$ rpki-client -vvf repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft File: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft (raw, json) Hash identifier: WZem7VpEeaCE95QJc7u09NO8gg50+PGygyPxP23WnBw= Subject key identifier: CC:AB:9A:2B:D5:A0:51:16:13:62:E0:C5:A0:9D:DC:85:C3:63:4F:BA Authority key identifier: 5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E Certificate issuer: /CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Certificate serial: 60D3E29207F9D8E77AC4B3021595EEBF1D130651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft Manifest number: 01F0 Signing time: Tue 29 Apr 2025 11:21:42 +0000 Manifest this update: Tue 29 Apr 2025 11:16:42 +0000 Manifest next update: Fri 02 May 2025 20:53:42 +0000 Files and hashes: 1: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: IbiWK5270mwHrnB6XT0JomBYqQc1q1mQYDwwzYu+Fp8=) 2: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl (hash: dbLEb2O9Qp4Tvvz65TICRlwwvlGIL4TB3bEO89fndC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 20:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d3:e2:92:07:f9:d8:e7:7a:c4:b3:02:15:95:ee:bf:1d:13:06:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Validity Not Before: Apr 29 11:16:42 2025 GMT Not After : May 2 20:53:42 2025 GMT Subject: CN=CCAB9A2BD5A051161362E0C5A09DDC85C3634FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:c7:4d:e3:a6:b6:14:1c:c2:f6:ca:1f:b5: fd:65:42:5c:f4:b1:1f:75:84:56:cf:ee:35:63:8e: 9e:1c:39:ce:e7:7e:ff:9f:fe:24:a7:c8:93:93:15: c8:1a:38:90:77:fc:58:08:26:e4:e9:e6:af:fc:fe: 84:80:d8:6a:18:99:4b:83:1d:61:a6:67:cf:f4:a8: b0:8f:76:1c:b8:c9:60:a8:d0:6c:39:8b:54:dc:37: dd:f9:0f:a3:89:91:66:08:b8:89:4e:b6:07:45:de: 25:ab:06:6c:9f:12:6e:2a:2f:67:8b:e0:82:03:dd: ea:dd:6a:0f:3b:a1:8a:42:cf:17:00:eb:db:32:62: f9:24:50:59:aa:c0:9b:51:a5:8c:c2:83:0d:7f:ee: f3:6b:53:e7:24:64:8f:81:40:3f:3c:2a:bf:c2:07: 48:47:af:61:6a:d6:8c:c7:27:76:9a:b2:50:94:7c: 8a:30:a9:6d:2a:b8:80:4c:3a:ba:c0:40:7a:6f:2a: 86:80:8c:84:e0:75:43:6c:4e:a7:31:3a:b6:15:fa: b5:44:6d:af:5f:d3:13:2c:2d:38:11:ac:43:b1:33: af:d4:bd:17:f0:3a:a3:7c:48:5c:f1:e2:10:43:ed: 5a:bc:80:12:e4:ed:c3:3f:5f:7d:23:7a:73:87:91: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AB:9A:2B:D5:A0:51:16:13:62:E0:C5:A0:9D:DC:85:C3:63:4F:BA X509v3 Authority Key Identifier: keyid:5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8c:b7:64:94:88:7f:b8:53:96:e6:03:2c:d1:61:d7:74:4c: 79:b0:ee:52:a2:2a:fb:49:34:cf:2a:9f:d5:9e:10:7f:0e:4d: 11:31:46:92:a2:88:77:8f:47:34:0a:32:cd:a4:f7:63:7e:22: 79:9b:0a:c4:ba:5d:cb:c0:a2:5c:ab:7c:ac:f5:6d:e4:2f:a7: 04:f3:8f:d6:9e:8b:4d:81:9c:ff:5f:73:89:f0:45:f3:8b:97: ea:4f:7d:25:c7:82:3a:0d:df:aa:7e:49:8e:06:2e:9f:1b:0f: 27:87:5e:ae:05:34:76:03:a2:f0:50:48:e4:31:e2:af:25:23: 14:c3:a5:bd:dd:93:f2:86:a5:e3:71:13:12:99:30:4a:6d:69: 4a:fc:41:09:ab:1d:ff:3a:76:7b:80:98:0a:ae:b8:c6:a3:ae: a9:02:ec:1e:86:c5:ae:1b:89:75:47:b2:2f:74:f5:a8:e7:7c: 77:e0:8a:d6:42:50:eb:51:b2:66:9e:00:36:21:56:34:1c:1e: a2:f9:84:58:5d:c8:02:5d:d3:0f:ce:f9:8f:57:14:8e:15:b8: 34:df:a8:5e:2b:aa:59:ee:08:cd:23:c3:e1:59:59:f5:86:4d: c6:ab:63:d7:2b:39:00:ff:79:92:b7:77:40:45:1d:e9:51:9f: ba:ed:26:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNPikgf52Od6xLMCFZXuvx0TBlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2 MENDMDk0RTAeFw0yNTA0MjkxMTE2NDJaFw0yNTA1MDIyMDUzNDJaMDMxMTAvBgNV BAMTKENDQUI5QTJCRDVBMDUxMTYxMzYyRTBDNUEwOUREQzg1QzM2MzRGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZsdN46a2FBzC9softf1lQlz0 sR91hFbP7jVjjp4cOc7nfv+f/iSnyJOTFcgaOJB3/FgIJuTp5q/8/oSA2GoYmUuD HWGmZ8/0qLCPdhy4yWCo0Gw5i1TcN935D6OJkWYIuIlOtgdF3iWrBmyfEm4qL2eL 4IID3erdag87oYpCzxcA69syYvkkUFmqwJtRpYzCgw1/7vNrU+ckZI+BQD88Kr/C B0hHr2Fq1ozHJ3aaslCUfIowqW0quIBMOrrAQHpvKoaAjITgdUNsTqcxOrYV+rVE ba9f0xMsLTgRrEOxM6/UvRfwOqN8SFzx4hBD7Vq8gBLk7cM/X30jenOHkT4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzKuaK9WgURYTYuDFoJ3chcNjT7owHwYDVR0j BBgwFoAUWmsUKKhyONydqbkokOHJv2DMCU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODZkZjc5MS0wMDc5LTQ1ZjYtYWE5My00YzNhMjQzMDVkODUvMC81QTZCMTQyOEE4 NzIzOERDOURBOUI5Mjg5MEUxQzlCRjYwQ0MwOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2MEND MDk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg2ZGY3OTEtMDA3OS00NWY2LWFh OTMtNGMzYTI0MzA1ZDg1LzAvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5 QkY2MENDMDk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICMt2SUiH+4U5bmAyzRYdd0THmw7lKiKvtJ NM8qn9WeEH8OTRExRpKiiHePRzQKMs2k92N+InmbCsS6XcvAolyrfKz1beQvpwTz j9aei02BnP9fc4nwRfOLl+pPfSXHgjoN36p+SY4GLp8bDyeHXq4FNHYDovBQSOQx 4q8lIxTDpb3dk/KGpeNxExKZMEptaUr8QQmrHf86dnuAmAquuMajrqkC7B6Gxa4b iXVHsi909ajnfHfgitZCUOtRsmaeADYhVjQcHqL5hFhdyAJd0w/O+Y9XFI4VuDTf qF4rqlnuCM0jw+FZWfWGTcarY9crOQD/eZK3d0BFHelRn7rtJvE= -----END CERTIFICATE-----Generated at Thu May 1 05:18:46 2025 by rpki-client