$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: mgIddhtEljrv3gFuuiVeOkqvWo9gsmSex0EZU+ZlD3Q= Subject key identifier: 69:4D:AA:60:F4:18:DB:8D:9C:24:17:F1:D8:B3:27:C6:AD:EB:13:D9 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 554E9FF92BA9EF5412732B14E4BEEF59B3163FA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: 5B Signing time: Thu 13 Mar 2025 00:31:01 +0000 Manifest this update: Thu 13 Mar 2025 00:26:01 +0000 Manifest next update: Sun 16 Mar 2025 12:16:01 +0000 Files and hashes: 1: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: Ny3wqjqU4wZmZF8Id2PrnXjiWBubZRNTcTs91ozTMeM=) 2: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: RFhGHCb7fi7+5E4cFrD0wJlCJ5E75WvgEwQ51mKjbic=) 3: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: bIWQDNWm0OJZ6q7uVeRbUwnn3woSxOtDATsL2XohTFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4e:9f:f9:2b:a9:ef:54:12:73:2b:14:e4:be:ef:59:b3:16:3f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Mar 13 00:26:01 2025 GMT Not After : Mar 16 12:16:01 2025 GMT Subject: CN=694DAA60F418DB8D9C2417F1D8B327C6ADEB13D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:4a:dd:c1:79:f5:c3:fb:b2:e7:c4:ba:bc: 00:b8:52:c3:ba:69:3a:36:61:e5:f2:b5:d9:3f:77: 3a:46:b9:bd:b7:1c:35:d8:bb:00:14:e7:af:df:91: 9b:df:7a:af:eb:bc:bf:02:e6:cd:50:21:af:14:7e: 56:ba:83:92:b0:3d:46:2b:ec:72:26:05:73:93:d6: e6:ff:bc:fc:fb:de:e7:ea:a0:c2:87:74:27:41:38: b4:69:97:15:a4:b7:ca:28:35:23:9b:9e:da:82:50: c7:d6:78:d5:19:84:7d:22:1f:ed:06:55:74:6c:b3: c0:a3:33:0a:1c:2f:9d:68:f1:7c:81:3d:be:e4:04: 09:5e:3a:4a:73:4b:aa:cd:4b:91:7f:bb:03:ca:81: f7:82:46:51:85:42:46:1e:61:5f:5c:9b:52:29:49: d9:e4:dd:f3:6c:d9:cc:01:9f:34:a2:38:07:0a:a5: eb:9e:cb:2a:0f:77:cf:00:aa:f0:b6:07:17:dc:30: d3:fe:be:c4:6d:0a:32:19:0b:ce:36:b9:da:da:a7: 8b:96:fc:84:fe:4a:81:4f:cf:67:5f:aa:cc:f0:18: e6:f7:55:d2:37:0d:48:fb:4b:15:a8:42:aa:8c:19: b9:a9:17:6c:43:d6:5b:c6:bb:fb:05:fc:bb:94:47: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4D:AA:60:F4:18:DB:8D:9C:24:17:F1:D8:B3:27:C6:AD:EB:13:D9 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:eb:14:bd:a3:ff:fc:0d:87:5d:df:45:7c:34:1e:6a:72:c0: 81:f9:5c:47:cd:97:e2:b6:ff:d6:89:76:f0:64:cb:34:cc:5b: 8e:da:32:65:bb:cf:6a:06:57:22:1f:0d:36:1b:46:b4:46:fb: 2e:e8:2a:1d:b8:de:85:52:be:b1:cf:d6:4a:2d:26:6f:75:4d: 97:0c:2d:52:d5:8e:2e:9d:de:93:62:0d:da:fc:71:75:3c:76: 1f:6d:e0:80:c7:a6:fd:e9:ab:a8:de:6c:53:95:59:ec:6f:07: d3:d8:b7:7e:1e:42:e0:16:a9:f6:6e:bf:c8:90:c3:6e:e3:3d: 76:5d:29:04:e0:7f:18:d6:c6:4e:09:95:b6:55:13:1d:0a:4b: 12:9c:16:06:24:4c:df:ae:20:b1:e8:5e:e4:dd:41:16:4e:1b: fc:45:9d:4f:b3:f3:9d:5d:fd:bd:90:43:47:cd:e2:e0:38:24: 04:25:a4:71:1d:c0:22:74:d2:e6:10:08:52:eb:9c:c3:51:93: db:af:72:a6:be:c1:08:ae:4b:5a:f2:ae:ba:a5:56:28:17:8f: 97:af:63:28:01:a3:25:10:97:38:a4:be:fd:fa:fb:40:31:73: 44:29:8a:cb:ed:7b:3e:ca:cb:41:73:62:c1:01:23:0d:59:52: 3f:fd:44:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVU6f+Sup71QScysU5L7vWbMWP6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTAzMTMwMDI2MDFaFw0yNTAzMTYxMjE2MDFaMDMxMTAvBgNV BAMTKDY5NERBQTYwRjQxOERCOEQ5QzI0MTdGMUQ4QjMyN0M2QURFQjEzRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNkrdwXn1w/uy58S6vAC4UsO6 aTo2YeXytdk/dzpGub23HDXYuwAU56/fkZvfeq/rvL8C5s1QIa8Ufla6g5KwPUYr 7HImBXOT1ub/vPz73ufqoMKHdCdBOLRplxWkt8ooNSObntqCUMfWeNUZhH0iH+0G VXRss8CjMwocL51o8XyBPb7kBAleOkpzS6rNS5F/uwPKgfeCRlGFQkYeYV9cm1Ip Sdnk3fNs2cwBnzSiOAcKpeueyyoPd88AqvC2BxfcMNP+vsRtCjIZC842udrap4uW /IT+SoFPz2dfqszwGOb3VdI3DUj7SxWoQqqMGbmpF2xD1lvGu/sF/LuUR8m5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaU2qYPQY242cJBfx2LMnxq3rE9kwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHrFL2j//wNh13fRXw0HmpywIH5XEfNl+K2 /9aJdvBkyzTMW47aMmW7z2oGVyIfDTYbRrRG+y7oKh243oVSvrHP1kotJm91TZcM LVLVji6d3pNiDdr8cXU8dh9t4IDHpv3pq6jebFOVWexvB9PYt34eQuAWqfZuv8iQ w27jPXZdKQTgfxjWxk4JlbZVEx0KSxKcFgYkTN+uILHoXuTdQRZOG/xFnU+z851d /b2QQ0fN4uA4JAQlpHEdwCJ00uYQCFLrnMNRk9uvcqa+wQiuS1ryrrqlVigXj5ev YygBoyUQlzikvv36+0Axc0Qpisvtez7Ky0FzYsEBIw1ZUj/9RIw= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:57 2025 by rpki-client