$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: i2vRpzyUOHh/MPSv64GHtjUCbumJuE0+QiWL8JEOA2w= Subject key identifier: 63:DA:EE:AC:F5:9F:A5:F9:5A:8D:85:D5:8A:97:6D:F1:31:CF:09:2E Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 3951ABFDAE3884079FFBBC09FECAF573374DB3C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 0486 Signing time: Tue 29 Apr 2025 22:20:44 +0000 Manifest this update: Tue 29 Apr 2025 22:15:44 +0000 Manifest next update: Sat 03 May 2025 07:50:44 +0000 Files and hashes: 1: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: S4YxVBYdMR9Zshlhg4ENi3cMH5gJq+q/3Zye+RKLQx4=) 2: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=) 3: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: fvggVkKI1Umb3Jdh64URgb1j9L9KJzqzQQjlbZZXATA=) 4: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: jjxXOD8YTfHReiK4AK2nOIQXP4l8k6sM7XR6RmO9gn0=) 5: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: BaobXEBDNKVOXPWnASBzuf34gx57Iel2oiiy9v7fdcA=) 6: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: etHPTVvqoe6GM4pkSxe9oMH07ZX+2TEP2H+GUDlt63w=) 7: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: cImzaCQgH/xKELxeX3ckgK5atsohpplgUl+3u43iFdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:51:ab:fd:ae:38:84:07:9f:fb:bc:09:fe:ca:f5:73:37:4d:b3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Apr 29 22:15:44 2025 GMT Not After : May 3 07:50:44 2025 GMT Subject: CN=63DAEEACF59FA5F95A8D85D58A976DF131CF092E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:9a:fb:7c:9a:31:2e:b6:9a:2d:18:62:c9:60: d3:19:66:55:bd:61:f6:53:b6:8d:f0:ec:f5:30:b0: ce:3a:87:4f:d0:75:9c:cf:35:b8:0f:5b:68:1c:e6: 26:fe:e2:19:f0:7b:f0:51:89:35:36:75:e7:06:ce: fe:ed:11:a0:e7:ea:5a:dd:a4:58:45:e4:c0:59:26: bd:e1:e6:2c:fa:c0:cb:45:b5:45:29:15:18:52:d7: 0d:a1:47:e1:55:90:f5:d6:eb:a5:fe:47:0f:2a:0b: b2:9b:78:2e:60:3a:81:10:b7:b8:bb:b9:a1:c0:86: fa:29:15:8d:10:1c:14:a5:3c:9d:ad:76:36:ac:dc: 8e:a8:98:52:38:63:10:2a:5a:bb:58:7a:83:9e:24: c9:93:19:96:e7:57:d2:a6:62:25:e4:a7:98:ff:21: 48:f3:a2:aa:77:d2:92:0d:50:30:16:65:6d:df:2f: 55:46:e9:91:26:6b:6e:e4:77:90:1d:a1:59:3f:5e: dc:0a:02:af:ca:9e:f3:66:4b:04:df:45:4d:21:f4: f9:60:0d:cd:8f:80:c3:9f:e5:08:5e:db:73:7a:71: 93:5d:78:47:69:3e:ae:46:8a:0c:b9:04:1c:d9:be: 64:e6:41:4a:08:9a:32:f0:23:66:9e:2d:49:34:ea: 63:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DA:EE:AC:F5:9F:A5:F9:5A:8D:85:D5:8A:97:6D:F1:31:CF:09:2E X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:94:70:0e:45:f4:37:91:5a:01:08:f7:f4:28:93:54:9c:07: 4a:e2:fa:78:3e:a8:31:82:3f:a3:b8:da:40:34:22:76:13:48: a8:ef:de:f3:cb:69:d6:54:25:4d:ff:0b:89:da:4f:a9:8d:3a: 32:8a:85:f4:a8:a9:47:ae:e1:f3:5c:46:82:13:55:3e:ef:98: 8b:4f:8c:a3:92:94:c5:dd:fa:3f:1c:83:24:2a:a6:7f:bb:e2: 50:45:dc:f4:18:d9:a8:62:f7:b0:32:4a:cd:46:fe:10:5f:49: e1:75:d7:29:6e:1b:56:db:1b:4d:84:e5:82:0f:a3:45:b5:e6: 73:c5:06:55:e0:fd:ec:df:a2:c1:7c:df:54:93:de:e7:0b:6a: 37:38:9d:5a:87:65:2c:2a:bc:fa:a3:d2:c9:3b:0a:ea:60:8c: ef:77:18:54:0b:7c:38:10:21:75:b5:81:21:76:8a:b4:4d:c7: a5:f3:c1:97:3e:fc:61:e7:37:8a:c2:fb:2c:91:fe:1b:52:f6: d4:bb:0e:57:28:ea:76:0d:a0:11:6d:aa:1c:4b:90:b8:14:ad: 84:aa:09:e6:6b:4d:1e:57:b9:dc:ad:d8:4c:8b:f8:ad:65:6c: 39:5b:5b:60:73:43:93:8e:b2:89:74:61:35:88:14:93:09:b0: 5a:81:24:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVGr/a44hAef+7wJ/sr1czdNs8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTA0MjkyMjE1NDRaFw0yNTA1MDMwNzUwNDRaMDMxMTAvBgNV BAMTKDYzREFFRUFDRjU5RkE1Rjk1QThEODVENThBOTc2REYxMzFDRjA5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6mvt8mjEutpotGGLJYNMZZlW9 YfZTto3w7PUwsM46h0/QdZzPNbgPW2gc5ib+4hnwe/BRiTU2decGzv7tEaDn6lrd pFhF5MBZJr3h5iz6wMtFtUUpFRhS1w2hR+FVkPXW66X+Rw8qC7KbeC5gOoEQt7i7 uaHAhvopFY0QHBSlPJ2tdjas3I6omFI4YxAqWrtYeoOeJMmTGZbnV9KmYiXkp5j/ IUjzoqp30pINUDAWZW3fL1VG6ZEma27kd5AdoVk/XtwKAq/KnvNmSwTfRU0h9Plg Dc2PgMOf5Qhe23N6cZNdeEdpPq5Gigy5BBzZvmTmQUoImjLwI2aeLUk06mNJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY9rurPWfpflajYXVipdt8THPCS4wHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiUcA5F9DeRWgEI9/Qok1ScB0ri+ng+qDGC P6O42kA0InYTSKjv3vPLadZUJU3/C4naT6mNOjKKhfSoqUeu4fNcRoITVT7vmItP jKOSlMXd+j8cgyQqpn+74lBF3PQY2ahi97AySs1G/hBfSeF11yluG1bbG02E5YIP o0W15nPFBlXg/ezfosF831ST3ucLajc4nVqHZSwqvPqj0sk7CupgjO93GFQLfDgQ IXW1gSF2irRNx6XzwZc+/GHnN4rC+yyR/htS9tS7Dlco6nYNoBFtqhxLkLgUrYSq CeZrTR5Xudyt2EyL+K1lbDlbW2BzQ5OOsol0YTWIFJMJsFqBJEQ= -----END CERTIFICATE-----Generated at Wed Apr 30 03:33:20 2025 by rpki-client