$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json) Hash identifier: feh0G19tToTh47oIqsCIzCau78r+IiqLUFjrY1InuOg= Subject key identifier: 39:D5:5B:45:16:1C:3A:7C:6D:0E:E5:F7:BA:78:41:53:E8:AA:0F:20 Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Certificate serial: 10D5AF53B31FC9085310F5C752ABD7E60106E89A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft Manifest number: 8D Signing time: Wed 30 Apr 2025 21:00:37 +0000 Manifest this update: Wed 30 Apr 2025 20:55:37 +0000 Manifest next update: Sun 04 May 2025 07:15:37 +0000 Files and hashes: 1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: YTv8CwxN0y0wVt0HyANo3Q1LxCG3A99pZkgBV1FaVSU=) 2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: SZF4Z9v3eKneOkuBlAob2+u92vsQYFHYdvhfR0N4D0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 07:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d5:af:53:b3:1f:c9:08:53:10:f5:c7:52:ab:d7:e6:01:06:e8:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Validity Not Before: Apr 30 20:55:37 2025 GMT Not After : May 4 07:15:37 2025 GMT Subject: CN=39D55B45161C3A7C6D0EE5F7BA784153E8AA0F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:0c:6e:24:4e:59:12:e5:86:44:bc:e1:bd: 90:43:c2:d1:0e:ab:46:94:5e:b2:50:2b:d6:e2:33: 79:21:d1:f1:4c:97:a0:0a:30:97:89:dc:b8:d2:40: 06:db:ef:05:03:fa:98:85:d1:55:7e:ce:28:58:41: 52:7f:15:2f:96:6e:bd:a9:2b:c9:da:16:5b:9c:ef: 9a:c5:a5:3c:2b:3e:1f:c1:e0:25:b2:3a:d0:b1:43: 5b:d6:af:1d:91:1a:62:dc:eb:90:a6:49:c9:cd:e2: b5:6d:7f:af:bc:1d:02:f6:fe:cb:0b:43:1c:de:1f: ed:b9:8a:67:aa:7b:59:e9:9f:38:57:73:c6:90:1e: 65:17:b8:54:23:aa:16:cb:95:53:eb:01:be:19:f6: 0b:96:60:dc:26:7d:5b:7c:8a:8e:a3:48:d6:e4:ec: 71:8d:bc:2b:47:be:19:cc:41:d3:3c:4b:d9:61:b3: 7f:3f:3b:7b:44:f4:8b:71:cf:e0:8b:27:b3:0b:a8: f3:20:5e:76:48:b7:76:97:82:4f:f6:9e:f6:10:d4: e1:8d:9f:4b:c0:6a:3f:3c:b5:f1:0f:08:e9:42:92: c1:6a:7d:6f:a4:f0:18:58:10:38:5d:96:52:07:f7: d5:b2:5e:50:12:84:33:66:21:0d:80:18:af:04:40: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D5:5B:45:16:1C:3A:7C:6D:0E:E5:F7:BA:78:41:53:E8:AA:0F:20 X509v3 Authority Key Identifier: keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5d:74:c9:61:f0:fe:f1:bd:40:20:81:96:85:81:c6:a1:f0: 24:1f:b9:7a:2c:15:f6:64:d5:21:6a:9f:55:3a:4c:a0:18:4a: 6f:a6:bf:d1:a3:be:91:57:e0:5a:5e:d0:26:e0:a3:2f:1c:c5: 47:17:85:df:8a:98:5e:31:e3:73:c2:05:33:47:52:0f:10:1c: 64:31:15:b4:41:7a:63:99:ce:c3:6b:e5:26:06:03:bd:47:98: 42:0d:86:0d:26:8e:d6:50:a1:17:c3:73:a2:a3:4a:bf:5e:52: 1a:1f:fd:89:3c:cc:51:ad:60:b6:ff:56:34:06:1c:1a:c9:ca: 6b:05:65:e2:9f:8a:51:63:76:47:86:4f:0c:e5:fb:52:30:79: 26:65:03:c9:49:7a:57:03:74:a9:a8:ea:bc:be:87:21:9b:c0: 90:6d:f0:b7:d3:3e:33:2d:ac:fc:5c:95:aa:ce:66:29:27:0a: 45:9e:b4:9e:c6:47:e4:25:f3:8b:7b:b7:b3:13:9a:ef:4f:a6: c8:c0:bb:15:5e:e3:2b:f0:c0:03:6d:0a:63:2e:d6:48:9c:d9: 8b:9a:e8:fc:08:20:47:69:62:6d:88:47:fb:41:59:a1:12:90: d2:93:f6:91:fe:37:3a:41:2a:c2:14:e7:be:26:78:96:cf:f3: 31:8e:52:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENWvU7MfyQhTEPXHUqvX5gEG6JowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3 MENFNkM2MTAeFw0yNTA0MzAyMDU1MzdaFw0yNTA1MDQwNzE1MzdaMDMxMTAvBgNV BAMTKDM5RDU1QjQ1MTYxQzNBN0M2RDBFRTVGN0JBNzg0MTUzRThBQTBGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC8QxuJE5ZEuWGRLzhvZBDwtEO q0aUXrJQK9biM3kh0fFMl6AKMJeJ3LjSQAbb7wUD+piF0VV+zihYQVJ/FS+Wbr2p K8naFluc75rFpTwrPh/B4CWyOtCxQ1vWrx2RGmLc65CmScnN4rVtf6+8HQL2/ssL QxzeH+25imeqe1npnzhXc8aQHmUXuFQjqhbLlVPrAb4Z9guWYNwmfVt8io6jSNbk 7HGNvCtHvhnMQdM8S9lhs38/O3tE9Itxz+CLJ7MLqPMgXnZIt3aXgk/2nvYQ1OGN n0vAaj88tfEPCOlCksFqfW+k8BhYEDhdllIH99WyXlAShDNmIQ2AGK8EQEC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOdVbRRYcOnxtDuX3unhBU+iqDyAwHwYDVR0j BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3 Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNddMlh8P7xvUAggZaFgcah8CQfuXosFfZk 1SFqn1U6TKAYSm+mv9GjvpFX4Fpe0Cbgoy8cxUcXhd+KmF4x43PCBTNHUg8QHGQx FbRBemOZzsNr5SYGA71HmEINhg0mjtZQoRfDc6KjSr9eUhof/Yk8zFGtYLb/VjQG HBrJymsFZeKfilFjdkeGTwzl+1IweSZlA8lJelcDdKmo6ry+hyGbwJBt8LfTPjMt rPxclarOZiknCkWetJ7GR+Ql84t7t7MTmu9PpsjAuxVe4yvwwANtCmMu1kic2Yua 6PwIIEdpYm2IR/tBWaESkNKT9pH+NzpBKsIU574meJbP8zGOUig= -----END CERTIFICATE-----Generated at Thu May 1 15:32:07 2025 by rpki-client