$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: Z+WV7CuJW7EKgMjHMYVLAnoRL6XjxRTjLX+ftzC9yKw= Subject key identifier: 65:55:CF:A6:06:22:54:BD:80:D9:43:13:88:55:74:1F:06:02:B1:F8 Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 524A5E8619AB26095FD78880C5873F7A65432E12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 017E Signing time: Fri 04 Apr 2025 20:51:02 +0000 Manifest this update: Fri 04 Apr 2025 20:46:02 +0000 Manifest next update: Tue 08 Apr 2025 04:19:02 +0000 Files and hashes: 1: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: 5zPk4MUiirpmEj5/W53RgTUlrb96XIX+LjZrPDV2UMA=) 2: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: GY3l2gxUENrMuat9DzO+m9BIVJc+LbpCu49sXuugkfM=) 3: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: rSbPcUFwbUotF4iGb/0NgCE/rDZm6ThuOkAV/ZhbDr4=) 4: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: 03+kmACXHUPe0IyI3YXAvW+JekGIFfxV2tHYWD2l8nE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4a:5e:86:19:ab:26:09:5f:d7:88:80:c5:87:3f:7a:65:43:2e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Apr 4 20:46:02 2025 GMT Not After : Apr 8 04:19:02 2025 GMT Subject: CN=6555CFA6062254BD80D943138855741F0602B1F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:b2:76:67:9f:b4:a6:15:0b:f4:2d:ad:9c: 85:70:c0:94:72:63:e7:c2:65:01:88:2a:b2:d3:1c: 91:74:bb:22:95:e9:94:1c:01:32:5f:7c:bd:5a:89: c7:b7:cb:3e:d5:c4:1c:76:4a:5e:b6:d0:cf:11:96: 7a:d5:78:8b:fe:20:10:5a:45:58:bf:0e:22:c8:6e: 2f:53:95:6e:fa:d6:9c:14:75:09:cc:bc:82:c4:a4: 12:8f:90:be:6c:02:fe:4d:f3:e2:ea:20:4a:84:2c: d4:aa:6c:bd:0a:e5:fe:db:f0:26:53:87:a2:a6:5e: fe:c2:2d:f8:70:b9:fd:b3:8a:3c:91:07:eb:ca:20: f8:2d:4b:dd:d3:5e:9c:18:8f:e5:22:ed:cc:06:b5: 5e:39:f5:13:e0:7e:53:c5:a1:8c:bf:0e:84:46:57: fc:5e:2a:c7:e0:23:a1:75:e9:a0:cf:fa:a8:98:8b: 6b:ec:c0:1e:c0:7f:77:49:96:3a:dc:5a:24:5a:57: bb:d0:f3:98:c6:c4:2c:1f:f9:d6:89:59:08:7e:4e: 62:0d:f8:74:0c:a7:cc:61:8a:4e:fb:af:f8:cd:2b: b9:82:c8:01:87:9c:2f:d7:69:f6:4e:08:ef:dc:04: 8e:39:d8:42:bd:7b:5b:69:98:3f:6d:58:0c:7c:d3: 52:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:55:CF:A6:06:22:54:BD:80:D9:43:13:88:55:74:1F:06:02:B1:F8 X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ef:4c:12:03:3a:fa:ab:b1:f5:23:3b:6f:d8:94:45:4a:be: 54:2e:47:20:4f:45:c1:6b:5c:36:92:66:eb:25:1f:1d:25:95: 4b:89:f6:8e:b9:fd:b9:7c:20:9a:80:5f:cc:c2:dd:3d:7e:aa: b2:f7:23:24:6e:1c:c6:6a:55:4e:fc:b4:d2:33:f9:29:1e:db: 9b:3a:12:3d:1c:29:0f:2e:f7:0a:fe:91:63:41:46:64:d0:ba: 55:5f:c5:b5:ef:ca:ba:d5:d6:7a:06:89:86:00:05:18:f1:ac: 68:5b:07:b9:ed:2d:f3:28:6f:a2:17:36:26:fa:76:82:37:00: 4e:ac:fa:51:e2:2e:61:15:8e:43:63:ec:9b:a0:ad:4b:d2:44: 9b:aa:b9:5c:ea:62:45:ff:c4:a7:35:18:83:29:74:75:fa:4e: fe:a2:70:64:f5:56:0b:91:e4:08:90:c9:0a:0f:ab:4d:3b:60: 10:d3:24:c3:fb:33:8c:70:cf:c3:f2:92:94:5b:f0:87:95:73: 33:21:86:fb:ab:4e:20:d7:b1:6a:64:ef:61:ef:76:2b:0e:2d: bb:d6:4d:bc:b5:82:90:97:11:05:61:99:db:80:2a:63:b7:25: 18:c1:26:ae:4c:c4:93:7b:d7:98:37:ef:5f:06:1a:63:e4:04: 4f:31:ea:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkpehhmrJglf14iAxYc/emVDLhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNTA0MDQyMDQ2MDJaFw0yNTA0MDgwNDE5MDJaMDMxMTAvBgNV BAMTKDY1NTVDRkE2MDYyMjU0QkQ4MEQ5NDMxMzg4NTU3NDFGMDYwMkIxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9LJ2Z5+0phUL9C2tnIVwwJRy Y+fCZQGIKrLTHJF0uyKV6ZQcATJffL1aice3yz7VxBx2Sl620M8RlnrVeIv+IBBa RVi/DiLIbi9TlW761pwUdQnMvILEpBKPkL5sAv5N8+LqIEqELNSqbL0K5f7b8CZT h6KmXv7CLfhwuf2zijyRB+vKIPgtS93TXpwYj+Ui7cwGtV459RPgflPFoYy/DoRG V/xeKsfgI6F16aDP+qiYi2vswB7Af3dJljrcWiRaV7vQ85jGxCwf+daJWQh+TmIN +HQMp8xhik77r/jNK7mCyAGHnC/XafZOCO/cBI452EK9e1tpmD9tWAx801IjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVXPpgYiVL2A2UMTiFV0HwYCsfgwHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANHvTBIDOvqrsfUjO2/YlEVKvlQuRyBPRcFr XDaSZuslHx0llUuJ9o65/bl8IJqAX8zC3T1+qrL3IyRuHMZqVU78tNIz+Ske25s6 Ej0cKQ8u9wr+kWNBRmTQulVfxbXvyrrV1noGiYYABRjxrGhbB7ntLfMob6IXNib6 doI3AE6s+lHiLmEVjkNj7JugrUvSRJuquVzqYkX/xKc1GIMpdHX6Tv6icGT1VguR 5AiQyQoPq007YBDTJMP7M4xwz8PykpRb8IeVczMhhvurTiDXsWpk72HvdisOLbvW Tby1gpCXEQVhmduAKmO3JRjBJq5MxJN715g3718GGmPkBE8x6lg= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:15 2025 by rpki-client