$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft File: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft (raw, json) Hash identifier: +ujxZ46igXpWj7KzPklGJzswWer/ZZxpK3UlCiJVnvk= Subject key identifier: 37:D1:1D:EE:34:E9:AD:F0:A5:A6:EF:4C:E1:47:44:C1:21:26:00:59 Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 Certificate issuer: /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Certificate serial: 410DBC1B17AD1E05D5312C4EC31DEF92921C9E15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft Manifest number: 0252 Signing time: Wed 30 Apr 2025 00:30:48 +0000 Manifest this update: Wed 30 Apr 2025 00:25:48 +0000 Manifest next update: Sat 03 May 2025 05:36:48 +0000 Files and hashes: 1: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl (hash: 9KSSS6ITXa1e0qwppLSh3A9BzzJkA4R5Bo6PB3yPc0k=) 2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 3ytI4WNdkarTA98AKzILbdHeDtsgun+xePSvAI/3j/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 05:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0d:bc:1b:17:ad:1e:05:d5:31:2c:4e:c3:1d:ef:92:92:1c:9e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Validity Not Before: Apr 30 00:25:48 2025 GMT Not After : May 3 05:36:48 2025 GMT Subject: CN=37D11DEE34E9ADF0A5A6EF4CE14744C121260059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:20:c0:c7:f8:ba:ea:60:0d:10:51:84:36: f3:44:18:6a:db:00:fa:b7:c4:1e:15:4c:27:28:e8: 4d:43:a6:55:8d:3c:a2:45:d2:e4:df:23:48:2d:b0: 53:8c:d5:58:33:ec:a2:61:02:e2:c0:62:a7:29:a4: 82:18:49:2d:97:14:cd:6b:e7:64:71:34:31:7e:38: 81:09:fe:44:ff:f6:c6:ee:e9:d7:61:47:0a:85:00: c2:7f:1a:1b:5d:20:65:0c:c1:cc:0f:b3:e9:c9:be: b2:c5:7c:fd:d7:df:d9:6c:61:f8:13:75:b4:35:2c: 47:7b:c3:f7:fe:a0:cc:0b:ed:d1:e5:07:30:90:d1: 41:94:b0:ab:5b:fc:b5:27:b5:9b:6a:f0:fe:32:39: a3:3b:80:36:e8:c4:f5:87:f2:9a:86:f2:67:3d:82: bf:4e:83:3a:8b:f6:16:9a:5b:23:6a:0d:28:16:f5: 70:5b:e1:04:5b:e9:36:73:1b:2b:9f:cc:30:3e:cb: 5d:e0:7c:55:2c:fb:ca:69:f1:f4:c8:be:a6:42:b4: ae:1e:f9:8f:39:fc:1d:e3:07:78:e7:9a:24:99:db: 1d:6a:d3:fa:5f:be:07:64:63:4b:ef:7f:f4:01:44: 82:7c:40:0e:aa:99:fd:70:9c:a5:8e:10:50:ad:01: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D1:1D:EE:34:E9:AD:F0:A5:A6:EF:4C:E1:47:44:C1:21:26:00:59 X509v3 Authority Key Identifier: keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:80:dd:22:d4:73:e7:03:2a:29:89:eb:ff:67:b7:a4:1b:7c: ad:a4:8e:6c:c4:57:1a:7c:8e:76:4e:08:22:a7:60:2f:06:96: 09:92:0b:99:61:98:41:35:72:d0:89:94:2f:bb:fc:b3:78:77: c2:2a:4e:11:56:42:40:30:f2:a0:df:1c:a0:41:78:45:b5:cd: 9f:c2:47:38:4e:d9:5a:f6:ae:ef:6a:33:a7:5f:20:c5:69:9a: be:0c:22:ee:52:b7:b1:9e:ac:12:73:9f:f6:1b:0f:2d:49:a7: fb:43:46:e4:c0:94:ca:bc:14:20:a2:bf:8f:51:ae:cf:56:a3: 07:9d:2b:b4:59:79:e5:98:78:1e:54:06:df:98:50:22:9f:aa: ff:57:a1:74:4c:53:fe:37:49:7b:8e:3d:1f:69:45:39:3b:87: 35:57:a3:8b:7e:c0:4e:29:0e:4d:03:db:96:ac:e6:1b:85:23: 8d:17:10:52:d6:e0:9a:65:b4:f8:a9:46:77:d7:2d:8d:cc:14: a4:f6:37:81:a5:1d:64:f3:16:c2:a5:ee:36:08:82:b4:14:e0: bd:3d:84:c5:bc:ed:c1:95:07:27:23:51:e6:9c:dc:03:7f:86: c3:59:de:4d:51:e1:fa:1c:7c:e2:fd:43:f8:d4:6a:ae:1d:6a: 52:f4:d5:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQ28GxetHgXVMSxOwx3vkpIcnhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRF RUFDQTI3MDAeFw0yNTA0MzAwMDI1NDhaFw0yNTA1MDMwNTM2NDhaMDMxMTAvBgNV BAMTKDM3RDExREVFMzRFOUFERjBBNUE2RUY0Q0UxNDc0NEMxMjEyNjAwNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyCDAx/i66mANEFGENvNEGGrb APq3xB4VTCco6E1DplWNPKJF0uTfI0gtsFOM1Vgz7KJhAuLAYqcppIIYSS2XFM1r 52RxNDF+OIEJ/kT/9sbu6ddhRwqFAMJ/GhtdIGUMwcwPs+nJvrLFfP3X39lsYfgT dbQ1LEd7w/f+oMwL7dHlBzCQ0UGUsKtb/LUntZtq8P4yOaM7gDboxPWH8pqG8mc9 gr9OgzqL9haaWyNqDSgW9XBb4QRb6TZzGyufzDA+y13gfFUs+8pp8fTIvqZCtK4e +Y85/B3jB3jnmiSZ2x1q0/pfvgdkY0vvf/QBRIJ8QA6qmf1wnKWOEFCtAWgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN9Ed7jTprfClpu9M4UdEwSEmAFkwHwYDVR0j BBgwFoAUW9NBptRq9Sz/I6XR4liUlO6sonAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTEyNzQzZC1kNTZkLTRhNzctOTBlMi1jNTJlNmRmZTA2YzIvMC81QkQzNDFBNkQ0 NkFGNTJDRkYyM0E1RDFFMjU4OTQ5NEVFQUNBMjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRFRUFD QTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0 OTRFRUFDQTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiA3SLUc+cDKimJ6/9nt6QbfK2kjmzEVxp8 jnZOCCKnYC8GlgmSC5lhmEE1ctCJlC+7/LN4d8IqThFWQkAw8qDfHKBBeEW1zZ/C RzhO2Vr2ru9qM6dfIMVpmr4MIu5St7GerBJzn/YbDy1Jp/tDRuTAlMq8FCCiv49R rs9WowedK7RZeeWYeB5UBt+YUCKfqv9XoXRMU/43SXuOPR9pRTk7hzVXo4t+wE4p Dk0D25as5huFI40XEFLW4JpltPipRnfXLY3MFKT2N4GlHWTzFsKl7jYIgrQU4L09 hMW87cGVBycjUeac3AN/hsNZ3k1R4focfOL9Q/jUaq4dalL01ao= -----END CERTIFICATE-----Generated at Wed Apr 30 05:51:22 2025 by rpki-client