$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: bVE1KMkm0oBndhcsttVlQXe4Lvn2waNIEhv/52syCck= Subject key identifier: F0:53:EA:D4:EB:BD:DB:88:96:B1:14:51:BF:40:9A:B0:3C:ED:8A:48 Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 0FDD4DF6282985BF63280ADA09FD89ACEA6D05EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 0313 Signing time: Mon 28 Apr 2025 11:31:59 +0000 Manifest this update: Mon 28 Apr 2025 11:26:59 +0000 Manifest next update: Thu 01 May 2025 14:43:59 +0000 Files and hashes: 1: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: 8SN27JgRzLp2HkIPs909BiGw4amp0rXHb0iEz91v6Jo=) 2: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: VLaaoApuZqM7K2clnRd7ZGdI8p4xy5nmprU8VzmhuyY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:dd:4d:f6:28:29:85:bf:63:28:0a:da:09:fd:89:ac:ea:6d:05:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Apr 28 11:26:59 2025 GMT Not After : May 1 14:43:59 2025 GMT Subject: CN=F053EAD4EBBDDB8896B11451BF409AB03CED8A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:4e:20:c2:ec:73:a0:71:87:be:eb:8c:e0: 69:79:46:fc:a1:aa:06:dd:5e:09:4e:ca:d5:f5:14: 5c:29:d1:97:b2:3a:4b:ba:8c:ff:d6:d8:e0:54:34: ef:28:08:63:9f:2a:68:b9:2e:db:57:0c:8a:c7:1d: bc:79:91:49:2e:60:bc:94:46:94:41:37:b8:db:f9: 58:f4:d9:97:69:ad:b3:46:38:5b:ba:14:8f:3b:6d: db:22:4c:58:b9:62:73:d4:5f:bb:2b:ef:49:3c:d6: 39:f5:89:b4:40:21:e0:55:f7:66:16:bd:3d:7e:94: 06:a2:f3:56:86:12:3a:77:96:d3:9a:97:6a:3c:6d: b6:5c:b3:cd:98:a3:5e:73:cb:e5:da:44:fd:e9:47: 7a:e1:ff:20:72:c9:12:30:0e:22:42:46:4a:28:c7: 11:08:29:51:f2:ab:95:01:6c:3a:dc:34:d5:18:aa: c7:9b:84:48:e6:13:5c:e8:8a:d5:c6:b9:a6:9e:71: 98:f4:eb:de:3d:1f:ea:ef:f1:9f:c3:27:9f:0c:b4: 00:c6:72:ef:56:16:54:0e:c9:68:15:a8:ad:ed:ff: 11:dc:7b:2d:52:86:6f:cd:54:fe:4f:4b:f1:77:cf: 11:51:bf:9a:62:17:28:9e:e2:24:c1:2b:12:ea:b2: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:53:EA:D4:EB:BD:DB:88:96:B1:14:51:BF:40:9A:B0:3C:ED:8A:48 X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:21:4f:6b:a4:a9:1d:4f:1a:69:fe:c9:0d:69:df:fc:80:b0: 62:39:f2:d8:cf:c8:de:ab:97:3d:0c:84:08:2c:b9:fb:57:63: bf:e9:a5:0b:fa:7e:ee:b6:57:32:2d:c2:32:a7:24:7a:3b:11: a5:f7:d3:d1:fb:3f:55:b9:2e:36:28:3e:1e:fa:9d:e5:08:fc: 87:c0:d1:ac:9b:d4:14:49:c4:19:a8:b1:f8:de:37:96:8d:39: ec:99:62:ec:bf:b5:60:c7:b8:69:25:20:0b:a8:3e:4a:5f:42: b4:d6:05:f5:1e:75:aa:5f:b2:f7:d2:20:28:de:f0:f3:e0:91: 31:69:0a:3f:ad:9f:5e:64:7c:95:5e:2d:b1:0b:1d:46:c7:5d: 6e:7d:e1:27:75:36:74:79:da:3f:b2:2b:e2:3e:eb:14:e1:4b: be:7f:df:27:a6:0d:d9:8c:d3:8b:82:8f:fc:13:f7:55:1f:ee: 61:1c:04:34:24:00:b8:99:dc:39:bf:b4:2e:f7:16:2c:aa:3c: 70:e6:a3:34:d5:7a:dc:b8:24:71:d9:56:c7:79:89:b1:21:5c: 6d:d8:05:9d:61:b6:c6:c5:09:0b:8c:a8:3b:22:00:b4:9e:4d: c1:68:5f:63:70:47:bf:05:43:5c:3c:87:7c:24:e2:49:0a:6f: 1d:2d:6a:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD91N9igphb9jKAraCf2JrOptBewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNTA0MjgxMTI2NTlaFw0yNTA1MDExNDQzNTlaMDMxMTAvBgNV BAMTKEYwNTNFQUQ0RUJCRERCODg5NkIxMTQ1MUJGNDA5QUIwM0NFRDhBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZG04gwuxzoHGHvuuM4Gl5Rvyh qgbdXglOytX1FFwp0ZeyOku6jP/W2OBUNO8oCGOfKmi5LttXDIrHHbx5kUkuYLyU RpRBN7jb+Vj02ZdprbNGOFu6FI87bdsiTFi5YnPUX7sr70k81jn1ibRAIeBV92YW vT1+lAai81aGEjp3ltOal2o8bbZcs82Yo15zy+XaRP3pR3rh/yByyRIwDiJCRkoo xxEIKVHyq5UBbDrcNNUYqsebhEjmE1zoitXGuaaecZj06949H+rv8Z/DJ58MtADG cu9WFlQOyWgVqK3t/xHcey1Shm/NVP5PS/F3zxFRv5piFyie4iTBKxLqsri3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8FPq1Ou924iWsRRRv0CasDztikgwHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0hT2ukqR1PGmn+yQ1p3/yAsGI58tjPyN6r lz0MhAgsuftXY7/ppQv6fu62VzItwjKnJHo7EaX309H7P1W5LjYoPh76neUI/IfA 0ayb1BRJxBmosfjeN5aNOeyZYuy/tWDHuGklIAuoPkpfQrTWBfUedapfsvfSICje 8PPgkTFpCj+tn15kfJVeLbELHUbHXW594Sd1NnR52j+yK+I+6xThS75/3yemDdmM 04uCj/wT91Uf7mEcBDQkALiZ3Dm/tC73FiyqPHDmozTVety4JHHZVsd5ibEhXG3Y BZ1htsbFCQuMqDsiALSeTcFoX2NwR78FQ1w8h3wk4kkKbx0tapE= -----END CERTIFICATE-----Generated at Tue Apr 29 21:57:08 2025 by rpki-client