$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: rB0RjNgUPv9qSn2Tdc7aMuxfTFlpq13DalIH4XPKXoE= Subject key identifier: 0A:D8:CA:81:AD:05:85:DB:6F:79:64:5C:37:F5:E9:A4:79:76:BC:1C Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 47C3B4BD4DE0B38A570DFA517F1E088F6084D4A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 0304 Signing time: Tue 29 Apr 2025 04:10:36 +0000 Manifest this update: Tue 29 Apr 2025 04:05:36 +0000 Manifest next update: Fri 02 May 2025 14:11:36 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: d+ITxps3cZ18Zq/dbteBtMW4w2s91LJtz5llba104bg=) 2: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: Fhe612qV3/eGjYM5eOVYyn2ZYYAJeCmjyut1AlTQSCk=) 3: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: dvdUssi0GYF+nu0bzgaccucJ6IsLa1FRw2pzBTZE3GU=) 4: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: MJ5rji/pccqQ0iJjDsk6/7TOxTNMih19wHwBeZGz1Sk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c3:b4:bd:4d:e0:b3:8a:57:0d:fa:51:7f:1e:08:8f:60:84:d4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Apr 29 04:05:36 2025 GMT Not After : May 2 14:11:36 2025 GMT Subject: CN=0AD8CA81AD0585DB6F79645C37F5E9A47976BC1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:fa:76:69:9d:80:27:e9:d2:2a:57:a7:24: 9c:f4:64:c1:e6:2c:db:cb:69:9f:fb:4c:36:e5:da: 60:ab:ef:3e:25:de:6a:06:c8:a1:5c:0a:87:3e:84: 67:50:c5:e7:ad:34:70:f9:b4:5e:ff:39:13:61:ff: 12:99:bf:b5:aa:da:16:62:f7:a1:01:71:15:a4:f0: 2f:d8:47:b0:a2:fc:0f:12:1a:a4:59:8d:fd:dc:86: f6:b7:c8:a2:d1:cc:34:62:cc:c3:6d:69:37:9f:b3: a9:b1:91:fe:50:1d:ee:83:74:f3:d2:b5:d1:c9:ad: cd:9d:0a:07:61:e2:0b:0e:9e:94:5f:0d:d0:4b:f4: ee:7c:31:f8:c1:c0:4c:54:a1:22:22:6e:74:be:d9: c5:fe:ca:32:c6:2a:5e:ea:df:50:28:e4:4a:fc:38: 48:f9:b4:97:b2:37:f6:51:5c:d2:67:7b:a5:30:ae: 1e:b8:7d:fe:8a:66:33:fc:7c:5b:b1:9d:8b:48:f7: ad:3a:53:5e:67:18:6c:22:95:19:92:3b:d6:80:ff: 32:29:08:44:09:99:ee:eb:86:80:e6:3d:7e:03:6b: f7:6b:24:8c:4c:fb:b5:de:ae:9d:aa:82:cd:4a:c5: e8:cc:cd:8d:cd:aa:1c:ec:66:09:17:d0:82:0b:76: d3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D8:CA:81:AD:05:85:DB:6F:79:64:5C:37:F5:E9:A4:79:76:BC:1C X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:07:36:72:ef:81:26:85:2d:31:80:db:52:e2:51:3e:f2:31: 5d:92:63:91:b1:5d:13:41:25:d1:81:cf:d6:f7:10:32:bd:0c: 75:fd:00:8e:ff:20:85:38:a6:f2:2a:0b:7c:f2:70:27:6e:46: 05:21:8c:b3:b0:9e:ba:0c:12:e5:10:ac:b0:6a:ea:28:e9:ec: a5:cd:df:c3:dc:10:c9:65:67:71:be:00:a5:5f:df:8b:23:72: cf:53:cf:a4:aa:a1:59:cf:22:3e:20:e6:da:57:78:5c:02:fc: 3c:13:d5:88:ec:34:c1:56:b3:5e:f9:ac:62:fe:ef:a4:df:8d: 44:d0:45:3a:81:5c:7d:68:4f:c4:8f:44:f8:96:d6:53:4e:d6: 5b:d2:09:5b:cb:b8:d9:8e:eb:23:91:c7:84:9f:9f:b7:cd:c5: 75:f3:9a:8f:ac:12:ea:ed:fd:bc:c7:d7:cb:37:99:fe:57:d6: 4a:4f:a8:5d:da:1d:84:d1:b8:f6:04:5c:2f:9c:4b:3e:cf:92: df:14:8d:fd:45:05:7b:9a:15:0b:62:42:64:de:c2:10:dd:9f: ba:78:28:9b:8a:6d:e6:99:a0:d3:d0:0d:3e:3b:8b:59:38:88: 8f:32:e1:2b:61:42:32:c9:bd:ba:fd:c6:72:a4:37:67:74:af: 68:78:ba:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8O0vU3gs4pXDfpRfx4Ij2CE1KMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTA0MjkwNDA1MzZaFw0yNTA1MDIxNDExMzZaMDMxMTAvBgNV BAMTKDBBRDhDQTgxQUQwNTg1REI2Rjc5NjQ1QzM3RjVFOUE0Nzk3NkJDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbzPp2aZ2AJ+nSKlenJJz0ZMHm LNvLaZ/7TDbl2mCr7z4l3moGyKFcCoc+hGdQxeetNHD5tF7/ORNh/xKZv7Wq2hZi 96EBcRWk8C/YR7Ci/A8SGqRZjf3chva3yKLRzDRizMNtaTefs6mxkf5QHe6DdPPS tdHJrc2dCgdh4gsOnpRfDdBL9O58MfjBwExUoSIibnS+2cX+yjLGKl7q31Ao5Er8 OEj5tJeyN/ZRXNJne6Uwrh64ff6KZjP8fFuxnYtI9606U15nGGwilRmSO9aA/zIp CEQJme7rhoDmPX4Da/drJIxM+7Xerp2qgs1KxejMzY3NqhzsZgkX0IILdtOvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCtjKga0FhdtveWRcN/XppHl2vBwwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYHNnLvgSaFLTGA21LiUT7yMV2SY5GxXRNB JdGBz9b3EDK9DHX9AI7/IIU4pvIqC3zycCduRgUhjLOwnroMEuUQrLBq6ijp7KXN 38PcEMllZ3G+AKVf34sjcs9Tz6SqoVnPIj4g5tpXeFwC/DwT1YjsNMFWs175rGL+ 76TfjUTQRTqBXH1oT8SPRPiW1lNO1lvSCVvLuNmO6yORx4Sfn7fNxXXzmo+sEurt /bzH18s3mf5X1kpPqF3aHYTRuPYEXC+cSz7Pkt8Ujf1FBXuaFQtiQmTewhDdn7p4 KJuKbeaZoNPQDT47i1k4iI8y4SthQjLJvbr9xnKkN2d0r2h4ug4= -----END CERTIFICATE-----Generated at Tue Apr 29 09:27:19 2025 by rpki-client