$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: RFPA7gc+Mavg6GJ1RvTeRoY50M2orVK/9p/ng0eaqnY= Subject key identifier: 6C:19:87:50:69:39:8B:BB:04:BD:74:19:59:35:EB:A4:79:AC:03:53 Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 4F84E1C87EC6AD8683649E99EA30AE9C36BA6877 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 04CC Signing time: Tue 29 Apr 2025 15:21:09 +0000 Manifest this update: Tue 29 Apr 2025 15:16:09 +0000 Manifest next update: Fri 02 May 2025 23:39:09 +0000 Files and hashes: 1: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: 6ce+LBa3GICr1Mgt/xtux05v3qPiXp2ZYS6ViLVoXMc=) 2: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IG7iZEXbFHO4xLgOmo6o/7KH2TIUqm7sDNEwcVuQSOg=) 3: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: Fa98CVveelcI+HJO3M7woBWJlFtPVaqEH9ZuzJ2tHXs=) 4: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: YKqncd0MGK9keSOjjaDcdWE6AgLtsTa/4D5MWz3HJUk=) 5: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: Ydl3Ket/Eeuscy0B0YmxQqgt1TudedFNYlPQMUGcles=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 23:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:84:e1:c8:7e:c6:ad:86:83:64:9e:99:ea:30:ae:9c:36:ba:68:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Apr 29 15:16:09 2025 GMT Not After : May 2 23:39:09 2025 GMT Subject: CN=6C19875069398BBB04BD74195935EBA479AC0353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:b3:35:9c:b1:0e:ca:f8:3e:6d:a3:95:b6: d9:7b:37:bb:91:c0:c1:08:ed:3e:16:48:14:ef:61: 84:e8:59:c9:79:3f:2d:be:cf:a4:55:67:7f:1d:37: 17:eb:db:d7:ec:71:77:5e:59:3f:2d:52:8d:32:05: 8b:08:bd:6e:72:32:c1:53:31:73:b0:a4:29:f2:b7: 45:17:57:99:47:6c:d9:98:b5:63:82:e2:5c:a2:41: 65:2e:33:df:00:69:39:91:6e:7d:31:fe:b6:ec:3e: 56:63:4f:51:40:45:7d:8f:8c:50:81:54:4b:4f:73: 76:88:08:07:31:03:52:08:fa:b8:50:f7:b8:5c:f2: 9a:74:8d:94:d3:97:34:e4:51:91:94:7a:a3:33:8e: 9f:f6:64:51:62:0f:b5:8c:93:8e:35:31:c4:68:a3: 12:e1:20:71:23:59:af:f8:59:29:3a:28:cb:79:f4: 2b:cc:3e:82:62:a1:bb:fc:d1:d8:b0:b4:f4:67:db: 23:c3:3e:6c:71:24:04:cd:02:ac:5d:f8:ff:2f:88: 65:c7:b2:a1:7f:05:8e:5c:a0:1b:04:e5:2b:5f:9c: 9b:2a:1b:96:df:7f:c9:5c:b5:a8:e6:38:6a:eb:4b: 1a:f6:a4:dc:5f:0b:2c:23:b0:da:1a:f7:c6:fe:ca: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:19:87:50:69:39:8B:BB:04:BD:74:19:59:35:EB:A4:79:AC:03:53 X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:06:f5:3a:a1:b8:2e:d2:d2:ea:22:f7:9d:4e:5e:0e:94:e2: 5f:28:55:56:e2:9e:77:24:b4:d7:4c:b3:3c:2e:6f:91:11:43: e7:00:88:4e:33:98:2e:4d:4d:e7:20:5b:ac:cd:c7:15:54:2a: a8:55:2c:19:c7:68:ea:2b:e0:44:bd:68:3a:04:17:c8:e9:ac: 9e:65:fa:fe:03:fe:2d:d1:33:ed:34:a4:46:00:72:86:8e:fc: 1a:ff:8c:1c:8c:e3:cc:2f:c5:14:0b:91:eb:10:09:5a:78:73: b9:a0:10:49:8b:bc:92:93:f1:62:7a:99:00:c8:ea:78:cf:fe: 53:06:63:d2:6f:99:ab:f8:be:87:6e:84:84:b9:0b:bf:20:92: 72:67:46:bc:66:44:fc:22:66:96:1a:15:55:0c:e3:35:e7:18: 07:fb:00:2a:f8:4d:b4:6b:b1:77:ab:57:bb:25:da:28:08:ef: 6f:42:81:60:c7:0d:39:85:6c:68:0e:54:d3:1b:46:e5:13:1e: 9b:be:2a:40:61:e8:00:3d:35:f2:c3:46:0e:ff:ad:ef:ff:95: f6:cd:bb:13:01:e7:99:6b:b6:df:41:86:02:b9:7c:82:b2:aa: 31:64:d1:2f:46:ea:5f:06:35:9f:52:77:5a:17:85:b5:97:8b: db:3f:54:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4ThyH7GrYaDZJ6Z6jCunDa6aHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNTA0MjkxNTE2MDlaFw0yNTA1MDIyMzM5MDlaMDMxMTAvBgNV BAMTKDZDMTk4NzUwNjkzOThCQkIwNEJENzQxOTU5MzVFQkE0NzlBQzAzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClK7M1nLEOyvg+baOVttl7N7uR wMEI7T4WSBTvYYToWcl5Py2+z6RVZ38dNxfr29fscXdeWT8tUo0yBYsIvW5yMsFT MXOwpCnyt0UXV5lHbNmYtWOC4lyiQWUuM98AaTmRbn0x/rbsPlZjT1FARX2PjFCB VEtPc3aICAcxA1II+rhQ97hc8pp0jZTTlzTkUZGUeqMzjp/2ZFFiD7WMk441McRo oxLhIHEjWa/4WSk6KMt59CvMPoJiobv80diwtPRn2yPDPmxxJATNAqxd+P8viGXH sqF/BY5coBsE5StfnJsqG5bff8lctajmOGrrSxr2pNxfCywjsNoa98b+yod1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbBmHUGk5i7sEvXQZWTXrpHmsA1MwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkG9TqhuC7S0uoi951OXg6U4l8oVVbinnck tNdMszwub5ERQ+cAiE4zmC5NTecgW6zNxxVUKqhVLBnHaOor4ES9aDoEF8jprJ5l +v4D/i3RM+00pEYAcoaO/Br/jByM48wvxRQLkesQCVp4c7mgEEmLvJKT8WJ6mQDI 6njP/lMGY9Jvmav4voduhIS5C78gknJnRrxmRPwiZpYaFVUM4zXnGAf7ACr4TbRr sXerV7sl2igI729CgWDHDTmFbGgOVNMbRuUTHpu+KkBh6AA9NfLDRg7/re//lfbN uxMB55lrtt9BhgK5fIKyqjFk0S9G6l8GNZ9Sd1oXhbWXi9s/VPI= -----END CERTIFICATE-----Generated at Wed Apr 30 12:58:31 2025 by rpki-client