$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: s1dQQoYBMjOzAvcW8sfs04wUUiUOTXcKqCbXZNOAMzA= Subject key identifier: 02:B8:2A:8D:46:18:43:74:8F:3F:91:DF:64:BC:29:C4:86:55:25:3E Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 0BA593010E4FFA81D93D66E19A446200A7D20BF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: 69 Signing time: Sun 13 Apr 2025 11:11:02 +0000 Manifest this update: Sun 13 Apr 2025 11:06:02 +0000 Manifest next update: Wed 16 Apr 2025 16:23:02 +0000 Files and hashes: 1: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: xk5KjP8jdCQrTMVViN5xRZfg9qSbsAJQiXdy82eJBFA=) 2: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: Ny3wqjqU4wZmZF8Id2PrnXjiWBubZRNTcTs91ozTMeM=) 3: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: RFhGHCb7fi7+5E4cFrD0wJlCJ5E75WvgEwQ51mKjbic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 16:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a5:93:01:0e:4f:fa:81:d9:3d:66:e1:9a:44:62:00:a7:d2:0b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Apr 13 11:06:02 2025 GMT Not After : Apr 16 16:23:02 2025 GMT Subject: CN=02B82A8D461843748F3F91DF64BC29C48655253E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:cb:ee:f5:d4:9e:bf:81:32:86:ec:e4:81: 9f:ac:67:79:10:db:6a:2f:ed:34:0f:3d:ad:f9:cd: 80:4d:de:b4:f4:69:c3:18:12:95:0f:8d:76:23:10: d9:67:48:47:d7:e1:77:24:6e:a5:95:10:e4:57:11: 74:06:d1:c9:74:66:31:55:ab:26:05:35:a0:92:e6: 8d:2c:10:07:d7:fa:64:4d:e4:be:eb:54:1e:5e:4a: c6:51:87:f9:fc:df:cc:6b:04:f9:f9:24:53:80:1d: 3f:9b:92:1e:e1:51:60:8b:b1:d7:6d:ed:85:dc:eb: ef:5d:db:2a:d9:b8:2a:ac:8a:7e:4c:01:3d:28:a3: be:93:dd:65:ab:9c:88:cf:f6:52:b1:1c:01:56:92: a9:d4:3c:35:b6:19:d7:df:05:13:88:c2:f8:c0:bf: 88:fa:58:17:82:9f:4c:50:03:5f:40:33:a9:f4:ef: 81:b9:68:3a:2f:12:71:16:e7:af:3d:8b:ed:98:f8: bc:4a:d6:94:66:13:20:15:c9:68:d1:a8:85:dd:3c: 1d:7b:87:78:6a:7a:8e:14:5a:f7:d0:32:34:20:34: f5:99:db:6f:8e:53:78:26:99:e6:24:86:ae:d8:ac: 84:81:ee:ad:57:f6:c2:44:fe:b8:15:f2:61:3b:8a: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B8:2A:8D:46:18:43:74:8F:3F:91:DF:64:BC:29:C4:86:55:25:3E X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e6:ed:fd:ba:c5:81:5c:45:a4:f5:98:85:29:5b:77:77:cd: 94:cd:ec:ae:3b:1b:f3:c8:84:b3:d5:9e:4f:d6:7e:ae:5c:f1: 10:9a:0a:00:ee:25:75:a5:b2:06:5c:74:02:0a:61:8a:69:e1: 20:5f:84:3b:3c:89:da:77:9b:08:54:cc:72:33:ff:91:99:96: 35:c7:b7:96:87:d9:b9:32:07:5f:d0:f8:90:7d:51:af:80:1d: 52:ac:46:7f:a0:b0:a6:4d:3a:89:a6:87:1d:e6:f8:71:eb:51: 09:59:d4:fc:c1:9c:8e:f9:7d:29:fc:a5:4b:d7:cd:23:e8:49: 96:f5:30:14:65:8e:a5:a4:ba:ac:c3:b0:c7:a9:a9:0b:5f:d5: e3:4f:6d:aa:36:a0:4e:aa:c6:66:3b:e5:07:5d:3d:ad:fe:98: 46:50:22:c9:3a:c3:40:65:1e:9f:19:f2:1d:99:f6:81:3d:1b: 3e:e2:d5:26:66:34:ea:7d:f3:cb:e9:f8:65:85:b1:c2:5c:90: 20:f3:75:41:27:fa:59:60:08:d1:f5:4b:51:49:b0:d7:e6:55: d9:78:09:17:bf:66:8a:10:60:22:d4:cf:46:a0:eb:21:59:6d: 12:dd:b6:f3:9a:2e:f3:48:8e:18:21:cd:62:dc:86:22:b5:e0: 4e:d6:07:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC6WTAQ5P+oHZPWbhmkRiAKfSC/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTA0MTMxMTA2MDJaFw0yNTA0MTYxNjIzMDJaMDMxMTAvBgNV BAMTKDAyQjgyQThENDYxODQzNzQ4RjNGOTFERjY0QkMyOUM0ODY1NTI1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPC8vu9dSev4EyhuzkgZ+sZ3kQ 22ov7TQPPa35zYBN3rT0acMYEpUPjXYjENlnSEfX4XckbqWVEORXEXQG0cl0ZjFV qyYFNaCS5o0sEAfX+mRN5L7rVB5eSsZRh/n838xrBPn5JFOAHT+bkh7hUWCLsddt 7YXc6+9d2yrZuCqsin5MAT0oo76T3WWrnIjP9lKxHAFWkqnUPDW2GdffBROIwvjA v4j6WBeCn0xQA19AM6n074G5aDovEnEW5689i+2Y+LxK1pRmEyAVyWjRqIXdPB17 h3hqeo4UWvfQMjQgNPWZ22+OU3gmmeYkhq7YrISB7q1X9sJE/rgV8mE7irGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUArgqjUYYQ3SPP5HfZLwpxIZVJT4wHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXm7f26xYFcRaT1mIUpW3d3zZTN7K47G/PI hLPVnk/Wfq5c8RCaCgDuJXWlsgZcdAIKYYpp4SBfhDs8idp3mwhUzHIz/5GZljXH t5aH2bkyB1/Q+JB9Ua+AHVKsRn+gsKZNOommhx3m+HHrUQlZ1PzBnI75fSn8pUvX zSPoSZb1MBRljqWkuqzDsMepqQtf1eNPbao2oE6qxmY75QddPa3+mEZQIsk6w0Bl Hp8Z8h2Z9oE9Gz7i1SZmNOp988vp+GWFscJckCDzdUEn+llgCNH1S1FJsNfmVdl4 CRe/ZooQYCLUz0ag6yFZbRLdtvOaLvNIjhghzWLchiK14E7WB+s= -----END CERTIFICATE-----Generated at Tue Apr 15 05:58:21 2025 by rpki-client