$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: fepZAe05NV/PwLWeNd3BQ1F+TozYXeIP2qAqc2cG3Us= Subject key identifier: AC:AE:FD:61:38:B5:82:FE:D3:9E:A2:C9:C9:11:8F:AD:C9:04:F6:58 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 7A67D66C77F246D61EDEF53475E8335DBF8959FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 01F6 Signing time: Mon 28 Apr 2025 23:22:15 +0000 Manifest this update: Mon 28 Apr 2025 23:17:15 +0000 Manifest next update: Fri 02 May 2025 05:28:15 +0000 Files and hashes: 1: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: l4+BXJoIO539WoOmaYwq6XXKfaf3kAae26OpeXmRMxo=) 2: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: oRDI+y7+2vAjOMCym2uKEk4t0/jm1uVrqQN7OiYXy0E=) 3: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) 4: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: kfMJp93aHLtwVeCUrmYfQM5gVAHXLSAuJM9cgnbx5Nc=) 5: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 6: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:67:d6:6c:77:f2:46:d6:1e:de:f5:34:75:e8:33:5d:bf:89:59:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Apr 28 23:17:15 2025 GMT Not After : May 2 05:28:15 2025 GMT Subject: CN=ACAEFD6138B582FED39EA2C9C9118FADC904F658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:d2:b1:3d:6f:f3:83:10:de:fa:fe:69:52: ae:ba:32:2c:67:08:67:41:3c:df:df:af:d5:51:67: 3c:54:34:44:46:ab:1c:56:9a:fe:31:54:a3:d5:a3: 5d:f2:86:80:6d:80:b2:9f:da:81:cb:e0:11:e2:ba: d2:26:25:f1:c5:6e:61:1b:47:4a:b7:6d:08:d0:48: ce:8c:f1:ac:9b:47:cd:d1:b9:22:07:35:4c:bc:38: fa:f5:f2:c6:98:aa:28:7b:66:ef:c1:ea:67:7d:96: ba:ad:9f:96:8b:58:1a:89:b6:a3:5c:9e:4a:c0:55: d3:b7:0b:ab:e6:42:7b:3a:62:f1:c9:1b:05:23:fa: a4:91:f7:54:a0:78:ae:db:d3:5a:b7:c7:e9:ea:6b: a9:6d:95:f7:35:c0:80:dd:41:7d:68:92:5c:67:c0: 47:4d:cc:a3:02:aa:17:06:6b:32:3d:64:05:cc:c2: 13:f4:e3:a6:7f:79:4e:af:78:f0:29:1a:4f:34:fd: a4:6d:b0:ff:94:fa:d3:01:8f:4f:4a:3b:d0:e0:5e: ab:66:90:de:e2:42:87:42:ac:a3:1a:60:c7:a9:5d: 1f:b7:85:ef:c9:24:52:b6:c2:1c:7a:9e:99:3c:f0: e0:41:95:62:cb:54:89:6e:1a:81:ff:43:3f:c5:fb: 0b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AE:FD:61:38:B5:82:FE:D3:9E:A2:C9:C9:11:8F:AD:C9:04:F6:58 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:63:ae:d5:d1:42:5b:bd:00:7f:7f:fe:10:50:86:e3:05:7c: 48:3a:cc:52:8a:ce:d2:20:c4:a4:89:ac:57:aa:3c:15:2f:87: 91:a3:51:aa:55:c5:f9:5a:ef:47:d8:e3:29:17:63:1c:cb:14: 0b:ca:83:a7:f6:7c:0b:b3:2d:a4:d7:dc:3a:1b:05:c7:9d:be: 19:2a:e0:3c:1e:65:b4:be:8a:e6:b6:0c:e0:a9:b8:86:9c:ac: 9c:b4:43:55:0e:82:f9:23:55:79:1b:36:c5:a3:76:cc:12:9c: 77:d6:f3:4e:3d:90:38:33:cb:db:db:ec:09:d1:1a:65:ff:85: 2f:a8:9f:72:3b:3a:e0:d6:98:56:c2:68:4f:e9:c6:90:3e:76: 9b:6a:ca:94:2f:4e:19:5a:8a:f9:df:b1:63:db:7c:15:d8:50: 54:86:be:97:50:00:91:eb:22:a5:b7:3b:05:00:c6:07:38:0e: be:87:dc:7c:f2:36:37:47:58:c7:5d:c6:17:0f:9a:fd:9b:c4: 69:7b:e2:39:9e:51:af:de:6c:1d:a9:e2:bd:a6:46:e7:8e:26: b9:1f:80:7a:d4:15:73:94:75:bc:38:1b:0f:1e:d6:6c:31:b8: 65:33:1f:7e:2d:8d:b6:d7:3e:f6:19:d6:9b:51:e4:c6:7f:21: 2a:b0:0b:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemfWbHfyRtYe3vU0degzXb+JWfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTA0MjgyMzE3MTVaFw0yNTA1MDIwNTI4MTVaMDMxMTAvBgNV BAMTKEFDQUVGRDYxMzhCNTgyRkVEMzlFQTJDOUM5MTE4RkFEQzkwNEY2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbNKxPW/zgxDe+v5pUq66Mixn CGdBPN/fr9VRZzxUNERGqxxWmv4xVKPVo13yhoBtgLKf2oHL4BHiutImJfHFbmEb R0q3bQjQSM6M8aybR83RuSIHNUy8OPr18saYqih7Zu/B6md9lrqtn5aLWBqJtqNc nkrAVdO3C6vmQns6YvHJGwUj+qSR91SgeK7b01q3x+nqa6ltlfc1wIDdQX1oklxn wEdNzKMCqhcGazI9ZAXMwhP046Z/eU6vePApGk80/aRtsP+U+tMBj09KO9DgXqtm kN7iQodCrKMaYMepXR+3he/JJFK2whx6npk88OBBlWLLVIluGoH/Qz/F+wt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrK79YTi1gv7TnqLJyRGPrckE9lgwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJjrtXRQlu9AH9//hBQhuMFfEg6zFKKztIg xKSJrFeqPBUvh5GjUapVxfla70fY4ykXYxzLFAvKg6f2fAuzLaTX3DobBcedvhkq 4DweZbS+iua2DOCpuIacrJy0Q1UOgvkjVXkbNsWjdswSnHfW8049kDgzy9vb7AnR GmX/hS+on3I7OuDWmFbCaE/pxpA+dptqypQvThlaivnfsWPbfBXYUFSGvpdQAJHr IqW3OwUAxgc4Dr6H3HzyNjdHWMddxhcPmv2bxGl74jmeUa/ebB2p4r2mRueOJrkf gHrUFXOUdbw4Gw8e1mwxuGUzH34tjbbXPvYZ1ptR5MZ/ISqwC1g= -----END CERTIFICATE-----Generated at Wed Apr 30 05:24:53 2025 by rpki-client