$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: Fbv8RryZ9JFxbtPPYpqXbozpkYPZJAah5XelvjtvPUg= Subject key identifier: 35:69:90:89:27:E4:CF:3F:AC:01:06:26:88:BB:1B:EF:5E:6D:03:BE Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 528EB45BE063B4EF767D3A98E8869D0D6DD983F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: 92 Signing time: Sun 27 Apr 2025 05:01:03 +0000 Manifest this update: Sun 27 Apr 2025 04:56:03 +0000 Manifest next update: Wed 30 Apr 2025 11:34:03 +0000 Files and hashes: 1: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: EMGBPPTZSWsAU9Z6ElfbXucBbhYl9OvV4tpP9nmJeZo=) 2: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: gSJ2Tpcz5FhfuBqS7hiPJe0IxJ/V2JVqcWy8oWyRZN0=) 3: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: cfFwjwKwPSy9Kh5E8D6UCcsgslEuVvz1uyywz0zfoJw=) 4: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: 4VRZi1K7JmUX+mY4PjGbZVJq7hsS2Sqman/3Bm5DdSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 11:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:8e:b4:5b:e0:63:b4:ef:76:7d:3a:98:e8:86:9d:0d:6d:d9:83:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Apr 27 04:56:03 2025 GMT Not After : Apr 30 11:34:03 2025 GMT Subject: CN=3569908927E4CF3FAC01062688BB1BEF5E6D03BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:e3:84:8d:f0:d3:a4:12:dc:6a:d8:bd:cf: 53:33:cf:58:c8:3b:61:14:62:0f:b0:30:45:55:a9: 7b:45:76:9d:6e:28:5a:66:63:23:36:05:d7:b8:64: 86:f4:e4:20:09:08:4e:cb:6b:59:a9:78:14:67:37: e4:4b:d3:f3:e8:c3:eb:66:4b:2a:85:95:b7:07:4a: 4b:ed:93:11:bd:32:0b:94:4c:b5:07:8d:75:2a:5d: e9:6b:37:88:c5:92:7b:a6:c3:a4:97:42:be:57:4e: 15:c5:d8:1f:f6:ca:1d:fc:b7:7b:7b:20:3e:dd:47: 6a:9a:f8:a2:53:2d:00:49:a6:38:61:23:13:36:fd: 78:94:72:10:4e:88:f3:d3:b4:53:98:6f:10:a3:f2: a9:12:e5:4e:0a:0f:03:20:a7:86:04:52:7f:b7:dc: c4:05:fc:e8:2f:c1:c5:b5:e5:f0:c0:1a:88:81:fe: f8:e2:1e:89:85:d8:56:6b:1e:1e:3e:56:26:c1:37: 9a:47:4b:db:3e:f9:f8:e3:8b:23:36:9e:a3:90:60: be:ea:70:a0:29:cf:cc:43:ed:1d:27:d3:34:66:e7: 27:de:76:f1:59:e6:ac:23:34:a7:8f:09:f7:9f:66: 14:96:6e:22:24:8d:99:4d:ea:56:38:3d:f2:74:b6: 90:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:69:90:89:27:E4:CF:3F:AC:01:06:26:88:BB:1B:EF:5E:6D:03:BE X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d1:54:6d:b2:d0:62:4c:63:f9:de:0e:91:d6:eb:52:5f:6d: be:b3:af:0d:e1:e3:55:0d:64:da:bb:85:18:66:41:bc:bf:61: 90:c0:b0:58:40:26:6a:89:40:6e:c0:1e:1a:ba:a9:cf:e7:db: 40:dd:2b:c5:0e:bd:07:af:80:5a:fb:7d:f5:4e:7f:4d:14:2b: d5:c6:28:96:ea:cc:b9:59:29:dc:1c:d6:ea:1a:fe:db:8e:87: a3:1f:10:ab:a7:b8:6b:f2:85:db:20:a2:d3:a8:81:54:cd:1c: 55:88:70:ce:25:08:50:11:d2:3a:97:3c:85:27:89:2b:2c:67: 8b:62:50:df:ed:45:40:69:b3:de:11:2a:68:c7:fd:f2:14:00: c1:81:24:75:ae:55:a0:55:72:2a:d9:36:c2:68:22:0e:95:d3: ca:71:1b:1a:d3:65:ff:aa:82:39:7a:81:b3:ff:a7:3e:0d:2b: 58:4f:db:25:bf:f3:37:e3:61:3d:72:43:84:94:60:07:7d:07: 7f:92:59:5e:09:6e:31:be:a2:ab:7f:61:36:b5:9c:62:a7:d1: 33:67:22:47:36:9c:d8:f9:00:35:52:88:8b:72:74:59:f9:2a: e3:ea:d6:1f:54:53:9c:0f:2a:c3:80:20:ad:8d:4f:a7:03:53: 83:30:c6:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUo60W+BjtO92fTqY6IadDW3Zg/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTA0MjcwNDU2MDNaFw0yNTA0MzAxMTM0MDNaMDMxMTAvBgNV BAMTKDM1Njk5MDg5MjdFNENGM0ZBQzAxMDYyNjg4QkIxQkVGNUU2RDAzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/OOEjfDTpBLcati9z1Mzz1jI O2EUYg+wMEVVqXtFdp1uKFpmYyM2Bde4ZIb05CAJCE7La1mpeBRnN+RL0/Pow+tm SyqFlbcHSkvtkxG9MguUTLUHjXUqXelrN4jFknumw6SXQr5XThXF2B/2yh38t3t7 ID7dR2qa+KJTLQBJpjhhIxM2/XiUchBOiPPTtFOYbxCj8qkS5U4KDwMgp4YEUn+3 3MQF/OgvwcW15fDAGoiB/vjiHomF2FZrHh4+VibBN5pHS9s++fjjiyM2nqOQYL7q cKApz8xD7R0n0zRm5yfedvFZ5qwjNKePCfefZhSWbiIkjZlN6lY4PfJ0tpCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNWmQiSfkzz+sAQYmiLsb715tA74wHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDRVG2y0GJMY/neDpHW61Jfbb6zrw3h41UN ZNq7hRhmQby/YZDAsFhAJmqJQG7AHhq6qc/n20DdK8UOvQevgFr7ffVOf00UK9XG KJbqzLlZKdwc1uoa/tuOh6MfEKunuGvyhdsgotOogVTNHFWIcM4lCFAR0jqXPIUn iSssZ4tiUN/tRUBps94RKmjH/fIUAMGBJHWuVaBVcirZNsJoIg6V08pxGxrTZf+q gjl6gbP/pz4NK1hP2yW/8zfjYT1yQ4SUYAd9B3+SWV4JbjG+oqt/YTa1nGKn0TNn Ikc2nNj5ADVSiItydFn5KuPq1h9UU5wPKsOAIK2NT6cDU4Mwxi8= -----END CERTIFICATE-----Generated at Tue Apr 29 10:16:05 2025 by rpki-client