$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: dfyLR0Ia/bKUnFj7VighvLYL3yJ4ySg0JyE9PxlA8/4= Subject key identifier: 66:73:F3:94:34:8B:B9:E4:63:6F:36:58:29:CA:2F:40:C3:CF:2D:3C Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 4854C75538E580782ECC85132FC92A185DFBCA7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 7C Signing time: Sun 27 Apr 2025 11:11:52 +0000 Manifest this update: Sun 27 Apr 2025 11:06:52 +0000 Manifest next update: Wed 30 Apr 2025 15:57:52 +0000 Files and hashes: 1: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: IYlIkK9ZMSP7xUAGZ1Am2ZgHJrv4HQzXJImTEhZj1s8=) 2: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: 1rDwKTxvcpdi8tV17MUkr52QPvKTk/1fU2EMgf7NmlQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:54:c7:55:38:e5:80:78:2e:cc:85:13:2f:c9:2a:18:5d:fb:ca:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Apr 27 11:06:52 2025 GMT Not After : Apr 30 15:57:52 2025 GMT Subject: CN=6673F394348BB9E4636F365829CA2F40C3CF2D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:a4:57:bf:e6:cc:a7:f8:99:f6:58:ce:8f: 9d:0f:26:00:38:17:eb:b7:00:09:3c:80:8c:ac:44: bd:e9:a3:64:71:cd:9d:c4:4d:28:32:ae:91:02:c9: cb:4e:66:e9:72:08:1c:57:a3:a1:7f:c6:8e:f4:b3: 02:fb:30:c0:55:c3:b7:3c:9f:1c:a1:34:07:5d:e4: 41:af:a2:70:ab:a5:56:26:54:b8:0c:86:e9:96:9f: 1b:0e:a7:34:11:f3:1d:fc:c2:2b:70:71:4a:25:82: af:34:98:56:fa:4e:3f:87:ed:d6:a5:84:fa:99:d0: 95:b0:9d:d1:db:d8:ee:6b:b5:89:5a:f2:3c:6e:ae: d7:64:6d:8d:99:11:46:58:d2:4f:7e:ad:62:b4:03: ef:43:1f:60:92:b3:fb:c1:1a:2b:32:2c:d2:92:e8: 3b:0d:87:eb:8a:63:ed:5e:6b:cc:d1:1b:2e:9e:81: b5:72:a9:40:b4:ec:b1:8f:e5:36:62:d9:59:e6:9c: e0:1e:69:ba:66:25:3e:47:aa:e6:b1:4a:13:fb:30: 6d:1b:2e:29:5a:5f:f9:b4:25:a2:77:5a:34:da:3f: 57:f9:c6:9c:6f:29:db:d7:5f:ad:be:bc:fd:59:99: 9d:ac:0c:6c:ac:8a:83:b3:20:44:e5:4d:76:e1:2d: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:73:F3:94:34:8B:B9:E4:63:6F:36:58:29:CA:2F:40:C3:CF:2D:3C X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:41:c4:15:90:a6:92:3b:b5:85:83:a5:eb:6a:d7:fb:50:b3: d0:85:42:13:1b:2a:32:f0:17:03:b7:33:5b:de:dc:cb:ea:f5: 1b:9a:28:5b:8e:4d:78:4c:aa:37:f9:e3:34:ea:5d:ee:29:e5: 4a:1d:b0:2f:be:96:5f:26:eb:1f:c9:bd:37:ab:41:f4:97:91: 1e:df:58:e2:aa:58:24:65:91:fb:5b:85:82:4e:ae:75:d6:db: d3:e8:7c:3d:c8:25:a0:27:ad:a4:09:60:eb:f1:4a:34:e1:98: 6c:8d:2f:35:44:d9:83:cd:82:ed:c0:6a:b9:c6:b7:ef:d4:9b: b0:5e:e9:bf:94:b2:f4:b2:ea:76:40:99:6a:2d:0c:0b:1d:ba: f4:65:f2:e0:3b:e2:6d:90:a2:67:3f:e0:48:ff:9e:d8:0b:9e: 5a:27:94:07:05:ae:b9:24:9f:9e:ee:63:2c:f2:3e:9e:a0:af: 6c:c0:ee:da:e6:60:83:89:76:82:5c:b0:9d:eb:0a:00:a2:c2: 44:66:2c:e8:5f:9d:48:e9:e0:c2:c4:02:84:5b:25:90:d3:29: cd:6c:10:37:60:c2:18:b3:de:83:f2:2b:76:13:59:02:9f:95: 0f:4d:c3:7b:2a:e0:95:fb:55:ca:51:99:d6:5f:d0:de:c8:5a: 26:e3:29:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFTHVTjlgHguzIUTL8kqGF37yn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTA0MjcxMTA2NTJaFw0yNTA0MzAxNTU3NTJaMDMxMTAvBgNV BAMTKDY2NzNGMzk0MzQ4QkI5RTQ2MzZGMzY1ODI5Q0EyRjQwQzNDRjJEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgaaRXv+bMp/iZ9ljOj50PJgA4 F+u3AAk8gIysRL3po2RxzZ3ETSgyrpECyctOZulyCBxXo6F/xo70swL7MMBVw7c8 nxyhNAdd5EGvonCrpVYmVLgMhumWnxsOpzQR8x38witwcUolgq80mFb6Tj+H7dal hPqZ0JWwndHb2O5rtYla8jxurtdkbY2ZEUZY0k9+rWK0A+9DH2CSs/vBGisyLNKS 6DsNh+uKY+1ea8zRGy6egbVyqUC07LGP5TZi2VnmnOAeabpmJT5HquaxShP7MG0b LilaX/m0JaJ3WjTaP1f5xpxvKdvXX62+vP1ZmZ2sDGysioOzIETlTXbhLaA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZnPzlDSLueRjbzZYKcovQMPPLTwwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtBxBWQppI7tYWDpetq1/tQs9CFQhMbKjLw FwO3M1ve3Mvq9RuaKFuOTXhMqjf54zTqXe4p5UodsC++ll8m6x/JvTerQfSXkR7f WOKqWCRlkftbhYJOrnXW29PofD3IJaAnraQJYOvxSjThmGyNLzVE2YPNgu3AarnG t+/Um7Be6b+UsvSy6nZAmWotDAsduvRl8uA74m2Qomc/4Ej/ntgLnlonlAcFrrkk n57uYyzyPp6gr2zA7trmYIOJdoJcsJ3rCgCiwkRmLOhfnUjp4MLEAoRbJZDTKc1s EDdgwhiz3oPyK3YTWQKflQ9Nw3sq4JX7VcpRmdZf0N7IWibjKRA= -----END CERTIFICATE-----Generated at Tue Apr 29 16:16:33 2025 by rpki-client