$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: 9aWkKEJWubd11I5Eeicg6Lez/4Kw6YM/enjZbt+DqK4= Subject key identifier: 49:51:B0:6E:67:F6:AA:C4:62:ED:81:E3:F7:0C:62:77:06:AD:05:B9 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 411F105FB5809633395557CAEAD841312F01F654 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: D6 Signing time: Fri 04 Apr 2025 10:50:00 +0000 Manifest this update: Fri 04 Apr 2025 10:45:00 +0000 Manifest next update: Mon 07 Apr 2025 19:26:00 +0000 Files and hashes: 1: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: ePs+7QNvRzMlIpdqEG5AJcQ/7oSXOlNvEWF18TjLRwk=) 2: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: 4iu/wTpo+D1hO7xn/VuXU3GSn6km5k1GJfUiYZ8X1uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1f:10:5f:b5:80:96:33:39:55:57:ca:ea:d8:41:31:2f:01:f6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Apr 4 10:45:00 2025 GMT Not After : Apr 7 19:26:00 2025 GMT Subject: CN=4951B06E67F6AAC462ED81E3F70C627706AD05B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:e0:54:b1:7e:ba:68:6b:66:39:8f:ca:bf: ec:b2:7c:b6:01:da:42:f7:76:c9:b3:93:f5:71:e0: dc:b3:78:86:37:26:c4:4e:9e:d9:5f:fc:0a:18:99: 1c:66:f7:9f:f6:0a:de:b8:3c:56:bc:79:32:98:4a: 2a:92:b1:cf:00:8e:44:52:0f:fa:8c:91:ad:26:7c: 30:8f:5a:91:4f:d1:96:dd:5a:21:33:bf:9c:e5:1d: 21:b6:48:ac:2a:ff:18:5e:e3:90:a6:30:db:42:39: d6:94:4f:eb:7b:ea:b7:6f:03:6f:12:27:e5:76:ce: 4f:a6:ed:b4:c5:20:0c:07:7b:ab:ef:b4:45:e9:3c: d9:df:65:82:63:dd:66:24:bd:7d:46:61:13:06:6c: 24:f6:12:64:3f:38:fc:f8:e4:da:94:20:b5:8a:4d: 1b:32:75:c4:9a:6d:54:d2:a4:25:52:9d:65:27:f5: dc:18:7b:5a:1c:58:86:b8:8b:ec:d9:63:a6:02:64: d5:20:03:54:6c:6f:4f:f3:5a:f8:f6:09:5b:07:6f: e2:75:92:a4:0d:14:b0:30:35:1f:f6:ae:83:fc:12: 11:e1:45:b5:88:15:97:4f:60:8f:52:f8:81:2a:1e: 7f:88:b6:3b:e7:b4:93:d8:81:46:ca:65:6f:74:bf: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:51:B0:6E:67:F6:AA:C4:62:ED:81:E3:F7:0C:62:77:06:AD:05:B9 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:89:8b:41:a1:ba:7d:dc:1a:8a:7d:25:dd:a7:ba:58:5c:c2: 61:54:7b:6f:56:64:bb:4c:37:4e:50:2e:7c:19:76:08:20:c7: b4:45:73:06:86:de:5b:f6:27:85:9d:a2:6d:80:1c:b1:17:07: 10:e7:dd:ce:34:24:a2:23:f1:94:42:b0:3f:13:02:2a:90:f2: 8d:46:b1:0e:44:1b:ce:de:0e:72:fd:d7:e8:ca:e4:3a:3a:64: b0:10:8b:82:48:d1:9d:f9:54:93:e8:9a:45:54:e7:d9:8c:10: 65:b1:0e:e8:a9:65:4e:32:82:e8:8d:8e:bf:16:96:59:fd:e1: 29:66:fe:e2:e2:d6:58:4f:6b:45:c2:33:d3:b3:0a:38:31:3a: ef:b2:34:b5:b5:eb:2d:5e:80:fa:a4:43:93:03:d8:60:9e:c1: d1:d0:79:d8:0c:ad:c0:b8:7d:61:93:be:f2:d4:c6:66:32:54: 59:f0:e0:3a:aa:b3:2b:15:8f:1b:cf:01:ba:86:9a:ee:a0:49: 0f:1b:ea:d8:2e:21:1f:b9:73:45:58:84:39:5b:fd:23:04:81: 56:34:39:7d:bb:4d:b6:31:8c:ba:86:c8:41:7b:62:cf:a8:ea: db:f8:7a:cb:6e:f7:df:80:3a:70:31:82:0f:dd:71:48:25:67: 87:9a:2a:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQR8QX7WAljM5VVfK6thBMS8B9lQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTA0MDQxMDQ1MDBaFw0yNTA0MDcxOTI2MDBaMDMxMTAvBgNV BAMTKDQ5NTFCMDZFNjdGNkFBQzQ2MkVEODFFM0Y3MEM2Mjc3MDZBRDA1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9+BUsX66aGtmOY/Kv+yyfLYB 2kL3dsmzk/Vx4NyzeIY3JsROntlf/AoYmRxm95/2Ct64PFa8eTKYSiqSsc8AjkRS D/qMka0mfDCPWpFP0ZbdWiEzv5zlHSG2SKwq/xhe45CmMNtCOdaUT+t76rdvA28S J+V2zk+m7bTFIAwHe6vvtEXpPNnfZYJj3WYkvX1GYRMGbCT2EmQ/OPz45NqUILWK TRsydcSabVTSpCVSnWUn9dwYe1ocWIa4i+zZY6YCZNUgA1Rsb0/zWvj2CVsHb+J1 kqQNFLAwNR/2roP8EhHhRbWIFZdPYI9S+IEqHn+ItjvntJPYgUbKZW90v0n1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSVGwbmf2qsRi7YHj9wxidwatBbkwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOJi0Ghun3cGop9Jd2nulhcwmFUe29WZLtM N05QLnwZdgggx7RFcwaG3lv2J4Wdom2AHLEXBxDn3c40JKIj8ZRCsD8TAiqQ8o1G sQ5EG87eDnL91+jK5Do6ZLAQi4JI0Z35VJPomkVU59mMEGWxDuipZU4yguiNjr8W lln94Slm/uLi1lhPa0XCM9OzCjgxOu+yNLW16y1egPqkQ5MD2GCewdHQedgMrcC4 fWGTvvLUxmYyVFnw4DqqsysVjxvPAbqGmu6gSQ8b6tguIR+5c0VYhDlb/SMEgVY0 OX27TbYxjLqGyEF7Ys+o6tv4estu99+AOnAxgg/dcUglZ4eaKmk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:04 2025 by rpki-client