$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: OGOD/jJ0E266IfUczaLWVP5w+n9FynWVKPsKegCS+LE= Subject key identifier: A3:62:6E:FD:F8:0B:CF:CE:35:55:7B:F3:64:4B:2B:A3:F4:DE:5B:A5 Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 1A0DB1564BE5AA92DC95E9AC1159E32928860756 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: 7E Signing time: Thu 13 Mar 2025 07:01:04 +0000 Manifest this update: Thu 13 Mar 2025 06:56:04 +0000 Manifest next update: Sun 16 Mar 2025 10:46:04 +0000 Files and hashes: 1: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: 4VRZi1K7JmUX+mY4PjGbZVJq7hsS2Sqman/3Bm5DdSM=) 2: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: jtp7m+yC5W5lMtYOgCCUZzjkhBs21aUe1vohRC6/vwY=) 3: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: gSJ2Tpcz5FhfuBqS7hiPJe0IxJ/V2JVqcWy8oWyRZN0=) 4: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: cfFwjwKwPSy9Kh5E8D6UCcsgslEuVvz1uyywz0zfoJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0d:b1:56:4b:e5:aa:92:dc:95:e9:ac:11:59:e3:29:28:86:07:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Mar 13 06:56:04 2025 GMT Not After : Mar 16 10:46:04 2025 GMT Subject: CN=A3626EFDF80BCFCE35557BF3644B2BA3F4DE5BA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cd:65:2c:cf:5f:e2:31:5c:a8:63:ee:17:77: 19:3b:5d:c0:5d:9a:08:94:07:68:87:86:ef:01:ac: 64:dc:fd:f1:92:30:a3:58:1c:b8:48:51:22:f0:28: 24:6e:bb:1f:fd:92:aa:1b:3e:90:fd:80:28:fd:aa: eb:7a:55:05:d5:6f:4a:74:85:06:70:54:0e:ff:eb: 8f:20:b8:f0:1c:95:e3:9e:18:b7:dd:07:17:d1:5c: 04:f8:be:87:ab:cd:bb:ef:57:73:5e:91:99:b2:39: 6d:78:9d:5e:5c:a8:23:a8:cf:1f:29:c7:7f:b3:3d: f8:94:78:1f:97:80:d5:85:2b:a6:31:45:9c:7f:39: f1:45:cd:c7:bf:40:43:fe:d6:c5:d0:cd:37:d2:b8: 8d:18:4c:1c:85:b0:7b:c9:d2:4a:e1:0e:21:df:2a: 1b:74:d2:5e:dd:91:7e:d5:7f:18:ea:58:31:65:44: 63:56:b6:58:b7:0a:5d:ae:72:e4:a4:4a:b3:b9:c8: 95:d8:43:5c:89:35:2e:f2:05:7f:93:66:a1:43:0e: 42:37:d1:aa:24:9d:70:1f:7c:43:d3:2f:02:df:d8: 14:f1:f8:4d:14:ca:fc:0f:66:9b:ee:4d:dc:28:8c: aa:59:4e:19:af:5b:af:14:00:65:da:13:ab:fa:9a: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:62:6E:FD:F8:0B:CF:CE:35:55:7B:F3:64:4B:2B:A3:F4:DE:5B:A5 X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6f:25:4f:d7:f8:d4:92:1e:bf:1e:5f:71:58:83:9b:88:b7: 22:f1:4b:99:82:5c:d5:39:7e:2a:5c:6a:2c:d9:93:50:39:a2: fc:41:4d:a9:3b:0b:31:98:62:47:53:76:f8:42:3a:4b:5a:1e: 99:16:54:cf:ce:69:9e:b4:46:d7:e5:e1:73:16:13:88:51:6c: cc:e6:ea:20:8f:c6:d0:86:5f:ab:23:fd:41:dc:3d:54:3b:66: 74:f4:d5:bd:6c:4f:a3:3a:b5:85:18:5a:82:05:56:2c:32:40: 20:9c:87:e7:ae:f9:08:87:49:e1:d4:b3:b6:0a:50:e3:8d:88: 90:3a:c4:b4:8e:5e:d2:bd:35:9a:6d:5e:9e:32:f9:83:63:30: 9f:57:ee:77:c4:87:3e:89:a6:be:2d:9d:8e:43:dd:f6:36:e8: c5:c5:ad:d7:80:03:75:b5:e3:bc:3b:f4:63:b5:c9:84:f6:f1: b3:fe:1c:98:ec:65:f2:12:09:33:cf:71:7d:2f:b4:38:ec:bd: b2:ee:ae:ef:98:3a:69:d2:f8:93:73:1f:5f:41:21:00:ba:d0: 49:c0:73:e0:e2:d3:7b:99:47:90:12:9b:8d:bc:3e:2d:02:5b: 76:2f:9f:d8:8d:9c:26:72:6f:ce:cc:c8:80:94:75:04:71:68: 89:5f:a9:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGg2xVkvlqpLclemsEVnjKSiGB1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTAzMTMwNjU2MDRaFw0yNTAzMTYxMDQ2MDRaMDMxMTAvBgNV BAMTKEEzNjI2RUZERjgwQkNGQ0UzNTU1N0JGMzY0NEIyQkEzRjRERTVCQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDszWUsz1/iMVyoY+4Xdxk7XcBd mgiUB2iHhu8BrGTc/fGSMKNYHLhIUSLwKCRuux/9kqobPpD9gCj9qut6VQXVb0p0 hQZwVA7/648guPAcleOeGLfdBxfRXAT4voerzbvvV3NekZmyOW14nV5cqCOozx8p x3+zPfiUeB+XgNWFK6YxRZx/OfFFzce/QEP+1sXQzTfSuI0YTByFsHvJ0krhDiHf Kht00l7dkX7VfxjqWDFlRGNWtli3Cl2ucuSkSrO5yJXYQ1yJNS7yBX+TZqFDDkI3 0aoknXAffEPTLwLf2BTx+E0UyvwPZpvuTdwojKpZThmvW68UAGXaE6v6mpkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo2Ju/fgLz841VXvzZEsro/TeW6UwHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJvJU/X+NSSHr8eX3FYg5uItyLxS5mCXNU5 fipcaizZk1A5ovxBTak7CzGYYkdTdvhCOktaHpkWVM/OaZ60Rtfl4XMWE4hRbMzm 6iCPxtCGX6sj/UHcPVQ7ZnT01b1sT6M6tYUYWoIFViwyQCCch+eu+QiHSeHUs7YK UOONiJA6xLSOXtK9NZptXp4y+YNjMJ9X7nfEhz6Jpr4tnY5D3fY26MXFrdeAA3W1 47w79GO1yYT28bP+HJjsZfISCTPPcX0vtDjsvbLuru+YOmnS+JNzH19BIQC60EnA c+Di03uZR5ASm428Pi0CW3Yvn9iNnCZyb87MyICUdQRxaIlfqe4= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:46 2025 by rpki-client