$ rpki-client -vvf repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft File: 5B558AD01277C8212C974318B6352FB28BF683AD.mft (raw, json) Hash identifier: PLuHBKZqczDuQaqQKwXjtjJ6M3EURS4UmvFroDo1B2c= Subject key identifier: BB:0E:BA:6D:C8:E2:52:73:E8:B9:23:4A:7F:13:29:BF:2B:C4:CC:C6 Authority key identifier: 5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD Certificate issuer: /CN=5B558AD01277C8212C974318B6352FB28BF683AD Certificate serial: 5F8D77E24B7F66B985794614563E163574C36699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft Manifest number: 0173 Signing time: Fri 04 Apr 2025 03:40:48 +0000 Manifest this update: Fri 04 Apr 2025 03:35:47 +0000 Manifest next update: Mon 07 Apr 2025 13:48:47 +0000 Files and hashes: 1: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 2i8HfdlFIHezHTi1m8fyUROS/IcCg2re+ftnVgBoAd4=) 2: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: 0agQaQqzfkfho9nuxHylitEA2rT2w6YSuj3i1Cy3BUc=) 3: 5B558AD01277C8212C974318B6352FB28BF683AD.crl (hash: jn0Wo5o7y6UGxFhbQTR5q39sxC/GP8AN62dCmohVpeY=) 4: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: 0shHIoNgf0pQRXh0UI7r08hqky3s0DThmjqdBQikoVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 13:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8d:77:e2:4b:7f:66:b9:85:79:46:14:56:3e:16:35:74:c3:66:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B558AD01277C8212C974318B6352FB28BF683AD Validity Not Before: Apr 4 03:35:47 2025 GMT Not After : Apr 7 13:48:47 2025 GMT Subject: CN=BB0EBA6DC8E25273E8B9234A7F1329BF2BC4CCC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b5:44:ec:bd:91:44:61:d6:38:5b:c2:8e:05: 9b:64:b7:76:de:94:3b:66:fc:30:b7:71:f8:6e:83: c7:e5:ce:db:d7:b2:19:01:8f:a9:ad:15:52:57:3e: 47:ca:f0:06:f6:8a:d0:64:94:00:51:c0:dd:9b:32: ca:cf:2b:99:62:8d:bf:40:a6:e7:e3:ef:1c:a3:f3: cf:ca:ab:68:2c:ba:90:40:d7:23:7f:e9:b0:fd:8e: 1f:21:13:a4:e8:4e:e9:ab:3f:ae:cf:8d:54:fe:3f: b6:b1:5a:6f:12:c7:7d:bc:eb:60:35:6f:75:3a:78: 2b:04:74:03:f4:d1:1d:6e:c4:41:b1:76:d6:19:58: dd:b5:e0:42:47:ca:e6:3c:43:14:5b:0f:9e:4a:6e: 33:99:d3:e8:cb:5e:e7:52:b2:df:3f:0e:da:f5:30: bb:5d:b4:86:7b:7a:8a:18:32:37:6a:15:39:39:43: 3d:45:81:9b:e9:36:29:e9:13:b0:14:7f:c9:23:f3: 83:ed:dc:ef:89:f2:6e:af:ac:eb:24:19:a0:ef:df: 18:56:ad:10:d1:9c:d8:aa:5b:30:fa:b2:af:a5:17: 69:67:95:ba:b2:00:4d:db:1f:26:b8:1b:3e:e8:2c: 9c:56:61:24:e1:77:88:c9:00:17:c0:b9:c8:a4:ce: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0E:BA:6D:C8:E2:52:73:E8:B9:23:4A:7F:13:29:BF:2B:C4:CC:C6 