$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: cRWrKSSH+tCW4oBMDEGRlRFfDF4k2/ksJ6L7gTI0JBg= Subject key identifier: 5A:EC:59:08:F4:93:56:81:B5:25:6D:DC:81:FA:BF:60:E9:50:74:A7 Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 732E6CA63C6B73F595BC4C02EE61FCA2E07F8015 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 01D5 Signing time: Fri 04 Apr 2025 16:11:34 +0000 Manifest this update: Fri 04 Apr 2025 16:06:34 +0000 Manifest next update: Tue 08 Apr 2025 00:42:34 +0000 Files and hashes: 1: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: X6Rsg1TfWPdkmJNWv+FJnlS7WWkveBK6RzkbYc8aDOc=) 2: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: oDfouRUG9Q3gP76+cJluUeYjhwxX116YwTG/X1UiEKo=) 3: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: oQmIQlBadVZCS+gtCSLeiJU5n0ARxMM2rXBhJuaTr7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2e:6c:a6:3c:6b:73:f5:95:bc:4c:02:ee:61:fc:a2:e0:7f:80:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Apr 4 16:06:34 2025 GMT Not After : Apr 8 00:42:34 2025 GMT Subject: CN=5AEC5908F4935681B5256DDC81FABF60E95074A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:c6:90:f3:d3:cc:c0:46:6a:1e:1e:fd:cf: 84:85:cf:90:03:8e:a4:5b:04:ea:9d:cb:ad:80:fc: af:43:27:59:67:b2:c7:72:91:8a:5e:03:55:65:b9: 29:57:d7:81:45:26:2c:45:53:36:ae:28:88:e2:45: 56:25:90:d8:27:0a:54:cc:51:c8:81:c4:fe:67:53: 0a:a5:6c:73:97:14:c2:53:93:e5:d9:bf:62:ab:90: 80:d7:d6:dd:19:49:48:3e:61:91:50:ce:9d:5e:f0: 02:39:2d:4a:28:23:bf:c5:9a:35:81:9e:62:bc:90: 43:1a:cb:14:2b:ac:87:b6:ab:88:78:66:de:99:33: de:d2:d6:83:d3:3d:e8:f5:2f:57:e2:80:b6:34:35: e4:d5:3b:8b:8a:46:3b:4e:71:18:35:77:5f:1f:fa: a0:bf:d5:78:76:98:87:00:4a:8a:89:05:78:3a:40: 31:83:6a:47:97:c4:d1:90:b4:0f:cb:97:11:0a:48: 10:68:32:2e:9f:0d:12:ee:3e:4f:61:85:11:bc:b0: 42:96:ff:47:69:1f:ac:60:32:f5:cf:04:34:7e:eb: 31:cf:20:03:d3:e4:a8:43:6c:ef:6e:88:ec:1e:3f: 6c:c3:ac:49:39:f9:90:c4:71:d8:b0:91:c5:69:cc: e5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EC:59:08:F4:93:56:81:B5:25:6D:DC:81:FA:BF:60:E9:50:74:A7 X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f6:5d:1f:6e:a3:6a:f3:e8:43:16:6e:63:26:7b:5a:e9:90: b9:9c:d9:5f:39:f7:2a:3f:bb:e9:d7:a9:73:be:a4:0f:18:72: f5:04:c7:da:23:64:d1:ad:dc:01:93:31:2e:2c:26:28:1d:da: bf:44:8d:7d:10:d8:0e:81:d7:dd:9b:0f:f7:d1:5b:a2:77:b5: 94:ed:51:12:d6:78:f1:d8:cc:e0:d0:55:56:d3:9f:30:87:27: 89:5f:d2:40:19:6b:5f:9c:75:9c:f6:ef:02:a6:cf:8c:bb:b7: db:61:f3:e4:09:f3:83:53:12:9d:f2:a0:48:54:78:a3:57:bd: 82:af:b6:60:f8:9b:cf:0f:0f:18:2c:29:28:2e:23:b2:23:d1: 37:48:a9:2a:cb:41:bc:6c:f9:d2:b0:c4:4e:ec:bc:83:70:8d: 2c:18:61:0b:e3:ea:a9:cf:c3:de:24:f4:c6:63:00:d3:c5:c5: 5d:20:c5:58:8e:22:b7:64:c2:65:2a:ea:a5:55:88:4f:56:d9: 4c:cb:b6:07:e2:cb:ce:d0:75:3b:25:3a:9f:aa:23:32:0a:23: 57:98:74:41:0b:96:db:3d:d2:a5:6b:83:22:fa:1f:c8:e8:6a: 2e:cb:09:53:fd:52:93:15:87:87:03:99:12:49:8d:91:7b:07: ed:31:d1:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcy5spjxrc/WVvEwC7mH8ouB/gBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTA0MDQxNjA2MzRaFw0yNTA0MDgwMDQyMzRaMDMxMTAvBgNV BAMTKDVBRUM1OTA4RjQ5MzU2ODFCNTI1NkREQzgxRkFCRjYwRTk1MDc0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQMaQ89PMwEZqHh79z4SFz5AD jqRbBOqdy62A/K9DJ1lnssdykYpeA1VluSlX14FFJixFUzauKIjiRVYlkNgnClTM UciBxP5nUwqlbHOXFMJTk+XZv2KrkIDX1t0ZSUg+YZFQzp1e8AI5LUooI7/FmjWB nmK8kEMayxQrrIe2q4h4Zt6ZM97S1oPTPej1L1figLY0NeTVO4uKRjtOcRg1d18f +qC/1Xh2mIcASoqJBXg6QDGDakeXxNGQtA/LlxEKSBBoMi6fDRLuPk9hhRG8sEKW /0dpH6xgMvXPBDR+6zHPIAPT5KhDbO9uiOweP2zDrEk5+ZDEcdiwkcVpzOUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWuxZCPSTVoG1JW3cgfq/YOlQdKcwHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADT2XR9uo2rz6EMWbmMme1rpkLmc2V859yo/ u+nXqXO+pA8YcvUEx9ojZNGt3AGTMS4sJigd2r9EjX0Q2A6B192bD/fRW6J3tZTt URLWePHYzODQVVbTnzCHJ4lf0kAZa1+cdZz27wKmz4y7t9th8+QJ84NTEp3yoEhU eKNXvYKvtmD4m88PDxgsKSguI7Ij0TdIqSrLQbxs+dKwxE7svINwjSwYYQvj6qnP w94k9MZjANPFxV0gxViOIrdkwmUq6qVViE9W2UzLtgfiy87QdTslOp+qIzIKI1eY dEELlts90qVrgyL6H8joai7LCVP9UpMVh4cDmRJJjZF7B+0x0RM= -----END CERTIFICATE-----Generated at Sun Apr 6 02:19:12 2025 by rpki-client