$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: YLWYMYiBATsTmGEFC+3nkyYz4z3FyhdtTX05a4Tt5nI= Subject key identifier: 4E:9D:58:7E:FC:CD:CF:73:C0:EF:BF:02:4E:80:B4:A0:8A:53:A1:61 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 20124F07E2406E930FC6F9EF5AF950BB966C417F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: F3 Signing time: Thu 03 Apr 2025 22:31:38 +0000 Manifest this update: Thu 03 Apr 2025 22:26:38 +0000 Manifest next update: Mon 07 Apr 2025 01:55:38 +0000 Files and hashes: 1: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: ER/HA7l+VVn8A/u17IFh4fHn2zNLAwHYt2agGk5B4Uo=) 2: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: matLkK/0RKOzJ5T6ShVJ+TeIBVCHsHv7ufNKNv6zW+I=) 3: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: bUy4CZmFBklHDVwaxUEZUZiNt8d1i/3iKLLtmboWyaU=) 4: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: m+tur8s5hF36P9KEnTMPMVDInU7+4/3lGLQOQpvofQk=) 5: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: gpL6qnRxLPgeiV+PlG3hB+cnGTmStZNiAx19SwL8f6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 01:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:12:4f:07:e2:40:6e:93:0f:c6:f9:ef:5a:f9:50:bb:96:6c:41:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Apr 3 22:26:38 2025 GMT Not After : Apr 7 01:55:38 2025 GMT Subject: CN=4E9D587EFCCDCF73C0EFBF024E80B4A08A53A161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:23:03:6a:4a:fe:74:a2:0c:0c:61:33:ee: 28:50:95:f8:12:95:1e:4e:43:d4:6d:cd:f0:82:40: ee:24:01:68:af:7b:0f:46:79:f6:e8:69:db:9f:2b: 62:7e:46:3d:68:5c:12:b9:c3:3d:a5:a8:06:10:80: b9:97:21:28:c1:4b:86:91:7a:7c:eb:ee:30:e8:76: cf:bb:c4:82:0d:b0:84:c0:83:6a:e7:a4:13:9f:25: 6a:cc:4e:a7:7a:6f:c5:bf:c7:d0:a3:b6:d9:52:59: ee:7f:4c:d3:10:65:19:12:69:10:aa:5d:83:25:ed: cc:74:b9:30:1c:34:0b:80:ce:79:41:55:c3:f0:ae: 2f:fa:66:0e:73:7d:ff:42:19:13:e3:72:70:41:6d: e2:1d:18:ad:c1:1d:c7:23:72:04:4b:63:04:df:c2: 2a:54:4a:13:ed:cf:5e:63:e8:1a:c7:c1:18:4b:d6: 92:e2:6e:b6:f3:4e:19:25:27:d9:f9:91:c6:b8:d5: fa:b8:9a:07:c6:6a:7d:06:e7:85:96:79:de:f8:c6: 6b:10:c5:2c:7d:f7:fb:b8:1d:39:91:70:75:13:40: 6f:d8:9f:94:4c:43:2f:74:92:6b:ff:ca:c6:68:93: a5:54:16:8f:34:09:9b:18:7b:db:ed:5c:45:8c:6c: 87:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9D:58:7E:FC:CD:CF:73:C0:EF:BF:02:4E:80:B4:A0:8A:53:A1:61 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:90:8d:00:0f:84:4c:0b:8a:f3:28:4f:db:76:7e:aa:f1:b5: 63:45:64:59:ef:39:f2:bc:a4:f8:04:40:6e:a6:8e:14:67:9a: 6b:95:1b:1c:3b:8e:56:47:8b:5d:36:16:77:c6:06:c6:49:bd: 48:f1:b3:4d:e3:3b:e3:f7:fd:31:40:d8:f0:5b:50:03:1c:15: 25:5d:53:5f:a4:dd:69:f9:e6:b2:7d:2e:fa:af:04:97:d0:c5: 36:08:7b:36:cc:93:af:48:60:0e:b4:9a:ab:67:39:33:c8:d4: fc:f5:3e:5a:7c:30:5d:fe:97:7e:ac:72:5a:ea:fc:00:a5:fa: 03:2d:c2:bd:fd:b7:29:b9:38:aa:42:43:12:60:4f:67:98:8e: 29:42:0d:0b:c6:df:39:dd:cf:28:65:07:54:05:97:76:90:55: ef:27:4c:66:ab:78:26:ac:b9:0c:ed:a0:7a:d3:92:5c:92:9b: 8c:56:5f:04:25:16:59:65:24:19:6e:ca:92:69:2c:c2:01:79: 97:9c:59:88:3c:8b:b7:4e:86:94:1a:2e:45:ef:d8:5d:c0:ae: d1:89:61:65:62:17:f8:b0:24:55:36:ed:34:2d:04:e8:fc:ad: 3f:c0:50:72:38:b1:25:12:23:1f:50:16:a4:da:8e:14:22:4d: 47:3f:6b:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBJPB+JAbpMPxvnvWvlQu5ZsQX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNTA0MDMyMjI2MzhaFw0yNTA0MDcwMTU1MzhaMDMxMTAvBgNV BAMTKDRFOUQ1ODdFRkNDRENGNzNDMEVGQkYwMjRFODBCNEEwOEE1M0ExNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPiSMDakr+dKIMDGEz7ihQlfgS lR5OQ9RtzfCCQO4kAWivew9GefboadufK2J+Rj1oXBK5wz2lqAYQgLmXISjBS4aR enzr7jDods+7xIINsITAg2rnpBOfJWrMTqd6b8W/x9CjttlSWe5/TNMQZRkSaRCq XYMl7cx0uTAcNAuAznlBVcPwri/6Zg5zff9CGRPjcnBBbeIdGK3BHccjcgRLYwTf wipUShPtz15j6BrHwRhL1pLibrbzThklJ9n5kca41fq4mgfGan0G54WWed74xmsQ xSx99/u4HTmRcHUTQG/Yn5RMQy90kmv/ysZok6VUFo80CZsYe9vtXEWMbIePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTp1YfvzNz3PA778CToC0oIpToWEwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyQjQAPhEwLivMoT9t2fqrxtWNFZFnvOfK8 pPgEQG6mjhRnmmuVGxw7jlZHi102FnfGBsZJvUjxs03jO+P3/TFA2PBbUAMcFSVd U1+k3Wn55rJ9LvqvBJfQxTYIezbMk69IYA60mqtnOTPI1Pz1Plp8MF3+l36sclrq /ACl+gMtwr39tym5OKpCQxJgT2eYjilCDQvG3zndzyhlB1QFl3aQVe8nTGareCas uQztoHrTklySm4xWXwQlFlllJBluypJpLMIBeZecWYg8i7dOhpQaLkXv2F3ArtGJ YWViF/iwJFU27TQtBOj8rT/AUHI4sSUSIx9QFqTajhQiTUc/a5c= -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:13 2025 by rpki-client