$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: rGW2l0BZgasCixtBo2kc5zqWNBhXL4+QmQ3HH6v7ODI= Subject key identifier: 20:6F:5C:0A:8D:75:96:68:CB:98:B5:2E:29:5F:CA:59:5C:39:DF:88 Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 5E09689529D817464D2BABBE583509422B075E28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 04CD Signing time: Mon 28 Apr 2025 16:02:05 +0000 Manifest this update: Mon 28 Apr 2025 15:57:05 +0000 Manifest next update: Fri 02 May 2025 01:24:05 +0000 Files and hashes: 1: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: +T3Pt96JdYaCjZwslFQEnLh95PR6Wr1CkWYzNuxLhQk=) 2: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: r43wrP2/nYbelpR2GrC97yQvkNfH5ycFb+2jOBOqVks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:09:68:95:29:d8:17:46:4d:2b:ab:be:58:35:09:42:2b:07:5e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Apr 28 15:57:05 2025 GMT Not After : May 2 01:24:05 2025 GMT Subject: CN=206F5C0A8D759668CB98B52E295FCA595C39DF88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:80:e1:71:eb:94:9d:7b:15:a5:30:d6:42: 25:1c:c7:24:fd:41:1a:db:80:ce:fb:22:53:f8:97: f1:64:a6:33:c3:1d:54:aa:07:f3:71:00:69:a7:e2: 4e:8c:49:62:35:8f:43:43:b1:48:98:83:6a:95:43: fb:af:75:0b:71:35:c0:63:75:9e:47:a0:7d:0b:e2: b7:1a:42:6c:39:b2:fe:4d:ae:47:7a:26:a8:bf:ba: 38:2b:f2:b6:44:0c:cd:88:50:84:c1:8c:18:a6:3c: 5b:03:06:b9:d9:12:2f:24:4d:31:09:88:00:b9:6e: 64:30:6c:51:2e:fb:1e:75:09:77:69:7a:61:57:39: 37:aa:b2:cc:6e:cd:75:a0:3d:b2:a5:4e:cd:df:2f: a7:ce:bc:54:ec:b5:19:7b:e1:4f:cb:15:e0:e1:a3: 50:2f:f0:c6:c9:1a:75:30:b6:05:0e:96:42:f9:d2: ef:cb:e1:38:db:12:c6:27:fb:c1:13:1e:c5:69:fb: 46:12:92:12:8d:2b:70:13:d1:3b:b7:dd:de:a3:bf: ce:7a:09:59:cb:fe:6a:88:a2:cf:bc:c5:72:b2:ee: 18:0f:14:87:6d:0a:ba:3a:d6:20:e3:9d:66:53:5e: 07:05:c5:36:ef:4d:3f:b5:21:14:0b:91:ae:4e:08: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6F:5C:0A:8D:75:96:68:CB:98:B5:2E:29:5F:CA:59:5C:39:DF:88 X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f2:6b:50:28:e6:12:a2:d7:1f:95:5b:d6:12:74:92:cc:a2: ca:8d:2b:3b:54:38:c8:01:66:79:51:9e:cc:5f:97:a8:51:0f: 42:e0:25:77:3d:4f:8f:31:d4:3d:7f:22:09:0a:29:81:11:c5: a4:42:90:60:66:85:9a:d6:4c:b3:e9:9a:8e:44:d5:f8:c2:fb: b2:f2:86:1e:07:78:bc:a5:6f:8b:b0:6e:b1:85:d8:37:3b:29: a5:01:06:6b:89:b7:3f:45:36:84:e6:e3:86:1d:08:54:27:87: 23:17:04:79:34:8c:4a:51:2b:7b:e9:20:79:4c:24:e7:1a:28: 6f:54:77:79:89:97:cf:38:1b:e1:96:80:3f:11:4b:fc:c4:5a: c9:53:ea:5e:ca:ac:9f:cf:bc:f9:6c:75:6a:4a:df:99:10:ec: c1:ee:7f:cb:bc:ee:a3:a3:d9:63:c3:1c:e5:4d:04:42:5d:ac: 49:63:bd:d3:dd:ad:45:f3:d8:08:bb:fc:a6:7b:22:f9:e7:dd: 79:7f:25:50:b7:51:8a:3f:8d:a9:70:e5:fe:f7:11:05:e0:33: 38:41:9a:75:97:eb:99:7a:d4:c7:7c:27:14:66:ab:fd:af:4b: 2b:46:4c:3e:69:f5:c6:fb:d2:b4:9c:f6:7a:65:22:ae:08:9e: 7a:9b:ac:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXglolSnYF0ZNK6u+WDUJQisHXigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNTA0MjgxNTU3MDVaFw0yNTA1MDIwMTI0MDVaMDMxMTAvBgNV BAMTKDIwNkY1QzBBOEQ3NTk2NjhDQjk4QjUyRTI5NUZDQTU5NUMzOURGODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuYDhceuUnXsVpTDWQiUcxyT9 QRrbgM77IlP4l/FkpjPDHVSqB/NxAGmn4k6MSWI1j0NDsUiYg2qVQ/uvdQtxNcBj dZ5HoH0L4rcaQmw5sv5Nrkd6Jqi/ujgr8rZEDM2IUITBjBimPFsDBrnZEi8kTTEJ iAC5bmQwbFEu+x51CXdpemFXOTeqssxuzXWgPbKlTs3fL6fOvFTstRl74U/LFeDh o1Av8MbJGnUwtgUOlkL50u/L4TjbEsYn+8ETHsVp+0YSkhKNK3AT0Tu33d6jv856 CVnL/mqIos+8xXKy7hgPFIdtCro61iDjnWZTXgcFxTbvTT+1IRQLka5OCBvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIG9cCo11lmjLmLUuKV/KWVw534gwHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3ya1Ao5hKi1x+VW9YSdJLMosqNKztUOMgB ZnlRnsxfl6hRD0LgJXc9T48x1D1/IgkKKYERxaRCkGBmhZrWTLPpmo5E1fjC+7Ly hh4HeLylb4uwbrGF2Dc7KaUBBmuJtz9FNoTm44YdCFQnhyMXBHk0jEpRK3vpIHlM JOcaKG9Ud3mJl884G+GWgD8RS/zEWslT6l7KrJ/PvPlsdWpK35kQ7MHuf8u87qOj 2WPDHOVNBEJdrEljvdPdrUXz2Ai7/KZ7Ivnn3Xl/JVC3UYo/jalw5f73EQXgMzhB mnWX65l61Md8JxRmq/2vSytGTD5p9cb70rSc9nplIq4InnqbrB8= -----END CERTIFICATE-----Generated at Wed Apr 30 05:34:16 2025 by rpki-client