$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: yh+DbxteMcLE/PNTVbUt3i7oRbUFHeqLT2kGfqENdG8= Subject key identifier: 95:73:DF:76:AB:B8:8A:6B:1A:32:57:64:DB:8B:15:0C:64:9D:AA:97 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 56590E65DC13A4092FFF9E897010D9220B771B25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: E2 Signing time: Fri 02 May 2025 10:40:00 +0000 Manifest this update: Fri 02 May 2025 10:35:00 +0000 Manifest next update: Mon 05 May 2025 20:27:00 +0000 Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: RQKjtTBbtcqMklbzEdLVcr1nwd6nha1CmM7Z2Q6d3j4=) 2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: ePs+7QNvRzMlIpdqEG5AJcQ/7oSXOlNvEWF18TjLRwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:59:0e:65:dc:13:a4:09:2f:ff:9e:89:70:10:d9:22:0b:77:1b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: May 2 10:35:00 2025 GMT Not After : May 5 20:27:00 2025 GMT Subject: CN=9573DF76ABB88A6B1A325764DB8B150C649DAA97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:9b:64:28:93:c0:22:f8:f7:4f:dc:f0:c7: 21:67:2d:cf:e3:d6:36:16:c7:80:d9:25:32:62:9f: db:97:c6:db:30:ab:42:28:f6:13:fd:15:a3:18:ba: 2e:3c:c5:35:a2:2e:43:6a:25:62:29:c4:8f:0c:85: 6b:02:b7:90:d7:63:62:99:6e:2d:94:26:fc:e1:ab: 81:61:12:d8:f5:1f:a1:1c:c7:96:8b:ae:70:da:d9: 8f:5d:ba:4e:b7:3d:18:70:27:c2:7f:eb:e6:3c:94: 10:a7:56:3c:0f:6b:01:04:da:06:2b:76:5d:94:f1: d1:9d:d1:83:a4:ab:6f:10:9b:f6:a5:3d:21:e8:13: b4:62:ba:fb:e1:b6:f2:74:35:1e:fd:3e:da:67:1c: d4:8c:7e:f2:55:53:7f:8a:9b:f4:b4:c2:37:16:e9: 7f:4a:75:01:79:d9:ba:ed:2c:f4:27:82:c3:66:ff: 8d:2f:01:3b:37:7c:d1:3f:15:e8:d9:e8:58:dc:4a: 4c:bc:38:69:c2:c9:1e:0b:cd:4b:95:88:69:26:63: 8e:33:df:5b:15:29:4f:07:2d:ef:99:e9:83:06:1b: 7e:46:35:d1:38:1c:68:d1:b2:b3:fe:28:bb:8f:fc: bf:f7:3a:7a:51:94:0c:8f:29:46:20:78:58:72:d6: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:73:DF:76:AB:B8:8A:6B:1A:32:57:64:DB:8B:15:0C:64:9D:AA:97 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e6:45:b8:85:d2:c0:88:8c:54:da:90:c5:40:83:66:bb:1e: 6d:b4:b7:e7:1d:2b:cb:45:32:f1:4b:97:c5:10:6f:f1:46:ee: 43:48:b6:56:31:9e:d1:81:2a:19:95:e1:4d:54:e6:04:14:aa: 0b:ee:1f:76:bb:22:4b:72:92:da:e7:94:78:ad:47:fb:68:b1: e2:91:2e:7b:6b:cd:35:e9:95:40:78:fc:90:e5:97:f9:f1:e6: 68:49:dc:ba:c4:6b:c8:61:86:44:22:d5:b7:b1:42:b8:16:38: 9e:7a:35:2a:7d:30:cc:d1:9d:86:bd:3d:38:bb:6e:f1:8f:f7: 31:79:25:b2:b8:9c:92:f2:fe:e5:1e:26:a2:f0:67:ba:a5:8f: ad:67:3b:c7:fb:b7:f1:5c:f7:43:b6:fd:ab:86:7c:71:2d:ea: 29:35:f3:7d:27:9b:3a:e1:ea:a8:a1:0b:28:c4:89:93:7f:dc: 1c:b9:51:3b:92:50:4c:43:5d:b4:51:47:9c:dd:61:0c:89:8b: 8f:32:07:88:55:ac:df:b6:5f:73:6c:16:4a:97:bf:1d:c2:ef: ac:40:b7:e8:8f:46:ea:d4:5c:ac:f4:83:ff:b9:d6:89:e3:57: b2:78:83:d1:de:22:db:e4:ba:62:d8:0b:d7:98:b8:42:84:70: 05:56:79:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlkOZdwTpAkv/56JcBDZIgt3GyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTA1MDIxMDM1MDBaFw0yNTA1MDUyMDI3MDBaMDMxMTAvBgNV BAMTKDk1NzNERjc2QUJCODhBNkIxQTMyNTc2NERCOEIxNTBDNjQ5REFBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPB5tkKJPAIvj3T9zwxyFnLc/j 1jYWx4DZJTJin9uXxtswq0Io9hP9FaMYui48xTWiLkNqJWIpxI8MhWsCt5DXY2KZ bi2UJvzhq4FhEtj1H6Ecx5aLrnDa2Y9duk63PRhwJ8J/6+Y8lBCnVjwPawEE2gYr dl2U8dGd0YOkq28Qm/alPSHoE7RiuvvhtvJ0NR79PtpnHNSMfvJVU3+Km/S0wjcW 6X9KdQF52brtLPQngsNm/40vATs3fNE/FejZ6FjcSky8OGnCyR4LzUuViGkmY44z 31sVKU8HLe+Z6YMGG35GNdE4HGjRsrP+KLuP/L/3OnpRlAyPKUYgeFhy1n6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlXPfdqu4imsaMldk24sVDGSdqpcwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbmRbiF0sCIjFTakMVAg2a7Hm20t+cdK8tF MvFLl8UQb/FG7kNItlYxntGBKhmV4U1U5gQUqgvuH3a7IktyktrnlHitR/toseKR LntrzTXplUB4/JDll/nx5mhJ3LrEa8hhhkQi1bexQrgWOJ56NSp9MMzRnYa9PTi7 bvGP9zF5JbK4nJLy/uUeJqLwZ7qlj61nO8f7t/Fc90O2/auGfHEt6ik1830nmzrh 6qihCyjEiZN/3By5UTuSUExDXbRRR5zdYQyJi48yB4hVrN+2X3NsFkqXvx3C76xA t+iPRurUXKz0g/+51onjV7J4g9HeItvkumLYC9eYuEKEcAVWeS4= -----END CERTIFICATE-----Generated at Fri May 2 13:35:34 2025 by rpki-client