$ rpki-client -vvf repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft File: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft (raw, json) Hash identifier: SFh+4bYpO1Pg6ROp3UkjY/6QsYDbQmGwyWgkk5RfniI= Subject key identifier: BC:09:93:B1:6A:FD:FA:6D:77:75:6D:E1:4D:FF:95:4C:5B:87:5D:7B Authority key identifier: F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C Certificate issuer: /CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Certificate serial: 021F1D166B9E1D58658023839DCEDF4059D85F36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft Manifest number: CB Signing time: Fri 25 Apr 2025 16:11:28 +0000 Manifest this update: Fri 25 Apr 2025 16:06:28 +0000 Manifest next update: Tue 29 Apr 2025 00:14:28 +0000 Files and hashes: 1: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl (hash: OqVBS0JgvsHBdQE4/0mmQ/RfpOj2zG7BCT9NPzZPTBQ=) 2: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: 82foMffwQwzyR9wKrvwkyZl1LONBJ6UBCu4U17RUdAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1f:1d:16:6b:9e:1d:58:65:80:23:83:9d:ce:df:40:59:d8:5f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Validity Not Before: Apr 25 16:06:28 2025 GMT Not After : Apr 29 00:14:28 2025 GMT Subject: CN=BC0993B16AFDFA6D77756DE14DFF954C5B875D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:68:ff:e9:14:64:1c:87:bf:ee:54:43:ca:3a: 2d:3b:2b:dd:be:05:26:af:a6:56:3f:7d:a1:c5:f7: 60:a2:89:8b:1e:c7:b3:ec:54:e8:3b:28:f1:73:dc: b0:65:e1:5c:f6:fc:fc:27:32:da:bf:bb:da:03:a5: f4:ed:04:85:62:1a:24:b3:4f:f9:fa:60:c2:6e:4d: 4d:ab:56:1b:59:f6:a7:f0:c5:40:aa:33:d8:f5:2d: 9d:72:06:bf:bc:4e:aa:bf:84:e3:60:01:8f:c8:13: 93:de:a4:17:5f:5a:1d:0a:9c:58:f8:0f:d8:f7:77: fa:d8:f9:91:a8:8d:83:1b:16:6f:32:79:41:d3:fa: 5a:cd:0f:13:d2:df:fa:d1:5c:d0:98:36:e2:71:21: cd:61:f5:fb:dd:79:2b:16:5d:e4:4d:83:72:d3:fa: 59:74:4c:f0:70:97:1b:19:cb:a1:54:f9:50:99:11: 5e:ab:5e:0f:11:f4:72:c6:17:c9:d7:75:1d:1c:ff: 0d:dc:2c:6c:f9:9c:7c:14:aa:a0:e4:17:1e:69:fb: a2:70:87:a8:91:bc:51:7a:db:3e:ad:4f:17:b1:5b: d0:b0:44:10:20:a0:fe:51:c5:07:46:07:f1:48:01: 64:e0:c4:35:6a:1a:d2:0c:14:47:b3:76:68:92:d6: 4d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:09:93:B1:6A:FD:FA:6D:77:75:6D:E1:4D:FF:95:4C:5B:87:5D:7B X509v3 Authority Key Identifier: keyid:F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:da:c9:77:e4:ab:7f:32:26:7f:57:bd:70:33:69:06:c3:f9: 7b:e4:c4:35:ef:f3:f1:3d:81:95:f7:cf:0c:c9:3c:01:75:cc: aa:b2:88:9d:51:bc:54:f5:70:53:e5:6a:a4:3b:d0:40:0b:94: e7:b2:90:e8:05:ce:1b:28:23:82:0d:ba:fc:ea:74:73:29:67: 17:c3:dc:11:8c:9b:19:f6:23:a1:10:f8:cb:e9:ee:01:38:df: e0:4f:6a:01:d1:61:a6:20:f0:5d:02:dd:06:5b:5f:e9:2e:11: 53:e9:d0:2f:36:84:27:3c:81:55:ef:f6:9f:e5:74:d7:c3:78: 33:10:0f:6f:ea:d4:56:84:68:c1:1d:db:c1:11:ed:86:be:58: ed:70:8b:91:23:12:c4:9e:77:60:0f:75:3f:54:84:d0:a5:d7: 30:8b:33:91:e8:aa:21:4b:e4:da:b4:6c:1a:bc:98:ac:bc:c4: 0e:63:5a:40:cb:2d:9d:cc:b7:b0:34:17:16:75:4f:06:10:de: 98:cd:5c:64:02:b0:c4:4b:5d:f8:7b:08:8c:ab:19:0a:72:bc: cf:13:f3:f5:c3:50:bc:b8:91:c9:9c:e7:67:9b:15:52:eb:54: 01:50:5e:cd:e7:b8:6d:5b:b8:ec:01:b3:49:b5:de:8d:ba:b2: 67:1d:93:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAh8dFmueHVhlgCODnc7fQFnYXzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUy MkZBMzI2QzAeFw0yNTA0MjUxNjA2MjhaFw0yNTA0MjkwMDE0MjhaMDMxMTAvBgNV BAMTKEJDMDk5M0IxNkFGREZBNkQ3Nzc1NkRFMTRERkY5NTRDNUI4NzVEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpaP/pFGQch7/uVEPKOi07K92+ BSavplY/faHF92CiiYsex7PsVOg7KPFz3LBl4Vz2/PwnMtq/u9oDpfTtBIViGiSz T/n6YMJuTU2rVhtZ9qfwxUCqM9j1LZ1yBr+8Tqq/hONgAY/IE5PepBdfWh0KnFj4 D9j3d/rY+ZGojYMbFm8yeUHT+lrNDxPS3/rRXNCYNuJxIc1h9fvdeSsWXeRNg3LT +ll0TPBwlxsZy6FU+VCZEV6rXg8R9HLGF8nXdR0c/w3cLGz5nHwUqqDkFx5p+6Jw h6iRvFF62z6tTxexW9CwRBAgoP5RxQdGB/FIAWTgxDVqGtIMFEezdmiS1k23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvAmTsWr9+m13dW3hTf+VTFuHXXswHwYDVR0j BBgwFoAU9aRTS3TQzu7PWgXwm8nvRSL6MmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTcwZTkzNC04NzUxLTRhNjEtOTk1MC1kNGZhNDgwY2RhNDEvMC9GNUE0NTM0Qjc0 RDBDRUVFQ0Y1QTA1RjA5QkM5RUY0NTIyRkEzMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUyMkZB MzI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDk3MGU5MzQtODc1MS00YTYxLTk5 NTAtZDRmYTQ4MGNkYTQxLzAvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVG NDUyMkZBMzI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrayXfkq38yJn9XvXAzaQbD+XvkxDXv8/E9 gZX3zwzJPAF1zKqyiJ1RvFT1cFPlaqQ70EALlOeykOgFzhsoI4INuvzqdHMpZxfD 3BGMmxn2I6EQ+Mvp7gE43+BPagHRYaYg8F0C3QZbX+kuEVPp0C82hCc8gVXv9p/l dNfDeDMQD2/q1FaEaMEd28ER7Ya+WO1wi5EjEsSed2APdT9UhNCl1zCLM5HoqiFL 5Nq0bBq8mKy8xA5jWkDLLZ3Mt7A0FxZ1TwYQ3pjNXGQCsMRLXfh7CIyrGQpyvM8T 8/XDULy4kcmc52ebFVLrVAFQXs3nuG1buOwBs0m13o26smcdkxs= -----END CERTIFICATE-----Generated at Sun Apr 27 10:45:36 2025 by rpki-client