$ rpki-client -vvf repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft File: C5E0183A7142717E23D90AF4650F1E14418D85C3.mft (raw, json) Hash identifier: LIkgYLBKOE6hHzbcrTZe8OXEQ1asHyu/NnIsD4T/Q0Q= Subject key identifier: FB:66:26:99:A1:03:5C:C2:E9:2C:44:34:AD:2B:45:8F:18:1E:19:34 Authority key identifier: C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3 Certificate issuer: /CN=C5E0183A7142717E23D90AF4650F1E14418D85C3 Certificate serial: 79F5A2CF60E6BF92BEE27C77459F48635A674E21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft Manifest number: 04D1 Signing time: Fri 09 May 2025 17:30:45 +0000 Manifest this update: Fri 09 May 2025 17:25:45 +0000 Manifest next update: Tue 13 May 2025 00:17:45 +0000 Files and hashes: 1: C5E0183A7142717E23D90AF4650F1E14418D85C3.crl (hash: WFIe7/oCEH6FzLVlADIOp9qT8X/lSB1x8wc+QV5bQN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 00:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f5:a2:cf:60:e6:bf:92:be:e2:7c:77:45:9f:48:63:5a:67:4e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5E0183A7142717E23D90AF4650F1E14418D85C3 Validity Not Before: May 9 17:25:45 2025 GMT Not After : May 13 00:17:45 2025 GMT Subject: CN=FB662699A1035CC2E92C4434AD2B458F181E1934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:d7:04:cb:90:c1:d0:cb:aa:47:64:44:3d: 4f:b1:24:29:98:fd:8b:cf:35:13:7c:29:3f:41:b3: ba:dc:c9:ef:0b:fc:27:6d:b2:7f:0f:5c:39:de:59: f7:09:80:a7:c6:27:e9:61:e7:dc:e9:fc:e7:42:11: 20:d2:70:ab:eb:06:1a:5d:f1:56:07:98:e8:e9:63: 45:89:ba:d6:db:ad:ae:49:31:97:6c:ec:b5:d6:32: ac:70:35:0f:f8:76:47:34:a4:27:07:6a:77:99:64: 9a:e9:f5:5c:5a:5f:8b:0a:e7:64:5a:d0:cd:bb:3d: d5:f5:90:66:0b:2c:ff:6c:cd:91:bf:37:78:41:e1: 9a:a0:7f:38:3a:20:6f:23:22:fd:fd:36:6e:a8:02: d4:9e:72:c1:f8:4e:78:32:4b:8e:bb:f1:34:98:6d: a2:70:bd:25:05:ff:cc:22:1c:1b:7e:5a:53:4d:b2: 28:6f:fd:ce:ef:df:13:47:13:21:62:a3:46:93:24: c8:c5:54:fe:50:00:f1:66:12:d8:f9:1f:f5:e8:31: c0:7c:8c:58:26:1c:68:c4:bc:dc:c6:2c:d9:a0:e6: e6:fe:f0:d7:d1:35:72:3d:0b:6e:f3:c4:8c:0a:5c: 6d:7f:69:95:bf:2d:01:0c:58:87:9f:01:b2:72:64: 93:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:66:26:99:A1:03:5C:C2:E9:2C:44:34:AD:2B:45:8F:18:1E:19:34 X509v3 Authority Key Identifier: keyid:C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:64:55:18:ff:8e:3c:5a:5f:a8:3e:68:c9:28:c2:de:1f:c5: cb:0f:77:66:51:9c:ce:ed:b6:ab:f6:c9:56:1a:27:23:27:6e: ba:38:fc:76:7c:99:bc:fa:da:5e:41:62:a9:bf:bc:24:d4:ac: 5d:47:10:10:38:62:ed:22:00:4f:75:04:3b:af:ed:70:71:20: ee:af:4f:ed:48:ae:e1:fa:3b:a8:2d:45:4d:73:23:9d:81:ff: 7d:30:d5:f2:af:09:b0:7a:77:f9:6d:12:42:8a:a2:72:f3:a5: 7c:67:5d:da:7a:a2:52:da:e6:93:ed:9f:4a:5a:30:6f:ad:47: 23:2f:73:e9:87:1f:a4:19:5b:ce:b5:3f:e2:f5:24:bd:20:22: 1a:d6:2b:09:9e:f8:90:81:90:d1:6b:08:98:17:2e:dd:c9:bf: b1:36:b8:bb:74:6d:5e:a9:d3:30:b6:c9:c4:14:a8:70:61:5c: de:ab:cf:22:2c:f4:74:e6:d9:c2:ca:b4:a2:aa:90:d1:e0:90: d9:14:1a:5c:41:65:bc:8d:6d:6c:25:6c:be:29:c1:c1:9e:bf: eb:16:e6:8f:d0:2b:13:e5:83:4f:89:e1:95:60:44:ab:c0:e5: 10:21:96:00:86:ff:c4:6a:ae:d4:45:e1:10:66:36:45:80:dd: 4d:1c:ea:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefWiz2Dmv5K+4nx3RZ9IY1pnTiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFFMTQ0 MThEODVDMzAeFw0yNTA1MDkxNzI1NDVaFw0yNTA1MTMwMDE3NDVaMDMxMTAvBgNV BAMTKEZCNjYyNjk5QTEwMzVDQzJFOTJDNDQzNEFEMkI0NThGMTgxRTE5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxl9cEy5DB0MuqR2REPU+xJCmY /YvPNRN8KT9Bs7rcye8L/Cdtsn8PXDneWfcJgKfGJ+lh59zp/OdCESDScKvrBhpd 8VYHmOjpY0WJutbbra5JMZds7LXWMqxwNQ/4dkc0pCcHaneZZJrp9VxaX4sK52Ra 0M27PdX1kGYLLP9szZG/N3hB4Zqgfzg6IG8jIv39Nm6oAtSecsH4TngyS4678TSY baJwvSUF/8wiHBt+WlNNsihv/c7v3xNHEyFio0aTJMjFVP5QAPFmEtj5H/XoMcB8 jFgmHGjEvNzGLNmg5ub+8NfRNXI9C27zxIwKXG1/aZW/LQEMWIefAbJyZJO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+2YmmaEDXMLpLEQ0rStFjxgeGTQwHwYDVR0j BBgwFoAUxeAYOnFCcX4j2Qr0ZQ8eFEGNhcMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDRmMjQ2MC1mZTUwLTQ4MDAtYWUwMi01N2NiM2U4MTVkNWUvMC9DNUUwMTgzQTcx NDI3MTdFMjNEOTBBRjQ2NTBGMUUxNDQxOEQ4NUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFFMTQ0MThE ODVDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFF MTQ0MThEODVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNkVRj/jjxaX6g+aMkowt4fxcsPd2ZRnM7t tqv2yVYaJyMnbro4/HZ8mbz62l5BYqm/vCTUrF1HEBA4Yu0iAE91BDuv7XBxIO6v T+1IruH6O6gtRU1zI52B/30w1fKvCbB6d/ltEkKKonLzpXxnXdp6olLa5pPtn0pa MG+tRyMvc+mHH6QZW861P+L1JL0gIhrWKwme+JCBkNFrCJgXLt3Jv7E2uLt0bV6p 0zC2ycQUqHBhXN6rzyIs9HTm2cLKtKKqkNHgkNkUGlxBZbyNbWwlbL4pwcGev+sW 5o/QKxPlg0+J4ZVgRKvA5RAhlgCG/8RqrtRF4RBmNkWA3U0c6nc= -----END CERTIFICATE-----Generated at Sat May 10 18:55:38 2025 by rpki-client