$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft File: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json) Hash identifier: 0H/LFV3oje0hLwjC1GQLp7YKqkgH4y6bVCXviw18iy8= Subject key identifier: 43:E2:E0:A9:DB:86:FC:99:9D:AC:53:53:6D:FF:80:E5:BE:0C:93:30 Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Certificate serial: 5EA42B303D851C8F7043217D08C163B2EA151CFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft Manifest number: 04C9 Signing time: Tue 29 Apr 2025 13:40:01 +0000 Manifest this update: Tue 29 Apr 2025 13:35:01 +0000 Manifest next update: Fri 02 May 2025 19:55:01 +0000 Files and hashes: 1: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: N8fLTAgYZkkGOi/Px0i6doh/tZ9zPc1R0s3M1aLpQJ8=) 2: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: ii86NXnr/WYmHnry427PiBTknuSG/osb8uEvWhmtijc=) 3: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: RQ8qS3znXvVJvNtPWPBA0wk2ih45H6PiyFCH7LH26So=) 4: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: nZcY2gfxAEyBR5vBIabcGR8YJ3boENfhzaPlLrFWCrY=) 5: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: 7RROuYODVVhNO2+bjbdOGIl/UFrzyWOSbw909j2VmTo=) 6: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: bcv9+A8fnNa4nTKxyLUpprqdZBOoY3R/2lzSPgws1GM=) 7: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: U7QS9bMS2+t1XHExH+JHZSXP/9sTh8XHPZioautpjoI=) 8: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: QT2s5B9t6PnCCcNGSmiWwWVIE1Y3OmnLse/XbCIYmGE=) 9: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: 5kphXit/LNBkVw8osIk/3vijQtN+EbxCtDf6F2cC7lU=) 10: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: zXSqQBvlzL5Qd7ukUJxUD+iaVT3g/E6NjHe1W2xTBhw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 19:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a4:2b:30:3d:85:1c:8f:70:43:21:7d:08:c1:63:b2:ea:15:1c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Validity Not Before: Apr 29 13:35:01 2025 GMT Not After : May 2 19:55:01 2025 GMT Subject: CN=43E2E0A9DB86FC999DAC53536DFF80E5BE0C9330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:1e:8d:08:cf:bc:d6:84:c1:c3:e0:92:91: b3:73:b6:7b:2b:a1:c2:fd:d0:a6:94:3e:cc:dd:a1: ec:74:c1:19:0c:ed:60:9b:f0:40:2e:7a:98:9b:0b: 17:31:7b:9b:34:3d:b3:56:15:7c:d9:58:27:b6:25: 05:de:f5:12:fe:93:33:3e:64:13:15:2e:b8:f1:40: b8:1d:2a:14:1a:d1:e4:96:fa:1f:80:ce:4d:81:36: c4:fc:a9:ba:a4:b2:a8:ba:e0:39:cf:fa:a4:ff:e3: 06:d0:ca:1f:85:28:28:9b:fc:49:0b:71:87:22:be: c4:8d:a6:0e:09:91:f4:5f:db:4d:8a:ea:b3:99:e0: ba:8d:c7:dd:df:a6:70:1b:db:aa:2b:1f:20:dc:c1: 38:40:11:e5:2e:1b:03:19:02:9b:3e:0c:dc:23:f7: a1:2e:e9:ea:d5:0b:a0:be:00:e4:ec:5a:4a:58:2e: 48:64:bb:d4:8a:2c:d5:b1:39:ca:01:04:ff:46:b7: 