 0IkYDaLijbQBypfouvQcH3Hv44R1mDIow/WzR8kE+SRbU+GWUdbrRhzQYb/H7cjk zF25HGFjFqqg9k2zbnFXmX+UWeJuXrwGnuKIuEjokm8sdnN6Rrw0ChTqORFDp4IT VihnaJ4tyB1IZe92CkGCtGOZw5RtSsUs0c5hhKuoNnTf7jqdsVkDWcx9AQO/4kz5 mR7ewDwzn7zTBRWchQ89bYcCyi/jZCq1W5uHSvEDHshUrv16J4diILiz5VVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+96CoJVzFCXZwQXRLpsaW6TxI8wHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRUdZwP3+1xl07s7oVPyF2CkKjUQSozWC6t AyaHT9IL2dov46yecO3Mr8pX2kBFrRv1kadalZf39brOU+0lmkDoUmevz1rTqHQa 6aZA3uU9RRYSDisyLPsTYNF50/w0KNqlKjZoN4LM2cJqX+k8f2yh2+jEnCGFJxy4 zsYljiOVOFiznzlqcrl7ZNByDzJlRd+D0lDnyognTPpjYeCLv0NIlVbWvYHNJ1RP /pGmP7bbT7OgAkhdKrgkd84LeIo52Rx0bWofM2GjgdemKDawmQwk55HZasuUSrYX WKZ3gW1GOOQF/VA62So6AQ1LcgDACNDHrBElU1BBKG1MCBR643Y= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:56 2025 by rpki-client