$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: T0JTNlGo877UnWscBcOlriDSTvUIl4t9bd6zw4SnYeo= Subject key identifier: 99:DB:7D:25:24:C1:D1:89:4D:9F:13:94:06:4E:91:F6:90:34:DA:F8 Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 3031BCC74DFF76F7C7447161789D55CA7FF09FF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 0204 Signing time: Mon 28 Apr 2025 20:11:24 +0000 Manifest this update: Mon 28 Apr 2025 20:06:24 +0000 Manifest next update: Thu 01 May 2025 20:46:24 +0000 Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: NfTWOpBX5TEsx2AN4GNz4kZXIBLNbd1V2CGYNCmRu/U=) 2: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: iQX/vS7E3E6BfSVFnxipB5GapQhVQWSR2J5Ilds8qVA=) 3: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:31:bc:c7:4d:ff:76:f7:c7:44:71:61:78:9d:55:ca:7f:f0:9f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Apr 28 20:06:24 2025 GMT Not After : May 1 20:46:24 2025 GMT Subject: CN=99DB7D2524C1D1894D9F1394064E91F69034DAF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:0f:a4:67:cd:01:70:bd:f8:a1:ee:84:53: 94:88:b6:bc:02:16:6c:f9:14:c7:98:aa:3c:9e:07: a5:66:da:5f:d1:fa:bf:2d:ca:d6:67:91:bc:7d:e2: 89:40:c3:5f:70:a1:11:f2:e2:69:b0:dd:52:db:85: 1c:b6:8f:60:10:78:59:bc:9f:08:1b:30:32:e4:58: 06:13:a8:e1:0d:9b:fe:0a:58:09:4c:0e:1d:1c:c2: 9e:0f:86:8b:65:c8:8f:7c:ec:49:64:72:6d:4f:4e: 66:a2:8d:4c:7d:50:5b:24:51:52:a7:87:d8:a5:78: 05:a7:51:f9:fe:4d:bc:af:f5:7e:ff:f5:5b:a8:7c: f7:9f:a8:f5:82:55:f9:18:1b:1d:ea:16:d3:e6:d6: e1:07:cd:6b:af:cc:6c:55:83:c4:29:e7:88:b9:ca: 94:c9:30:82:4f:07:1d:00:04:47:4b:46:4a:4a:3c: 7f:ef:6a:69:ef:aa:1a:e4:4d:5f:af:87:c4:d6:a5: 59:63:67:90:e1:78:29:ac:3a:a1:5c:61:f4:ad:ed: da:92:f7:22:28:f7:48:e0:6f:ee:f5:b0:42:b1:a3: 70:82:5c:8b:60:5a:92:81:02:43:c4:48:1f:01:a5: 0a:30:fb:99:13:4e:48:f3:82:51:78:f0:5e:28:52: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DB:7D:25:24:C1:D1:89:4D:9F:13:94:06:4E:91:F6:90:34:DA:F8 X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7f:20:e0:81:2e:e5:d2:5e:68:15:22:54:ed:2c:8e:3b:86: fc:12:3d:0b:9c:09:34:62:1a:ff:aa:b6:05:1d:4c:70:d3:65: 8d:5e:43:ea:6f:21:81:01:37:ef:fb:6a:d0:f9:0a:b1:e9:0d: cb:07:c9:61:c7:37:24:bf:2c:7b:33:ff:bb:4e:1d:51:5e:d1: a9:cf:8d:4d:90:cf:df:9e:89:88:8e:7e:2e:7a:b2:b4:96:f9: 9e:8b:28:02:42:6a:ed:bc:cc:40:01:86:a7:f3:9d:2e:8f:fa: fd:65:8f:98:87:48:e4:a0:d5:77:28:22:83:d9:1f:1b:d3:4c: b5:b3:78:5e:69:16:04:eb:e5:60:29:59:00:19:55:58:4a:46: 5f:df:78:9d:73:f1:f2:b9:5a:7a:b7:f4:55:0f:a8:e2:fe:b4: 60:67:06:b5:fc:30:6e:d7:fa:bd:a4:af:c8:53:1c:57:9b:59: 3a:5e:1b:07:75:5a:73:91:97:89:7e:21:60:dc:0f:32:0b:86: e6:66:50:ed:97:c7:5f:ac:1d:95:bb:0b:96:ec:d2:df:96:8b: 45:06:8e:2b:58:9e:9c:58:f1:a1:0f:c7:62:73:a2:1b:e6:a3: 95:cc:66:f5:48:b6:85:26:c4:8f:b9:4f:2a:d3:01:4e:eb:ab: ef:95:7f:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDG8x03/dvfHRHFheJ1Vyn/wn/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTA0MjgyMDA2MjRaFw0yNTA1MDEyMDQ2MjRaMDMxMTAvBgNV BAMTKDk5REI3RDI1MjRDMUQxODk0RDlGMTM5NDA2NEU5MUY2OTAzNERBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYg+kZ80BcL34oe6EU5SItrwC Fmz5FMeYqjyeB6Vm2l/R+r8tytZnkbx94olAw19woRHy4mmw3VLbhRy2j2AQeFm8 nwgbMDLkWAYTqOENm/4KWAlMDh0cwp4PhotlyI987Elkcm1PTmaijUx9UFskUVKn h9ileAWnUfn+Tbyv9X7/9VuofPefqPWCVfkYGx3qFtPm1uEHzWuvzGxVg8Qp54i5 ypTJMIJPBx0ABEdLRkpKPH/vamnvqhrkTV+vh8TWpVljZ5DheCmsOqFcYfSt7dqS 9yIo90jgb+71sEKxo3CCXItgWpKBAkPESB8BpQow+5kTTkjzglF48F4oUvw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmdt9JSTB0YlNnxOUBk6R9pA02vgwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt/IOCBLuXSXmgVIlTtLI47hvwSPQucCTRi Gv+qtgUdTHDTZY1eQ+pvIYEBN+/7atD5CrHpDcsHyWHHNyS/LHsz/7tOHVFe0anP jU2Qz9+eiYiOfi56srSW+Z6LKAJCau28zEABhqfznS6P+v1lj5iHSOSg1XcoIoPZ HxvTTLWzeF5pFgTr5WApWQAZVVhKRl/feJ1z8fK5Wnq39FUPqOL+tGBnBrX8MG7X +r2kr8hTHFebWTpeGwd1WnORl4l+IWDcDzILhuZmUO2Xx1+sHZW7C5bs0t+Wi0UG jitYnpxY8aEPx2Jzohvmo5XMZvVItoUmxI+5TyrTAU7rq++Vf8E= -----END CERTIFICATE-----Generated at Wed Apr 30 14:59:47 2025 by rpki-client