$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: FDYUIMfMRXfC/OOEA3NFmAk3Xm6IFaVbGKvQBiOglGI= Subject key identifier: 94:34:41:6E:88:85:BD:D6:0F:57:7E:EA:88:70:D4:F4:14:B2:93:72 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 4DB0CF4CCFF3B7A5B7402817903DAEAD0D04904F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 5D Signing time: Mon 05 May 2025 00:20:35 +0000 Manifest this update: Mon 05 May 2025 00:15:35 +0000 Manifest next update: Thu 08 May 2025 04:17:35 +0000 Files and hashes: 1: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) 3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: ik86RJVVu/j1i4CYNGV2orf/doiEe9oqb4bTbRuVKIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 04:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b0:cf:4c:cf:f3:b7:a5:b7:40:28:17:90:3d:ae:ad:0d:04:90:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: May 5 00:15:35 2025 GMT Not After : May 8 04:17:35 2025 GMT Subject: CN=9434416E8885BDD60F577EEA8870D4F414B29372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:13:d4:df:87:ff:01:c7:33:78:e4:a8:33: 11:9a:43:f2:c2:5b:6f:9d:94:71:a9:20:2c:c3:3b: fd:a8:2b:fc:7d:ff:3d:f4:48:e8:57:1b:d5:bd:23: d8:73:35:02:f5:ca:cd:6c:b2:f6:f6:5b:98:8e:fa: fb:0b:70:58:87:78:ff:36:0e:71:61:24:95:94:5e: a4:e3:c5:e8:7e:f5:53:83:81:e3:97:33:d6:f8:66: da:6f:1d:9b:52:e2:31:2d:7f:4e:9f:ea:06:80:f0: f4:bb:90:37:ad:fd:44:0a:b2:72:37:ff:ab:91:3e: 95:92:97:7e:0f:9a:8e:5d:68:ab:eb:8c:93:3b:6d: 29:53:fe:a2:5c:c4:0f:9b:6d:5b:da:3a:4b:44:8b: bb:b4:9a:f0:15:14:fc:f6:ea:0f:38:60:4a:2c:9b: 70:97:5c:ae:7a:4e:6f:d7:9f:86:45:c7:cd:81:c5: d0:65:b9:b7:8d:6d:e9:5a:fa:d6:65:21:b2:32:64: f2:f9:fd:5e:ad:cd:0c:c2:0c:11:0f:cf:96:ed:dc: 60:98:19:53:b5:5a:48:fc:14:b2:92:82:9f:e8:e9: 70:47:a5:ae:a3:b8:55:90:c3:91:8a:31:31:b1:d6: ee:38:99:47:16:53:55:06:12:75:c4:e8:33:32:ef: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:34:41:6E:88:85:BD:D6:0F:57:7E:EA:88:70:D4:F4:14:B2:93:72 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0e:c5:1c:28:72:a8:9a:ef:ba:f4:2a:1f:22:af:79:3a:f6: 31:b8:85:01:f8:92:47:76:9a:cd:97:2d:e2:22:8e:81:21:31: fa:6c:9a:d0:77:93:08:23:44:35:b8:18:e6:89:99:8d:86:2c: 13:75:63:4d:84:dc:81:7f:3c:e4:7f:7f:eb:94:a6:54:4c:c9: 47:6a:80:54:31:74:b3:6b:42:12:5a:fc:72:2c:5b:af:fa:5a: 52:2f:9d:3c:28:2f:75:e3:3a:94:be:97:2c:97:d8:89:b6:0d: fb:3a:72:7d:c7:25:bb:38:88:fd:52:51:8a:b7:bb:b9:6d:ac: fb:37:df:16:6c:13:d6:b7:c5:4c:45:0c:be:4d:62:1c:4b:51: a8:7f:fc:91:97:8c:8f:ce:ef:1f:42:8e:81:49:b2:c8:8b:32: a5:ac:ca:fa:ea:ea:f7:f5:ba:4c:1d:aa:44:e3:6a:8a:2e:93: 7c:3d:c0:c8:21:ec:04:5b:b5:75:7d:a5:e0:21:f5:6c:a1:3d: 21:c9:08:e7:b7:7b:39:2e:8b:8d:a3:f8:57:3b:37:3a:39:6b: 83:b1:45:8d:42:9b:8b:ac:ce:60:36:61:5f:bf:d9:95:7f:f1: d1:c3:21:97:ad:5c:2a:31:f4:b6:0e:23:b6:9c:d3:db:68:d4: 4e:d4:58:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbDPTM/zt6W3QCgXkD2urQ0EkE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTA1MDUwMDE1MzVaFw0yNTA1MDgwNDE3MzVaMDMxMTAvBgNV BAMTKDk0MzQ0MTZFODg4NUJERDYwRjU3N0VFQTg4NzBENEY0MTRCMjkzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YxPU34f/AcczeOSoMxGaQ/LC W2+dlHGpICzDO/2oK/x9/z30SOhXG9W9I9hzNQL1ys1ssvb2W5iO+vsLcFiHeP82 DnFhJJWUXqTjxeh+9VODgeOXM9b4ZtpvHZtS4jEtf06f6gaA8PS7kDet/UQKsnI3 /6uRPpWSl34Pmo5daKvrjJM7bSlT/qJcxA+bbVvaOktEi7u0mvAVFPz26g84YEos m3CXXK56Tm/Xn4ZFx82BxdBlubeNbela+tZlIbIyZPL5/V6tzQzCDBEPz5bt3GCY GVO1Wkj8FLKSgp/o6XBHpa6juFWQw5GKMTGx1u44mUcWU1UGEnXE6DMy70MVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlDRBboiFvdYPV37qiHDU9BSyk3IwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAOxRwocqia77r0Kh8ir3k69jG4hQH4kkd2 ms2XLeIijoEhMfpsmtB3kwgjRDW4GOaJmY2GLBN1Y02E3IF/POR/f+uUplRMyUdq gFQxdLNrQhJa/HIsW6/6WlIvnTwoL3XjOpS+lyyX2Im2Dfs6cn3HJbs4iP1SUYq3 u7ltrPs33xZsE9a3xUxFDL5NYhxLUah//JGXjI/O7x9CjoFJssiLMqWsyvrq6vf1 ukwdqkTjaoouk3w9wMgh7ARbtXV9peAh9WyhPSHJCOe3ezkui42j+Fc7Nzo5a4Ox RY1Cm4uszmA2YV+/2ZV/8dHDIZetXCox9LYOI7ac09to1E7UWH8= -----END CERTIFICATE-----Generated at Tue May 6 08:51:53 2025 by rpki-client