$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: XrKD1mshFt/HJpDktOMlt0AI3n1dvT4F6mBM6WlMuFQ= Subject key identifier: EF:A2:91:D9:D7:94:BE:7A:30:B5:AB:A0:23:04:A1:47:4D:9A:2A:55 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 51C303AFE2522B0131D6DCEEAE8ECD2A09BF91A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 01EB Signing time: Sat 05 Apr 2025 18:42:15 +0000 Manifest this update: Sat 05 Apr 2025 18:37:15 +0000 Manifest next update: Tue 08 Apr 2025 23:50:15 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: DyXpABTcR6ftxeuG5nYBymh2ADbl6y3AQYTkphqzjyw=) 2: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: oRDI+y7+2vAjOMCym2uKEk4t0/jm1uVrqQN7OiYXy0E=) 3: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: Gy02oHHiRHRYzXhCNl0ogX1dJUGaGdZ3W3YnX3FisEE=) 4: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: qbNLESGXsBmuIIawyviViY2mKnjUHvXQ336xBjUiqGk=) 5: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 6JYFCZLJ6iDECMfVgywsRHnbdYELpx7bahvntytR+W8=) 6: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: kfMJp93aHLtwVeCUrmYfQM5gVAHXLSAuJM9cgnbx5Nc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 23:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c3:03:af:e2:52:2b:01:31:d6:dc:ee:ae:8e:cd:2a:09:bf:91:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Apr 5 18:37:15 2025 GMT Not After : Apr 8 23:50:15 2025 GMT Subject: CN=EFA291D9D794BE7A30B5ABA02304A1474D9A2A55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:34:53:7c:61:c4:3e:d8:86:c1:c6:2c:3e: 5e:b6:f9:9e:7e:5e:86:24:e1:9e:90:42:4f:f1:c2: 0e:18:6b:38:1e:5e:ed:a9:37:9c:16:8d:b3:60:67: 90:69:c7:2b:5f:4e:17:33:86:45:5e:0e:60:59:72: 48:4a:9c:2d:82:50:ea:94:ba:0a:7b:b5:7e:5d:75: 82:fb:d0:ea:7d:2a:3b:eb:ee:12:84:83:ab:4d:b5: 35:b0:2d:ab:e0:c7:93:7c:ce:a6:b5:86:a6:95:72: 0b:c6:52:94:a3:13:4b:76:3e:28:ce:b2:b5:65:58: 4a:a1:99:1d:79:4c:17:65:00:65:56:8b:c8:db:82: 5c:9a:6d:11:2d:ea:84:f9:e8:88:20:2d:e6:36:bf: 0a:fd:be:94:e5:1c:42:85:af:eb:24:4c:5a:15:6e: a3:96:ff:b0:57:27:be:4b:de:4d:a9:d3:1d:a8:77: 9d:cb:44:7a:ea:08:cd:bd:a7:cd:58:5e:e1:b8:7f: f6:ee:c8:1a:76:02:c3:5c:2f:ea:c7:e9:86:e6:3c: 57:79:23:7b:49:40:3b:fe:dd:d4:3e:5f:6c:f0:0a: fb:c3:08:be:c6:63:75:0a:72:be:56:91:0c:0a:56: 72:8e:22:f9:d1:89:cd:cd:58:46:77:e2:3e:24:9a: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A2:91:D9:D7:94:BE:7A:30:B5:AB:A0:23:04:A1:47:4D:9A:2A:55 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:57:35:5b:1e:8e:c1:7a:46:65:66:82:d6:54:50:87:0a:f2: 3e:a1:c4:18:de:ad:b7:a7:64:48:9c:02:02:55:e7:17:a5:6b: 6d:fa:2b:91:8b:f1:ff:3b:fd:b9:3e:08:7d:b0:9e:ad:44:32: 58:6c:2a:3a:31:06:77:c1:5d:22:68:73:7f:50:2d:6c:c9:cf: aa:2b:be:69:7f:e6:da:3e:de:30:07:72:50:03:7b:de:34:35: df:83:8d:f2:02:fa:f0:02:8b:b8:a2:28:d9:57:00:75:e8:af: 15:05:9a:76:a9:35:4c:20:18:c2:4c:77:0b:a3:00:1f:ea:a6: d8:cb:22:43:f6:8a:72:c3:16:19:e7:30:a6:75:8b:99:30:51: 7f:7f:e3:32:61:63:3c:30:33:3b:e2:ec:ba:4f:fc:8d:e8:a5: c5:3d:ef:bf:d8:4a:79:2c:38:8f:e8:5e:4f:df:34:c0:0a:96: d7:fc:b3:01:c6:38:43:41:8e:c3:e3:9b:31:74:e7:9e:12:4e: 0c:1d:83:68:47:3c:2d:ee:04:bb:0f:ae:11:dd:32:2c:41:3d: 17:1f:8e:4a:38:09:6b:78:b0:f5:96:6d:69:ef:8f:1a:19:08: 5e:a6:74:2e:69:c8:29:fd:a9:1e:1b:cc:73:4c:ae:52:b5:aa: d2:4d:25:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcMDr+JSKwEx1tzuro7NKgm/kaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTA0MDUxODM3MTVaFw0yNTA0MDgyMzUwMTVaMDMxMTAvBgNV BAMTKEVGQTI5MUQ5RDc5NEJFN0EzMEI1QUJBMDIzMDRBMTQ3NEQ5QTJBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBzRTfGHEPtiGwcYsPl62+Z5+ XoYk4Z6QQk/xwg4YazgeXu2pN5wWjbNgZ5BpxytfThczhkVeDmBZckhKnC2CUOqU ugp7tX5ddYL70Op9Kjvr7hKEg6tNtTWwLavgx5N8zqa1hqaVcgvGUpSjE0t2PijO srVlWEqhmR15TBdlAGVWi8jbglyabREt6oT56IggLeY2vwr9vpTlHEKFr+skTFoV bqOW/7BXJ75L3k2p0x2od53LRHrqCM29p81YXuG4f/buyBp2AsNcL+rH6YbmPFd5 I3tJQDv+3dQ+X2zwCvvDCL7GY3UKcr5WkQwKVnKOIvnRic3NWEZ34j4kmnH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU76KR2deUvnowtaugIwShR02aKlUwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlXNVsejsF6RmVmgtZUUIcK8j6hxBjerben ZEicAgJV5xela236K5GL8f87/bk+CH2wnq1EMlhsKjoxBnfBXSJoc39QLWzJz6or vml/5to+3jAHclADe940Nd+DjfIC+vACi7iiKNlXAHXorxUFmnapNUwgGMJMdwuj AB/qptjLIkP2inLDFhnnMKZ1i5kwUX9/4zJhYzwwMzvi7LpP/I3opcU977/YSnks OI/oXk/fNMAKltf8swHGOENBjsPjmzF0554STgwdg2hHPC3uBLsPrhHdMixBPRcf jko4CWt4sPWWbWnvjxoZCF6mdC5pyCn9qR4bzHNMrlK1qtJNJes= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:59 2025 by rpki-client