76:60:c7:bb:46:a5:8e:e4:6f:fe:27:8b:24:fe:a9: 35:9a:a2:00:fc:1d:0e:df:50:4a:b0:c2:9a:bf:e6: 0a:b3:48:84:39:8c:3a:00:c8:0f:0d:67:fe:34:ec: 56:c9:d2:b2:73:72:b9:49:b0:cc:3d:9f:1a:be:54: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E2:E0:A9:DB:86:FC:99:9D:AC:53:53:6D:FF:80:E5:BE:0C:93:30 X509v3 Authority Key Identifier: keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:70:41:67:fe:c0:5f:38:e2:e1:a8:76:45:44:54:cc:ba:c8: eb:d0:9e:a4:b0:4d:9b:b5:9e:fa:cb:38:ce:60:c1:e6:a1:e2: fb:a0:cb:e8:29:d8:79:ed:ea:78:a4:af:81:74:02:2c:3c:b0: de:af:68:4d:7b:3c:60:91:cb:a4:4e:81:ff:ec:e4:a4:fa:05: 93:7c:d0:09:be:54:25:17:59:24:fb:89:4e:fb:07:d1:90:98: d8:bc:a6:e9:b9:d0:36:cf:35:d9:60:a1:46:c4:66:81:01:9f: 2d:c2:56:7e:c8:b2:98:f5:0c:cc:8e:6c:2b:d6:54:91:1c:df: 75:94:76:16:f1:a4:1a:89:30:59:84:6d:bf:b9:d0:e2:1b:cc: 67:cd:d0:a2:3e:9e:ef:c9:71:db:64:a8:bd:82:95:df:e0:a9: f4:42:ca:ae:cd:9c:0e:ce:b0:41:a3:e4:95:8e:31:45:3c:86: a6:5c:60:fe:89:c5:d0:72:66:a4:79:0c:0c:02:7c:25:31:b1: 96:48:47:bd:c1:b4:48:e0:f3:22:9c:3c:f4:3f:d9:9c:00:72: c0:eb:a4:2c:d3:4c:f1:58:38:e6:06:03:a1:e2:bf:92:8d:9c: 28:78:24:86:e7:01:39:85:6a:e9:ea:e3:e3:a3:3d:16:5d:8b: 87:cf:eb:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqQrMD2FHI9wQyF9CMFjsuoVHP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1 REUwRUEwQzAeFw0yNTA0MjkxMzM1MDFaFw0yNTA1MDIxOTU1MDFaMDMxMTAvBgNV BAMTKDQzRTJFMEE5REI4NkZDOTk5REFDNTM1MzZERkY4MEU1QkUwQzkzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOB6NCM+81oTBw+CSkbNztnsr ocL90KaUPszdoex0wRkM7WCb8EAuepibCxcxe5s0PbNWFXzZWCe2JQXe9RL+kzM+ ZBMVLrjxQLgdKhQa0eSW+h+Azk2BNsT8qbqksqi64DnP+qT/4wbQyh+FKCib/EkL cYcivsSNpg4JkfRf202K6rOZ4LqNx93fpnAb26orHyDcwThAEeUuGwMZAps+DNwj 96Eu6erVC6C+AOTsWkpYLkhku9SKLNWxOcoBBP9Gt3Zgx7tGpY7kb/4niyT+qTWa ogD8HQ7fUEqwwpq/5gqzSIQ5jDoAyA8NZ/407FbJ0rJzcrlJsMw9nxq+VKODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+LgqduG/JmdrFNTbf+A5b4MkzAwHwYDVR0j BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw RUEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYwN2Q5MjktNGNhOC00ZjUzLWEy OTgtNWUzM2JlMWY4NjA0LzAvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3 OUU1REUwRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9wQWf+wF844uGodkVEVMy6yOvQnqSwTZu1 nvrLOM5gweah4vugy+gp2Hnt6nikr4F0Aiw8sN6vaE17PGCRy6ROgf/s5KT6BZN8 0Am+VCUXWST7iU77B9GQmNi8pum50DbPNdlgoUbEZoEBny3CVn7Ispj1DMyObCvW VJEc33WUdhbxpBqJMFmEbb+50OIbzGfN0KI+nu/JcdtkqL2Cld/gqfRCyq7NnA7O sEGj5JWOMUU8hqZcYP6JxdByZqR5DAwCfCUxsZZIR73BtEjg8yKcPPQ/2ZwAcsDr pCzTTPFYOOYGA6Hiv5KNnCh4JIbnATmFaunq4+OjPRZdi4fP6yA= -----END CERTIFICATE-----Generated at Thu May 1 04:41:32 2025 by rpki-client