X509v3 Authority Key Identifier: keyid:5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:16:6e:c1:a8:ee:b8:73:ce:eb:a1:43:54:7e:03:81:00:6d: 18:97:3a:42:11:80:23:41:98:bd:d7:15:da:84:e3:40:75:8c: 79:78:35:fe:b4:28:67:1d:16:2f:92:0a:5c:ad:70:8e:40:d5: 9a:1c:9b:a3:dc:7d:83:eb:db:29:d9:e1:c0:43:8d:e0:ac:04: 17:46:89:b6:11:03:9c:da:4e:29:2f:43:4c:c2:b3:7a:25:30: 67:7a:64:6f:6d:30:2c:49:0a:4f:af:55:05:7e:6e:73:96:62: 10:e8:1b:ac:dd:9e:2a:8b:1e:39:96:8a:c3:2e:50:3c:f7:a1: 5c:2e:54:f1:2e:29:6f:18:2b:fd:ef:3e:79:86:ca:e8:71:8a: 31:d9:dd:2d:14:df:21:3c:f2:02:5a:70:07:ee:a5:ac:38:63: e7:61:ee:5a:06:1c:09:0f:de:f3:ad:bd:7a:88:6d:a5:28:fd: 94:8b:25:94:d7:9c:63:46:b4:81:62:ee:24:1b:cd:b6:f7:08: ca:e5:8a:f0:15:e8:cf:c4:14:9d:74:51:05:8e:5d:21:d3:93: f5:a7:c1:04:e2:f1:63:c5:22:f5:ed:73:06:4d:59:95:e9:cb: 67:0f:70:fc:4c:81:3b:fb:ff:77:e9:2b:c3:fb:18:11:f3:9a: 5b:a1:2c:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4134kt/ZrmFeUYUVj4WNXTDZpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4 QkY2ODNBRDAeFw0yNTA0MDQwMzM1NDdaFw0yNTA0MDcxMzQ4NDdaMDMxMTAvBgNV BAMTKEJCMEVCQTZEQzhFMjUyNzNFOEI5MjM0QTdGMTMyOUJGMkJDNENDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDitUTsvZFEYdY4W8KOBZtkt3be lDtm/DC3cfhug8flztvXshkBj6mtFVJXPkfK8Ab2itBklABRwN2bMsrPK5lijb9A pufj7xyj88/Kq2gsupBA1yN/6bD9jh8hE6ToTumrP67PjVT+P7axWm8Sx32862A1 b3U6eCsEdAP00R1uxEGxdtYZWN214EJHyuY8QxRbD55KbjOZ0+jLXudSst8/Dtr1 MLtdtIZ7eooYMjdqFTk5Qz1FgZvpNinpE7AUf8kj84Pt3O+J8m6vrOskGaDv3xhW rRDRnNiqWzD6sq+lF2lnlbqyAE3bHya4Gz7oLJxWYSThd4jJABfAucikzrbLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuw66bcjiUnPouSNKfxMpvyvEzMYwHwYDVR0j BBgwFoAUW1WK0BJ3yCEsl0MYtjUvsov2g60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTViNGZhNC0zMjhjLTRjZjItYWRlMy1jODY4MTMxZDRlMGQvMC81QjU1OEFEMDEy NzdDODIxMkM5NzQzMThCNjM1MkZCMjhCRjY4M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4QkY2 ODNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJG QjI4QkY2ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkWbsGo7rhzzuuhQ1R+A4EAbRiXOkIRgCNB mL3XFdqE40B1jHl4Nf60KGcdFi+SClytcI5A1Zocm6PcfYPr2ynZ4cBDjeCsBBdG ibYRA5zaTikvQ0zCs3olMGd6ZG9tMCxJCk+vVQV+bnOWYhDoG6zdniqLHjmWisMu UDz3oVwuVPEuKW8YK/3vPnmGyuhxijHZ3S0U3yE88gJacAfupaw4Y+dh7loGHAkP 3vOtvXqIbaUo/ZSLJZTXnGNGtIFi7iQbzbb3CMrlivAV6M/EFJ10UQWOXSHTk/Wn wQTi8WPFIvXtcwZNWZXpy2cPcPxMgTv7/3fpK8P7GBHzmluhLHg= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:39 2025 by rpki-client