$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: zYFDv11IZX6XSLgSqVOkxuRuluZSepC52Mw7gTtiy0c= Subject key identifier: D1:D9:09:2E:6F:1F:A7:2A:02:ED:8C:75:94:6F:6D:B0:8C:78:93:FB Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 61C5EE345B6A58B22B55E437B026B1DE09804461 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: 71 Signing time: Thu 01 May 2025 12:51:01 +0000 Manifest this update: Thu 01 May 2025 12:46:01 +0000 Manifest next update: Sun 04 May 2025 23:31:01 +0000 Files and hashes: 1: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: iXE46rCttZ1uRm9ungaC3sMwyqbGnzkETRjhIdI4C1A=) 2: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: RFhGHCb7fi7+5E4cFrD0wJlCJ5E75WvgEwQ51mKjbic=) 3: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: Ny3wqjqU4wZmZF8Id2PrnXjiWBubZRNTcTs91ozTMeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 23:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c5:ee:34:5b:6a:58:b2:2b:55:e4:37:b0:26:b1:de:09:80:44:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: May 1 12:46:01 2025 GMT Not After : May 4 23:31:01 2025 GMT Subject: CN=D1D9092E6F1FA72A02ED8C75946F6DB08C7893FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:5a:55:0a:6e:31:9d:22:f2:c5:c3:e4:8b: 85:43:b4:a0:19:80:85:9e:38:d8:76:1e:af:ab:80: 47:b1:ac:3d:a1:90:6f:7d:51:cf:9f:4e:2f:5d:4e: 3f:39:8c:ee:09:de:96:54:08:6e:11:d4:ea:30:ba: f0:bb:eb:8e:06:fe:41:f0:80:36:d7:80:c3:33:01: e2:db:fd:12:e4:e3:b2:40:5e:73:8e:ec:2b:fe:80: 52:7b:fb:cd:b8:26:05:6f:c9:43:3d:18:4b:cb:31: b3:de:2a:44:5a:0a:57:24:58:6e:4d:bf:ef:b0:2f: 66:9c:8f:b4:ac:27:61:c8:4a:92:48:30:b6:d7:09: 1f:f3:ed:77:64:76:13:3f:cf:17:31:5b:6b:ea:29: 0c:fd:9a:8b:5c:bd:9d:91:a0:2d:20:35:54:c9:f7: 75:0a:cc:25:44:53:b1:c4:77:32:7d:6c:57:fd:1a: fa:cc:94:97:4d:35:4e:37:d0:8e:17:df:53:0b:d2: b9:8f:e4:be:8e:26:55:54:b1:9e:61:bc:f1:c9:e7: 3a:26:dc:be:20:fb:f1:0c:05:21:12:13:79:22:2f: cc:38:2d:98:af:ef:5e:46:34:75:66:0a:e2:1c:8b: c9:c3:19:51:a8:c6:98:21:90:43:88:ea:17:4d:b9: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D9:09:2E:6F:1F:A7:2A:02:ED:8C:75:94:6F:6D:B0:8C:78:93:FB X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:16:14:07:b7:37:2c:4f:e4:69:f0:d4:47:02:6a:3d:53:d8: 94:bc:3e:48:48:1d:2b:b5:7a:8e:d7:9f:b1:1d:b5:bd:ca:ff: 13:03:de:97:cb:f5:4c:b2:d0:de:2f:81:89:81:ef:d0:c3:74: 4b:96:36:8c:ea:2c:b4:97:01:79:41:23:79:c1:16:d4:4e:53: 5d:81:c6:08:50:b7:57:9a:10:84:59:07:6c:85:a1:cd:fa:66: 04:8b:e2:67:f4:20:b2:95:a1:db:22:3b:42:5c:40:2a:d8:43: 27:2d:dd:2b:8a:e7:d7:4a:31:ca:07:42:4a:d5:6a:e0:86:6a: 62:07:1d:37:eb:99:7b:c1:a5:05:de:9d:ee:1f:e5:24:d7:e7: 18:7c:eb:90:36:43:45:d4:14:1a:fa:02:c2:bb:28:ba:2c:85: d3:1c:db:76:db:50:b3:3f:5d:9d:52:e6:f7:8a:65:a4:c4:f8: a3:d7:c6:b3:e0:dc:f9:57:09:86:3d:67:fc:2f:62:d8:ab:f5: fb:e7:b0:15:9f:ac:78:ec:2c:c3:2d:8c:63:05:bf:96:07:c2: d1:61:82:44:4d:b4:91:04:6d:e4:3b:cb:cb:1a:21:4a:a0:e9: c8:0c:fd:5c:22:89:87:82:dc:59:b6:ab:e6:b4:59:a4:b8:00: f8:6e:b1:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcXuNFtqWLIrVeQ3sCax3gmARGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTA1MDExMjQ2MDFaFw0yNTA1MDQyMzMxMDFaMDMxMTAvBgNV BAMTKEQxRDkwOTJFNkYxRkE3MkEwMkVEOEM3NTk0NkY2REIwOEM3ODkzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRM1pVCm4xnSLyxcPki4VDtKAZ gIWeONh2Hq+rgEexrD2hkG99Uc+fTi9dTj85jO4J3pZUCG4R1OowuvC7644G/kHw gDbXgMMzAeLb/RLk47JAXnOO7Cv+gFJ7+824JgVvyUM9GEvLMbPeKkRaClckWG5N v++wL2acj7SsJ2HISpJIMLbXCR/z7XdkdhM/zxcxW2vqKQz9motcvZ2RoC0gNVTJ 93UKzCVEU7HEdzJ9bFf9GvrMlJdNNU430I4X31ML0rmP5L6OJlVUsZ5hvPHJ5zom 3L4g+/EMBSESE3kiL8w4LZiv715GNHVmCuIci8nDGVGoxpghkEOI6hdNubCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0dkJLm8fpyoC7Yx1lG9tsIx4k/swHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcWFAe3NyxP5Gnw1EcCaj1T2JS8PkhIHSu1 eo7Xn7Edtb3K/xMD3pfL9Uyy0N4vgYmB79DDdEuWNozqLLSXAXlBI3nBFtROU12B xghQt1eaEIRZB2yFoc36ZgSL4mf0ILKVodsiO0JcQCrYQyct3SuK59dKMcoHQkrV auCGamIHHTfrmXvBpQXene4f5STX5xh865A2Q0XUFBr6AsK7KLoshdMc23bbULM/ XZ1S5veKZaTE+KPXxrPg3PlXCYY9Z/wvYtir9fvnsBWfrHjsLMMtjGMFv5YHwtFh gkRNtJEEbeQ7y8saIUqg6cgM/VwiiYeC3Fm2q+a0WaS4APhuses= -----END CERTIFICATE-----Generated at Sat May 3 12:38:37 2025 by rpki-client