$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: u4IXmjbIp8XuppUkrdun+g/XDT/peNTbFglSRCtqP2c= Subject key identifier: DA:FD:53:44:48:00:13:FB:1F:C0:19:57:5E:71:AD:1A:C2:AD:8B:A9 Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 34DF4EBE3F6B2580ED503B5398951B961F63A4F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 019C Signing time: Sat 05 Apr 2025 12:51:47 +0000 Manifest this update: Sat 05 Apr 2025 12:46:47 +0000 Manifest next update: Tue 08 Apr 2025 19:35:47 +0000 Files and hashes: 1: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: Xss6SZb0nW91MZ709n87WJNGKVtK88UwF1vtzG/qWHc=) 2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: SJWCctw3wDy04eyr8uGtaxTxeDcgqn25/ejSSAcBCus=) 3: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: ECBhF+e4+If0A3tMP/p9517WUpUqU+SxVkyIhiuFLnc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:df:4e:be:3f:6b:25:80:ed:50:3b:53:98:95:1b:96:1f:63:a4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Apr 5 12:46:47 2025 GMT Not After : Apr 8 19:35:47 2025 GMT Subject: CN=DAFD5344480013FB1FC019575E71AD1AC2AD8BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:85:a9:40:55:f3:28:fb:30:d6:31:c5:ce: 08:81:33:58:9e:95:ce:5c:3c:42:8a:29:91:63:eb: 08:b7:e7:5a:1a:b9:af:3c:18:16:40:18:4f:92:9d: ce:e6:ed:52:74:53:c6:2a:05:65:31:41:87:99:8b: a7:70:0f:bc:96:9f:86:5a:73:44:c8:b1:55:c7:cc: ba:cf:78:d3:c7:fb:4f:80:dc:66:a0:90:89:1f:9e: bd:db:76:06:c0:47:54:15:60:2a:58:c4:4a:fc:43: 52:b3:9d:81:97:11:9d:ce:af:73:8e:23:2c:da:1e: da:e2:25:3b:9e:80:94:28:dc:7c:9e:f9:f9:ec:3c: ae:96:00:69:e1:07:54:81:c3:95:d6:06:7e:d3:ae: 70:db:fd:cc:00:f3:f7:46:70:fd:b3:05:d9:90:ec: a0:56:83:84:8e:8b:d1:fe:96:7a:6f:ba:6c:f6:be: 0e:2b:63:58:50:54:70:3c:73:5a:d6:fb:62:c4:df: 08:fe:cd:03:76:de:e7:b1:2d:72:4b:87:d2:16:19: 22:52:0a:eb:2e:0d:a3:0c:72:1a:f8:4b:c0:a5:72: 0d:bf:70:67:6d:9e:e5:a4:50:a7:ad:68:b8:08:c3: 62:2d:8d:27:55:0d:e7:ae:57:83:0c:dd:ae:69:f3: 6e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FD:53:44:48:00:13:FB:1F:C0:19:57:5E:71:AD:1A:C2:AD:8B:A9 X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:91:37:de:58:4e:d1:3a:20:8e:23:4c:34:d1:42:27:6e:31: 03:99:58:c6:64:4a:2e:c9:3c:a0:8c:3b:ee:68:df:05:1d:ee: 78:9d:d1:a2:1c:bf:01:d4:44:5f:73:ff:40:9b:8a:09:96:e1: 16:8d:e7:bc:5b:16:5c:e7:f2:2c:7e:9a:7d:62:b3:5c:fd:a1: dc:6b:25:b7:bc:b0:1d:73:ce:2e:9c:33:76:f3:1a:b9:b0:e3: c8:8a:2a:00:92:ae:f8:8b:d8:c2:ec:e8:f4:96:a2:00:1d:68: 4a:4c:ae:5b:76:d2:20:07:e5:bb:8c:f9:39:79:3a:e5:66:4a: 5e:ac:2b:77:61:35:1a:58:57:51:4f:4d:2d:0a:f5:7a:fb:21: dc:68:ac:a9:aa:fa:e3:7d:44:b5:1e:d5:7a:b6:99:a5:b0:ea: a7:fc:4a:f5:4a:cc:78:09:8f:40:67:87:7a:fa:5b:fd:21:4b: 6c:10:08:34:30:08:87:16:1f:52:03:bb:e3:95:64:5f:49:0a: 97:c9:98:c6:48:d7:9e:20:86:27:6b:7d:d3:be:fe:ab:22:98: be:05:df:48:2a:b6:66:45:2d:1b:f1:62:1a:f2:b3:26:fd:42: 84:c9:51:2d:70:4a:00:bb:75:05:d0:80:47:d1:c1:cf:c2:88: bc:85:60:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNN9Ovj9rJYDtUDtTmJUblh9jpPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTA0MDUxMjQ2NDdaFw0yNTA0MDgxOTM1NDdaMDMxMTAvBgNV BAMTKERBRkQ1MzQ0NDgwMDEzRkIxRkMwMTk1NzVFNzFBRDFBQzJBRDhCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLB4WpQFXzKPsw1jHFzgiBM1ie lc5cPEKKKZFj6wi351oaua88GBZAGE+Snc7m7VJ0U8YqBWUxQYeZi6dwD7yWn4Za c0TIsVXHzLrPeNPH+0+A3GagkIkfnr3bdgbAR1QVYCpYxEr8Q1KznYGXEZ3Or3OO IyzaHtriJTuegJQo3Hye+fnsPK6WAGnhB1SBw5XWBn7TrnDb/cwA8/dGcP2zBdmQ 7KBWg4SOi9H+lnpvumz2vg4rY1hQVHA8c1rW+2LE3wj+zQN23uexLXJLh9IWGSJS CusuDaMMchr4S8Clcg2/cGdtnuWkUKetaLgIw2ItjSdVDeeuV4MM3a5p826TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2v1TREgAE/sfwBlXXnGtGsKti6kwHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWRN95YTtE6II4jTDTRQiduMQOZWMZkSi7J PKCMO+5o3wUd7nid0aIcvwHURF9z/0CbigmW4RaN57xbFlzn8ix+mn1is1z9odxr Jbe8sB1zzi6cM3bzGrmw48iKKgCSrviL2MLs6PSWogAdaEpMrlt20iAH5buM+Tl5 OuVmSl6sK3dhNRpYV1FPTS0K9Xr7IdxorKmq+uN9RLUe1Xq2maWw6qf8SvVKzHgJ j0Bnh3r6W/0hS2wQCDQwCIcWH1IDu+OVZF9JCpfJmMZI154ghidrfdO+/qsimL4F 30gqtmZFLRvxYhrysyb9QoTJUS1wSgC7dQXQgEfRwc/CiLyFYKY= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:12 2025 by rpki-client