$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: XotHUyN8S013i5BenMB2xnRzZ27MQuuaSEYs4r1e7r8= Subject key identifier: B9:F0:CF:E2:2C:1A:8B:CF:E4:AA:CB:C5:C4:A2:EB:72:A3:6D:D2:8F Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 2C79344B6B51E933AAE5F8700B21EBC6C363F6C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 01A6 Signing time: Mon 28 Apr 2025 10:01:45 +0000 Manifest this update: Mon 28 Apr 2025 09:56:45 +0000 Manifest next update: Thu 01 May 2025 13:26:45 +0000 Files and hashes: 1: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: SJWCctw3wDy04eyr8uGtaxTxeDcgqn25/ejSSAcBCus=) 2: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: FWA352yECq0A3hL3OB6IXNf80RRCicf4aAVhpBx4QdA=) 3: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: ECBhF+e4+If0A3tMP/p9517WUpUqU+SxVkyIhiuFLnc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:79:34:4b:6b:51:e9:33:aa:e5:f8:70:0b:21:eb:c6:c3:63:f6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Apr 28 09:56:45 2025 GMT Not After : May 1 13:26:45 2025 GMT Subject: CN=B9F0CFE22C1A8BCFE4AACBC5C4A2EB72A36DD28F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:a2:38:7e:c8:fc:20:b1:bb:7d:4f:55:ce: a9:4f:06:38:64:39:b3:29:1d:15:80:79:1f:4a:4c: 37:18:80:6d:d0:a4:46:3e:05:7c:3f:70:ed:47:9a: 98:de:ae:54:3e:b2:76:04:44:66:b9:3f:0d:a6:84: 8c:d9:ee:a4:4e:c3:e3:c9:57:d0:5e:3b:af:5b:9d: da:6d:0e:ae:b1:fa:a2:1c:c5:27:eb:4d:52:9c:cf: 7d:a0:7b:c5:c5:fd:90:71:63:0d:58:df:f7:78:20: c7:5a:4e:0e:93:1a:c5:94:a7:aa:eb:ae:b6:a3:70: 20:1e:dd:32:4f:a0:ef:ed:0c:da:b9:9e:08:e5:c4: f6:62:97:ce:55:e7:2e:a1:ca:7d:05:31:50:d1:56: f8:70:ce:75:7c:5f:d8:02:2c:d6:69:15:1a:6b:f8: 6a:ab:6a:8e:1e:a9:3e:ed:46:f5:b5:e7:6f:8c:e6: f7:67:c7:f7:b1:f1:f1:09:98:c9:87:56:4d:a1:7c: 57:02:45:b6:ba:66:c4:ea:f0:d3:9c:3b:3b:c9:39: f0:0c:8c:57:fe:87:b8:a2:86:47:32:72:f7:c5:a4: 60:cb:2e:1e:5c:40:2a:a8:9f:02:09:9d:0c:2a:5f: 14:98:c9:7d:f5:df:f3:6d:53:73:51:09:a2:78:15: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F0:CF:E2:2C:1A:8B:CF:E4:AA:CB:C5:C4:A2:EB:72:A3:6D:D2:8F X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9d:0a:5c:ae:2d:0e:5d:16:a8:a8:aa:a7:0a:50:d0:a7:fe: 61:d2:ea:e1:f0:5e:35:b9:e9:67:a0:d8:f2:d4:ef:cd:f2:fa: 21:86:89:59:5c:72:ee:5f:ba:5e:33:d0:e9:fe:a9:8f:5f:67: 4a:e6:aa:96:83:0b:94:c3:27:c2:4c:36:ce:3f:7d:fa:88:99: 7d:07:bc:99:6b:eb:ba:87:30:03:cf:e5:0b:4d:2c:88:cd:01: e4:52:87:3d:7b:39:46:0f:7f:be:1d:c5:b6:05:52:79:bc:b5: e8:04:14:4a:f3:21:6f:87:f5:a3:f1:46:e8:bc:bd:3f:18:a1: 84:c2:8e:e0:63:6a:f4:6b:b6:da:fc:39:79:63:4d:84:09:36: 68:26:2a:d4:1c:80:a5:5f:83:63:27:1c:4a:fb:53:b9:5c:ec: bd:70:38:47:40:e7:28:f7:c9:53:2f:9f:7c:20:a0:5d:c1:9c: c6:37:8d:79:38:48:66:f3:73:0f:ff:d0:7f:67:eb:e3:96:31: 3a:ea:ef:b3:45:17:52:bd:24:31:c3:ac:e5:52:bf:99:3c:80: 81:90:b1:ce:ec:2a:8d:d0:6f:b0:17:b7:38:05:2b:79:58:a7: 0d:d4:94:2e:ef:2d:2b:cc:64:5e:3a:c1:33:84:b1:b0:80:41: cd:50:68:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHk0S2tR6TOq5fhwCyHrxsNj9sgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTA0MjgwOTU2NDVaFw0yNTA1MDExMzI2NDVaMDMxMTAvBgNV BAMTKEI5RjBDRkUyMkMxQThCQ0ZFNEFBQ0JDNUM0QTJFQjcyQTM2REQyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpzqI4fsj8ILG7fU9VzqlPBjhk ObMpHRWAeR9KTDcYgG3QpEY+BXw/cO1HmpjerlQ+snYERGa5Pw2mhIzZ7qROw+PJ V9BeO69bndptDq6x+qIcxSfrTVKcz32ge8XF/ZBxYw1Y3/d4IMdaTg6TGsWUp6rr rrajcCAe3TJPoO/tDNq5ngjlxPZil85V5y6hyn0FMVDRVvhwznV8X9gCLNZpFRpr +Gqrao4eqT7tRvW152+M5vdnx/ex8fEJmMmHVk2hfFcCRba6ZsTq8NOcOzvJOfAM jFf+h7iihkcycvfFpGDLLh5cQCqonwIJnQwqXxSYyX313/NtU3NRCaJ4Fa5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUufDP4iwai8/kqsvFxKLrcqNt0o8wHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJydClyuLQ5dFqioqqcKUNCn/mHS6uHwXjW5 6Weg2PLU783y+iGGiVlccu5ful4z0On+qY9fZ0rmqpaDC5TDJ8JMNs4/ffqImX0H vJlr67qHMAPP5QtNLIjNAeRShz17OUYPf74dxbYFUnm8tegEFErzIW+H9aPxRui8 vT8YoYTCjuBjavRrttr8OXljTYQJNmgmKtQcgKVfg2MnHEr7U7lc7L1wOEdA5yj3 yVMvn3wgoF3BnMY3jXk4SGbzcw//0H9n6+OWMTrq77NFF1K9JDHDrOVSv5k8gIGQ sc7sKo3Qb7AXtzgFK3lYpw3UlC7vLSvMZF46wTOEsbCAQc1QaAY= -----END CERTIFICATE-----Generated at Wed Apr 30 03:42:51 2025 by rpki-client