$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: nVMb/9xU31TroUG3myVYHV5pOtLgRuyRa4ig/B9fjkA= Subject key identifier: FC:47:AA:3C:F2:86:05:AA:87:30:A5:05:9D:35:B6:08:EE:98:D0:38 Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 7224AA50D28A6E5A7AEEABCEE23285B52B4CF7CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 04C5 Signing time: Fri 11 Apr 2025 05:04:11 +0000 Manifest this update: Fri 11 Apr 2025 04:59:11 +0000 Manifest next update: Mon 14 Apr 2025 10:30:11 +0000 Files and hashes: 1: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: gvdTawMjuZSpigUwAj2qBDjrcCcWCvIuD4DqGYmqvk4=) 2: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: NJ0tpUPsc3Bnm5NkUej4AyI75QawVIIptpD8njjI8Rw=) 3: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: rocwRr0NP6Uj0/rSOv/9FOGchYWFwBQRYbTt7bw6igg=) 4: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: kukHSdKo+M9xTYHkGzPoc1IIk4PBPSztcVRPyzuPoHw=) 5: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: 75Wta+uwJrqDvHsVCmnRjVlduNfxnIK2f2jA8o86w1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 10:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:24:aa:50:d2:8a:6e:5a:7a:ee:ab:ce:e2:32:85:b5:2b:4c:f7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Apr 11 04:59:11 2025 GMT Not After : Apr 14 10:30:11 2025 GMT Subject: CN=FC47AA3CF28605AA8730A5059D35B608EE98D038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:a0:60:9a:a9:0d:03:e8:b3:5d:8f:99:67: fe:47:4c:58:cd:07:fb:00:9f:c1:6e:ec:22:81:03: 88:a3:99:85:5b:b4:53:10:c6:55:37:f2:14:45:a8: d0:99:3b:42:c2:be:37:eb:be:18:97:27:2c:0d:a7: 30:98:3c:a5:92:ff:e5:16:5f:22:7b:4e:ea:a0:9e: bc:f7:22:de:ee:fe:1e:5f:fa:5f:f1:7d:ae:eb:d2: e4:2c:1e:ba:f1:85:e6:4e:f5:2b:a8:8c:cf:66:e0: 6d:7b:80:e4:98:91:9b:22:99:f9:6a:e7:ba:9e:e9: 8d:20:ea:b0:53:1a:3c:fc:3a:eb:71:5a:d6:96:63: 45:ff:f6:27:0c:58:b9:45:ea:77:3b:5e:d2:cf:98: 04:b8:78:e4:68:17:4f:0f:1e:e0:ca:71:9d:99:c7: a4:47:4c:10:31:10:88:0c:f2:1e:8c:a2:84:49:03: da:03:e1:cc:5c:99:86:5d:43:e7:0e:3b:66:48:b3: da:3b:a2:86:be:46:fe:0e:52:97:8b:14:63:c7:2a: f9:75:6c:2f:80:0d:9a:c5:3a:31:6c:2b:c2:4a:9f: 9d:22:3a:e2:e7:8f:ff:3b:8a:1f:a7:c6:f7:18:a8: 96:74:cb:de:3b:a1:84:ab:7e:df:e2:cd:fa:b6:24: 60:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:47:AA:3C:F2:86:05:AA:87:30:A5:05:9D:35:B6:08:EE:98:D0:38 X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:1d:85:e8:07:c8:fa:ab:d1:7d:9a:0e:9c:bf:84:58:ca:5d: 69:bc:5a:82:32:14:4d:0a:a9:c4:04:38:09:b8:65:e7:42:40: 7d:f3:cf:ef:6b:7f:e0:2d:fb:3d:3a:1a:53:17:0d:86:dc:9c: 75:fb:e0:9e:7b:72:59:0b:e3:98:8a:76:e6:75:74:4a:92:63: f4:db:4e:ae:1a:7b:fd:26:28:f9:28:19:80:04:c2:7e:eb:1f: 84:64:77:6b:cb:aa:6d:8c:e7:97:8d:51:fb:17:57:49:a2:fe: f6:bc:b4:44:78:37:16:c9:4b:f5:e7:4e:81:75:86:99:51:03: fe:d4:e5:b6:8c:02:6e:77:16:9d:d0:88:d8:d9:82:a2:29:e3: 83:e7:64:ee:e0:d9:ef:b9:61:d0:ec:cb:31:17:9b:59:b6:e9: 19:e9:53:b5:cf:27:05:e2:59:50:65:c7:70:3e:5f:f4:2c:3c: 50:29:1a:5e:51:1d:f1:cd:0b:50:ed:07:a7:62:7b:1f:24:53: 45:2d:a0:1e:0c:c1:14:6d:a8:0e:36:24:da:4d:7b:3d:70:26: c7:22:7f:b8:49:75:34:fe:4b:73:7a:a4:7f:b1:bf:ca:f7:b5: 53:0c:07:a7:98:2f:32:fd:30:84:9b:72:a5:a5:c7:ba:1a:76: 9e:3d:21:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciSqUNKKblp67qvO4jKFtStM98owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNTA0MTEwNDU5MTFaFw0yNTA0MTQxMDMwMTFaMDMxMTAvBgNV BAMTKEZDNDdBQTNDRjI4NjA1QUE4NzMwQTUwNTlEMzVCNjA4RUU5OEQwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDeaBgmqkNA+izXY+ZZ/5HTFjN B/sAn8Fu7CKBA4ijmYVbtFMQxlU38hRFqNCZO0LCvjfrvhiXJywNpzCYPKWS/+UW XyJ7Tuqgnrz3It7u/h5f+l/xfa7r0uQsHrrxheZO9SuojM9m4G17gOSYkZsimflq 57qe6Y0g6rBTGjz8OutxWtaWY0X/9icMWLlF6nc7XtLPmAS4eORoF08PHuDKcZ2Z x6RHTBAxEIgM8h6MooRJA9oD4cxcmYZdQ+cOO2ZIs9o7ooa+Rv4OUpeLFGPHKvl1 bC+ADZrFOjFsK8JKn50iOuLnj/87ih+nxvcYqJZ0y947oYSrft/izfq2JGBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/EeqPPKGBaqHMKUFnTW2CO6Y0DgwHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMdhegHyPqr0X2aDpy/hFjKXWm8WoIyFE0K qcQEOAm4ZedCQH3zz+9rf+At+z06GlMXDYbcnHX74J57clkL45iKduZ1dEqSY/Tb Tq4ae/0mKPkoGYAEwn7rH4Rkd2vLqm2M55eNUfsXV0mi/va8tER4NxbJS/XnToF1 hplRA/7U5baMAm53Fp3QiNjZgqIp44PnZO7g2e+5YdDsyzEXm1m26RnpU7XPJwXi WVBlx3A+X/QsPFApGl5RHfHNC1DtB6diex8kU0UtoB4MwRRtqA42JNpNez1wJsci f7hJdTT+S3N6pH+xv8r3tVMMB6eYLzL9MISbcqWlx7oadp49Idk= -----END CERTIFICATE-----Generated at Sat Apr 12 18:10:02 2025 by rpki-client