$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: zZQ4szdNSK91/fJrvAoFDAaWe0SprZieTJ8RrGoDy7o= Subject key identifier: E3:31:28:CE:96:17:2E:F4:81:0B:A1:AF:52:2C:FC:BF:D2:91:5B:8F Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 5C4F9D2F467DBDB05EA6D042CB57F98F0922AC5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 042A Signing time: Thu 13 Mar 2025 01:10:52 +0000 Manifest this update: Thu 13 Mar 2025 01:05:52 +0000 Manifest next update: Sun 16 Mar 2025 07:23:52 +0000 Files and hashes: 1: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: 1hpk1bxyhvGNfNNFM5W1jNe9LBXJjKooa7PNaxSrJIg=) 2: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: BvednQirMsdE9Wqe4ixR538inDj4noipljhyRht7q1c=) 3: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: XGzaH0iWdCy5zsUnP4rW+qurcQNiJokFY8tcDg0B9Wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 07:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4f:9d:2f:46:7d:bd:b0:5e:a6:d0:42:cb:57:f9:8f:09:22:ac:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Mar 13 01:05:52 2025 GMT Not After : Mar 16 07:23:52 2025 GMT Subject: CN=E33128CE96172EF4810BA1AF522CFCBFD2915B8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fe:6f:cb:4a:80:8b:0a:98:a8:a0:7c:f7:11: 9d:bb:9b:90:b4:58:e1:31:f8:ac:2f:bd:87:9d:0c: 0e:fd:4c:45:78:cc:51:be:2b:40:b2:63:76:e6:79: 9e:d4:ea:2c:5f:62:6e:c0:5c:61:f0:88:d8:0a:e7: 55:2b:7f:8e:8e:d4:63:b1:58:68:23:11:ae:bb:9e: 09:d9:05:35:56:2d:16:31:cd:1e:a1:64:b1:13:93: d6:ad:16:6a:db:ab:5a:51:a1:63:ed:61:f5:ed:73: 5d:47:0e:b1:c8:5c:52:f9:ab:33:46:c9:10:2f:07: c2:8c:26:e4:ef:29:8a:0d:d9:15:13:e4:3b:79:38: e7:ba:88:08:27:a8:00:5b:58:32:04:45:13:30:96: 34:78:f0:69:d7:1e:e7:9f:8d:3a:35:73:95:68:4a: c9:0c:32:e9:b0:b1:ec:7c:e0:50:67:e0:3f:ce:41: d0:b7:e7:ef:9a:01:2f:dc:34:d0:2b:a5:d7:c0:61: e3:57:f2:69:a0:78:18:6b:dc:f3:20:5b:05:35:f9: 10:42:74:ea:ae:df:87:5f:1e:1a:54:98:db:b7:a9: ce:d9:d5:0e:cd:ca:ad:7b:37:9a:84:97:57:0a:95: 59:7b:9c:f9:5a:b0:25:9e:02:3e:77:3e:fa:c9:9c: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:31:28:CE:96:17:2E:F4:81:0B:A1:AF:52:2C:FC:BF:D2:91:5B:8F X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:27:d8:00:50:9e:c9:93:bb:ec:74:d8:61:77:e9:5a:6b:90: 50:02:32:2a:23:6c:88:25:b5:00:70:4d:ca:4d:b6:cb:9c:4c: e9:cd:36:ac:8a:43:d4:98:7b:21:a4:23:8a:c6:43:08:c2:e1: 8f:15:c7:17:fa:ed:25:64:22:34:49:24:82:24:6d:f6:2d:77: 00:9b:f4:5d:c6:eb:37:c4:d5:b4:d2:ec:6a:95:5d:2b:6f:9d: 31:45:d1:2d:9d:e0:c4:72:ac:1e:c2:4b:cc:ec:12:93:25:8b: 66:56:02:8c:34:7a:0b:a7:82:24:9c:49:a5:50:70:b5:e6:9b: 88:e3:dd:dd:ba:e6:7d:32:b7:ab:19:7a:db:9f:35:e7:57:66: 08:78:8e:f6:4e:e7:d3:c4:e8:40:c2:c1:42:f8:b2:10:9b:6e: b0:75:7a:eb:e0:cb:21:ac:e6:98:4e:6f:cf:62:43:4b:7c:b6: 98:82:2e:24:f3:ea:3e:b8:ec:68:bf:5a:b6:58:1b:e0:a8:07: 1e:52:1b:ba:81:09:f0:3d:f9:ad:37:a9:aa:65:6f:88:78:97: 1b:f9:e6:6f:6f:29:eb:34:a4:67:2e:99:e1:ca:89:f7:9c:9a: 7c:86:28:43:0a:de:3f:ce:4e:53:96:98:c4:d5:02:49:da:4b: 5b:65:03:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXE+dL0Z9vbBeptBCy1f5jwkirFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNTAzMTMwMTA1NTJaFw0yNTAzMTYwNzIzNTJaMDMxMTAvBgNV BAMTKEUzMzEyOENFOTYxNzJFRjQ4MTBCQTFBRjUyMkNGQ0JGRDI5MTVCOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/m/LSoCLCpiooHz3EZ27m5C0 WOEx+KwvvYedDA79TEV4zFG+K0CyY3bmeZ7U6ixfYm7AXGHwiNgK51Urf46O1GOx WGgjEa67ngnZBTVWLRYxzR6hZLETk9atFmrbq1pRoWPtYfXtc11HDrHIXFL5qzNG yRAvB8KMJuTvKYoN2RUT5Dt5OOe6iAgnqABbWDIERRMwljR48GnXHuefjTo1c5Vo SskMMumwsex84FBn4D/OQdC35++aAS/cNNArpdfAYeNX8mmgeBhr3PMgWwU1+RBC dOqu34dfHhpUmNu3qc7Z1Q7Nyq17N5qEl1cKlVl7nPlasCWeAj53PvrJnP4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4zEozpYXLvSBC6GvUiz8v9KRW48wHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQn2ABQnsmTu+x02GF36VprkFACMiojbIgl tQBwTcpNtsucTOnNNqyKQ9SYeyGkI4rGQwjC4Y8Vxxf67SVkIjRJJIIkbfYtdwCb 9F3G6zfE1bTS7GqVXStvnTFF0S2d4MRyrB7CS8zsEpMli2ZWAow0egungiScSaVQ cLXmm4jj3d265n0yt6sZetufNedXZgh4jvZO59PE6EDCwUL4shCbbrB1euvgyyGs 5phOb89iQ0t8tpiCLiTz6j647Gi/WrZYG+CoBx5SG7qBCfA9+a03qaplb4h4lxv5 5m9vKes0pGcumeHKifecmnyGKEMK3j/OTlOWmMTVAknaS1tlA8o= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:36 2025 by rpki-client