$ rpki-client -vvf repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft File: F5BC050A20C516FEBC061A1B70E488BB426444BC.mft (raw, json) Hash identifier: RXwKoM6WfIXDcFCTrbDrxgI0+36poCVwQK5KziFLorc= Subject key identifier: F1:1D:13:61:39:6B:C9:4A:35:F1:24:A1:F2:BC:91:91:D3:65:C3:8F Authority key identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC Certificate issuer: /CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Certificate serial: 0A9DB2C8D37FE57DF0AE29A62D522A61648EBBB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft Manifest number: 4A Signing time: Sun 27 Apr 2025 21:11:19 +0000 Manifest this update: Sun 27 Apr 2025 21:06:19 +0000 Manifest next update: Thu 01 May 2025 03:49:19 +0000 Files and hashes: 1: 3135372e36362e3137322e302f32342d3234203d3e20313533313339.roa (hash: xz2UzOeWgdfzttiDDjIPVkrUsHmTKAhuB/CYKE4i6hg=) 2: F5BC050A20C516FEBC061A1B70E488BB426444BC.crl (hash: ZyfmajPdJNnOGp3tL3QbI2oZHFCKW6/2JJtPBx4xCas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9d:b2:c8:d3:7f:e5:7d:f0:ae:29:a6:2d:52:2a:61:64:8e:bb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Validity Not Before: Apr 27 21:06:19 2025 GMT Not After : May 1 03:49:19 2025 GMT Subject: CN=F11D1361396BC94A35F124A1F2BC9191D365C38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:8d:52:38:0a:46:3b:2e:a9:8b:cd:fa:2c: a3:ba:2d:4c:50:87:b6:57:3c:c5:5b:13:04:e6:00: 4a:1e:cc:6e:51:b1:e8:b9:2d:05:1f:32:b6:09:ce: 08:d7:8e:e0:c9:d9:28:ba:6f:e7:9c:78:ae:b5:ff: e8:62:12:9f:90:9e:6f:eb:60:18:e1:d2:56:db:b5: 0f:4c:36:60:bd:4f:23:65:48:de:9f:31:76:84:a6: 21:d8:47:dd:93:c7:a8:7e:15:98:3b:57:40:cd:86: ad:3c:31:c3:15:03:cd:a0:c0:77:a2:93:01:ea:10: f8:b9:4d:67:35:79:59:e5:63:e1:4c:ce:ee:1d:78: 0b:31:95:99:4f:ab:ae:93:86:77:1d:ff:60:41:74: 1a:13:1e:c3:bf:60:5a:e2:cf:80:2a:7a:6d:68:ee: e3:5a:dd:29:90:3f:23:5a:72:d7:06:97:d0:dc:3d: fa:1f:ae:07:ef:b4:16:f5:9c:c4:1b:63:3f:9c:49: eb:53:22:9d:7b:ac:ed:59:98:43:b5:c5:48:39:9b: 99:5f:e4:43:24:07:62:b8:31:cb:44:cf:d5:37:76: 14:e8:01:8a:50:c3:54:f4:40:3b:a0:51:a1:29:d1: 6a:61:ea:e8:c9:cc:d4:f6:d5:13:57:99:f7:fa:2c: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1D:13:61:39:6B:C9:4A:35:F1:24:A1:F2:BC:91:91:D3:65:C3:8F X509v3 Authority Key Identifier: keyid:F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c9:66:24:18:20:ef:cb:34:6a:b4:5f:d2:14:24:9c:cd:be: 13:f2:73:6b:65:c3:63:37:25:2a:b8:66:da:4c:05:5f:6a:5f: ba:7b:f7:f2:e7:79:64:23:33:b6:17:ce:cc:56:4e:b5:e2:07: 57:46:81:71:21:46:f7:c7:04:66:ab:c8:96:b7:01:8c:e6:85: 1e:20:d3:91:8f:f5:1e:b4:52:e0:14:59:fa:cb:64:f5:5a:a3: a0:01:cf:78:5a:d5:c7:d8:76:e7:ec:ac:6a:9e:79:7a:41:dd: 70:a7:aa:aa:ab:dd:bc:6c:50:cf:14:2f:da:e6:1a:00:50:d9: 54:87:48:d9:40:8e:67:9c:11:75:1f:66:e6:70:b8:ee:38:52: 9e:33:ea:1c:b5:73:60:d4:d2:3b:9c:c9:9a:6c:74:fe:b8:31: 69:c8:11:28:5e:fc:c9:f8:fa:37:26:48:33:4e:15:cd:52:a0: cd:87:1e:de:2b:49:1f:84:be:8d:0e:65:c1:e6:74:1d:86:a9: 1f:02:76:c2:44:6a:fc:f8:d1:50:e5:54:ab:30:ca:38:04:74: 6c:dc:1f:38:d4:ea:5f:f3:c9:63:2b:19:44:09:d3:28:2b:03: 6b:77:4d:62:7c:38:d7:73:1b:13:7f:a1:10:ec:52:75:6b:aa: cd:e4:5f:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCp2yyNN/5X3wrimmLVIqYWSOu7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0 MjY0NDRCQzAeFw0yNTA0MjcyMTA2MTlaFw0yNTA1MDEwMzQ5MTlaMDMxMTAvBgNV BAMTKEYxMUQxMzYxMzk2QkM5NEEzNUYxMjRBMUYyQkM5MTkxRDM2NUMzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ941SOApGOy6pi836LKO6LUxQ h7ZXPMVbEwTmAEoezG5Rsei5LQUfMrYJzgjXjuDJ2Si6b+eceK61/+hiEp+Qnm/r YBjh0lbbtQ9MNmC9TyNlSN6fMXaEpiHYR92Tx6h+FZg7V0DNhq08McMVA82gwHei kwHqEPi5TWc1eVnlY+FMzu4deAsxlZlPq66Thncd/2BBdBoTHsO/YFriz4Aqem1o 7uNa3SmQPyNactcGl9DcPfofrgfvtBb1nMQbYz+cSetTIp17rO1ZmEO1xUg5m5lf 5EMkB2K4MctEz9U3dhToAYpQw1T0QDugUaEp0Wph6ujJzNT21RNXmff6LLtFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8R0TYTlryUo18SSh8ryRkdNlw48wHwYDVR0j BBgwFoAU9bwFCiDFFv68BhobcOSIu0JkRLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJmOThhMC0wOTQ3LTRmN2EtYmVlNy1mZmMzZDA1Yjk0MGUvMC9GNUJDMDUwQTIw QzUxNkZFQkMwNjFBMUI3MEU0ODhCQjQyNjQ0NEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0MjY0 NDRCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4 QkI0MjY0NDRCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInJZiQYIO/LNGq0X9IUJJzNvhPyc2tlw2M3 JSq4ZtpMBV9qX7p79/LneWQjM7YXzsxWTrXiB1dGgXEhRvfHBGaryJa3AYzmhR4g 05GP9R60UuAUWfrLZPVao6ABz3ha1cfYdufsrGqeeXpB3XCnqqqr3bxsUM8UL9rm GgBQ2VSHSNlAjmecEXUfZuZwuO44Up4z6hy1c2DU0jucyZpsdP64MWnIEShe/Mn4 +jcmSDNOFc1SoM2HHt4rSR+Evo0OZcHmdB2GqR8CdsJEavz40VDlVKswyjgEdGzc HzjU6l/zyWMrGUQJ0ygrA2t3TWJ8ONdzGxN/oRDsUnVrqs3kXw0= -----END CERTIFICATE-----Generated at Mon Apr 28 00:31:13 2025 by rpki-client