$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: odOH9Y7pXy+jYwCvIwNF8az0bJqTPZdBxESa2bjoJjA= Subject key identifier: 52:FB:D7:12:55:5D:02:E9:B2:29:4A:72:8D:A7:9E:67:F7:7D:CD:60 Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 087384DD5B19CBF2DEE5322B5DC062CDE4BCC23C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 016F Signing time: Mon 28 Apr 2025 19:01:07 +0000 Manifest this update: Mon 28 Apr 2025 18:56:07 +0000 Manifest next update: Fri 02 May 2025 04:23:07 +0000 Files and hashes: 1: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: PzRnEf+JfTOm6LS4A/tsTHyqKjCLPAuTMNpjXyXQLD8=) 2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: RBUkVebuQcs/eoD+DsobzhNFA6Y0GlvHxLIjvG85Lgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:73:84:dd:5b:19:cb:f2:de:e5:32:2b:5d:c0:62:cd:e4:bc:c2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Apr 28 18:56:07 2025 GMT Not After : May 2 04:23:07 2025 GMT Subject: CN=52FBD712555D02E9B2294A728DA79E67F77DCD60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:4d:14:7c:fd:0c:34:f9:0c:3b:fd:26:54:00: 05:d0:93:c5:8a:4e:93:2e:50:e0:9e:53:99:89:bc: a8:08:7f:6b:5e:4b:78:24:6f:4d:79:3d:c6:50:d7: 9f:e1:56:79:da:15:e6:3d:a7:19:2f:c5:23:4f:39: 69:38:4e:34:57:17:e9:18:91:06:59:1b:07:6b:89: df:1e:81:17:17:84:02:30:85:a2:ab:c5:fc:ce:f0: d0:81:99:74:e7:cf:ab:e8:70:cc:8e:a4:55:d5:a9: 81:bf:11:5b:36:d0:7a:9e:9b:60:ae:e5:51:c7:c8: 7c:c5:f0:46:54:11:dd:82:6f:89:f4:ce:5a:95:ca: 67:ae:56:2c:2d:72:1a:a8:36:38:11:3e:af:57:1d: 7f:fd:cb:df:13:3c:24:d8:66:c3:37:83:db:67:54: be:67:77:0c:bb:80:b7:f4:24:13:14:55:8b:9c:06: 7c:7c:ff:47:be:c3:da:9c:91:06:f0:47:14:c6:be: e2:c1:1e:5b:b5:93:20:0c:14:10:b0:99:44:09:1c: 32:9e:c6:e5:b7:d4:58:32:6d:2e:1f:b4:67:79:63: d9:8e:2e:ba:fd:91:a5:4b:df:92:a4:92:c0:97:a5: 6a:59:4b:cb:07:c1:42:66:31:a0:08:33:b4:b2:af: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FB:D7:12:55:5D:02:E9:B2:29:4A:72:8D:A7:9E:67:F7:7D:CD:60 X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:38:f0:cc:e3:b7:3d:df:4c:4b:ea:63:fa:fb:cf:26:d1:a9: 1e:10:2e:ef:d0:a1:a4:07:eb:e8:41:f2:ba:6f:1c:a1:05:06: 06:4e:a0:8f:0d:9d:46:7c:49:17:83:7b:57:10:00:1c:21:2a: f0:cc:b0:15:23:d8:3e:48:c4:4d:d7:88:bd:eb:ff:30:29:b5: 49:61:29:3f:6b:b3:28:ec:f7:c8:21:a7:de:a1:97:17:4e:29: 0c:c2:77:38:c3:fe:e1:21:2d:ed:e6:c6:79:c8:fc:67:9e:4c: 3b:ea:41:b8:b7:1f:e2:1b:b8:88:eb:68:f4:2d:7d:84:9e:04: df:b4:71:24:06:5d:8a:5e:7c:5d:c3:d6:d1:91:5f:1b:0d:ac: ac:6d:b2:1f:9e:a2:d6:2c:21:ea:b6:3c:2f:5d:05:69:6e:a4: 7e:df:3a:3c:65:af:5f:6b:e6:02:22:09:8d:c0:19:c9:c1:5f: b2:c3:e9:3e:f1:99:76:75:c6:14:b1:82:8a:a4:dc:2f:35:00: 52:d7:05:a6:6b:40:33:b9:c4:c4:b2:c8:f7:52:f6:8f:c5:e9: 9f:2d:fa:28:e5:6c:6f:f0:21:1d:17:3f:6b:38:ff:a6:a8:2c: b0:b3:59:e7:c9:a7:5e:fa:e3:07:dd:67:14:ac:8b:78:ca:a2: 48:54:eb:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHOE3VsZy/Le5TIrXcBizeS8wjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNTA0MjgxODU2MDdaFw0yNTA1MDIwNDIzMDdaMDMxMTAvBgNV BAMTKDUyRkJENzEyNTU1RDAyRTlCMjI5NEE3MjhEQTc5RTY3Rjc3RENENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3TRR8/Qw0+Qw7/SZUAAXQk8WK TpMuUOCeU5mJvKgIf2teS3gkb015PcZQ15/hVnnaFeY9pxkvxSNPOWk4TjRXF+kY kQZZGwdrid8egRcXhAIwhaKrxfzO8NCBmXTnz6vocMyOpFXVqYG/EVs20Hqem2Cu 5VHHyHzF8EZUEd2Cb4n0zlqVymeuViwtchqoNjgRPq9XHX/9y98TPCTYZsM3g9tn VL5ndwy7gLf0JBMUVYucBnx8/0e+w9qckQbwRxTGvuLBHlu1kyAMFBCwmUQJHDKe xuW31FgybS4ftGd5Y9mOLrr9kaVL35KkksCXpWpZS8sHwUJmMaAIM7Syr/+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUvvXElVdAumyKUpyjaeeZ/d9zWAwHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY48Mzjtz3fTEvqY/r7zybRqR4QLu/QoaQH 6+hB8rpvHKEFBgZOoI8NnUZ8SReDe1cQABwhKvDMsBUj2D5IxE3XiL3r/zAptUlh KT9rsyjs98ghp96hlxdOKQzCdzjD/uEhLe3mxnnI/GeeTDvqQbi3H+IbuIjraPQt fYSeBN+0cSQGXYpefF3D1tGRXxsNrKxtsh+eotYsIeq2PC9dBWlupH7fOjxlr19r 5gIiCY3AGcnBX7LD6T7xmXZ1xhSxgoqk3C81AFLXBaZrQDO5xMSyyPdS9o/F6Z8t +ijlbG/wIR0XP2s4/6aoLLCzWefJp1764wfdZxSsi3jKokhU60Y= -----END CERTIFICATE-----Generated at Tue Apr 29 12:47:33 2025 by rpki-client