$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json) Hash identifier: +vv9loplKS4QcD+Q8annoL+VEkAH/8l4yVy6CeBVBMg= Subject key identifier: 5D:2D:9B:24:40:67:BF:15:AA:A4:E4:9D:50:88:51:A6:D0:D9:21:54 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 0A4D79CF5C5B4C6E28B2D6AB0E8B7D6322E178F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft Manifest number: 6E Signing time: Mon 28 Apr 2025 05:00:04 +0000 Manifest this update: Mon 28 Apr 2025 04:55:04 +0000 Manifest next update: Thu 01 May 2025 16:35:04 +0000 Files and hashes: 1: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: 4xRmQ3IezaAEYdv/4EwPEa2ixRBOoiX+ESsZ9oZlF6g=) 2: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: Y3pOvFfrtyRbRGGWe5RbSl3GyhFyt942LzAk5FIpr9c=) 3: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: /agLGw0c81cHF8Topn/a9INtTEJnrvSh7/oHynB8qR0=) 4: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: gP8KkxonLoqcx7KZvnUv3ivtnAxFYtDlgM/zAdFC+W8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4d:79:cf:5c:5b:4c:6e:28:b2:d6:ab:0e:8b:7d:63:22:e1:78:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Apr 28 04:55:04 2025 GMT Not After : May 1 16:35:04 2025 GMT Subject: CN=5D2D9B244067BF15AAA4E49D508851A6D0D92154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:6c:d3:50:2c:0c:75:7a:ca:6f:70:60:dd: 6e:d3:41:c9:61:c6:24:72:a8:62:98:a2:77:8d:aa: 83:6b:d6:59:2f:bc:a7:0c:1e:37:ea:e4:2a:22:95: e8:69:19:81:1e:40:cf:3e:29:e8:3c:1b:ae:13:60: 59:b8:8d:39:63:93:58:5b:81:ba:d0:91:84:f1:3c: 82:8f:53:22:87:93:42:bd:dd:8e:e1:eb:41:c3:52: de:b3:45:ed:f9:84:07:c4:fe:a8:76:60:5c:a8:ea: 54:5b:ea:f1:6a:c3:e1:7d:8e:f5:6e:4a:2a:2b:89: b1:b5:6e:18:bb:48:78:d7:aa:dc:df:b7:8f:1c:56: 9d:94:b9:5b:63:ab:ef:85:b2:f2:6b:95:93:5e:5c: b1:5a:bb:56:31:d9:cf:58:09:9b:28:c8:1d:22:1a: aa:3d:1f:ca:64:91:98:22:ac:b7:a9:26:ee:1e:c5: 8a:79:46:5f:b9:87:3e:07:a9:17:14:1e:8f:c3:48: 73:83:cd:ec:9f:06:7e:43:c4:10:64:43:fd:df:5b: 98:e1:57:b3:1f:ca:e5:d0:41:ed:b9:df:85:1a:30: 15:64:ec:d8:5a:b3:25:60:83:ac:2d:6d:72:0b:c5: d7:53:70:8d:82:1a:0a:ba:2d:1a:c9:7e:d1:23:45: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2D:9B:24:40:67:BF:15:AA:A4:E4:9D:50:88:51:A6:D0:D9:21:54 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:42:25:2e:b0:95:24:af:71:05:37:a1:d8:c1:a3:91:cb:ae: e6:2e:7a:03:7a:e8:07:1d:cd:0b:de:fc:c0:ec:8a:46:70:eb: f4:1a:c6:e2:a7:64:6a:b9:33:18:76:47:2a:f3:59:51:18:e7: aa:4f:2c:2e:e3:5a:81:6c:57:21:ee:0e:c1:63:e4:fe:50:24: 5d:6f:5b:bd:63:b5:1e:38:d6:b2:4c:12:79:7a:e9:f0:2d:aa: 01:2c:ae:3b:0e:4e:34:70:93:9a:e7:06:85:c3:e0:96:d2:17: c1:29:9d:9c:dd:b7:55:68:69:c1:b7:9a:11:73:59:e6:bf:77: a0:8d:da:39:a6:86:98:0a:5a:30:a7:de:69:f1:8c:33:c9:8d: fb:03:db:21:60:38:56:31:df:c2:de:ee:e1:e9:cb:6d:43:40: ac:ff:5d:1e:07:c8:a7:e8:b0:f7:3f:d7:1d:38:31:3e:23:f2: c0:2c:3b:46:3c:14:4b:a2:af:68:d3:5e:37:08:88:50:1d:70: 59:5f:12:48:a5:6c:ea:44:04:bc:5b:de:7d:22:64:9b:c8:8a: f1:e8:67:ad:b1:f1:85:33:08:a9:19:d9:69:10:70:84:b9:a1: cc:1c:66:32:04:ac:13:c9:5c:80:a6:1a:b7:eb:68:62:e6:09: 74:c8:f2:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCk15z1xbTG4ostarDot9YyLhePUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNTA0MjgwNDU1MDRaFw0yNTA1MDExNjM1MDRaMDMxMTAvBgNV BAMTKDVEMkQ5QjI0NDA2N0JGMTVBQUE0RTQ5RDUwODg1MUE2RDBEOTIxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQGzTUCwMdXrKb3Bg3W7TQclh xiRyqGKYoneNqoNr1lkvvKcMHjfq5CoilehpGYEeQM8+Keg8G64TYFm4jTljk1hb gbrQkYTxPIKPUyKHk0K93Y7h60HDUt6zRe35hAfE/qh2YFyo6lRb6vFqw+F9jvVu SioribG1bhi7SHjXqtzft48cVp2UuVtjq++FsvJrlZNeXLFau1Yx2c9YCZsoyB0i Gqo9H8pkkZgirLepJu4exYp5Rl+5hz4HqRcUHo/DSHODzeyfBn5DxBBkQ/3fW5jh V7MfyuXQQe2534UaMBVk7NhasyVgg6wtbXILxddTcI2CGgq6LRrJftEjRetjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXS2bJEBnvxWqpOSdUIhRptDZIVQwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxCJS6wlSSvcQU3odjBo5HLruYuegN66Acd zQve/MDsikZw6/QaxuKnZGq5Mxh2RyrzWVEY56pPLC7jWoFsVyHuDsFj5P5QJF1v W71jtR441rJMEnl66fAtqgEsrjsOTjRwk5rnBoXD4JbSF8EpnZzdt1VoacG3mhFz Wea/d6CN2jmmhpgKWjCn3mnxjDPJjfsD2yFgOFYx38Le7uHpy21DQKz/XR4HyKfo sPc/1x04MT4j8sAsO0Y8FEuir2jTXjcIiFAdcFlfEkilbOpEBLxb3n0iZJvIivHo Z62x8YUzCKkZ2WkQcIS5ocwcZjIErBPJXICmGrfraGLmCXTI8mw= -----END CERTIFICATE-----Generated at Wed Apr 30 05:52:27 2025 by rpki-client