$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: fYJtyST9/f3C/N50Uypf9ActK5tMRyM5qJyYPXTCvRI= Subject key identifier: 6E:4D:E7:79:08:1F:D8:E9:77:22:02:15:6F:40:2A:13:CB:BE:16:CC Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 2ED665770E2F24427473F2EADBF6411C7E87F5AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 030A Signing time: Tue 08 Apr 2025 02:11:58 +0000 Manifest this update: Tue 08 Apr 2025 02:06:58 +0000 Manifest next update: Fri 11 Apr 2025 02:43:58 +0000 Files and hashes: 1: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: 8SN27JgRzLp2HkIPs909BiGw4amp0rXHb0iEz91v6Jo=) 2: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: FSWS6U7cYW2rRb8Co03/qdmOUbIgR+vsNDl9/O9dDGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 02:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d6:65:77:0e:2f:24:42:74:73:f2:ea:db:f6:41:1c:7e:87:f5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Apr 8 02:06:58 2025 GMT Not After : Apr 11 02:43:58 2025 GMT Subject: CN=6E4DE779081FD8E9772202156F402A13CBBE16CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:d2:b2:6e:f4:a4:be:64:9b:08:76:39:90: c1:6e:d7:7a:1f:46:1f:54:fd:8a:e7:af:71:bb:00: 7e:23:7f:79:bc:73:61:6e:ec:33:8c:b0:3d:19:d6: 51:57:b6:3a:e9:f6:c8:c3:f6:e1:66:c8:21:d1:67: db:bc:47:88:e9:24:ff:8d:f4:e4:1e:04:46:18:38: 2b:7a:6d:01:6a:49:c0:e0:17:9e:14:c1:91:7e:f3: 18:ba:80:1a:46:15:61:9b:52:77:4f:83:b8:11:2c: e0:00:58:10:86:f9:51:d7:f3:41:0e:77:f6:d5:e9: b5:1c:b5:ef:15:a1:c3:50:e2:89:2c:de:be:ba:c2: 08:a1:d4:fd:db:6a:d1:a4:a5:78:56:25:08:46:24: 0a:26:1a:12:2b:29:a5:5e:3f:56:db:9b:aa:b0:b5: bf:c2:f6:b7:e0:d6:0d:bb:0c:00:f1:eb:88:da:b0: d8:c6:a2:9e:b0:a4:be:8f:43:d5:16:af:fe:dd:a0: 42:fe:14:21:ba:c0:a7:6f:d5:62:6c:4e:c7:61:20: 94:43:12:9d:b4:ec:ec:28:de:13:25:56:0a:e0:5e: 50:0e:e0:5d:24:9f:8b:42:1a:18:c7:2d:dd:2b:ac: ac:3d:4f:c2:15:f5:32:f8:4b:78:cd:57:24:d1:ef: f9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4D:E7:79:08:1F:D8:E9:77:22:02:15:6F:40:2A:13:CB:BE:16:CC X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:79:da:59:c2:08:7e:27:5e:bf:9d:ad:25:99:ca:73:08:e8: 65:22:79:3d:33:33:16:44:30:30:b0:de:5f:71:bf:ce:c5:b1: 5a:0f:63:12:12:8d:ef:56:40:b6:09:ac:18:b8:be:b1:19:c7: e7:cc:f6:d3:e2:d9:41:ed:b0:0a:8e:28:39:25:9e:15:ff:0d: ee:be:9c:e5:69:9d:63:ca:b8:20:d3:d8:5e:ee:94:43:65:00: 2e:6b:a8:44:64:c7:8e:3f:08:48:5d:1a:eb:bb:19:d4:1b:7b: f6:8c:af:cd:5d:8e:8e:7c:54:f9:5e:e1:eb:47:61:24:fb:cd: e0:45:aa:37:35:8a:fe:db:b7:33:43:74:1e:d6:b5:be:0b:2b: f9:ad:8f:d3:cf:17:11:72:99:3a:91:12:8d:f4:e0:36:89:fd: 97:c2:54:49:d0:2b:08:52:22:17:a2:aa:5b:05:ec:5e:ab:e5: 49:cc:24:71:0e:33:be:7d:76:91:4a:83:33:43:3f:14:5b:f6: 29:6a:56:f6:4f:0f:f8:44:0e:42:cd:d1:17:e9:ad:64:33:bd: 3f:d2:e6:c5:c9:c3:7a:90:24:03:0a:23:49:8f:b0:10:fb:db: 78:a6:1a:03:31:83:82:6d:6b:60:18:e8:58:5a:7b:8c:53:e4: f5:1f:20:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtZldw4vJEJ0c/Lq2/ZBHH6H9a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNTA0MDgwMjA2NThaFw0yNTA0MTEwMjQzNThaMDMxMTAvBgNV BAMTKDZFNERFNzc5MDgxRkQ4RTk3NzIyMDIxNTZGNDAyQTEzQ0JCRTE2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBdKybvSkvmSbCHY5kMFu13of Rh9U/Yrnr3G7AH4jf3m8c2Fu7DOMsD0Z1lFXtjrp9sjD9uFmyCHRZ9u8R4jpJP+N 9OQeBEYYOCt6bQFqScDgF54UwZF+8xi6gBpGFWGbUndPg7gRLOAAWBCG+VHX80EO d/bV6bUcte8VocNQ4oks3r66wgih1P3batGkpXhWJQhGJAomGhIrKaVeP1bbm6qw tb/C9rfg1g27DADx64jasNjGop6wpL6PQ9UWr/7doEL+FCG6wKdv1WJsTsdhIJRD Ep207Owo3hMlVgrgXlAO4F0kn4tCGhjHLd0rrKw9T8IV9TL4S3jNVyTR7/mZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbk3neQgf2Ol3IgIVb0AqE8u+FswwHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG152lnCCH4nXr+drSWZynMI6GUieT0zMxZE MDCw3l9xv87FsVoPYxISje9WQLYJrBi4vrEZx+fM9tPi2UHtsAqOKDklnhX/De6+ nOVpnWPKuCDT2F7ulENlAC5rqERkx44/CEhdGuu7GdQbe/aMr81djo58VPle4etH YST7zeBFqjc1iv7btzNDdB7Wtb4LK/mtj9PPFxFymTqREo304DaJ/ZfCVEnQKwhS IheiqlsF7F6r5UnMJHEOM759dpFKgzNDPxRb9ilqVvZPD/hEDkLN0RfprWQzvT/S 5sXJw3qQJAMKI0mPsBD723imGgMxg4Jta2AY6Fhae4xT5PUfILA= -----END CERTIFICATE-----Generated at Tue Apr 8 12:08:38 2025 by rpki-client