$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json) Hash identifier: hzeF/XNwsJLSdnqdrwjp3SbYLtQDui947REkZUUqEAw= Subject key identifier: F2:51:E6:72:6D:B2:76:01:87:5A:F5:5D:A1:A6:D7:A6:12:2C:1F:F3 Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Certificate serial: 126816A85F9D9F08163DAC9ABBDA7C72D6E16730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft Manifest number: 0243 Signing time: Wed 30 Apr 2025 00:11:26 +0000 Manifest this update: Wed 30 Apr 2025 00:06:26 +0000 Manifest next update: Sat 03 May 2025 03:41:26 +0000 Files and hashes: 1: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: IQxk+RVCCE4pKnBFAa/I+n4PlSjcG9LFvLyIRAqgipY=) 2: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: pKaQJfyqxnvGlZpWdKoBVo6EWQxhuSrdVxwh7frGUAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 03:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:68:16:a8:5f:9d:9f:08:16:3d:ac:9a:bb:da:7c:72:d6:e1:67:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Validity Not Before: Apr 30 00:06:26 2025 GMT Not After : May 3 03:41:26 2025 GMT Subject: CN=F251E6726DB27601875AF55DA1A6D7A6122C1FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:52:2e:1d:09:db:d0:ef:aa:f6:71:cd:91: f0:5a:ee:d8:9e:ea:b6:2c:5b:af:aa:30:dc:8a:fd: 69:60:92:17:f7:e3:87:e6:6b:d3:4b:94:be:f4:37: 67:06:95:62:88:77:ae:67:e9:8a:1c:4b:89:29:fb: 1a:ab:bd:d4:bc:6f:9b:fc:7f:40:3c:54:37:35:ac: 94:ce:25:42:8f:ab:e6:d9:d0:e5:f1:ec:6c:8c:3d: 72:1a:a8:b0:b7:14:bf:1f:8e:f5:f8:e6:da:06:1a: dd:4d:2d:39:11:87:ed:ad:2d:37:b0:32:fb:c5:dc: 2b:29:06:75:fb:a3:eb:8d:5e:3c:c0:60:63:e4:70: 3b:d3:53:fa:99:19:07:c0:1e:50:3c:25:79:a8:94: ee:b8:f9:eb:6b:b6:c1:63:51:9c:33:04:ff:f0:75: f9:4e:24:13:74:13:be:3c:a7:fe:0a:8e:df:c2:7f: 16:a8:cc:04:d9:0a:1f:65:d1:ac:b1:80:2f:56:21: fe:c7:58:26:1b:37:b2:36:32:66:e9:96:93:c5:26: 00:21:92:96:5d:43:69:c4:00:e8:a3:d6:a4:3d:2d: 8c:e2:3a:ff:32:8c:22:46:21:14:ef:ca:8a:49:cb: 53:d0:a6:25:8b:09:8b:44:8a:a9:e9:1e:1d:b5:66: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:51:E6:72:6D:B2:76:01:87:5A:F5:5D:A1:A6:D7:A6:12:2C:1F:F3 X509v3 Authority Key Identifier: keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ae:2e:01:e4:cb:4d:c5:09:c3:d3:b2:dc:96:0e:b3:6a:90: 76:fd:97:e9:78:1f:20:e8:4b:38:79:b1:bb:ad:80:43:17:0e: d6:fc:0c:ab:55:72:bd:33:42:a8:59:d1:1e:2c:83:39:91:86: 01:68:fe:54:84:5b:82:7e:78:cf:d8:9f:cf:82:1c:c7:54:84: 4b:ee:7f:5b:c6:6d:4d:2d:af:5e:7d:63:82:f6:6c:11:cd:2d: 7a:d5:62:90:5d:f2:9b:1f:65:c7:f5:a7:d6:31:7b:c7:23:b2: 85:a1:f0:3a:0c:7d:c3:c2:88:d8:64:14:d1:1f:73:73:50:4c: 5e:03:83:8b:fe:bc:e5:34:d0:08:42:d1:de:5a:cd:54:e8:c1: ca:ce:fe:16:f0:3b:b4:6e:00:79:e4:16:88:9e:56:d5:33:06: 31:98:8c:ed:fd:b0:d5:b4:cc:e9:89:d8:db:83:dc:15:fc:99: 77:62:a0:b8:a5:a3:46:24:43:94:d7:ae:8f:40:ac:fc:4d:82: 7f:7f:6e:84:7f:ce:b3:43:61:c8:bb:09:79:92:bc:c5:19:2f: 94:a1:a8:e6:42:96:8c:db:3d:82:a0:dd:8a:32:36:42:c6:82: a9:70:8a:ec:bb:bb:95:9a:71:d6:00:7d:31:20:72:0c:b6:a6: 11:c4:24:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmgWqF+dnwgWPayau9p8ctbhZzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC Q0NEQ0QyMTAeFw0yNTA0MzAwMDA2MjZaFw0yNTA1MDMwMzQxMjZaMDMxMTAvBgNV BAMTKEYyNTFFNjcyNkRCMjc2MDE4NzVBRjU1REExQTZEN0E2MTIyQzFGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWL1IuHQnb0O+q9nHNkfBa7tie 6rYsW6+qMNyK/Wlgkhf344fma9NLlL70N2cGlWKId65n6YocS4kp+xqrvdS8b5v8 f0A8VDc1rJTOJUKPq+bZ0OXx7GyMPXIaqLC3FL8fjvX45toGGt1NLTkRh+2tLTew MvvF3CspBnX7o+uNXjzAYGPkcDvTU/qZGQfAHlA8JXmolO64+etrtsFjUZwzBP/w dflOJBN0E748p/4Kjt/CfxaozATZCh9l0ayxgC9WIf7HWCYbN7I2MmbplpPFJgAh kpZdQ2nEAOij1qQ9LYziOv8yjCJGIRTvyopJy1PQpiWLCYtEiqnpHh21ZljFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8lHmcm2ydgGHWvVdoabXphIsH/MwHwYDVR0j BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiuLgHky03FCcPTstyWDrNqkHb9l+l4HyDo Szh5sbutgEMXDtb8DKtVcr0zQqhZ0R4sgzmRhgFo/lSEW4J+eM/Yn8+CHMdUhEvu f1vGbU0tr159Y4L2bBHNLXrVYpBd8psfZcf1p9Yxe8cjsoWh8DoMfcPCiNhkFNEf c3NQTF4Dg4v+vOU00AhC0d5azVTowcrO/hbwO7RuAHnkFoieVtUzBjGYjO39sNW0 zOmJ2NuD3BX8mXdioLilo0YkQ5TXro9ArPxNgn9/boR/zrNDYci7CXmSvMUZL5Sh qOZClozbPYKg3YoyNkLGgqlwiuy7u5WacdYAfTEgcgy2phHEJAk= -----END CERTIFICATE-----Generated at Wed Apr 30 08:16:51 2025 by rpki-client