$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: JyHgIcGJEMc3KYJrft/uYz3SMXIsEQ1HIgK8Leg1Ylk= Subject key identifier: D8:02:76:A6:A9:17:26:98:B4:56:B1:EC:AB:53:EA:1D:2C:C7:74:25 Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 2AD5A737FFE4ADAE721E0FE8DAA960DEA39845F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 04BE Signing time: Fri 04 Apr 2025 04:00:39 +0000 Manifest this update: Fri 04 Apr 2025 03:55:39 +0000 Manifest next update: Mon 07 Apr 2025 05:28:39 +0000 Files and hashes: 1: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: SpnY8a0GROT9gIaSg+Xkayye3x/3d8TN7Z4oEYcRQjw=) 2: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: hUFUn0VmhI4/WVyhCk/ed0i6oyJ6uRhfZe4Gt9CX7Ms=) 3: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: 1z9zQXbiXOJ+gRqWINPLLxlihaf6MQrGXd1QApL6EDo=) 4: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: xLmMTjSOjSqS6LykBY4skbTjNzEVrHStJ+4rPzwZUSY=) 5: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: Ai7D3RvDxYX2FQX7n3jl8PVIm916gH4mXne2eUMtLic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 05:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d5:a7:37:ff:e4:ad:ae:72:1e:0f:e8:da:a9:60:de:a3:98:45:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Apr 4 03:55:39 2025 GMT Not After : Apr 7 05:28:39 2025 GMT Subject: CN=D80276A6A9172698B456B1ECAB53EA1D2CC77425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:24:6b:07:71:e2:c5:2d:0e:80:bb:b8:98: 20:92:66:86:bc:38:3d:39:13:f8:98:a9:61:d8:22: dc:db:92:2b:23:8b:72:23:78:5d:62:72:a9:63:28: f7:f9:80:2b:77:bb:54:8b:72:e6:4f:0b:20:cd:04: e5:39:9c:6b:d9:9f:15:d5:b9:3e:1d:60:d2:9a:d3: 7c:d8:ff:bd:cc:5c:47:af:7e:86:f9:0f:5d:99:58: 39:a4:49:3c:61:cf:6b:40:0f:f2:cd:f9:a7:c6:91: 42:e3:03:a9:f8:28:1d:27:74:fa:bb:8b:ae:f3:d9: 3e:a1:3d:3f:fb:99:fc:19:14:b7:1e:b8:82:b1:c1: 99:4d:f2:12:51:54:76:c8:4c:65:e1:b3:d0:fb:64: 19:8c:c7:82:5d:6e:3e:9d:62:47:e2:a4:06:73:bf: 23:28:2c:06:8a:31:9f:10:a4:ea:c4:95:69:52:4f: 9e:71:e0:3c:fd:2d:83:06:2d:39:e4:2f:5e:87:d6: c7:21:e4:cb:c4:bb:cf:92:45:e0:db:24:82:15:c2: 60:3f:4d:10:08:cb:26:55:01:f7:d6:f1:20:3e:a1: 93:ee:10:ef:5c:57:6e:96:f6:e1:64:33:9d:d9:7f: 73:6a:6f:f0:76:48:ac:53:35:a0:85:f4:b2:94:a6: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:02:76:A6:A9:17:26:98:B4:56:B1:EC:AB:53:EA:1D:2C:C7:74:25 X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ef:a5:08:d9:6d:34:73:0b:e3:26:6d:71:2f:e4:49:ae:d4: 99:ca:14:18:a1:40:6a:da:35:72:40:c5:48:66:fd:90:88:9b: f1:f4:5b:9d:79:92:bf:ba:c3:a6:da:d5:46:39:6a:d7:9a:cc: b6:4c:40:78:1b:bd:e7:25:4c:f6:9f:80:d4:4c:5b:7a:10:4a: fd:0a:b4:db:22:01:36:01:0d:8c:39:c0:82:f8:a9:3a:2f:8b: ae:de:6b:15:0e:ce:ca:48:a7:13:f2:10:5c:99:3b:25:a8:02: ca:72:07:cd:90:e7:cd:26:ee:34:0b:ae:21:28:ca:ef:20:c0: b0:be:7f:14:12:0f:1b:d1:f6:a4:a3:23:16:49:7c:17:94:48: 8c:df:b9:c8:10:89:01:89:21:99:23:a2:d3:29:84:48:9c:07: 67:b3:6a:4b:6e:eb:95:4e:3e:73:c8:d1:1a:1c:60:ca:ba:32: f5:95:9e:04:95:62:18:bb:6c:0d:d2:12:d1:ba:8c:21:ac:c0: 2a:9d:37:80:ee:0b:14:33:9d:da:cd:d8:13:43:07:1a:ad:97: 9e:81:2e:fe:97:e5:a4:10:cb:4b:a7:65:37:18:da:69:56:e9: ae:7d:60:6b:d3:00:30:c4:a4:8d:51:4a:da:9d:30:7e:b5:c1: db:ae:18:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtWnN//kra5yHg/o2qlg3qOYRfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTA0MDQwMzU1MzlaFw0yNTA0MDcwNTI4MzlaMDMxMTAvBgNV BAMTKEQ4MDI3NkE2QTkxNzI2OThCNDU2QjFFQ0FCNTNFQTFEMkNDNzc0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHCRrB3HixS0OgLu4mCCSZoa8 OD05E/iYqWHYItzbkisji3IjeF1icqljKPf5gCt3u1SLcuZPCyDNBOU5nGvZnxXV uT4dYNKa03zY/73MXEevfob5D12ZWDmkSTxhz2tAD/LN+afGkULjA6n4KB0ndPq7 i67z2T6hPT/7mfwZFLceuIKxwZlN8hJRVHbITGXhs9D7ZBmMx4Jdbj6dYkfipAZz vyMoLAaKMZ8QpOrElWlST55x4Dz9LYMGLTnkL16H1sch5MvEu8+SReDbJIIVwmA/ TRAIyyZVAffW8SA+oZPuEO9cV26W9uFkM53Zf3Nqb/B2SKxTNaCF9LKUprsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2AJ2pqkXJpi0VrHsq1PqHSzHdCUwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzvpQjZbTRzC+MmbXEv5Emu1JnKFBihQGra NXJAxUhm/ZCIm/H0W515kr+6w6ba1UY5ateazLZMQHgbveclTPafgNRMW3oQSv0K tNsiATYBDYw5wIL4qTovi67eaxUOzspIpxPyEFyZOyWoAspyB82Q580m7jQLriEo yu8gwLC+fxQSDxvR9qSjIxZJfBeUSIzfucgQiQGJIZkjotMphEicB2ezaktu65VO PnPI0RocYMq6MvWVngSVYhi7bA3SEtG6jCGswCqdN4DuCxQzndrN2BNDBxqtl56B Lv6X5aQQy0unZTcY2mlW6a59YGvTADDEpI1RStqdMH61wduuGCg= -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:20 2025 by rpki-client