$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: QTvgD9CJhCcL4Gx4j7TukHwRh8rQnbQStz2pcsN6oZg= Subject key identifier: 79:6E:D8:DE:EC:30:74:CE:CC:98:A6:F4:6A:0E:53:D7:74:2C:88:85 Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 0EE2774E4158DC62AB3FBD87930338B299F0E94C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 019E Signing time: Mon 28 Apr 2025 11:50:42 +0000 Manifest this update: Mon 28 Apr 2025 11:45:42 +0000 Manifest next update: Thu 01 May 2025 21:01:42 +0000 Files and hashes: 1: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: MsZ/x7i5UfrhsahXtj6Ol8XnFqrRX6ZL3UkX5cB7vjc=) 2: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: wLIVJyp4gcpafGUjtFHoc9xaXGbdlSQ2XD+q+1zEqSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e2:77:4e:41:58:dc:62:ab:3f:bd:87:93:03:38:b2:99:f0:e9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Apr 28 11:45:42 2025 GMT Not After : May 1 21:01:42 2025 GMT Subject: CN=796ED8DEEC3074CECC98A6F46A0E53D7742C8885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1a:49:f3:d9:58:82:b2:48:c8:63:78:ba:24: bb:54:e8:0c:79:6c:4a:c5:84:c1:21:a9:ac:19:7a: f3:69:2d:c2:97:d0:22:31:3f:70:2f:19:85:9c:25: 8f:3b:8d:e7:97:1b:bf:82:2e:1b:79:0d:ac:1b:39: bd:2f:bc:86:5e:d1:a4:19:3c:a8:16:04:e0:b0:67: c0:54:1f:01:7c:9c:45:13:35:6a:4e:2c:f4:4a:ac: 25:ef:41:82:e8:b3:85:65:d1:1c:0c:c8:e1:94:26: e1:5f:3c:65:34:1c:b3:83:29:51:74:37:1a:fd:c2: d9:f8:48:88:9a:7e:39:0f:a4:1d:74:4b:73:b6:47: eb:c3:9b:a2:4d:88:ce:10:c5:1c:42:c9:61:04:df: ea:4f:dc:1f:6d:2f:04:43:2a:6c:ba:c3:af:d1:91: 94:06:1e:85:4c:95:92:20:87:09:47:13:f0:d0:03: ca:7d:5a:6a:06:71:ce:27:96:7b:53:41:5a:33:b1: 28:2b:a1:60:8e:9f:9c:a0:c9:d6:94:ee:94:06:c9: 3b:fb:01:1d:27:65:e4:1c:7b:2a:ba:4f:18:6f:a5: cb:d0:26:80:72:0f:f0:1c:8e:7d:d0:fc:b0:7a:e4: 6b:92:74:23:54:93:7a:8b:ba:2e:13:f1:09:13:24: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6E:D8:DE:EC:30:74:CE:CC:98:A6:F4:6A:0E:53:D7:74:2C:88:85 X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:ca:19:2f:cf:13:b4:5a:f6:31:d9:0a:0a:1c:94:88:74:ed: a0:07:2c:6a:9d:73:a5:cd:27:22:2d:21:8d:19:99:dc:59:9f: f5:9e:b4:e1:7d:e0:a8:81:ba:57:ea:8c:ed:3e:4e:23:19:54: 7e:0c:5b:19:f8:6a:d4:24:aa:72:62:7a:de:cf:89:2f:87:f5: 89:68:fc:37:04:f2:da:45:3c:d0:73:97:5e:59:b3:55:b8:bb: 29:8c:55:ed:3e:9d:2b:dc:36:c8:c2:85:d2:d4:27:5f:d2:0d: 29:b5:49:ce:12:a6:ae:35:c1:37:f6:19:be:18:58:30:d3:f6: 5a:b5:1d:f4:e8:04:93:fc:95:ae:84:5f:57:bb:56:f6:7c:fd: db:3b:26:45:8a:77:3d:1c:85:67:5e:72:32:26:3b:ea:e5:15: 05:5e:b3:53:57:f9:59:14:b2:96:09:45:23:49:94:d3:eb:e7: 43:3f:e8:3c:8f:b1:76:b3:6c:f9:5f:d7:31:39:4d:7d:e8:29: ec:6a:53:8c:73:57:47:39:9d:a6:92:a3:67:72:01:89:4f:f2: 83:b4:b7:d5:20:ac:ca:6f:17:6d:f4:d2:20:5c:7e:4c:41:2c: 72:5e:ff:a9:bc:8e:e9:d3:37:42:6d:97:f0:78:ba:39:db:3a: 7c:95:95:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuJ3TkFY3GKrP72HkwM4spnw6UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNTA0MjgxMTQ1NDJaFw0yNTA1MDEyMTAxNDJaMDMxMTAvBgNV BAMTKDc5NkVEOERFRUMzMDc0Q0VDQzk4QTZGNDZBMEU1M0Q3NzQyQzg4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Gknz2ViCskjIY3i6JLtU6Ax5 bErFhMEhqawZevNpLcKX0CIxP3AvGYWcJY87jeeXG7+CLht5DawbOb0vvIZe0aQZ PKgWBOCwZ8BUHwF8nEUTNWpOLPRKrCXvQYLos4Vl0RwMyOGUJuFfPGU0HLODKVF0 Nxr9wtn4SIiafjkPpB10S3O2R+vDm6JNiM4QxRxCyWEE3+pP3B9tLwRDKmy6w6/R kZQGHoVMlZIghwlHE/DQA8p9WmoGcc4nlntTQVozsSgroWCOn5ygydaU7pQGyTv7 AR0nZeQceyq6TxhvpcvQJoByD/Acjn3Q/LB65GuSdCNUk3qLui4T8QkTJB/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeW7Y3uwwdM7MmKb0ag5T13QsiIUwHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANrKGS/PE7Ra9jHZCgoclIh07aAHLGqdc6XN JyItIY0ZmdxZn/WetOF94KiBulfqjO0+TiMZVH4MWxn4atQkqnJiet7PiS+H9Ylo /DcE8tpFPNBzl15Zs1W4uymMVe0+nSvcNsjChdLUJ1/SDSm1Sc4Spq41wTf2Gb4Y WDDT9lq1HfToBJP8la6EX1e7VvZ8/ds7JkWKdz0chWdecjImO+rlFQVes1NX+VkU spYJRSNJlNPr50M/6DyPsXazbPlf1zE5TX3oKexqU4xzV0c5naaSo2dyAYlP8oO0 t9UgrMpvF2300iBcfkxBLHJe/6m8junTN0Jtl/B4ujnbOnyVle8= -----END CERTIFICATE-----Generated at Wed Apr 30 00:53:03 2025 by rpki-client