$ rpki-client -vvf repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft File: C5E0183A7142717E23D90AF4650F1E14418D85C3.mft (raw, json) Hash identifier: iCmpzHpDToozojMhcNMHzTk8Tc4RWEBvYfaYvhHL/7Q= Subject key identifier: A5:EA:D8:D9:EF:21:A3:30:7A:01:DC:87:C1:5B:84:45:DE:CF:C1:D7 Authority key identifier: C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3 Certificate issuer: /CN=C5E0183A7142717E23D90AF4650F1E14418D85C3 Certificate serial: 7B3140919B31A0717D9849808500B5BAD0BBEC94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft Manifest number: 04CC Signing time: Mon 28 Apr 2025 22:30:45 +0000 Manifest this update: Mon 28 Apr 2025 22:25:45 +0000 Manifest next update: Thu 01 May 2025 23:27:45 +0000 Files and hashes: 1: C5E0183A7142717E23D90AF4650F1E14418D85C3.crl (hash: 5XNs5wgMT0LXq/ssk0Dm6G4sSe4em4wytfm40PIt92c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:31:40:91:9b:31:a0:71:7d:98:49:80:85:00:b5:ba:d0:bb:ec:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5E0183A7142717E23D90AF4650F1E14418D85C3 Validity Not Before: Apr 28 22:25:45 2025 GMT Not After : May 1 23:27:45 2025 GMT Subject: CN=A5EAD8D9EF21A3307A01DC87C15B8445DECFC1D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:97:b5:45:5f:9b:7e:a7:0b:95:12:9b:a8: 31:78:59:30:6d:91:f5:48:5a:3d:16:a0:43:51:65: 29:29:a5:d4:10:e4:f4:a0:d2:45:20:c7:f4:3c:56: 04:3e:d8:5f:d3:42:4a:2d:87:f5:e8:9c:d1:fe:77: 5c:11:a0:6b:08:41:3b:71:66:b7:18:5a:51:ce:60: 94:05:54:e2:30:57:4b:1f:5d:b3:04:02:3a:52:7d: a1:41:5c:fd:b7:ac:9d:ff:a5:0b:a7:65:19:25:0c: 15:73:56:72:f7:7f:ca:c5:d8:b9:8e:c0:3e:84:77: 38:51:bd:87:91:39:0d:a1:bc:d4:71:80:5e:9f:25: 8e:09:f3:64:79:42:5c:80:51:ac:23:88:83:40:49: 04:a3:14:e7:27:36:d7:83:f5:1a:0a:cb:3c:d7:ee: 5c:df:7e:2e:5e:fb:e2:fe:c6:08:24:dc:55:bc:8e: 8f:45:19:67:ad:ca:91:72:27:13:92:84:31:4f:ce: 8c:67:79:3f:46:04:ad:a1:83:0b:45:7c:03:67:c1: d1:30:30:85:12:67:da:21:0d:98:7f:5b:31:d8:04: 55:46:7e:42:ca:02:f8:fe:e7:2c:75:1c:19:4b:80: 94:73:2d:5c:a8:c9:c2:0d:4a:e2:1d:be:d8:20:36: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EA:D8:D9:EF:21:A3:30:7A:01:DC:87:C1:5B:84:45:DE:CF:C1:D7 X509v3 Authority Key Identifier: keyid:C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ba:02:ad:a9:81:41:ec:90:54:d3:4f:f0:18:e6:1c:b9:3b: bb:6e:bd:3f:0e:76:7f:ce:24:58:f0:16:07:6c:6c:29:9c:db: 72:b3:3f:65:56:71:da:6e:c6:4a:54:31:05:b6:f4:01:63:93: 08:7c:72:cf:7e:62:3a:fe:9c:66:47:13:7f:ee:35:e0:94:e4: b6:80:d7:05:4a:a8:36:94:47:32:2b:84:e8:6c:96:c6:07:40: 42:c9:43:76:72:9e:5f:32:f2:be:be:1d:f5:7e:0c:12:ab:37: d6:7b:f1:00:47:c2:17:5d:7f:8c:b6:00:e3:28:6b:99:da:4a: 62:64:76:49:04:08:49:88:65:82:62:fb:82:df:67:29:1c:46: 1f:44:ff:22:dc:9d:0c:87:4f:14:6d:21:39:8d:46:43:f4:87: 6c:a2:a4:c4:cc:5f:ad:36:1e:da:22:3b:7d:fa:fa:3e:c2:85: 5c:78:8c:ab:b8:39:36:b7:f7:14:0c:3c:ae:de:de:92:30:0a: 82:b8:1f:03:39:f2:ff:04:ef:16:ca:2e:76:85:03:86:3f:e1: 3a:99:58:60:9a:fd:91:dc:7e:1e:5f:3b:c7:58:a1:4f:52:6f: ac:9e:30:f9:d3:32:e4:7a:aa:0b:3b:a8:fe:ef:a8:d2:f3:3a: 3e:a3:61:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezFAkZsxoHF9mEmAhQC1utC77JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFFMTQ0 MThEODVDMzAeFw0yNTA0MjgyMjI1NDVaFw0yNTA1MDEyMzI3NDVaMDMxMTAvBgNV BAMTKEE1RUFEOEQ5RUYyMUEzMzA3QTAxREM4N0MxNUI4NDQ1REVDRkMxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd85e1RV+bfqcLlRKbqDF4WTBt kfVIWj0WoENRZSkppdQQ5PSg0kUgx/Q8VgQ+2F/TQkoth/XonNH+d1wRoGsIQTtx ZrcYWlHOYJQFVOIwV0sfXbMEAjpSfaFBXP23rJ3/pQunZRklDBVzVnL3f8rF2LmO wD6EdzhRvYeROQ2hvNRxgF6fJY4J82R5QlyAUawjiINASQSjFOcnNteD9RoKyzzX 7lzffi5e++L+xggk3FW8jo9FGWetypFyJxOShDFPzoxneT9GBK2hgwtFfANnwdEw MIUSZ9ohDZh/WzHYBFVGfkLKAvj+5yx1HBlLgJRzLVyoycINSuIdvtggNk2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUperY2e8hozB6AdyHwVuERd7PwdcwHwYDVR0j BBgwFoAUxeAYOnFCcX4j2Qr0ZQ8eFEGNhcMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDRmMjQ2MC1mZTUwLTQ4MDAtYWUwMi01N2NiM2U4MTVkNWUvMC9DNUUwMTgzQTcx NDI3MTdFMjNEOTBBRjQ2NTBGMUUxNDQxOEQ4NUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFFMTQ0MThE ODVDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFF MTQ0MThEODVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADG6Aq2pgUHskFTTT/AY5hy5O7tuvT8Odn/O JFjwFgdsbCmc23KzP2VWcdpuxkpUMQW29AFjkwh8cs9+Yjr+nGZHE3/uNeCU5LaA 1wVKqDaURzIrhOhslsYHQELJQ3Zynl8y8r6+HfV+DBKrN9Z78QBHwhddf4y2AOMo a5naSmJkdkkECEmIZYJi+4LfZykcRh9E/yLcnQyHTxRtITmNRkP0h2yipMTMX602 HtoiO336+j7ChVx4jKu4OTa39xQMPK7e3pIwCoK4HwM58v8E7xbKLnaFA4Y/4TqZ WGCa/ZHcfh5fO8dYoU9Sb6yeMPnTMuR6qgs7qP7vqNLzOj6jYbs= -----END CERTIFICATE-----Generated at Wed Apr 30 09:40:06 2025 by rpki-client